$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa File: 8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa (raw, json) Hash identifier: sL3bn1VH/qJv/QeBhBEBcHXXbtQtC5jzB+Vz2Mv6EuQ= Subject key identifier: A6:B8:40:A6:A8:A4:29:EB:3F:B0:C3:68:3F:C0:E9:93:75:33:7A:E9 Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F4328584A6290A00FBDA4C4D3B2FDE700 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 30039 IP address blocks: 216.222.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:a0:0f:bd:a4:c4:d3:b2:fd:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=9c8103fc-e8b4-4b38-997c-06687130beae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:63:60:62:3c:cd:07:53:ae:9f:92:e3:df:f9: a3:d5:88:05:93:9d:e1:98:be:e5:d0:3d:ba:1a:72: 72:c9:07:42:15:4d:1e:04:b8:9e:a0:79:7d:da:68: 61:96:3c:80:11:34:77:e8:41:5d:ee:3d:c4:11:b6: bb:03:00:4b:92:8a:20:54:07:39:ca:57:84:a5:f7: 35:0a:9b:41:c3:85:1a:f4:99:d9:5a:d7:3d:11:99: 96:8e:48:91:45:31:31:8e:9e:a2:a3:63:84:e8:56: 4a:0b:56:46:35:a2:87:f4:84:4b:68:3b:2c:9d:2f: da:13:56:9e:0e:06:84:d1:57:e6:cb:70:6d:1a:b4: 3a:61:1f:88:6a:5b:3c:58:17:ad:b5:75:d8:a3:27: 82:b0:11:f3:3c:51:8e:fb:68:c3:33:76:f7:f3:f8: 94:a9:e4:7c:d2:32:c5:a0:c1:98:b4:ec:aa:1f:ec: ec:08:5f:19:84:60:c3:63:83:a1:64:50:9b:79:a1: 13:06:63:58:c7:88:13:08:b9:fa:9f:03:0a:57:0b: 61:64:4e:3f:b2:34:77:12:42:2f:a5:84:af:f6:d6: c6:a7:82:5f:ce:0c:14:0b:42:e0:a7:d7:39:fb:4f: 8e:00:2c:d9:38:d2:0f:70:6e:f0:b1:9c:4d:22:eb: 76:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B8:40:A6:A8:A4:29:EB:3F:B0:C3:68:3F:C0:E9:93:75:33:7A:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:dc:92:8d:3c:ec:1e:fc:95:e7:3d:16:49:c9:2d:6e:ac:30: 67:37:2e:50:e5:c1:ce:ad:ca:9c:38:f5:77:0a:84:19:e8:e3: 0b:93:73:70:82:9b:ee:d1:57:ab:5a:2c:a3:2b:ba:cb:29:c6: 77:2a:23:0e:85:f5:4f:0f:93:bc:c3:5f:93:be:a9:90:3d:20: 80:a3:bf:c3:44:e9:86:85:b0:66:42:e9:c9:7d:1e:e4:de:12: 14:d1:a6:7c:9e:2e:d0:d4:43:e2:60:f6:47:38:30:ea:f2:5f: 86:5d:21:9c:1a:c4:53:ff:f1:ad:07:bd:66:df:10:e0:8b:56: d9:15:51:01:6c:c3:ce:40:26:f7:1a:5a:06:6e:30:32:90:68: 7e:50:5e:e1:50:1c:7c:f2:2b:b1:0a:f8:11:77:e3:1d:78:89: 92:38:12:e6:90:37:db:c4:c3:2c:f0:4d:4d:3d:37:e6:ac:7a: 88:73:5d:55:5a:e6:75:c8:89:40:15:c5:9b:df:ce:7e:c7:c7: de:32:24:4d:21:73:66:8a:b4:12:56:5e:0f:f7:c3:80:9e:7d: b8:13:cd:45:af:61:bf:72:f2:4a:8b:0b:eb:83:ea:ff:6e:de: f3:64:95:ac:30:27:91:17:de:65:1b:38:47:77:9f:6c:4d:29: f2:a1:fe:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikKAPvaTE07L95wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk OWM4MTAzZmMtZThiNC00YjM4LTk5N2MtMDY2ODcxMzBiZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmNgYjzNB1Oun5Lj3/mj1YgFk53hmL7l0D26 GnJyyQdCFU0eBLieoHl92mhhljyAETR36EFd7j3EEba7AwBLkoogVAc5yleEpfc1 CptBw4Ua9JnZWtc9EZmWjkiRRTExjp6io2OE6FZKC1ZGNaKH9IRLaDssnS/aE1ae DgaE0Vfmy3BtGrQ6YR+Ials8WBettXXYoyeCsBHzPFGO+2jDM3b38/iUqeR80jLF oMGYtOyqH+zsCF8ZhGDDY4OhZFCbeaETBmNYx4gTCLn6nwMKVwthZE4/sjR3EkIv pYSv9tbGp4JfzgwUC0Lgp9c5+0+OACzZONIPcG7wsZxNIut2hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKa4QKaopCnrP7DDaD/A6ZN1M3rpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvOGIyYTIyYmYtN2I2Ni0z NGU2LTkxOTgtMjRkOGMwOWIxOWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7cko087B78lec9FknJLW6sMGc3LlDlwc6typw49XcKhBno4wuTc3CC m+7RV6taLKMrusspxncqIw6F9U8Pk7zDX5O+qZA9IICjv8NE6YaFsGZC6cl9HuTe EhTRpnyeLtDUQ+Jg9kc4MOryX4ZdIZwaxFP/8a0HvWbfEOCLVtkVUQFsw85AJvca WgZuMDKQaH5QXuFQHHzyK7EK+BF34x14iZI4EuaQN9vEwyzwTU09N+aseohzXVVa 5nXIiUAVxZvfzn7Hx94yJE0hc2aKtBJWXg/3w4CefbgTzUWvYb9y8kqLC+uD6v9u 3vNklawwJ5EX3mUbOEd3n2xNKfKh/oQ= -----END CERTIFICATE-----Generated at Thu Jul 3 23:21:41 2025 by rpki-client