$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa File: b3798828-71b2-329f-8988-21b3e3f05b65.roa (raw, json) Hash identifier: HtXWxLrMms3pvfbXlovHtgFSDfkMA8kCcqh1IKxF2ng= Subject key identifier: 39:8C:EE:AB:C2:26:9D:D1:20:FE:5B:A3:D4:87:85:64:15:CF:D9:9A Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F4328584A5FC5E88F304D49E5ECE14200 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 25617 IP address blocks: 216.222.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e8:8f:30:4d:49:e5:ec:e1:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=dc4d5b15-f75e-4973-8f85-5ae7246b4db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7f:d8:89:7d:7d:09:36:41:e8:0d:2a:01:90: 17:7f:33:07:d8:9e:88:22:6a:b2:8d:d1:7c:ab:a4: 5d:65:35:6a:00:3f:fb:46:5e:6d:22:cd:ca:4f:3a: 62:38:f0:f0:10:d7:9a:11:cd:05:0e:e7:87:d9:54: 72:d8:51:48:6e:91:ec:64:8b:fe:79:0e:b0:4b:82: 2c:1d:29:f2:a0:fa:91:a8:a0:8f:c3:6c:7a:62:f4: 74:10:54:04:48:03:5e:3c:28:cf:da:a0:82:67:94: b0:04:e5:cd:a1:5b:44:be:0b:a7:c9:e5:db:bc:8c: 7e:94:fb:49:5a:ca:be:2e:64:92:28:1d:e9:7c:50: 08:af:43:4b:df:28:06:c0:36:97:82:76:d7:b3:ab: 07:56:17:fb:5f:1b:a8:bd:ac:d9:ac:88:36:cd:8a: 41:a6:42:1d:7b:53:62:62:9c:b4:f6:92:a4:46:62: 8c:88:53:4e:a5:2f:bd:b0:8e:3a:dc:1c:d5:00:8c: 8f:42:13:ff:59:34:7f:e9:1b:cd:f4:8d:f9:10:0a: 79:f7:c9:76:d8:c0:54:35:1f:b7:80:97:f1:1b:0a: cd:ac:24:77:c3:e2:ed:97:d7:87:81:95:a2:2c:23: 96:1d:73:a1:fa:0b:af:81:5a:9c:bc:46:61:2d:2d: 4c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8C:EE:AB:C2:26:9D:D1:20:FE:5B:A3:D4:87:85:64:15:CF:D9:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ab:8a:e9:af:8b:46:22:fd:3c:12:29:d0:3a:7c:9b:2e:11: 0f:8f:55:19:fe:ab:bf:59:f4:e2:8f:cb:34:17:67:b4:fd:23: 9b:26:75:0f:6a:4a:49:d9:ca:a0:9f:6c:4f:c7:0e:ed:d1:76: 0c:36:c6:67:cf:71:77:41:b2:f4:79:fb:c6:43:66:1d:cd:5b: cd:f9:43:b2:ba:9b:c5:ba:46:33:e9:83:56:96:e9:b4:9d:83: 7a:f9:69:bc:8b:68:4a:99:26:af:e9:37:fd:ba:a4:44:5d:86: 00:12:03:99:4d:03:22:b0:42:9a:67:35:54:bc:43:63:00:28: f7:40:54:ec:46:69:d1:08:b1:a8:85:a5:1d:6f:51:3d:ce:88: 52:5b:06:f1:63:fe:9a:50:ed:85:45:07:54:3f:ac:32:8d:65: 5e:eb:66:98:20:64:79:40:1b:02:c3:60:45:02:e5:b3:28:f3: 1d:9c:82:a2:30:bd:17:8f:64:dd:c1:1a:07:d6:c4:2c:20:4f: 98:9c:5b:5b:6c:24:36:20:73:69:7e:49:51:3d:a3:dc:36:84: f4:ff:9b:cb:20:4c:b3:7f:73:25:ae:36:14:56:44:94:e4:3d: b7:ad:4f:76:cc:46:b6:ea:ab:11:12:97:41:e1:d4:71:bf:b7: 7f:a2:7f:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxeiPME1J5ezhQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk ZGM0ZDViMTUtZjc1ZS00OTczLThmODUtNWFlNzI0NmI0ZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3/YiX19CTZB6A0qAZAXfzMH2J6IImqyjdF8 q6RdZTVqAD/7Rl5tIs3KTzpiOPDwENeaEc0FDueH2VRy2FFIbpHsZIv+eQ6wS4Is HSnyoPqRqKCPw2x6YvR0EFQESANePCjP2qCCZ5SwBOXNoVtEvgunyeXbvIx+lPtJ Wsq+LmSSKB3pfFAIr0NL3ygGwDaXgnbXs6sHVhf7XxuovazZrIg2zYpBpkIde1Ni Ypy09pKkRmKMiFNOpS+9sI463BzVAIyPQhP/WTR/6RvN9I35EAp598l22MBUNR+3 gJfxGwrNrCR3w+Ltl9eHgZWiLCOWHXOh+guvgVqcvEZhLS1MtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmM7qvCJp3RIP5bo9SHhWQVz9maMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvYjM3OTg4MjgtNzFiMi0z MjlmLTg5ODgtMjFiM2UzZjA1YjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOriumvi0Yi/TwSKdA6fJsuEQ+PVRn+q79Z9OKPyzQXZ7T9I5smdQ9q SknZyqCfbE/HDu3Rdgw2xmfPcXdBsvR5+8ZDZh3NW835Q7K6m8W6RjPpg1aW6bSd g3r5abyLaEqZJq/pN/26pERdhgASA5lNAyKwQppnNVS8Q2MAKPdAVOxGadEIsaiF pR1vUT3OiFJbBvFj/ppQ7YVFB1Q/rDKNZV7rZpggZHlAGwLDYEUC5bMo8x2cgqIw vRePZN3BGgfWxCwgT5icW1tsJDYgc2l+SVE9o9w2hPT/m8sgTLN/cyWuNhRWRJTk PbetT3bMRrbqqxESl0Hh1HG/t3+if7c= -----END CERTIFICATE-----Generated at Thu Jul 3 20:34:52 2025 by rpki-client