$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/ff60fbe9-e19d-38a3-a7e2-be42260297df.roa File: ff60fbe9-e19d-38a3-a7e2-be42260297df.roa (raw, json) Hash identifier: sHDcqsclTEnCIZxHWlt9S2cWFfSxr8/CSmtd5+xFVz8= Subject key identifier: 1D:AF:E1:F9:CE:29:63:2D:BC:D0:C9:50:BD:E4:1A:7E:3E:64:8C:27 Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F4328584A6290A01C30875A38E7CDA500 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/ff60fbe9-e19d-38a3-a7e2-be42260297df.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 25617 IP address blocks: 216.222.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:a0:1c:30:87:5a:38:e7:cd:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=1bbccd54-d061-4f09-9ecb-de5e24486269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cc:fe:6f:0b:a0:40:0f:c8:87:f5:b6:e6:d4: f0:b4:17:13:bc:db:f9:4f:9f:b6:9b:36:4f:bf:43: 1b:17:6f:49:15:1c:b6:c8:05:7e:f3:9f:98:45:11: 4f:05:f0:db:7f:50:50:12:31:cd:8e:e0:20:af:5c: 55:79:13:55:23:aa:7c:43:40:68:12:b6:9b:55:f3: b8:9e:5f:aa:32:ea:e2:37:08:04:f3:ea:62:f3:4e: fb:52:1d:ef:57:e8:0e:8f:5f:ab:b2:6f:40:86:59: 68:ce:64:61:57:29:d6:51:93:78:50:68:cd:dd:b9: 02:a1:7b:4f:f6:e9:bb:28:45:3b:f8:89:77:86:72: 0d:5c:93:e0:c3:e9:ac:8e:63:da:28:21:25:63:01: 7c:a1:e8:58:a5:b6:d0:50:58:e8:0e:e1:9a:9d:a2: 2d:4c:b9:16:3c:67:bb:4c:f2:1d:ce:30:f5:a5:f6: 1d:3f:b3:ec:94:d1:ec:37:1b:2d:be:64:3c:8d:65: 84:01:9d:75:19:f8:a7:a4:68:b8:2f:96:ad:b1:81: 3d:6f:f5:16:c4:73:5a:9a:9b:2c:6e:a4:02:41:3c: 6c:ad:fe:c6:88:4b:10:6e:e5:6f:63:94:78:49:b1: 87:41:e8:cd:b4:7b:da:10:74:19:54:92:6b:5d:33: 92:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AF:E1:F9:CE:29:63:2D:BC:D0:C9:50:BD:E4:1A:7E:3E:64:8C:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/ff60fbe9-e19d-38a3-a7e2-be42260297df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e7:03:43:01:ed:d5:e8:04:30:22:be:92:74:84:b6:c1:89: 4a:ee:83:c3:fa:f4:b3:16:d0:74:ff:f0:4d:9b:8c:f3:36:70: 76:be:ae:d7:3b:9f:97:12:d2:0c:ad:e9:29:e4:a3:91:87:55: 8c:27:15:c6:e1:a4:fe:84:1f:c8:bf:1b:f0:9d:14:3e:d8:f3: 1e:00:b8:f4:6b:89:b8:2f:73:ab:26:7c:03:2e:ca:26:6e:00: bb:f1:27:3e:94:a1:84:24:06:df:ca:35:3a:69:d7:17:dc:d8: bf:11:ed:93:46:e3:2e:ec:1a:17:51:1e:77:70:34:29:79:55: 86:37:7f:95:0b:ab:50:8b:c7:49:b3:34:e6:0e:05:5d:a0:d7: 1f:03:4c:b9:75:33:2d:6a:d5:b1:6b:14:73:3f:24:e5:75:19: 41:61:b8:32:41:36:61:78:87:ed:a3:7d:22:90:f2:93:fd:04: de:35:51:ff:38:8a:aa:1a:40:9c:f0:77:3a:a6:3b:60:fa:72: 55:9d:a7:cc:7c:a2:3e:07:1e:ed:d4:2c:8d:bc:5f:d9:85:8d: e6:df:66:56:76:3f:99:3d:fd:40:ae:13:d3:ce:3e:36:bd:e4: 47:df:de:ff:19:14:4d:6e:88:bb:3a:95:de:ce:f3:33:a6:1b: 28:ac:3f:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikKAcMIdaOOfNpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MWJiY2NkNTQtZDA2MS00ZjA5LTllY2ItZGU1ZTI0NDg2MjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsz+bwugQA/Ih/W25tTwtBcTvNv5T5+2mzZP v0MbF29JFRy2yAV+85+YRRFPBfDbf1BQEjHNjuAgr1xVeRNVI6p8Q0BoErabVfO4 nl+qMuriNwgE8+pi8077Uh3vV+gOj1+rsm9AhllozmRhVynWUZN4UGjN3bkCoXtP 9um7KEU7+Il3hnINXJPgw+msjmPaKCElYwF8oehYpbbQUFjoDuGanaItTLkWPGe7 TPIdzjD1pfYdP7PslNHsNxstvmQ8jWWEAZ11GfinpGi4L5atsYE9b/UWxHNampss bqQCQTxsrf7GiEsQbuVvY5R4SbGHQejNtHvaEHQZVJJrXTOSMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2v4fnOKWMtvNDJUL3kGn4+ZIwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvZmY2MGZiZTktZTE5ZC0z OGEzLWE3ZTItYmU0MjI2MDI5N2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjnA0MB7dXoBDAivpJ0hLbBiUrug8P69LMW0HT/8E2bjPM2cHa+rtc7 n5cS0gyt6Snko5GHVYwnFcbhpP6EH8i/G/CdFD7Y8x4AuPRribgvc6smfAMuyiZu ALvxJz6UoYQkBt/KNTpp1xfc2L8R7ZNG4y7sGhdRHndwNCl5VYY3f5ULq1CLx0mz NOYOBV2g1x8DTLl1My1q1bFrFHM/JOV1GUFhuDJBNmF4h+2jfSKQ8pP9BN41Uf84 iqoaQJzwdzqmO2D6clWdp8x8oj4HHu3ULI28X9mFjebfZlZ2P5k9/UCuE9POPja9 5Eff3v8ZFE1uiLs6ld7O8zOmGyisP5I= -----END CERTIFICATE-----Generated at Fri Jul 4 02:22:53 2025 by rpki-client