$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/12d22b18-7e5b-3179-a609-0b988d69b527.roa File: 12d22b18-7e5b-3179-a609-0b988d69b527.roa (raw, json) Hash identifier: /fvOdBYPSq+4+ifsspJyWSsCya3Y6JimmHhHnBSOHQ8= Subject key identifier: CC:D4:F6:02:DE:0A:DB:04:79:97:98:3B:E5:4B:A8:C5:2D:AC:7F:54 Certificate issuer: /CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Certificate serial: 010D0C9F4328584A2286F809B4224894AAB10D00 Authority key identifier: 96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/12d22b18-7e5b-3179-a609-0b988d69b527.roa Signing time: Mon 09 Jun 2025 14:30:12 +0000 ROA not before: Mon 09 Jun 2025 14:30:12 +0000 ROA not after: Sun 07 Sep 2025 14:30:12 +0000 asID: 401448 IP address blocks: 68.170.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:86:f8:09:b4:22:48:94:aa:b1:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Validity Not Before: Jun 9 14:30:12 2025 GMT Not After : Sep 7 14:30:12 2025 GMT Subject: CN=b4f7390c-13e9-4cd4-9107-0e01cc72df4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e6:74:54:2d:31:c7:40:ca:cb:fc:3c:bd:29: 07:bb:9b:9e:9f:ad:69:9e:7a:7e:e0:09:7f:98:59: 53:b4:bd:be:db:df:e0:a9:d4:95:7a:05:cb:be:b0: 5b:92:d0:8f:db:fb:7f:01:c8:80:62:68:b0:51:28: db:d0:ca:0e:67:6b:26:a3:78:61:71:18:70:df:e4: aa:17:8d:38:08:59:64:af:48:97:a8:de:88:75:86: 0d:32:27:2f:54:2d:93:d3:86:4d:f6:68:9a:18:35: 06:df:ec:10:ac:88:58:68:89:1c:e1:57:43:71:eb: 2c:e2:d9:94:9d:eb:ed:38:c9:51:5d:33:70:f1:7c: df:f3:3e:3d:9e:cc:d7:88:c5:07:af:36:38:6a:97: 99:e6:da:53:5e:04:42:ca:ed:c3:5b:29:dc:2c:9a: 60:be:6d:e8:0c:42:21:c3:c9:d9:c7:42:c7:9c:1b: 03:1b:a2:b9:d4:71:fe:c5:6b:83:f4:37:26:52:f1: b1:3a:84:8f:ff:a2:f0:e2:ba:8d:3e:a0:de:91:09: bc:26:8c:b6:cf:b9:a7:c0:76:b2:ce:96:6a:25:37: 70:25:7b:f2:df:86:85:c5:ce:83:dc:da:79:89:0c: 88:7b:cd:29:6a:e9:94:5c:17:1a:f2:5f:5f:ad:50: 70:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D4:F6:02:DE:0A:DB:04:79:97:98:3B:E5:4B:A8:C5:2D:AC:7F:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/12d22b18-7e5b-3179-a609-0b988d69b527.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl X509v3 Authority Key Identifier: keyid:96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer sbgp-ipAddrBlock: critical IPv4: 68.170.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:82:4e:43:44:d9:7d:17:ba:8b:71:c6:88:6d:29:b3:01:d7: 5f:d9:d0:15:d9:22:55:b5:c2:87:1c:85:48:4f:79:4d:ed:ad: ca:6d:4b:67:1a:1d:c8:64:05:8d:cc:ab:80:7a:bf:05:db:14: e9:fc:b2:e8:a6:50:9b:10:db:bb:f9:5d:ce:e7:53:df:c2:31: 51:27:62:e0:9f:ba:24:1f:3d:03:30:91:f5:04:99:02:99:00: 96:a9:87:30:f9:5d:03:ea:5c:82:02:38:4b:d7:cd:7c:31:a2: 97:e4:1c:28:ab:eb:0f:30:75:7d:31:20:54:f4:db:f6:d1:fe: 6e:d0:ad:62:8b:14:9b:f6:e9:80:93:27:bd:18:71:39:c9:2b: a1:8e:c1:4e:89:53:be:9b:99:54:8a:d7:29:11:24:19:d9:75: 0b:ab:57:f1:a5:91:a1:be:f3:25:df:e8:c7:bb:a2:1d:fe:66: 8a:03:0d:38:6e:b2:a4:d2:26:c6:cf:bf:bd:8d:60:ed:90:f9: fd:c7:56:54:c8:eb:04:33:78:7d:00:b7:b5:0f:ff:b6:92:e2: f8:cd:08:f3:61:18:17:5a:67:d5:98:4c:ca:66:f5:50:36:34: 1c:1a:6b:59:1d:82:c5:c5:2b:37:7f:6d:78:a4:22:0e:8f:26: 1d:13:6f:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoihvgJtCJIlKqxDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc1NTRlOWYtYTNiMC00NzRmLWI3MjgtNGY5NTlhYTM1 NDQ5MB4XDTI1MDYwOTE0MzAxMloXDTI1MDkwNzE0MzAxMlowLzEtMCsGA1UEAxMk YjRmNzM5MGMtMTNlOS00Y2Q0LTkxMDctMGUwMWNjNzJkZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheZ0VC0xx0DKy/w8vSkHu5uen61pnnp+4Al/ mFlTtL2+29/gqdSVegXLvrBbktCP2/t/AciAYmiwUSjb0MoOZ2smo3hhcRhw3+Sq F404CFlkr0iXqN6IdYYNMicvVC2T04ZN9miaGDUG3+wQrIhYaIkc4VdDcess4tmU nevtOMlRXTNw8Xzf8z49nszXiMUHrzY4apeZ5tpTXgRCyu3DWyncLJpgvm3oDEIh w8nZx0LHnBsDG6K51HH+xWuD9DcmUvGxOoSP/6Lw4rqNPqDekQm8Joy2z7mnwHay zpZqJTdwJXvy34aFxc6D3Np5iQyIe80paumUXBca8l9frVBwFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzU9gLeCtsEeZeYO+VLqMUtrH9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1 NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1OWFhMzU0NDkvMTJkMjJiMTgtN2U1Yi0z MTc5LWE2MDktMGI5ODhkNjliNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzc1NTRlOWYtYTNiMC00NzRmLWI3 MjgtNGY5NTlhYTM1NDQ5L2M3NTU0ZTlmLWEzYjAtNDc0Zi1iNzI4LTRmOTU5YWEz NTQ0OS5jcmwwHwYDVR0jBBgwFoAUli7MQkEJ9CB4PLADz1sQrKOP3gcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1 OWFhMzU0NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuCTkNE2X0XuotxxohtKbMB11/Z0BXZIlW1wocchUhPeU3trcptS2ca HchkBY3Mq4B6vwXbFOn8suimUJsQ27v5Xc7nU9/CMVEnYuCfuiQfPQMwkfUEmQKZ AJaphzD5XQPqXIICOEvXzXwxopfkHCir6w8wdX0xIFT02/bR/m7QrWKLFJv26YCT J70YcTnJK6GOwU6JU76bmVSK1ykRJBnZdQurV/GlkaG+8yXf6Me7oh3+ZooDDThu sqTSJsbPv72NYO2Q+f3HVlTI6wQzeH0At7UP/7aS4vjNCPNhGBdaZ9WYTMpm9VA2 NBwaa1kdgsXFKzd/bXikIg6PJh0Tb+Y= -----END CERTIFICATE-----Generated at Mon Jun 30 13:19:04 2025 by rpki-client