$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/bb072b22-497b-31d1-8292-b571a807b727.roa File: bb072b22-497b-31d1-8292-b571a807b727.roa (raw, json) Hash identifier: 6tBBpmV/WBDeYx9KSmu2795V1d0T68CJZOlJW8paabQ= Subject key identifier: 23:01:33:1C:52:9E:DD:EC:71:2C:C6:A6:CE:EB:E1:1F:DE:C1:B2:B4 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584A374AC3653EF80F21E8ECA280 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/bb072b22-497b-31d1-8292-b571a807b727.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 138699 IP address blocks: 71.18.255.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:c3:65:3e:f8:0f:21:e8:ec:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=e0c22a63-411e-4fb7-8eb8-8c9b636a031a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fd:e6:e4:29:be:42:00:11:df:48:e9:6e:0a: 3e:f4:fd:90:ec:e7:c4:d7:5f:89:6f:1d:78:03:ee: e2:47:42:13:d6:17:66:b1:f3:58:9b:1c:10:82:6d: 91:19:61:91:a8:33:2c:32:85:67:cf:28:31:c8:74: 80:d5:4e:0e:67:77:46:92:8f:d5:96:f5:92:7d:40: 3a:42:e2:f0:a5:72:3c:42:cb:41:a1:d6:c8:8a:7a: 8b:dd:e2:a8:40:c2:98:93:65:f5:3b:59:c4:bc:bf: 28:fa:07:23:d9:81:de:f4:ae:22:da:6a:df:dc:3b: cc:e7:61:fd:9f:83:94:26:d1:a9:8d:6c:bc:6d:05: eb:a2:b1:ad:98:dc:51:99:b0:2c:58:f4:e5:09:95: 24:d0:9b:42:a6:d4:5d:43:c6:12:31:bf:fc:85:86: fc:46:c0:d2:55:5c:d0:99:94:48:e9:91:8b:78:3b: 1a:c2:38:fb:1b:e1:9d:2f:35:4a:b2:d0:98:0c:6f: 39:ed:cc:0f:dd:ad:de:0b:e8:8f:16:be:85:31:11: ec:17:27:1d:13:a2:f6:c3:f0:d6:35:3a:84:42:d5: 8d:62:d9:27:73:32:89:7f:c7:73:ea:ee:c3:2e:31: 9b:66:db:a3:e9:d0:a9:19:17:53:31:85:c1:92:c0: af:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:01:33:1C:52:9E:DD:EC:71:2C:C6:A6:CE:EB:E1:1F:DE:C1:B2:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/bb072b22-497b-31d1-8292-b571a807b727.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 71.18.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:68:2e:57:b1:72:82:ea:1b:f4:2c:4c:e7:3b:d9:fa:39:46: cb:7b:09:a2:a4:7e:fd:05:a3:d4:c8:54:0c:e1:84:13:b6:76: 5a:a2:a4:22:b4:59:c8:a6:e7:e4:6f:df:ff:c3:41:bc:66:1d: 49:c6:9c:4e:60:6f:10:c0:63:fa:23:54:a8:5c:28:e1:08:11: 03:c7:af:2f:1b:0c:fd:f7:5f:1d:4f:e1:bc:20:79:75:27:04: 1f:00:36:e1:94:25:4b:91:6a:ab:d8:56:8b:25:ef:17:a7:54: 83:45:f8:38:bc:0a:de:e5:f4:36:81:e6:bc:9f:58:d0:b2:34: 57:59:5c:6a:be:17:07:d0:2c:5f:3c:a5:1a:1f:c6:3a:e7:5b: 05:e6:86:44:b9:70:89:ab:a9:e2:5a:ab:41:28:11:df:68:56: bc:1a:4d:03:74:28:b0:e1:2b:62:6e:40:6f:4a:68:c5:bc:5c: 97:d9:f8:b0:eb:50:2c:c0:2e:4d:ba:fb:bf:5d:aa:a8:29:58: 11:28:2f:6f:b3:dd:1b:45:d2:89:fb:e0:77:ca:f0:3d:e6:52: 45:9e:a0:f1:43:a5:18:6a:b8:1d:80:94:03:43:3e:28:78:72: 71:98:04:a9:ac:d0:79:49:c3:18:17:8e:a9:47:89:95:88:ee: 34:93:df:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SsNlPvgPIejsooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk ZTBjMjJhNjMtNDExZS00ZmI3LThlYjgtOGM5YjYzNmEwMzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf3m5Cm+QgAR30jpbgo+9P2Q7OfE11+Jbx14 A+7iR0IT1hdmsfNYmxwQgm2RGWGRqDMsMoVnzygxyHSA1U4OZ3dGko/VlvWSfUA6 QuLwpXI8QstBodbIinqL3eKoQMKYk2X1O1nEvL8o+gcj2YHe9K4i2mrf3DvM52H9 n4OUJtGpjWy8bQXrorGtmNxRmbAsWPTlCZUk0JtCptRdQ8YSMb/8hYb8RsDSVVzQ mZRI6ZGLeDsawjj7G+GdLzVKstCYDG857cwP3a3eC+iPFr6FMRHsFycdE6L2w/DW NTqEQtWNYtknczKJf8dz6u7DLjGbZtuj6dCpGRdTMYXBksCvdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMBMxxSnt3scSzGps7r4R/ewbK0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvYmIwNzJiMjItNDk3Yi0z MWQxLTgyOTItYjU3MWE4MDdiNzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxL/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5oLlexcoLqG/QsTOc72fo5Rst7CaKkfv0Fo9TIVAzhhBO2dlqipCK0 Wcim5+Rv3//DQbxmHUnGnE5gbxDAY/ojVKhcKOEIEQPHry8bDP33Xx1P4bwgeXUn BB8ANuGUJUuRaqvYVosl7xenVINF+Di8Ct7l9DaB5ryfWNCyNFdZXGq+FwfQLF88 pRofxjrnWwXmhkS5cImrqeJaq0EoEd9oVrwaTQN0KLDhK2JuQG9KaMW8XJfZ+LDr UCzALk26+79dqqgpWBEoL2+z3RtF0on74HfK8D3mUkWeoPFDpRhquB2AlANDPih4 cnGYBKms0HlJwxgXjqlHiZWI7jST38c= -----END CERTIFICATE-----Generated at Mon Jun 30 06:50:17 2025 by rpki-client