$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/7873cee5-dca2-3643-b959-2ff1a6548ab5.roa File: 7873cee5-dca2-3643-b959-2ff1a6548ab5.roa (raw, json) Hash identifier: dz8glMYGLiWKeJFnxRowmfwDmrIelrZZgdfM54fgZzk= Subject key identifier: 21:D4:9A:EE:2A:6F:42:08:8F:0E:FB:E0:5B:51:31:A3:99:D8:E1:94 Certificate issuer: /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Certificate serial: 010D0C9F4328584A497069CE24B6E1F8B76A2200 Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/7873cee5-dca2-3643-b959-2ff1a6548ab5.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 398415 IP address blocks: 209.142.70.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:69:ce:24:b6:e1:f8:b7:6a:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=b3678498-0ebc-4e90-b1b0-b25a088dd806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:31:71:25:c8:7a:09:61:8d:e9:cc:1b:2e: 83:a5:06:1e:62:67:b4:28:ab:fe:8c:36:f6:45:71: 83:03:3b:81:68:e9:e3:ad:de:c7:0c:01:3d:28:bf: bf:10:7c:1f:d2:69:b3:1c:87:ea:b6:44:9f:e1:70: c7:48:87:5c:94:22:c6:4f:36:4c:f4:cb:85:21:f4: 86:b9:6e:c5:e1:9b:21:95:29:29:fd:d7:c3:fd:b9: 57:9c:58:ef:b5:06:d6:c4:a9:44:87:87:bf:3a:40: a4:6f:65:a5:c3:7a:3f:4c:32:07:1e:37:7f:19:0e: 26:22:60:c8:fa:c3:c4:7f:11:83:83:dd:8e:82:58: 99:30:ee:19:2b:0e:36:34:f5:90:d1:c0:52:fd:24: f1:06:9d:84:bc:0b:a3:e9:72:d8:e0:59:20:99:2c: bf:c3:dd:62:a8:dc:77:18:78:b4:6d:7d:af:00:13: 74:1b:51:33:f2:dd:50:28:7b:19:4d:97:06:d8:d7: cd:6e:3b:fc:be:4e:30:38:fb:a5:09:ef:9b:4a:fa: b9:af:96:c9:c4:f0:09:67:76:f9:86:dc:72:1c:dd: e6:14:c1:e3:f7:0e:53:3d:2b:74:88:b1:a8:15:56: d5:33:ef:72:20:fe:77:a6:5d:db:b1:68:67:29:69: 18:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D4:9A:EE:2A:6F:42:08:8F:0E:FB:E0:5B:51:31:A3:99:D8:E1:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/7873cee5-dca2-3643-b959-2ff1a6548ab5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl X509v3 Authority Key Identifier: keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer sbgp-ipAddrBlock: critical IPv4: 209.142.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:8d:a5:fd:6d:a5:f2:ee:a2:64:cb:ed:0d:a6:81:63:f6:ce: d8:68:d6:9e:90:70:8b:85:9c:87:62:bb:db:86:a9:09:b8:54: 11:17:3d:fc:64:76:8e:92:05:04:53:9d:cf:92:65:d3:e4:3d: a7:2e:1e:62:c6:77:bc:9e:0b:3b:04:b4:98:d4:82:22:1f:c8: 7a:6d:c0:bc:ef:7f:0d:3c:2e:26:bf:23:da:f5:8e:ad:2c:4a: f5:c6:e4:0a:e0:01:c6:1e:21:76:f3:f2:b2:2a:d9:e0:b0:2f: f5:51:77:7e:8f:3d:bf:39:14:46:b0:8f:60:af:ed:05:48:ea: d6:c6:a0:21:80:30:d3:9d:c8:22:e8:e0:08:48:1a:69:29:d3: 8a:d0:69:30:30:50:d5:29:ff:dd:63:c3:1d:a1:fc:a0:b6:dd: c6:1f:d7:10:11:fd:04:7d:4a:8a:69:78:b7:5d:95:7e:69:40: 3c:de:f9:32:10:cb:a3:07:fa:ed:7b:34:77:0f:90:92:3e:60: 56:84:1f:e4:f8:65:48:af:2b:dd:f2:ba:3c:c7:67:1a:3b:b7: 51:98:fb:b2:61:a4:b4:52:b8:66:46:41:9c:fa:d6:ac:3c:16: 9c:85:71:e5:40:b1:e2:91:d2:c2:a2:3e:75:69:90:9b:eb:85: 31:b2:f6:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcGnOJLbh+LdqIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzViOWNiOGUtN2E3Ny00MDhlLTgxZDktMDc1ZjhlZjcy MDBlMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk YjM2Nzg0OTgtMGViYy00ZTkwLWIxYjAtYjI1YTA4OGRkODA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr18xcSXIeglhjenMGy6DpQYeYme0KKv+jDb2 RXGDAzuBaOnjrd7HDAE9KL+/EHwf0mmzHIfqtkSf4XDHSIdclCLGTzZM9MuFIfSG uW7F4ZshlSkp/dfD/blXnFjvtQbWxKlEh4e/OkCkb2Wlw3o/TDIHHjd/GQ4mImDI +sPEfxGDg92OgliZMO4ZKw42NPWQ0cBS/STxBp2EvAuj6XLY4FkgmSy/w91iqNx3 GHi0bX2vABN0G1Ez8t1QKHsZTZcG2NfNbjv8vk4wOPulCe+bSvq5r5bJxPAJZ3b5 htxyHN3mFMHj9w5TPSt0iLGoFVbVM+9yIP53pl3bsWhnKWkYbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHUmu4qb0IIjw774FtRMaOZ2OGUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5 Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVmOGVmNzIwMGUvNzg3M2NlZTUtZGNhMi0z NjQzLWI5NTktMmZmMWE2NTQ4YWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzViOWNiOGUtN2E3Ny00MDhlLTgx ZDktMDc1ZjhlZjcyMDBlLzc1YjljYjhlLTdhNzctNDA4ZS04MWQ5LTA3NWY4ZWY3 MjAwZS5jcmwwHwYDVR0jBBgwFoAUUCXJ4rB8e2VaqkLiQ9juoPxY5KIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVm OGVmNzIwMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGNpf1tpfLuomTL7Q2mgWP2ztho1p6QcIuFnIdiu9uGqQm4VBEXPfxk do6SBQRTnc+SZdPkPacuHmLGd7yeCzsEtJjUgiIfyHptwLzvfw08Lia/I9r1jq0s SvXG5ArgAcYeIXbz8rIq2eCwL/VRd36PPb85FEawj2Cv7QVI6tbGoCGAMNOdyCLo 4AhIGmkp04rQaTAwUNUp/91jwx2h/KC23cYf1xAR/QR9SoppeLddlX5pQDze+TIQ y6MH+u17NHcPkJI+YFaEH+T4ZUivK93yujzHZxo7t1GY+7JhpLRSuGZGQZz61qw8 FpyFceVAseKR0sKiPnVpkJvrhTGy9r8= -----END CERTIFICATE-----Generated at Mon Jun 30 19:08:54 2025 by rpki-client