$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa File: bff72a2e-13a9-31ab-bb47-124e89b56abc.roa (raw, json) Hash identifier: Gy/Pggr1CluIRfdRaQSR7t1s9apBuk4eNNUA7xGzxco= Subject key identifier: E1:01:43:89:F0:5D:A1:74:1A:31:C4:A4:21:AF:2D:4B:88:15:9D:F6 Certificate issuer: /CN=8b860252-78e2-47ac-a6f1-f1dc5a900776 Certificate serial: 010D0C9F4328584A2C200FE7C8295810EA370D00 Authority key identifier: 7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 20099 IP address blocks: 192.44.70.0/24 maxlen: 24 2620:89:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:0f:e7:c8:29:58:10:ea:37:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b860252-78e2-47ac-a6f1-f1dc5a900776 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=2030ed2f-d258-4ff0-bdd3-558a8ecff9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e4:59:2a:38:1a:ac:78:ba:14:a3:b7:1c:96: b9:25:bf:ba:da:ee:11:43:ac:42:9e:2c:ef:3f:24: 20:53:c5:59:35:18:37:c1:6c:76:ae:7c:02:c8:1a: ea:42:54:2c:e9:8f:4f:88:4e:6a:a2:01:1a:1d:aa: 3d:d9:14:fe:8f:6e:c3:e4:70:63:ce:4f:6c:84:1e: cc:31:52:58:4d:d7:d9:97:ed:28:ee:18:db:ac:91: aa:c6:af:3e:94:6d:cc:36:55:b2:5d:d8:b1:34:39: fc:8e:9f:96:9c:54:dd:8a:90:55:0e:ba:2f:af:67: 54:e7:fd:7b:66:91:1d:43:99:c8:2c:3b:d4:ab:a2: 5b:cd:e3:bb:af:3a:b8:f1:d5:9d:a7:37:29:47:1b: 9e:35:94:fe:de:ad:7f:7f:0d:11:e1:68:83:f6:0d: 10:93:56:6a:75:7b:67:7f:8f:4a:d4:6b:44:c1:2e: fe:28:9c:de:2f:24:5f:f3:bd:37:05:c8:6e:18:77: d7:a3:22:da:7a:95:fe:6f:63:12:8d:b6:51:82:7e: 5f:f3:7c:bc:cb:c3:77:54:87:34:1d:50:52:d2:d2: 27:9c:b7:91:da:63:6a:14:60:83:e4:24:29:35:68: ba:26:fe:77:76:41:aa:61:86:b5:f7:24:f1:44:4a: 57:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:01:43:89:F0:5D:A1:74:1A:31:C4:A4:21:AF:2D:4B:88:15:9D:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.crl X509v3 Authority Key Identifier: keyid:7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer sbgp-ipAddrBlock: critical IPv4: 192.44.70.0/24 IPv6: 2620:89:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:26:74:0c:fa:43:4f:01:d4:84:82:ae:df:d3:64:71:11:9b: 36:44:09:6a:d5:5c:b9:39:ac:4e:f5:80:63:7b:ca:c3:d2:4c: 68:0c:23:78:98:86:aa:2c:29:6c:e6:48:de:3c:a1:0c:c0:60: 21:3b:df:80:48:5a:db:b7:3e:06:f4:49:68:0f:63:2d:70:36: 8a:27:9d:6e:7f:74:c6:d6:0a:56:7e:4e:cb:80:01:37:3e:d6: d3:50:37:2b:e1:82:9e:3d:05:5b:05:ff:d3:42:41:0a:55:d4: d9:4b:da:d1:9c:b5:03:e8:54:12:6d:ee:4f:9c:09:6e:57:71: c2:27:d9:e9:62:ee:db:16:e6:31:91:bc:09:de:a3:71:a7:cb: 87:24:17:36:ad:72:fd:c9:96:05:92:df:cf:c4:4f:d9:e2:62: 1d:f0:54:52:5a:0b:44:db:ae:a6:f2:0d:0c:ee:62:de:a0:e2: db:66:69:5d:55:90:c6:87:f7:d0:b1:10:9d:e9:1a:5f:09:68: 7b:c9:85:c2:15:57:21:7e:74:27:48:a2:37:d0:1f:2c:48:fa: 84:f3:6e:3e:87:c4:c3:10:c7:bb:82:a6:ed:d6:46:54:4b:5a: 2f:89:ea:cb:fb:21:2d:84:d3:d4:41:4b:13:14:ba:e2:a6:22: 8c:c2:e5:ac -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEosIA/nyClYEOo3DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI4NjAyNTItNzhlMi00N2FjLWE2ZjEtZjFkYzVhOTAw Nzc2MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk MjAzMGVkMmYtZDI1OC00ZmYwLWJkZDMtNTU4YThlY2ZmOWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eRZKjgarHi6FKO3HJa5Jb+62u4RQ6xCnizv PyQgU8VZNRg3wWx2rnwCyBrqQlQs6Y9PiE5qogEaHao92RT+j27D5HBjzk9shB7M MVJYTdfZl+0o7hjbrJGqxq8+lG3MNlWyXdixNDn8jp+WnFTdipBVDrovr2dU5/17 ZpEdQ5nILDvUq6JbzeO7rzq48dWdpzcpRxueNZT+3q1/fw0R4WiD9g0Qk1ZqdXtn f49K1GtEwS7+KJzeLyRf8703BchuGHfXoyLaepX+b2MSjbZRgn5f83y8y8N3VIc0 HVBS0tInnLeR2mNqFGCD5CQpNWi6Jv53dkGqYYa19yTxREpXVQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFOEBQ4nwXaF0GjHEpCGvLUuIFZ32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84Yjg2 MDI1Mi03OGUyLTQ3YWMtYTZmMS1mMWRjNWE5MDA3NzYvYmZmNzJhMmUtMTNhOS0z MWFiLWJiNDctMTI0ZTg5YjU2YWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGI4NjAyNTItNzhlMi00N2FjLWE2 ZjEtZjFkYzVhOTAwNzc2LzhiODYwMjUyLTc4ZTItNDdhYy1hNmYxLWYxZGM1YTkw MDc3Ni5jcmwwHwYDVR0jBBgwFoAUf4HSkCoiQT23Z2JK4kdRO9cPe3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84Yjg2MDI1Mi03OGUyLTQ3YWMtYTZmMS1mMWRj NWE5MDA3NzYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwCxGMA8E AgACMAkDBwAmIACJwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATyZ0DPpDTwHUhIKu39NkcRGbNkQJatVc uTmsTvWAY3vKw9JMaAwjeJiGqiwpbOZI3jyhDMBgITvfgEha27c+BvRJaA9jLXA2 iiedbn90xtYKVn5Oy4ABNz7W01A3K+GCnj0FWwX/00JBClXU2Uva0Zy1A+hUEm3u T5wJbldxwifZ6WLu2xbmMZG8Cd6jcafLhyQXNq1y/cmWBZLfz8RP2eJiHfBUUloL RNuupvINDO5i3qDi22ZpXVWQxof30LEQnekaXwloe8mFwhVXIX50J0iiN9AfLEj6 hPNuPofEwxDHu4Km7dZGVEtaL4nqy/shLYTT1EFLExS64qYijMLlrA== -----END CERTIFICATE-----Generated at Tue Jul 1 15:58:22 2025 by rpki-client