$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/70b6a415-96fc-3c29-8eb6-87b641b70325.roa File: 70b6a415-96fc-3c29-8eb6-87b641b70325.roa (raw, json) Hash identifier: sStvj6Jk1GsetnTUDamMOMJQQqypspHrnCK/+9M6YcA= Subject key identifier: 46:B0:BD:97:96:BD:EF:F8:09:F3:05:B4:54:26:55:D4:13:F7:67:42 Certificate issuer: /CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Certificate serial: 010D0C9F4328584A78E5F50217167C5BC23E8280 Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/70b6a415-96fc-3c29-8eb6-87b641b70325.roa Signing time: Thu 10 Jul 2025 13:01:02 +0000 ROA not before: Thu 10 Jul 2025 13:01:02 +0000 ROA not after: Wed 08 Oct 2025 13:01:02 +0000 asID: 845 IP address blocks: 199.96.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:e5:f5:02:17:16:7c:5b:c2:3e:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Validity Not Before: Jul 10 13:01:02 2025 GMT Not After : Oct 8 13:01:02 2025 GMT Subject: CN=c306faea-33a1-4e48-b395-5c1eefb15c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:21:76:24:f0:b6:1b:0d:6b:b4:97:ae:8b:59: f3:ce:ce:ce:09:7b:1c:ad:37:62:41:dc:3c:90:d6: 8c:f5:11:03:64:df:2b:0d:ac:fa:5e:2a:bc:96:a1: 19:0a:2c:e0:69:c7:30:c8:69:0f:68:0b:fb:71:67: 48:e4:75:39:d2:89:95:a9:76:aa:60:f8:da:96:ad: 66:2a:35:4e:b9:28:99:48:38:ec:20:38:e5:58:73: 38:40:fa:5d:47:6c:e2:cc:8c:06:74:e9:5b:14:79: 68:bc:14:1d:cd:c0:d5:42:f8:0b:30:d1:34:2c:30: 60:a8:c7:20:76:ba:24:71:ed:98:be:0b:c4:d0:cf: f3:71:70:3a:01:b6:f3:7c:12:d7:2c:02:48:ca:bc: 87:dd:f8:e2:ee:2d:e0:1e:6e:df:b8:67:32:ed:1b: 6c:33:73:e0:96:f3:4b:66:03:21:bb:fb:3f:a6:51: 29:f1:b2:63:90:e6:c4:c2:10:2d:41:62:23:3c:b0: e2:ed:43:ee:20:27:d9:2d:87:5d:b0:1b:39:37:65: 27:b6:4d:a4:b3:f9:59:c6:cc:b7:69:91:32:08:65: 16:84:96:34:38:09:eb:f9:08:17:d5:1a:bd:f6:e3: fa:3b:7d:29:5f:cb:18:37:ef:44:bd:c1:b4:67:ba: 3c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B0:BD:97:96:BD:EF:F8:09:F3:05:B4:54:26:55:D4:13:F7:67:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/70b6a415-96fc-3c29-8eb6-87b641b70325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl X509v3 Authority Key Identifier: keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer sbgp-ipAddrBlock: critical IPv4: 199.96.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:dc:51:f0:f2:fd:a6:cd:04:24:78:f6:07:4e:6e:b7:d5:ab: 00:55:f2:fa:22:aa:e0:4a:8d:37:70:5c:e4:91:df:bf:e0:54: fc:88:d0:e8:eb:07:d4:22:82:28:c0:5b:b3:9a:d5:c7:a9:a6: a1:7d:52:3a:7c:91:87:5d:45:4e:08:90:34:85:f9:98:78:74: d4:34:59:5c:74:be:ff:00:18:01:d3:04:04:7a:c4:33:cd:ca: cf:43:38:5d:e7:51:59:32:c8:58:52:b7:52:13:99:ab:4a:71: 64:12:50:6b:e3:3a:3b:cc:5e:9d:a0:b6:e2:8d:01:77:fe:1f: 1a:85:db:37:8d:64:71:38:32:e7:d5:a7:8f:b0:92:c3:55:2e: ce:67:61:58:39:d5:07:bd:8a:dc:72:46:d4:0a:c9:12:e4:9a: b5:7c:8f:3f:d3:bb:03:04:6b:c3:0b:f4:3c:5d:08:86:b3:dd: c8:50:93:81:d6:cd:14:07:a8:3c:9f:7a:d8:4a:20:ce:42:21: f0:b3:dd:5d:3e:82:2f:bd:0b:43:8c:a7:86:18:83:76:ed:9c: e3:ce:5e:cf:30:85:8d:a9:f5:a3:86:84:73:05:21:39:21:21: c8:81:c4:b8:03:21:da:4f:17:92:5d:ef:55:d2:95:77:a5:61: a1:be:8b:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp45fUCFxZ8W8I+goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4 ZWY1MB4XDTI1MDcxMDEzMDEwMloXDTI1MTAwODEzMDEwMlowLzEtMCsGA1UEAxMk YzMwNmZhZWEtMzNhMS00ZTQ4LWIzOTUtNWMxZWVmYjE1YzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiF2JPC2Gw1rtJeui1nzzs7OCXscrTdiQdw8 kNaM9REDZN8rDaz6Xiq8lqEZCizgaccwyGkPaAv7cWdI5HU50omVqXaqYPjalq1m KjVOuSiZSDjsIDjlWHM4QPpdR2zizIwGdOlbFHlovBQdzcDVQvgLMNE0LDBgqMcg drokce2YvgvE0M/zcXA6AbbzfBLXLAJIyryH3fji7i3gHm7fuGcy7RtsM3PglvNL ZgMhu/s/plEp8bJjkObEwhAtQWIjPLDi7UPuICfZLYddsBs5N2Untk2ks/lZxsy3 aZEyCGUWhJY0OAnr+QgX1Rq99uP6O30pX8sYN+9EvcG0Z7o8/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEawvZeWve/4CfMFtFQmVdQT92dCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0 Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvNzBiNmE0MTUtOTZmYy0z YzI5LThlYjYtODdiNjQxYjcwMzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3 MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj MzQzMzhlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2BUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzcUfDy/abNBCR49gdObrfVqwBV8voiquBKjTdwXOSR37/gVPyI0Ojr B9QigijAW7Oa1ceppqF9Ujp8kYddRU4IkDSF+Zh4dNQ0WVx0vv8AGAHTBAR6xDPN ys9DOF3nUVkyyFhSt1ITmatKcWQSUGvjOjvMXp2gtuKNAXf+HxqF2zeNZHE4MufV p4+wksNVLs5nYVg51Qe9itxyRtQKyRLkmrV8jz/TuwMEa8ML9DxdCIaz3chQk4HW zRQHqDyfethKIM5CIfCz3V0+gi+9C0OMp4YYg3btnOPOXs8whY2p9aOGhHMFITkh IciBxLgDIdpPF5Jd71XSlXelYaG+i4w= -----END CERTIFICATE-----Generated at Sun Jul 20 22:36:14 2025 by rpki-client