$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/060e2c02-f91a-3f0d-a98b-1389a6c764bd.roa File: 060e2c02-f91a-3f0d-a98b-1389a6c764bd.roa (raw, json) Hash identifier: Pvb8rbhfR59wVHc+MnKqModLDpAGETmEUgeEy4pI5jc= Subject key identifier: 37:97:A4:AF:5D:D8:B3:D4:27:4E:BB:8E:73:80:F9:40:BA:C1:BC:D4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCB00D29E24103DAA6D9C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/060e2c02-f91a-3f0d-a98b-1389a6c764bd.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 70.88.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:b0:0d:29:e2:41:03:da:a6:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=b6375783-86bc-4253-b385-48bec728ebff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c8:98:59:72:e1:e8:82:a7:34:28:a0:53:5d: 4f:16:f1:37:34:77:d2:4c:32:54:cc:56:ac:f1:03: 6c:9f:4d:8c:3d:3e:27:ed:19:fc:62:62:97:9a:6c: ec:0f:2d:36:c5:e9:a2:09:45:7f:8f:19:40:0a:71: 1f:a5:fc:0f:d8:aa:37:8a:a9:75:06:88:4f:77:b4: 31:81:68:35:75:13:de:49:27:89:fe:a3:f3:50:35: 89:85:b8:b5:f0:00:e1:fc:68:23:49:d7:56:34:ce: b8:a9:ad:3d:f5:9f:aa:f5:31:79:31:69:58:05:e7: cf:36:2d:ef:4d:63:91:dc:45:df:06:ac:ab:7d:d4: b0:f1:7b:24:0a:63:dc:6d:19:82:17:5f:8e:b7:c4: ec:71:61:36:52:55:1c:49:19:82:18:7c:b3:cd:47: 5c:7b:39:36:b6:12:9f:f1:19:16:4f:e0:0c:65:4c: ee:b8:24:6a:ff:e0:37:e2:a0:40:2f:7a:bc:ef:4e: c7:bc:bb:f0:eb:40:61:14:d8:f6:f9:e8:e4:98:66: 7c:92:bc:c7:fb:77:4d:71:f2:4d:a4:a6:78:af:cf: 2a:d3:7d:c2:c4:64:8a:8c:1a:95:82:11:73:40:6a: 61:3e:9c:92:cf:cf:80:1f:22:42:46:b0:53:db:f8: 8f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:97:A4:AF:5D:D8:B3:D4:27:4E:BB:8E:73:80:F9:40:BA:C1:BC:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/060e2c02-f91a-3f0d-a98b-1389a6c764bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.88.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:14:91:74:12:a9:9f:13:5f:e6:7f:6c:4d:68:56:99:48:d3: e7:39:f8:97:a3:98:47:9a:ca:14:9b:6c:8c:2d:c4:bb:ff:9a: 00:1d:26:8d:bc:97:00:47:31:54:ad:ac:21:dc:02:b7:4c:a3: 3b:5d:32:a7:19:68:1d:14:8c:5b:74:e4:21:5e:ce:27:b2:1c: 51:d0:f6:ba:d7:9f:b3:e7:6a:be:aa:b1:ca:b5:8d:ba:28:8d: 7f:a2:f4:fa:a0:fb:f9:cf:ee:30:fd:f7:e7:f2:a7:63:4d:e8: 70:c3:39:59:c4:99:6d:d3:27:df:52:78:54:00:06:96:ec:a8: b5:fd:32:68:ad:00:2e:15:32:aa:66:62:89:f3:d9:09:9e:a0: a5:07:70:3a:cb:66:28:83:e7:47:12:ee:41:11:e1:90:45:de: 8c:e5:39:29:bc:9c:a2:5e:ca:38:0d:8e:e4:a3:fe:d6:aa:ff: 45:ed:2f:cd:e2:68:0a:93:12:d5:bf:6d:40:bb:0d:35:1a:25: bf:de:85:e5:80:31:d9:b1:78:4e:5e:05:55:7d:b5:f5:66:2b: b7:80:82:14:f5:10:f6:56:a4:d1:72:64:c7:f8:ff:e0:84:95: 5e:08:de:34:0e:8d:ec:f6:d2:50:e6:80:23:43:74:ad:62:b5: 54:26:91:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/LANKeJBA9qm2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YjYzNzU3ODMtODZiYy00MjUzLWIzODUtNDhiZWM3MjhlYmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MiYWXLh6IKnNCigU11PFvE3NHfSTDJUzFas 8QNsn02MPT4n7Rn8YmKXmmzsDy02xemiCUV/jxlACnEfpfwP2Ko3iql1BohPd7Qx gWg1dRPeSSeJ/qPzUDWJhbi18ADh/GgjSddWNM64qa099Z+q9TF5MWlYBefPNi3v TWOR3EXfBqyrfdSw8XskCmPcbRmCF1+Ot8TscWE2UlUcSRmCGHyzzUdcezk2thKf 8RkWT+AMZUzuuCRq/+A34qBAL3q8707HvLvw60BhFNj2+ejkmGZ8krzH+3dNcfJN pKZ4r88q033CxGSKjBqVghFzQGphPpySz8+AHyJCRrBT2/iPnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeXpK9d2LPUJ067jnOA+UC6wbzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDYwZTJjMDItZjkxYS0z ZjBkLWE5OGItMTM4OWE2Yzc2NGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRlgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAUkXQSqZ8TX+Z/bE1oVplI0+c5+JejmEeayhSbbIwtxLv/mgAdJo28 lwBHMVStrCHcArdMoztdMqcZaB0UjFt05CFezieyHFHQ9rrXn7Pnar6qscq1jboo jX+i9Pqg+/nP7jD99+fyp2NN6HDDOVnEmW3TJ99SeFQABpbsqLX9MmitAC4VMqpm Yonz2QmeoKUHcDrLZiiD50cS7kER4ZBF3ozlOSm8nKJeyjgNjuSj/taq/0XtL83i aAqTEtW/bUC7DTUaJb/eheWAMdmxeE5eBVV9tfVmK7eAghT1EPZWpNFyZMf4/+CE lV4I3jQOjez20lDmgCNDdK1itVQmkcI= -----END CERTIFICATE-----Generated at Sun Jul 20 21:15:27 2025 by rpki-client