$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2b26bd9-6712-3f90-9b05-15da7e5df14a.roa File: f2b26bd9-6712-3f90-9b05-15da7e5df14a.roa (raw, json) Hash identifier: Nl5dTb5rkha+a56+y7nEgXx1rPG68neWb3yYtA+TL6Q= Subject key identifier: BE:09:72:BE:D5:D6:49:8B:33:A1:D2:B6:F6:58:FB:F2:58:CA:76:72 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB9DB208EC4A90E5EE4E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2b26bd9-6712-3f90-9b05-15da7e5df14a.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 21508 IP address blocks: 70.89.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:9d:b2:08:ec:4a:90:e5:ee:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=17ee25f1-c46c-4f87-bdef-abec78d8763e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:73:dd:cb:9c:c8:e5:e6:b1:96:8f:3d:6d:92: 2f:f6:d8:af:1c:6f:54:d9:32:c7:f3:6f:27:a2:77: f6:18:d9:fb:32:3c:25:21:46:eb:84:10:4c:00:bb: 22:90:3a:2f:0b:18:f4:eb:6b:81:b2:48:36:75:51: 12:b9:2c:74:81:0a:e7:7b:e9:85:72:83:27:24:5e: c6:f9:be:f8:65:9c:a9:48:92:0f:e2:13:28:7b:09: d3:cd:d5:56:bf:2d:84:29:af:97:81:87:d7:42:49: 9f:e4:a5:0a:5b:8e:a0:d8:cb:d6:e1:93:5c:b8:b3: 07:24:d0:34:4c:ad:31:30:ee:d8:c8:ab:13:b5:e5: c0:1e:31:d1:5c:c7:26:0d:8e:29:41:a9:19:1d:18: 99:17:88:d0:07:9c:d8:fb:68:a3:a8:ad:a5:ef:86: 82:7a:2d:5a:6c:83:57:db:fb:17:2b:43:6c:c6:ce: 12:fe:8c:c7:cc:96:6d:3c:d4:0e:d6:07:20:4f:53: 93:23:c1:18:0f:c3:b5:b9:0f:e9:cb:70:25:46:12: 52:c3:ac:62:04:e5:d4:31:58:cb:ea:3d:04:21:3e: f0:9a:2a:7b:00:43:98:62:8e:72:be:9e:03:77:ba: f4:5c:a8:00:ca:4e:45:78:40:4f:6d:92:87:05:18: 44:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:09:72:BE:D5:D6:49:8B:33:A1:D2:B6:F6:58:FB:F2:58:CA:76:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2b26bd9-6712-3f90-9b05-15da7e5df14a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.89.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e3:60:bc:db:6c:59:09:74:77:01:ad:f0:d0:7d:8f:a1:a9: 58:27:22:79:56:d3:b4:e0:0d:cc:6a:47:a1:86:99:c0:68:aa: 83:37:11:48:0d:49:09:18:64:fd:f6:23:88:06:5d:90:31:f2: 8a:4f:50:b3:72:8a:9e:5b:04:28:42:03:1c:4c:ae:de:3e:a8: da:e7:ab:6f:a4:60:a3:85:ba:75:a8:1e:a3:0b:f9:ea:2d:6b: c7:bb:29:eb:c4:9f:24:23:88:da:1d:fc:33:6a:85:d3:0d:65: a7:4c:5f:93:bf:a5:05:f7:53:37:49:ef:e5:e7:c2:8f:1b:b6: 30:f6:7d:2e:33:f7:65:32:7a:74:89:b5:9f:5f:71:4e:7c:58: ef:01:24:28:fb:be:95:ec:85:03:fc:94:3b:57:e8:7a:57:08: 3b:7d:23:1c:b1:ed:5b:15:b4:82:8c:9b:7d:d4:5f:55:42:c9: 1a:35:5b:60:18:5c:5f:51:35:72:9f:26:da:c2:2a:37:27:45: 1a:4a:72:d9:76:fa:0c:61:17:fa:59:d4:af:fd:3e:57:23:88: 9c:d9:7b:55:10:4b:e2:73:5b:f2:4c:4d:e0:f4:bd:58:c3:ae: f7:8e:54:81:62:74:65:5a:35:17:b5:a2:d7:d7:4b:64:39:8f: 33:2c:1e:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+52yCOxKkOXuTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MTdlZTI1ZjEtYzQ2Yy00Zjg3LWJkZWYtYWJlYzc4ZDg3NjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXPdy5zI5eaxlo89bZIv9tivHG9U2TLH828n onf2GNn7MjwlIUbrhBBMALsikDovCxj062uBskg2dVESuSx0gQrne+mFcoMnJF7G +b74ZZypSJIP4hMoewnTzdVWvy2EKa+XgYfXQkmf5KUKW46g2MvW4ZNcuLMHJNA0 TK0xMO7YyKsTteXAHjHRXMcmDY4pQakZHRiZF4jQB5zY+2ijqK2l74aCei1abINX 2/sXK0Nsxs4S/ozHzJZtPNQO1gcgT1OTI8EYD8O1uQ/py3AlRhJSw6xiBOXUMVjL 6j0EIT7wmip7AEOYYo5yvp4Dd7r0XKgAyk5FeEBPbZKHBRhEswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4Jcr7V1kmLM6HStvZY+/JYynZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjJiMjZiZDktNjcxMi0z ZjkwLTliMDUtMTVkYTdlNWRmMTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRlnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnjYLzbbFkJdHcBrfDQfY+hqVgnInlW07TgDcxqR6GGmcBoqoM3EUgN SQkYZP32I4gGXZAx8opPULNyip5bBChCAxxMrt4+qNrnq2+kYKOFunWoHqML+eot a8e7KevEnyQjiNod/DNqhdMNZadMX5O/pQX3UzdJ7+Xnwo8btjD2fS4z92UyenSJ tZ9fcU58WO8BJCj7vpXshQP8lDtX6HpXCDt9Ixyx7VsVtIKMm33UX1VCyRo1W2AY XF9RNXKfJtrCKjcnRRpKctl2+gxhF/pZ1K/9PlcjiJzZe1UQS+JzW/JMTeD0vVjD rveOVIFidGVaNRe1otfXS2Q5jzMsHrY= -----END CERTIFICATE-----Generated at Sun Jul 20 17:11:18 2025 by rpki-client