$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/70cfbeaa-2556-34d4-9e62-5c84f81d2077.roa File: 70cfbeaa-2556-34d4-9e62-5c84f81d2077.roa (raw, json) Hash identifier: YCGJY3ziYwhxxWszEV1HdGeghBmvzCB9FJjQcZzuw5A= Subject key identifier: 20:6A:6F:E2:FA:C2:74:A2:E3:6F:79:D7:45:6E:DC:A1:B5:A2:80:7D Certificate issuer: /CN=e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c Certificate serial: 010D0C9F4328584A82AB4B91CFCD7B0BFB1847C0 Authority key identifier: 8E:35:F3:58:9D:35:14:02:BD:CB:48:EB:63:39:B8:8F:F5:C2:67:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/70cfbeaa-2556-34d4-9e62-5c84f81d2077.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 401427 IP address blocks: 216.152.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:4b:91:cf:cd:7b:0b:fb:18:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=4b24756a-707f-4afb-8ae1-0421abf4e7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:07:50:2e:de:0d:21:87:d3:ba:3f:7f:1d:10: 7e:e3:80:58:e4:ae:ce:8d:a3:53:5b:60:c2:ed:26: ba:3f:38:01:29:c9:f6:3e:99:e0:f9:93:d6:7f:87: 58:59:9a:b3:ee:ba:05:9c:34:17:27:22:c6:28:df: 1a:33:ff:c8:3a:58:60:68:43:fa:b7:e9:b5:3d:14: b3:26:1d:4f:03:c1:d2:e9:6b:97:13:50:ef:6d:2f: c0:47:e9:3b:46:0e:8e:5c:8d:75:4a:59:06:f4:11: e2:62:de:20:01:33:8c:d0:c9:bd:8f:b9:8f:5a:65: de:49:28:cc:f3:f9:58:dd:3c:cb:6a:93:ab:a3:f6: be:45:f3:7e:b9:c4:03:51:1d:c8:99:50:fb:37:df: 35:48:ea:63:88:11:b0:4c:0f:df:c4:90:9d:c5:99: 31:65:ea:e5:4c:75:2a:1e:85:c4:ee:b4:d6:f9:5d: 8b:c3:34:4a:fe:bc:0c:56:19:cd:04:5f:a7:b3:d0: 11:f3:d5:83:bc:0d:01:27:1c:76:12:0c:72:0e:ea: ae:bd:ab:0a:a5:5d:34:ac:1e:03:06:29:85:12:68: 1a:94:80:cf:91:b5:ad:46:5d:8a:11:1e:e2:89:72: a8:43:d0:c6:50:f5:58:ba:61:a8:72:dd:6a:2d:8d: 3c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6A:6F:E2:FA:C2:74:A2:E3:6F:79:D7:45:6E:DC:A1:B5:A2:80:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/70cfbeaa-2556-34d4-9e62-5c84f81d2077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.crl X509v3 Authority Key Identifier: keyid:8E:35:F3:58:9D:35:14:02:BD:CB:48:EB:63:39:B8:8F:F5:C2:67:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer sbgp-ipAddrBlock: critical IPv4: 216.152.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:19:f5:a6:6a:49:c5:3d:bc:39:6c:35:69:39:7e:8f:11:e6: d4:f4:63:5c:32:95:6b:9e:11:53:d8:85:ad:10:3f:58:87:4a: e3:f2:73:1d:3d:9c:33:8b:91:47:36:65:47:6e:66:39:c8:6d: 0d:c0:3c:12:93:fc:56:1c:25:fc:33:6b:c7:1a:de:7b:f6:a0: d8:42:81:fa:33:67:ce:48:fe:8f:bb:e8:e7:10:27:59:34:7d: 1a:dc:f8:5f:12:b3:e9:43:1b:58:f8:d1:d7:97:e6:40:22:fe: 5f:1d:c6:7f:f0:e1:dc:4e:0a:22:3c:8a:70:ad:68:67:82:d2: e5:88:07:5f:e0:94:c5:11:2d:aa:26:fe:e5:15:5a:61:e7:6d: 56:1a:7b:53:04:5e:43:4f:63:83:21:05:8d:d2:aa:83:7a:43: 5d:80:74:20:fa:7b:53:ad:83:a5:2c:d5:90:71:59:05:d8:cf: 7d:01:a2:5f:07:4c:a8:42:5b:5b:2f:4a:65:b5:cf:35:82:cf: f0:79:bb:be:89:83:73:7f:4c:8c:6a:4d:3e:d7:4c:2e:50:33: 26:d0:6f:07:53:37:76:fb:d7:d0:35:ef:1d:bf:48:72:d1:60: 40:85:38:cb:88:cd:ad:6a:05:3f:17:dc:63:8b:09:c8:4a:0a: dc:d8:33:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0uRz817C/sYR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNlNWY4ZjgtN2Q2Zi00ZDQzLWExY2EtNDc3ZWM5MGE1 YTNjMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk NGIyNDc1NmEtNzA3Zi00YWZiLThhZTEtMDQyMWFiZjRlN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQdQLt4NIYfTuj9/HRB+44BY5K7OjaNTW2DC 7Sa6PzgBKcn2Ppng+ZPWf4dYWZqz7roFnDQXJyLGKN8aM//IOlhgaEP6t+m1PRSz Jh1PA8HS6WuXE1DvbS/AR+k7Rg6OXI11SlkG9BHiYt4gATOM0Mm9j7mPWmXeSSjM 8/lY3TzLapOro/a+RfN+ucQDUR3ImVD7N981SOpjiBGwTA/fxJCdxZkxZerlTHUq HoXE7rTW+V2LwzRK/rwMVhnNBF+ns9AR89WDvA0BJxx2EgxyDuquvasKpV00rB4D BimFEmgalIDPkbWtRl2KER7iiXKoQ9DGUPVYumGoct1qLY08mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBqb+L6wnSi429510Vu3KG1ooB9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lM2U1 ZjhmOC03ZDZmLTRkNDMtYTFjYS00NzdlYzkwYTVhM2MvNzBjZmJlYWEtMjU1Ni0z NGQ0LTllNjItNWM4NGY4MWQyMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTNlNWY4ZjgtN2Q2Zi00ZDQzLWEx Y2EtNDc3ZWM5MGE1YTNjL2UzZTVmOGY4LTdkNmYtNGQ0My1hMWNhLTQ3N2VjOTBh NWEzYy5jcmwwHwYDVR0jBBgwFoAUjjXzWJ01FAK9y0jrYzm4j/XCZ8swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lM2U1ZjhmOC03ZDZmLTRkNDMtYTFjYS00Nzdl YzkwYTVhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JhyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoZ9aZqScU9vDlsNWk5fo8R5tT0Y1wylWueEVPYha0QP1iHSuPycx09 nDOLkUc2ZUduZjnIbQ3APBKT/FYcJfwza8ca3nv2oNhCgfozZ85I/o+76OcQJ1k0 fRrc+F8Ss+lDG1j40deX5kAi/l8dxn/w4dxOCiI8inCtaGeC0uWIB1/glMURLaom /uUVWmHnbVYae1MEXkNPY4MhBY3SqoN6Q12AdCD6e1Otg6Us1ZBxWQXYz30Bol8H TKhCW1svSmW1zzWCz/B5u76Jg3N/TIxqTT7XTC5QMybQbwdTN3b719A17x2/SHLR YECFOMuIza1qBT8X3GOLCchKCtzYM0s= -----END CERTIFICATE-----Generated at Sun Jul 20 21:44:01 2025 by rpki-client