$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/bf1bc49a-0d53-3332-893b-589cda28cf4e.roa File: bf1bc49a-0d53-3332-893b-589cda28cf4e.roa (raw, json) Hash identifier: MZtNrmaNFyWIAA7OMhfCViig3ZnxbLVjfB/vn57UHjg= Subject key identifier: D4:2F:A2:9E:36:CC:B2:1B:43:23:35:1A:9B:35:D8:20:08:F2:5B:EB Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584A6C55DD1F839C386573FDC100 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/bf1bc49a-0d53-3332-893b-589cda28cf4e.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 13536 IP address blocks: 68.70.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:dd:1f:83:9c:38:65:73:fd:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=83c25bdb-c3f7-4019-bb6a-24e950ecb8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:85:5d:c5:d4:b7:e4:a0:71:6e:5b:a8:38:f4: 2d:69:90:12:a4:7b:75:54:d0:c8:87:d8:22:6c:11: ce:37:2b:6b:fa:0a:bc:3a:04:22:03:23:38:c4:71: 88:5d:40:44:c4:98:53:7c:fd:9b:43:33:93:0a:dc: 51:df:20:03:1c:f2:15:9d:d9:93:2c:fb:9b:3a:b9: c7:76:5a:e4:09:07:a6:98:57:08:a4:d2:31:76:e8: a3:de:0b:18:66:0a:c8:fc:d9:c7:e1:ff:f6:3e:cd: 42:fe:b1:9b:f1:93:67:25:88:85:bb:92:45:dc:78: 22:69:6f:9a:f9:47:c2:60:6c:ee:94:bc:c9:c2:1f: 4a:84:36:b2:cb:79:2c:86:67:80:5b:0d:31:98:72: 93:6b:29:0c:52:18:f2:ab:37:da:69:a7:5d:db:b1: d2:f7:17:3f:29:ae:86:e6:b9:3d:d3:3f:8d:90:cc: 3b:8a:1a:96:49:b9:87:3b:ac:01:ef:41:48:62:33: e3:14:d5:36:2d:7f:7d:6d:36:c4:27:95:4b:b4:7a: 06:b8:11:98:be:0d:ed:79:54:ca:4a:59:36:b2:31: 74:c7:b5:c8:dd:63:a6:9c:e2:ea:1b:60:b7:8b:50: 4b:60:57:d4:56:9e:ca:68:26:44:c2:7b:f9:8b:9b: 47:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2F:A2:9E:36:CC:B2:1B:43:23:35:1A:9B:35:D8:20:08:F2:5B:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/bf1bc49a-0d53-3332-893b-589cda28cf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 68.70.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:9e:07:a9:ca:87:55:42:05:b4:1c:6a:29:20:df:7b:e4:87: a4:79:d3:5e:2f:48:36:83:79:bb:51:23:7c:e6:c2:a9:ae:66: 4f:35:77:ac:c5:e7:19:9d:d2:0f:06:39:2b:70:7f:07:d5:f3: dc:c1:7e:82:c4:bc:c8:2e:6b:c1:eb:6e:e8:bc:2b:78:4c:b0: d0:dd:fa:5e:8c:47:db:85:78:72:2e:4f:de:b9:a7:15:c3:10: 6e:1b:57:c2:c3:e4:11:b1:f0:82:f3:3d:35:6f:c6:5f:51:06: ea:b4:3c:64:b4:3a:77:28:1e:1a:06:0b:b5:9d:74:dc:ec:6e: ac:43:22:1d:38:ff:d9:6d:f0:4d:4d:61:76:db:44:e6:c9:65: 71:8b:d9:e6:97:83:23:ac:e9:ec:8c:c8:d3:60:35:6c:1b:5b: f8:b7:4d:f4:a4:47:13:93:a5:0e:91:e6:eb:ad:6b:51:ba:ab: 58:2d:bb:56:8a:61:7c:c8:c2:3f:92:b5:20:ba:57:12:1c:bb: 71:8f:44:1b:7a:db:de:af:b8:0e:cb:2c:1d:71:97:e3:af:77: c0:6f:0b:25:29:ba:21:c9:30:ed:9d:c1:45:3c:b8:61:5c:f2: 19:dc:21:06:90:a9:c0:23:a1:79:72:84:d8:03:e3:ce:fd:23: a6:0f:6c:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVd0fg5w4ZXP9wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk ODNjMjViZGItYzNmNy00MDE5LWJiNmEtMjRlOTUwZWNiOGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoVdxdS35KBxbluoOPQtaZASpHt1VNDIh9gi bBHONytr+gq8OgQiAyM4xHGIXUBExJhTfP2bQzOTCtxR3yADHPIVndmTLPubOrnH dlrkCQemmFcIpNIxduij3gsYZgrI/NnH4f/2Ps1C/rGb8ZNnJYiFu5JF3HgiaW+a +UfCYGzulLzJwh9KhDayy3kshmeAWw0xmHKTaykMUhjyqzfaaadd27HS9xc/Ka6G 5rk90z+NkMw7ihqWSbmHO6wB70FIYjPjFNU2LX99bTbEJ5VLtHoGuBGYvg3teVTK Slk2sjF0x7XI3WOmnOLqG2C3i1BLYFfUVp7KaCZEwnv5i5tHawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQvop42zLIbQyM1Gps12CAI8lvrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvYmYxYmM0OWEtMGQ1My0z MzMyLTg5M2ItNTg5Y2RhMjhjZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKeB6nKh1VCBbQcaikg33vkh6R5014vSDaDebtRI3zmwqmuZk81d6zF 5xmd0g8GOStwfwfV89zBfoLEvMgua8Hrbui8K3hMsNDd+l6MR9uFeHIuT965pxXD EG4bV8LD5BGx8ILzPTVvxl9RBuq0PGS0OncoHhoGC7WddNzsbqxDIh04/9lt8E1N YXbbRObJZXGL2eaXgyOs6eyMyNNgNWwbW/i3TfSkRxOTpQ6R5uuta1G6q1gtu1aK YXzIwj+StSC6VxIcu3GPRBt6296vuA7LLB1xl+Ovd8BvCyUpuiHJMO2dwUU8uGFc 8hncIQaQqcAjoXlyhNgD4879I6YPbIc= -----END CERTIFICATE-----Generated at Wed Jul 9 16:39:18 2025 by rpki-client