$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/c0ac2f53-beae-3b05-97d0-d26974f3905b.roa File: c0ac2f53-beae-3b05-97d0-d26974f3905b.roa (raw, json) Hash identifier: eGCRPzhD3Iv2JovutCjBbmDBpVOXXyH8agnsfiwgg/k= Subject key identifier: 4B:C1:EB:66:34:33:10:49:19:D3:02:A2:60:31:B5:8B:50:5D:97:05 Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Certificate serial: 010D0C9F4328584AB4EB6F02C4FA06C6EA08F2E0 Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/c0ac2f53-beae-3b05-97d0-d26974f3905b.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 16713 IP address blocks: 208.70.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:6f:02:c4:fa:06:c6:ea:08:f2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=8a471039-d0be-4953-be30-32904e7debf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:41:aa:cf:3f:a7:67:99:79:7c:4d:2d:81:06: 23:42:83:0c:59:59:09:9b:a7:ee:ca:60:51:59:37: 2b:a2:46:c1:5e:46:44:dc:d3:6f:56:7f:9b:5b:d2: d1:52:85:6f:ff:b8:89:5d:98:de:03:8d:21:be:8d: ae:9e:71:f5:9e:23:1c:75:8c:f6:ad:71:a5:dc:3d: c3:f5:79:c3:01:91:e3:42:49:e9:1f:41:95:c9:c4: 3f:6e:7e:a0:80:7a:da:97:5c:15:ea:57:72:4d:d6: 91:bc:e0:11:93:54:7f:dc:65:5f:46:fd:6f:c8:22: 52:b1:66:f0:14:7c:ef:6d:44:3c:95:33:d9:42:76: 78:e5:54:6b:36:70:39:81:7f:cf:45:9b:f8:ee:2c: a3:1f:54:8c:e7:bc:d5:60:45:88:73:e7:54:0e:5c: b7:15:68:42:70:82:47:a4:2a:92:0f:c5:96:7b:53: ad:a3:9f:dd:d6:de:31:c9:00:68:56:7e:3b:bb:48: e4:9e:50:23:3d:d1:e1:ed:97:84:a1:89:23:df:1e: dc:1e:c8:64:72:51:95:56:1d:15:13:62:72:08:6c: ee:5f:02:81:69:8e:f2:91:57:cc:6b:40:20:4b:bd: 14:97:a6:d7:69:73:1c:45:e0:20:a4:5e:85:ba:a6: bf:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C1:EB:66:34:33:10:49:19:D3:02:A2:60:31:B5:8B:50:5D:97:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/c0ac2f53-beae-3b05-97d0-d26974f3905b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl X509v3 Authority Key Identifier: keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer sbgp-ipAddrBlock: critical IPv4: 208.70.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:fd:0e:76:8a:4a:53:3b:59:3c:48:80:30:be:87:06:7f:a6: 6b:8d:66:7b:d3:a3:cd:32:1d:4b:e8:d3:9b:7b:06:53:5d:48: 52:ce:4f:2c:f2:4b:3a:b9:4d:94:58:73:3b:37:0d:af:66:4a: 2d:de:e3:ed:ab:32:df:76:48:50:9a:ac:ad:75:c8:86:16:03: 1b:de:f5:97:90:dc:11:95:46:57:14:cd:a7:db:27:d0:f5:40: 50:65:18:9a:1a:59:6e:7b:6d:25:c7:3d:33:35:ec:17:ff:59: 11:f4:d3:9d:8e:98:1c:23:6c:5a:0a:7f:39:bf:0e:db:c4:6b: 7f:c7:c8:f4:61:65:23:7a:33:8f:62:bf:9c:dd:4f:c4:3e:33: 41:00:af:10:c3:16:0a:47:9a:63:c2:32:c6:79:98:58:7c:56: 99:20:45:3d:b1:0d:d8:6b:29:e1:a7:50:7c:91:9c:64:fa:ba: a3:44:d5:08:ca:46:90:00:4f:27:e0:8c:f8:26:90:54:46:0f: ac:6e:97:a9:ed:ae:18:f9:e8:0e:71:a3:2e:7b:01:7f:08:86: 40:de:10:bd:96:01:2b:b5:67:eb:07:2c:36:44:bf:d2:dd:42: 44:b9:5a:93:a6:a2:67:5a:ce:85:71:7d:b8:2d:dc:4b:37:8a: 84:99:49:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0628CxPoGxuoI8uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0M2FkZmQtZjZlNC00NTA0LTg2ZjAtMmVmYWRmOWQ0 ZDIxMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk OGE0NzEwMzktZDBiZS00OTUzLWJlMzAtMzI5MDRlN2RlYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0Gqzz+nZ5l5fE0tgQYjQoMMWVkJm6fuymBR WTcrokbBXkZE3NNvVn+bW9LRUoVv/7iJXZjeA40hvo2unnH1niMcdYz2rXGl3D3D 9XnDAZHjQknpH0GVycQ/bn6ggHral1wV6ldyTdaRvOARk1R/3GVfRv1vyCJSsWbw FHzvbUQ8lTPZQnZ45VRrNnA5gX/PRZv47iyjH1SM57zVYEWIc+dUDly3FWhCcIJH pCqSD8WWe1Oto5/d1t4xyQBoVn47u0jknlAjPdHh7ZeEoYkj3x7cHshkclGVVh0V E2JyCGzuXwKBaY7ykVfMa0AgS70Ul6bXaXMcReAgpF6Fuqa/MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvB62Y0MxBJGdMComAxtYtQXZcFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQz YWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZhZGY5ZDRkMjEvYzBhYzJmNTMtYmVhZS0z YjA1LTk3ZDAtZDI2OTc0ZjM5MDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGQ0M2FkZmQtZjZlNC00NTA0LTg2 ZjAtMmVmYWRmOWQ0ZDIxLzRkNDNhZGZkLWY2ZTQtNDUwNC04NmYwLTJlZmFkZjlk NGQyMS5jcmwwHwYDVR0jBBgwFoAUHLPKVHX2AJyrqb/kFUAJQKHvOZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQzYWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZh ZGY5ZDRkMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH79DnaKSlM7WTxIgDC+hwZ/pmuNZnvTo80yHUvo05t7BlNdSFLOTyzy Szq5TZRYczs3Da9mSi3e4+2rMt92SFCarK11yIYWAxve9ZeQ3BGVRlcUzafbJ9D1 QFBlGJoaWW57bSXHPTM17Bf/WRH0052OmBwjbFoKfzm/DtvEa3/HyPRhZSN6M49i v5zdT8Q+M0EArxDDFgpHmmPCMsZ5mFh8VpkgRT2xDdhrKeGnUHyRnGT6uqNE1QjK RpAATyfgjPgmkFRGD6xul6ntrhj56A5xoy57AX8IhkDeEL2WASu1Z+sHLDZEv9Ld QkS5WpOmomdazoVxfbgt3Es3ioSZSQw= -----END CERTIFICATE-----Generated at Sat Aug 2 13:49:38 2025 by rpki-client