$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa File: aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa (raw, json) Hash identifier: sOEHNzkqZuGW16JfAZLHN5dkiCuEYNiWm3Q3gCoZabw= Subject key identifier: DD:00:68:AC:0A:60:8B:2A:28:32:C3:0A:8B:40:47:62:D0:34:FC:AA Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584A698B1FB81ABC71D81B010100 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 11260 IP address blocks: 71.7.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:1f:b8:1a:bc:71:d8:1b:01:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=c678e20e-a066-4e29-bb74-0dd854329ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7b:a1:c5:6d:41:b7:2d:a0:2b:c0:cf:b1:c5: ab:3f:6a:c1:47:15:7a:d3:f0:81:e3:0f:4b:58:e8: 35:2e:d0:47:07:78:1a:21:f6:47:47:8a:7f:21:43: cd:c7:74:0e:ff:0b:47:b9:5f:7e:e2:07:d0:ca:de: bb:f7:60:d8:e1:f5:74:84:70:7e:f2:87:12:eb:ea: 26:ef:97:99:31:66:57:cd:29:e7:e2:e0:bd:d9:33: 81:ca:62:a9:3a:50:8a:21:41:06:01:01:cd:80:65: 69:c8:be:38:6f:e1:43:a4:5b:13:57:36:74:7f:48: 76:40:4a:2b:21:bf:37:43:c3:3b:2d:0d:54:77:84: 96:b4:02:8e:3a:6b:05:b2:d8:51:9e:d5:0e:69:54: 7d:56:b0:0f:d6:7b:a3:54:37:03:36:fe:7c:99:10: 1b:e4:0f:a1:32:f6:09:4e:c0:b3:03:6c:af:65:d1: 16:c6:58:e4:90:84:5e:91:3a:c5:0d:c6:02:7f:e0: 49:23:12:45:7f:d7:81:f9:47:3e:37:b2:60:bd:9d: a7:28:0d:d5:d2:7c:24:86:33:28:5b:dc:34:1e:49: 52:65:39:62:ce:07:71:1c:1e:ac:8a:2f:8a:3f:99: d2:a5:4b:68:a4:69:ef:ac:d0:1a:99:3c:b9:2c:1f: 59:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:00:68:AC:0A:60:8B:2A:28:32:C3:0A:8B:40:47:62:D0:34:FC:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 71.7.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:46:76:22:2a:0c:8a:39:44:ef:00:a4:73:0d:58:7a:a8:19: 55:ab:19:9a:97:45:2d:04:db:a0:51:a5:d2:ed:90:d0:37:20: a3:9c:80:02:50:c2:d0:7e:f7:b9:ce:10:d9:f2:b3:84:21:17: f6:dc:27:9e:7b:f7:05:5b:94:9d:e3:8e:64:b4:fe:67:6d:e0: 0b:2c:a2:f0:6b:f3:6f:dd:6d:ab:25:28:1a:2a:04:b1:17:1d: 37:38:0f:9f:94:61:4d:ab:eb:81:69:7a:4c:0c:64:ed:b5:ee: cf:56:e9:03:f8:77:ca:c9:ae:93:9c:02:02:42:95:4b:e2:b6: 07:de:ef:c7:44:f8:de:23:06:0f:8b:6d:55:cc:4b:42:ae:77: 21:47:81:cd:66:88:26:4e:6a:bb:f0:0a:1e:fd:f7:28:ff:1d: 86:6d:4c:e5:74:24:26:37:2e:f3:7e:ac:92:57:16:08:bd:59: 20:fe:ee:fe:24:6a:32:71:eb:a9:d8:a5:dd:90:71:49:85:cd: 7c:ce:9a:78:95:04:6b:84:36:6b:3e:34:71:ae:9f:60:00:d1: ef:39:8c:f5:c1:96:e2:ab:d0:1d:cf:63:47:73:43:af:73:99: 96:6d:a5:4c:d5:f4:3d:af:02:b9:24:e7:74:5c:bb:73:35:5d: cf:9e:ea:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppix+4Grxx2BsBAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk YzY3OGUyMGUtYTA2Ni00ZTI5LWJiNzQtMGRkODU0MzI5ZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXuhxW1Bty2gK8DPscWrP2rBRxV60/CB4w9L WOg1LtBHB3gaIfZHR4p/IUPNx3QO/wtHuV9+4gfQyt6792DY4fV0hHB+8ocS6+om 75eZMWZXzSnn4uC92TOBymKpOlCKIUEGAQHNgGVpyL44b+FDpFsTVzZ0f0h2QEor Ib83Q8M7LQ1Ud4SWtAKOOmsFsthRntUOaVR9VrAP1nujVDcDNv58mRAb5A+hMvYJ TsCzA2yvZdEWxljkkIRekTrFDcYCf+BJIxJFf9eB+Uc+N7JgvZ2nKA3V0nwkhjMo W9w0HklSZTlizgdxHB6sii+KP5nSpUtopGnvrNAamTy5LB9ZvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0AaKwKYIsqKDLDCotAR2LQNPyqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvYWE0MGYxZmItOGI4Yi0z NmFhLTg1YzQtNTQxN2VmZmRhYmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRwfUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdGdiIqDIo5RO8ApHMNWHqoGVWrGZqXRS0E26BRpdLtkNA3IKOcgAJQ wtB+97nOENnys4QhF/bcJ5579wVblJ3jjmS0/mdt4AssovBr82/dbaslKBoqBLEX HTc4D5+UYU2r64FpekwMZO217s9W6QP4d8rJrpOcAgJClUvitgfe78dE+N4jBg+L bVXMS0KudyFHgc1miCZOarvwCh799yj/HYZtTOV0JCY3LvN+rJJXFgi9WSD+7v4k ajJx66nYpd2QcUmFzXzOmniVBGuENms+NHGun2AA0e85jPXBluKr0B3PY0dzQ69z mZZtpUzV9D2vArkk53Rcu3M1Xc+e6ns= -----END CERTIFICATE-----Generated at Wed Jul 9 11:45:34 2025 by rpki-client