$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ea2de2e4-c8fd-3e47-8a0b-f553e25f3261.roa File: ea2de2e4-c8fd-3e47-8a0b-f553e25f3261.roa (raw, json) Hash identifier: SKVbnOGcuIEdkTANMAOb3M6HA+fWnGjOWH+NOKxpSCI= Subject key identifier: B6:CC:F8:9E:49:78:3F:4C:20:15:55:D9:C7:57:BC:82:11:FD:A6:C7 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76CFF0B72BCA4CC3B136E0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ea2de2e4-c8fd-3e47-8a0b-f553e25f3261.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 206.55.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:cf:f0:b7:2b:ca:4c:c3:b1:36:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=d5e6d828-176c-481c-bfa9-83b1cd40abf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:09:8a:da:49:e1:49:33:b1:ec:56:3d:6f:9a: 2a:ff:30:e4:63:8b:a3:14:49:d8:c5:ee:f7:7b:ef: fd:c9:75:d8:20:f3:fa:43:1e:a2:66:f7:5d:89:91: d1:c6:80:62:87:f5:30:25:6d:ab:2d:02:0d:b4:a5: 2d:52:ca:e1:0f:db:f3:fe:ff:b8:ca:80:55:0b:ca: 30:63:2e:6c:94:f2:ea:79:c5:00:c7:e0:6d:c7:78: 08:21:cf:f8:53:4a:c9:12:a7:7e:66:88:10:78:49: 51:40:31:fd:fa:4b:b2:db:b9:04:ab:8d:01:39:10: 36:c1:67:10:0b:8d:27:35:34:df:6e:7f:2e:61:21: 08:c5:92:d3:27:31:f4:2d:58:28:24:9d:eb:1e:1d: b2:b4:59:31:e5:23:a5:0c:60:5c:bc:ad:50:42:2e: ea:70:a1:5e:57:42:1f:4c:d9:54:7d:00:f4:61:f8: fc:2e:b0:b5:61:e0:a6:df:a5:b7:8e:55:1a:9f:45: 26:32:0e:89:08:1c:bd:d7:ed:2d:96:62:a7:88:f9: 5d:a1:57:2f:a0:df:bf:2b:be:03:ce:07:7d:ac:51: fc:57:c1:20:25:c4:3c:01:35:b2:da:15:2c:a4:32: c2:3e:52:74:cf:ff:4d:26:41:5c:63:16:d5:7c:8c: bd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CC:F8:9E:49:78:3F:4C:20:15:55:D9:C7:57:BC:82:11:FD:A6:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ea2de2e4-c8fd-3e47-8a0b-f553e25f3261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 206.55.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:99:62:07:0c:77:1f:0f:73:f9:4c:b3:2f:0e:38:1e:d0:37: 6b:f6:96:49:b0:23:af:ad:c1:ec:bd:48:7c:16:b6:fd:26:b9: d8:dc:93:f2:14:80:cf:9d:0a:e2:77:b2:87:21:b2:52:db:c9: 4e:ed:8d:bb:ea:ca:a9:f6:6b:8d:0f:ae:a5:03:23:55:1a:78: dc:73:3b:e2:3a:82:fa:f2:f5:52:8d:a6:55:01:5c:fd:ab:f1: 76:32:60:29:e6:31:58:af:0e:43:34:34:94:90:b3:4a:8b:79: 84:d8:ed:b6:c5:61:62:6b:92:1e:44:63:66:5f:de:d8:1d:5a: 32:e4:2d:a6:12:66:fa:09:9c:b7:4c:cc:8d:13:d8:36:99:e8: c7:af:c8:12:8c:12:89:24:87:dc:64:9c:94:6e:d8:c9:4d:76: ac:02:31:96:c2:e8:eb:17:44:51:a5:59:ab:13:81:56:00:5f: 77:31:ac:c8:55:a6:d9:d7:ca:ce:83:ed:1f:5b:d6:79:4d:67: b5:93:45:c3:f1:00:8e:fc:8d:62:29:2a:96:4f:f8:85:92:a5: 05:72:50:ce:0d:9c:90:ec:fe:25:d2:c2:21:8b:9f:16:f6:8b: c1:ed:f7:64:8a:0a:a8:a3:fb:58:bf:55:f3:65:00:fb:c2:0c: 93:30:0e:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLds/wtyvKTMOxNuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZDVlNmQ4MjgtMTc2Yy00ODFjLWJmYTktODNiMWNkNDBhYmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgmK2knhSTOx7FY9b5oq/zDkY4ujFEnYxe73 e+/9yXXYIPP6Qx6iZvddiZHRxoBih/UwJW2rLQINtKUtUsrhD9vz/v+4yoBVC8ow Yy5slPLqecUAx+Btx3gIIc/4U0rJEqd+ZogQeElRQDH9+kuy27kEq40BORA2wWcQ C40nNTTfbn8uYSEIxZLTJzH0LVgoJJ3rHh2ytFkx5SOlDGBcvK1QQi7qcKFeV0If TNlUfQD0Yfj8LrC1YeCm36W3jlUan0UmMg6JCBy91+0tlmKniPldoVcvoN+/K74D zgd9rFH8V8EgJcQ8ATWy2hUspDLCPlJ0z/9NJkFcYxbVfIy94wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbM+J5JeD9MIBVV2cdXvIIR/abHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZWEyZGUyZTQtYzhmZC0z ZTQ3LThhMGItZjU1M2UyNWYzMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzjesMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmZYgcMdx8Pc/lMsy8OOB7QN2v2lkmwI6+twey9SHwWtv0mudjck/IU gM+dCuJ3sochslLbyU7tjbvqyqn2a40PrqUDI1UaeNxzO+I6gvry9VKNplUBXP2r 8XYyYCnmMVivDkM0NJSQs0qLeYTY7bbFYWJrkh5EY2Zf3tgdWjLkLaYSZvoJnLdM zI0T2DaZ6MevyBKMEokkh9xknJRu2MlNdqwCMZbC6OsXRFGlWasTgVYAX3cxrMhV ptnXys6D7R9b1nlNZ7WTRcPxAI78jWIpKpZP+IWSpQVyUM4NnJDs/iXSwiGLnxb2 i8Ht92SKCqij+1i/VfNlAPvCDJMwDtY= -----END CERTIFICATE-----Generated at Sat Sep 6 23:52:02 2025 by rpki-client