$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/d639ea58-9baf-3614-8c20-b23d645c70c0.roa File: d639ea58-9baf-3614-8c20-b23d645c70c0.roa (raw, json) Hash identifier: RJanl7Bshio3IOvO4o1gwJuibK5p7uCXKzZ6RznOPLE= Subject key identifier: 5B:F4:89:48:48:59:52:66:04:66:38:ED:22:55:62:70:2B:8A:92:32 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584A1B5FFBFAE16E6DAC49CE2180 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/d639ea58-9baf-3614-8c20-b23d645c70c0.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 396986 IP address blocks: 71.18.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:fb:fa:e1:6e:6d:ac:49:ce:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=97f561f2-b489-479e-8d0f-d426cf22b106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4a:0f:6d:bd:e8:be:8f:07:51:54:a6:1f:70: 19:65:95:1f:05:b7:4a:0c:85:e3:7a:d2:1b:9b:5d: a0:75:3a:7c:c3:72:ff:73:95:4b:30:2d:55:ee:b8: 56:47:a1:e8:16:58:2e:05:9b:a6:30:bd:38:23:c1: fc:c0:fc:f8:ef:7a:b4:e3:d5:ef:ca:43:c9:90:5a: a3:dc:37:69:57:2b:e4:cb:dd:51:ea:57:81:04:fa: ad:b4:c4:07:aa:08:48:1c:4f:29:ae:37:90:c7:80: dc:d4:d6:fa:76:2e:bb:d2:a7:9d:57:bd:83:94:c0: 93:a8:91:84:d9:66:fe:50:5f:9e:a0:f6:b0:e1:37: 04:d3:be:27:c2:49:1b:c1:e9:65:5d:27:02:67:4e: 94:65:04:ab:f3:76:86:7f:d2:b6:1b:f6:35:7b:4d: 3d:ce:00:32:10:2b:a2:92:3b:e4:f9:13:9c:af:da: 24:7f:00:75:86:55:9d:89:58:95:a1:f4:f5:c6:45: d1:70:45:74:ba:0d:fe:71:52:04:35:51:22:c6:55: 9d:bc:c6:00:0a:39:c8:95:53:69:84:06:e3:39:2d: b1:0a:a3:75:5c:39:a5:37:6c:ca:21:77:44:a3:de: ad:ce:01:8c:62:47:0d:06:b8:97:09:54:c6:4b:3b: 88:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F4:89:48:48:59:52:66:04:66:38:ED:22:55:62:70:2B:8A:92:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/d639ea58-9baf-3614-8c20-b23d645c70c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 71.18.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:45:51:4f:64:fd:df:f7:a4:9a:37:fa:32:d4:d8:c1:96:41: e2:1d:8e:85:86:79:41:09:04:1a:ef:52:cb:20:b9:df:cc:5d: cd:e9:61:da:20:53:a5:3e:f7:40:cd:01:35:25:0a:66:fb:a0: 66:79:71:7f:48:89:84:3d:51:19:c5:1a:df:20:a2:7d:af:2c: b5:38:e8:6a:68:b3:88:c2:6e:c3:ac:10:13:8c:93:e9:e7:ec: 9a:2f:e2:3d:87:43:38:83:17:1c:4f:e5:c8:7f:44:85:05:08: 4a:eb:a8:08:9a:00:57:34:59:28:14:02:23:84:eb:22:e3:e6: 7d:5a:b5:85:c8:df:ab:1d:7c:7a:fe:85:0e:19:94:27:af:ba: 91:92:b6:a1:ba:02:6f:b5:3c:d2:d8:99:b0:5e:a0:0e:05:13: a9:7b:3b:16:62:98:c7:b6:a5:67:5b:76:7c:f8:88:bc:9c:2e: a8:f6:84:e1:02:00:1b:bf:b9:8d:1c:ab:59:5a:f5:c9:c4:14: 8b:0b:0d:c1:54:b4:6b:62:33:76:3b:58:f6:bc:91:df:cd:f4: 43:3f:9d:75:d4:1e:28:9e:a5:b1:1a:b5:38:ff:14:7e:eb:ad: a1:0b:67:2d:c2:b7:89:b6:bb:98:2a:b9:0c:27:b8:8c:f1:d5: 09:a2:2b:b5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEobX/v64W5trEnOIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk OTdmNTYxZjItYjQ4OS00NzllLThkMGYtZDQyNmNmMjJiMTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEoPbb3ovo8HUVSmH3AZZZUfBbdKDIXjetIb m12gdTp8w3L/c5VLMC1V7rhWR6HoFlguBZumML04I8H8wPz473q049XvykPJkFqj 3DdpVyvky91R6leBBPqttMQHqghIHE8prjeQx4Dc1Nb6di670qedV72DlMCTqJGE 2Wb+UF+eoPaw4TcE074nwkkbwellXScCZ06UZQSr83aGf9K2G/Y1e009zgAyECui kjvk+ROcr9okfwB1hlWdiViVofT1xkXRcEV0ug3+cVIENVEixlWdvMYACjnIlVNp hAbjOS2xCqN1XDmlN2zKIXdEo96tzgGMYkcNBriXCVTGSzuIpQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFv0iUhIWVJmBGY47SJVYnAripIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvZDYzOWVhNTgtOWJhZi0z NjE0LThjMjAtYjIzZDY0NWM3MGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARxIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAsUVRT2T93/ekmjf6MtTYwZZB4h2OhYZ5QQkEGu9SyyC538xdzelh2iBT pT73QM0BNSUKZvugZnlxf0iJhD1RGcUa3yCifa8stTjoamiziMJuw6wQE4yT6efs mi/iPYdDOIMXHE/lyH9EhQUISuuoCJoAVzRZKBQCI4TrIuPmfVq1hcjfqx18ev6F DhmUJ6+6kZK2oboCb7U80tiZsF6gDgUTqXs7FmKYx7alZ1t2fPiIvJwuqPaE4QIA G7+5jRyrWVr1ycQUiwsNwVS0a2IzdjtY9ryR3830Qz+dddQeKJ6lsRq1OP8Ufuut oQtnLcK3iba7mCq5DCe4jPHVCaIrtQ== -----END CERTIFICATE-----Generated at Sat Jun 7 13:39:47 2025 by rpki-client