$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/e21944ab-ea3d-350f-abf2-e875e5f58e73.roa File: e21944ab-ea3d-350f-abf2-e875e5f58e73.roa (raw, json) Hash identifier: ws/QGMrLhORcHP5dsPeHPpcwZY/vkXTD6JgMKau4yDU= Subject key identifier: 70:E0:18:FF:1C:A9:13:FB:EB:10:73:45:4C:C1:07:7C:0D:86:C0:3E Certificate issuer: /CN=0abec8f8-ce42-427b-82b4-7accd51f9db8 Certificate serial: 010D0C9F4328584A3E45A08BE92BB34CDF24F080 Authority key identifier: B4:A1:3C:AE:F1:27:04:84:03:2E:13:D5:F1:53:6F:37:5E:98:E6:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/e21944ab-ea3d-350f-abf2-e875e5f58e73.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 16509 IP address blocks: 142.202.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/0abec8f8-ce42-427b-82b4-7accd51f9db8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/0abec8f8-ce42-427b-82b4-7accd51f9db8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:a0:8b:e9:2b:b3:4c:df:24:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0abec8f8-ce42-427b-82b4-7accd51f9db8 Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=e3f5c954-0d0a-4877-bb72-c2a38b6fe96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bd:ea:24:97:2e:a5:31:b4:91:dd:a4:7f:04: 99:97:75:3f:71:e4:b4:4f:14:71:65:38:f8:d8:ca: cc:f8:7d:55:d2:0f:ee:d7:3c:42:60:98:fa:c5:3d: 0a:0b:f1:9f:2a:de:ee:7e:11:d9:9a:4d:85:ea:34: ee:5b:75:4c:7a:cf:1c:8d:ae:cf:d8:14:65:ab:87: e7:20:4e:33:7a:14:f5:28:e6:7d:46:3b:c4:2f:9d: 1d:e6:88:dd:62:b5:d1:4a:79:16:7c:aa:3d:8f:2f: 71:95:c1:a7:3e:35:3e:63:99:3b:f8:24:cf:37:cd: 08:8d:fa:9f:d3:b7:6f:bc:76:91:8c:fe:fc:57:51: d4:a9:54:4d:d7:c4:bb:76:d7:9c:0e:7e:eb:4e:09: 11:8e:67:40:93:8f:86:00:0c:77:2a:8b:b4:0b:2e: d6:f2:d5:b8:10:cd:0c:b0:78:b2:a0:76:77:78:03: 70:5a:93:32:85:08:46:01:db:13:1e:65:36:94:8d: 3f:9f:f5:f6:56:c1:ab:ee:03:69:18:05:db:35:67: 94:ac:f2:67:f6:94:43:c3:4a:88:c6:3f:f9:58:1f: ad:ea:99:f4:69:48:9c:5f:9e:d1:57:35:4b:7c:45: 22:4a:80:4d:b0:b6:5d:d1:49:d6:5e:be:32:4e:4b: 70:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E0:18:FF:1C:A9:13:FB:EB:10:73:45:4C:C1:07:7C:0D:86:C0:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/e21944ab-ea3d-350f-abf2-e875e5f58e73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/0abec8f8-ce42-427b-82b4-7accd51f9db8.crl X509v3 Authority Key Identifier: keyid:B4:A1:3C:AE:F1:27:04:84:03:2E:13:D5:F1:53:6F:37:5E:98:E6:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8.cer sbgp-ipAddrBlock: critical IPv4: 142.202.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:9b:56:17:9b:a7:a3:e9:0d:f9:70:db:d8:af:9e:3c:ea:8b: 5a:c2:e9:2b:13:2f:4b:4c:32:02:1c:50:d0:2a:fb:e7:d5:0f: d0:0f:c5:65:a9:74:17:61:b3:27:09:e0:94:67:34:6c:0c:f1: 9c:2d:0f:e3:93:d3:89:39:07:83:09:c6:58:20:15:3f:55:9d: d7:0c:da:cc:43:d1:e8:5e:eb:67:47:34:99:84:e1:d3:8b:72: 68:5a:59:fa:fa:37:06:e5:5a:ba:d9:58:6b:52:84:23:6a:09: 5b:68:e2:94:f4:72:a9:c8:dd:28:2f:a2:1d:9a:73:19:e0:d5: 85:9c:3e:e4:85:2b:06:1c:4c:4e:4c:43:ce:ff:98:7b:99:77: ff:56:36:2c:e8:93:76:1b:f3:33:0e:bc:d1:cd:a5:95:c8:37: bd:3a:15:8d:28:e4:ec:0a:8c:74:99:f2:15:dc:09:64:e8:02: 19:a8:d4:61:b4:dc:f3:0a:ce:83:1f:dd:a5:01:1c:69:73:0b: 71:c2:47:eb:ff:c9:38:ae:63:d6:54:06:d6:a6:be:e0:9b:f3: 12:be:92:44:f2:e1:a7:31:e2:50:41:58:19:64:6b:93:03:96: 23:d5:99:a6:53:5d:63:37:67:5d:ad:69:1e:7f:ec:a3:68:96: fc:44:f6:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RaCL6SuzTN8k8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiZWM4ZjgtY2U0Mi00MjdiLTgyYjQtN2FjY2Q1MWY5 ZGI4MB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk ZTNmNWM5NTQtMGQwYS00ODc3LWJiNzItYzJhMzhiNmZlOTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr3qJJcupTG0kd2kfwSZl3U/ceS0TxRxZTj4 2MrM+H1V0g/u1zxCYJj6xT0KC/GfKt7ufhHZmk2F6jTuW3VMes8cja7P2BRlq4fn IE4zehT1KOZ9RjvEL50d5ojdYrXRSnkWfKo9jy9xlcGnPjU+Y5k7+CTPN80Ijfqf 07dvvHaRjP78V1HUqVRN18S7dtecDn7rTgkRjmdAk4+GAAx3Kou0Cy7W8tW4EM0M sHiyoHZ3eANwWpMyhQhGAdsTHmU2lI0/n/X2VsGr7gNpGAXbNWeUrPJn9pRDw0qI xj/5WB+t6pn0aUicX57RVzVLfEUiSoBNsLZd0UnWXr4yTktw3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDgGP8cqRP76xBzRUzBB3wNhsA+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYWJl YzhmOC1jZTQyLTQyN2ItODJiNC03YWNjZDUxZjlkYjgvZTIxOTQ0YWItZWEzZC0z NTBmLWFiZjItZTg3NWU1ZjU4ZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGFiZWM4ZjgtY2U0Mi00MjdiLTgy YjQtN2FjY2Q1MWY5ZGI4LzBhYmVjOGY4LWNlNDItNDI3Yi04MmI0LTdhY2NkNTFm OWRiOC5jcmwwHwYDVR0jBBgwFoAUtKE8rvEnBIQDLhPV8VNvN16Y5vcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYWJlYzhmOC1jZTQyLTQyN2ItODJiNC03YWNj ZDUxZjlkYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjsoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWbVhebp6PpDflw29ivnjzqi1rC6SsTL0tMMgIcUNAq++fVD9APxWWp dBdhsycJ4JRnNGwM8ZwtD+OT04k5B4MJxlggFT9VndcM2sxD0ehe62dHNJmE4dOL cmhaWfr6NwblWrrZWGtShCNqCVto4pT0cqnI3Sgvoh2acxng1YWcPuSFKwYcTE5M Q87/mHuZd/9WNizok3Yb8zMOvNHNpZXIN706FY0o5OwKjHSZ8hXcCWToAhmo1GG0 3PMKzoMf3aUBHGlzC3HCR+v/yTiuY9ZUBtamvuCb8xK+kkTy4acx4lBBWBlka5MD liPVmaZTXWM3Z12taR5/7KNolvxE9lM= -----END CERTIFICATE-----Generated at Tue Jul 1 13:19:43 2025 by rpki-client