$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/91c4af42-8b17-36af-b1a2-fbcdf8ebef91.roa File: 91c4af42-8b17-36af-b1a2-fbcdf8ebef91.roa (raw, json) Hash identifier: SpNQj325jcykrhiV74dY8hkmvDVrtKKlwC/2nrjsbbc= Subject key identifier: BA:F2:88:B2:AF:01:E7:CF:B5:32:FD:47:C2:E8:B4:83:B6:34:ED:77 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A41105789CAACAD0509C4BCC0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/91c4af42-8b17-36af-b1a2-fbcdf8ebef91.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 394333 IP address blocks: 140.174.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:57:89:ca:ac:ad:05:09:c4:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=ce0c7063-f8ec-44f1-98b3-9793096c3235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:d9:ef:ba:14:b2:6d:77:9d:92:82:f6:e8: 3b:7b:d3:3e:ba:48:b1:3c:89:45:9c:d6:17:2e:a0: d7:0c:fd:04:51:26:39:40:09:a5:a5:ab:d5:97:9a: 40:e9:bb:b0:47:0e:e7:7e:01:14:20:e7:71:f9:c7: 52:ea:7f:0d:8d:03:ba:83:fd:b4:63:15:ec:3d:a8: ec:0c:4a:67:c7:bf:ed:80:8c:b3:9d:9e:4f:7f:c9: 49:7f:81:17:b1:bd:ee:a8:8a:24:a0:02:8d:fd:a3: 14:b1:38:2c:44:9f:88:c2:82:04:3b:d3:ef:eb:a9: e1:2d:0a:bc:67:9c:dc:ac:08:8c:90:ed:f6:ea:93: b0:1a:a3:41:7d:45:d5:08:ff:30:77:14:65:b5:ab: 68:f2:b4:a4:d8:9e:06:56:0c:83:4d:29:df:56:d9: 5b:87:c0:1e:72:46:08:10:c1:82:fa:9d:df:d4:83: 5f:21:fc:ad:4c:be:fd:2b:de:25:48:83:6d:72:53: 79:62:59:69:43:cd:f5:84:0f:d6:af:22:fb:8a:4a: c5:e4:fb:26:6c:5c:cf:e0:69:20:e9:2d:6e:4e:8b: c0:2b:0a:9f:49:d9:71:22:9f:fc:10:05:75:dc:d6: d6:21:ba:2a:4f:10:e4:94:15:87:ae:e5:10:0a:69: 02:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F2:88:B2:AF:01:E7:CF:B5:32:FD:47:C2:E8:B4:83:B6:34:ED:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/91c4af42-8b17-36af-b1a2-fbcdf8ebef91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:41:c6:b4:c0:43:68:9e:9e:8c:94:d0:1a:7b:ef:aa:79:ce: c5:17:cd:9f:06:c2:fd:47:fc:ec:ed:55:91:11:25:c4:97:2a: f4:69:ae:17:17:2b:f8:49:4f:20:6e:ee:f4:b2:1a:a2:0d:b8: ee:29:0f:26:42:36:81:6c:7b:a4:3a:55:86:8e:71:dd:9f:24: e6:ee:41:1d:c4:c6:b0:5a:98:c5:3d:86:fd:10:00:e3:29:46: ad:7a:1d:62:25:6a:f0:64:c4:dc:8c:15:8e:a5:bb:90:47:0a: 83:d3:ad:09:65:3e:00:8d:e2:cd:03:b9:a7:b0:6d:60:31:25: 98:f1:67:ed:76:56:e7:05:49:5b:9d:9b:be:5f:5a:6b:2a:0d: c8:b1:3b:4e:5f:77:ab:99:d8:80:36:c7:ae:30:5d:c8:04:42: 56:a4:e3:b4:2a:e3:13:7f:9a:b9:50:78:5b:65:37:25:ff:dd: 50:07:5f:f5:12:21:9b:51:e3:38:3d:fe:16:eb:9f:1f:31:36: 95:d0:4f:99:23:c0:a9:68:60:d0:01:a2:40:54:e9:59:47:78: a7:c5:1e:37:47:9a:f9:6d:bb:da:fc:ca:9f:76:cb:c7:96:fb: 41:c7:26:ce:4f:f5:09:0a:43:fa:49:d6:17:bb:2b:b6:06:73: 61:1c:3c:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFeJyqytBQnEvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk Y2UwYzcwNjMtZjhlYy00NGYxLTk4YjMtOTc5MzA5NmMzMjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlTZ77oUsm13nZKC9ug7e9M+ukixPIlFnNYX LqDXDP0EUSY5QAmlpavVl5pA6buwRw7nfgEUIOdx+cdS6n8NjQO6g/20YxXsPajs DEpnx7/tgIyznZ5Pf8lJf4EXsb3uqIokoAKN/aMUsTgsRJ+IwoIEO9Pv66nhLQq8 Z5zcrAiMkO326pOwGqNBfUXVCP8wdxRltato8rSk2J4GVgyDTSnfVtlbh8AeckYI EMGC+p3f1INfIfytTL79K94lSINtclN5YllpQ831hA/WryL7ikrF5PsmbFzP4Gkg 6S1uTovAKwqfSdlxIp/8EAV13NbWIboqTxDklBWHruUQCmkCHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLryiLKvAefPtTL9R8LotIO2NO13MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTFjNGFmNDItOGIxNy0z NmFmLWIxYTItZmJjZGY4ZWJlZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjK4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1BxrTAQ2ienoyU0Bp776p5zsUXzZ8Gwv1H/OztVZERJcSXKvRprhcX K/hJTyBu7vSyGqINuO4pDyZCNoFse6Q6VYaOcd2fJObuQR3ExrBamMU9hv0QAOMp Rq16HWIlavBkxNyMFY6lu5BHCoPTrQllPgCN4s0DuaewbWAxJZjxZ+12VucFSVud m75fWmsqDcixO05fd6uZ2IA2x64wXcgEQlak47Qq4xN/mrlQeFtlNyX/3VAHX/US IZtR4zg9/hbrnx8xNpXQT5kjwKloYNABokBU6VlHeKfFHjdHmvltu9r8yp92y8eW +0HHJs5P9QkKQ/pJ1he7K7YGc2EcPP8= -----END CERTIFICATE-----Generated at Mon Jun 30 12:46:53 2025 by rpki-client