$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ff6d221e-60d5-394e-b217-afb75d9b0d3d.roa File: ff6d221e-60d5-394e-b217-afb75d9b0d3d.roa (raw, json) Hash identifier: L/GvRUw7OJkMLa0GdJjvSCeqS4SAKPQW96DXvV2dfL4= Subject key identifier: A7:A9:36:DF:AC:91:F3:36:89:68:64:6A:2D:F7:33:2F:45:C5:53:D7 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A4F396F24CDB9EE7ACB05E0A0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ff6d221e-60d5-394e-b217-afb75d9b0d3d.roa Signing time: Wed 25 Jun 2025 14:45:21 +0000 ROA not before: Wed 25 Jun 2025 14:45:21 +0000 ROA not after: Tue 23 Sep 2025 14:45:21 +0000 asID: 3949 IP address blocks: 140.174.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:39:6f:24:cd:b9:ee:7a:cb:05:e0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 25 14:45:21 2025 GMT Not After : Sep 23 14:45:21 2025 GMT Subject: CN=9063c7ff-4d81-4763-9d41-e4b82c177cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9b:11:ed:a2:e8:5d:64:a2:59:fa:0e:42:1b: 35:c8:af:db:ed:72:7d:39:e6:ae:42:88:dd:eb:86: 93:be:11:05:52:1b:b2:5a:32:b1:27:1b:6d:90:34: 8e:0c:7b:87:7d:2f:a8:db:7d:8a:da:a9:5d:ad:02: 5d:d1:1a:84:f8:37:99:26:36:a0:4f:99:1e:da:73: b9:1d:17:39:87:59:9b:88:31:e4:ec:29:63:15:74: 9a:85:6f:ba:00:1b:3a:ab:8b:82:ac:c8:6b:b6:c1: 7f:e3:0b:d3:43:c6:f5:3b:8a:1e:7d:65:82:5a:73: 84:f4:34:f8:e3:3f:9b:27:97:7f:d9:30:b4:1d:5a: 1e:79:c3:11:5a:18:dc:95:6e:8f:3e:6a:7c:25:4c: 46:8e:57:53:5d:e9:61:ab:bb:aa:24:9a:8c:68:e1: cb:75:e3:f6:f1:28:fc:0e:f7:b4:b6:53:2c:e2:85: bc:e2:e6:8c:dd:31:a2:6b:7b:c4:2a:79:e0:28:34: 4f:c2:22:de:4c:9b:cc:9b:08:a3:5e:fa:71:84:cc: 7e:05:ad:b0:55:32:8a:88:b4:f1:f4:7b:b7:61:dd: e6:9e:69:89:0d:1b:09:a2:9f:72:64:a6:b6:09:f0: 3f:fb:7f:dd:eb:61:8b:f5:5c:db:5b:94:a2:00:a4: bd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A9:36:DF:AC:91:F3:36:89:68:64:6A:2D:F7:33:2F:45:C5:53:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ff6d221e-60d5-394e-b217-afb75d9b0d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:87:7b:73:14:0b:be:40:40:6a:90:00:ab:df:9e:59:32:12: a2:3e:8a:b3:5e:98:10:b5:cf:8f:90:6a:8c:01:26:2d:cb:42: 65:6e:2c:1f:8a:df:db:4e:d0:06:38:5f:2c:03:e9:e0:51:16: 9e:87:87:00:a4:a4:b7:a3:73:17:dc:16:82:09:e1:c9:89:f4: c2:10:a2:0b:37:1e:22:c6:e3:31:61:9f:55:ef:c0:c4:36:02: 93:b7:b3:6a:e1:1c:88:a3:b8:64:17:b7:60:a4:8c:2c:44:ce: 05:69:24:76:f4:11:6a:ba:60:64:21:a2:38:13:46:99:6e:f2: da:dd:3b:ba:69:b7:49:50:f7:b0:64:2b:18:04:99:68:72:78: 89:7b:a1:0a:57:44:de:a4:bc:01:6d:a9:e9:e5:f9:d1:14:d1: 2e:ff:f6:60:7f:69:fa:d4:b2:18:11:47:21:1e:96:d9:2d:21: 26:bc:d9:c3:73:44:37:93:e1:45:4b:3e:95:5e:60:88:7f:42: 00:ed:25:5a:35:84:8c:6c:cb:f3:41:86:dc:ec:19:5d:94:6e: 4f:97:42:c4:d2:36:04:ea:a9:5c:dd:c9:7d:27:64:82:9d:6f: 4e:e1:19:40:d3:5a:ca:f0:14:38:cd:83:61:77:14:c6:1e:81: 45:a4:ae:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPOW8kzbnuessF4KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYyNTE0NDUyMVoXDTI1MDkyMzE0NDUyMVowLzEtMCsGA1UEAxMk OTA2M2M3ZmYtNGQ4MS00NzYzLTlkNDEtZTRiODJjMTc3Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5sR7aLoXWSiWfoOQhs1yK/b7XJ9OeauQojd 64aTvhEFUhuyWjKxJxttkDSODHuHfS+o232K2qldrQJd0RqE+DeZJjagT5ke2nO5 HRc5h1mbiDHk7CljFXSahW+6ABs6q4uCrMhrtsF/4wvTQ8b1O4oefWWCWnOE9DT4 4z+bJ5d/2TC0HVoeecMRWhjclW6PPmp8JUxGjldTXelhq7uqJJqMaOHLdeP28Sj8 Dve0tlMs4oW84uaM3TGia3vEKnngKDRPwiLeTJvMmwijXvpxhMx+Ba2wVTKKiLTx 9Hu3Yd3mnmmJDRsJop9yZKa2CfA/+3/d62GL9VzbW5SiAKS9PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKepNt+skfM2iWhkai33My9FxVPXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmY2ZDIyMWUtNjBkNS0z OTRlLWIyMTctYWZiNzVkOWIwZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjK5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeHe3MUC75AQGqQAKvfnlkyEqI+irNemBC1z4+QaowBJi3LQmVuLB+K 39tO0AY4XywD6eBRFp6HhwCkpLejcxfcFoIJ4cmJ9MIQogs3HiLG4zFhn1XvwMQ2 ApO3s2rhHIijuGQXt2CkjCxEzgVpJHb0EWq6YGQhojgTRplu8trdO7ppt0lQ97Bk KxgEmWhyeIl7oQpXRN6kvAFtqenl+dEU0S7/9mB/afrUshgRRyEeltktISa82cNz RDeT4UVLPpVeYIh/QgDtJVo1hIxsy/NBhtzsGV2Ubk+XQsTSNgTqqVzdyX0nZIKd b07hGUDTWsrwFDjNg2F3FMYegUWkruI= -----END CERTIFICATE-----Generated at Sun Jun 29 13:23:57 2025 by rpki-client