$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f30a06bf-a0c7-3beb-812a-8449ff6f4db7.roa File: f30a06bf-a0c7-3beb-812a-8449ff6f4db7.roa (raw, json) Hash identifier: XyYmDMTrNxt1M5Q535N+c6ij1hAixHhs0k0bguJBW1E= Subject key identifier: 16:0A:B7:3B:2B:8E:A3:34:64:FD:F5:D4:85:96:F0:DC:6A:CA:5F:85 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584A1B6002F26545705098039100 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f30a06bf-a0c7-3beb-812a-8449ff6f4db7.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 21949 IP address blocks: 142.59.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:02:f2:65:45:70:50:98:03:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=479bab6a-7090-49df-9c3c-8579b8d5a07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:77:47:e0:68:83:57:dc:2d:9f:45:ae:e3:bf: 1b:be:08:9f:f5:3d:36:01:5e:29:32:c3:4f:11:cb: 21:b1:65:34:0b:fe:43:c1:93:ec:3e:c5:d8:94:18: 4c:03:f2:c1:ef:7c:f4:0c:69:ac:d5:70:1e:36:42: 13:c3:92:4d:b6:f8:08:84:e7:e4:e5:90:2e:01:cf: 89:ec:32:02:86:ef:fb:05:70:93:bd:53:8c:ad:e1: cb:6a:68:21:dc:7d:a7:ca:38:bd:9e:9e:87:81:ed: 59:70:9a:8c:c0:a6:ee:f5:d5:7c:6b:3d:46:c0:73: 41:9f:b6:c5:a8:cd:6a:fa:20:af:d9:18:47:ed:13: c7:ab:61:ff:4b:6f:92:e1:81:d5:8a:21:64:37:66: 5d:31:d8:2b:fb:e9:b4:e5:28:cd:ea:2f:08:d9:f7: 44:f1:00:2f:ad:ee:d6:ee:f9:ec:29:0d:10:06:ef: 4b:2e:9a:91:23:88:52:a4:56:22:8d:1f:6b:b4:79: dd:f3:5e:41:f2:fd:2f:27:53:99:34:6d:9f:88:91: a6:39:20:24:e9:69:15:24:b7:de:fb:8a:b0:88:a5: fb:4f:19:0c:f2:df:84:02:12:4b:96:11:e4:ed:47: 24:60:c3:47:7d:04:ef:c8:72:36:ad:78:af:98:ee: 6b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0A:B7:3B:2B:8E:A3:34:64:FD:F5:D4:85:96:F0:DC:6A:CA:5F:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f30a06bf-a0c7-3beb-812a-8449ff6f4db7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 142.59.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ba:13:a3:cc:6a:ff:d1:c3:55:13:6a:1a:46:f6:d0:bc:8a: 83:99:c4:61:e8:5c:e3:46:7a:a2:c2:e1:97:12:53:28:89:0d: a2:29:b2:9f:0e:59:17:ca:a2:72:0c:f9:e4:21:2c:28:b2:61: 1a:f3:2e:6f:bd:89:ce:ee:d6:ef:f1:f5:a6:d7:76:05:34:4e: 3e:24:aa:5c:62:cf:14:51:f2:88:d2:1a:ed:69:27:78:64:95: be:0f:f0:cf:2f:e3:6c:4c:5a:4c:d1:89:ca:46:dd:9c:95:36: da:97:d2:c6:4a:e0:a6:70:6c:29:f2:b2:e8:43:8c:0c:31:d6: 0f:a2:fb:d3:78:91:ef:a4:1f:1e:58:e0:0e:a6:f1:93:d6:b9: 87:16:5f:63:35:70:aa:c1:e5:3a:18:f6:c2:e3:6a:34:f3:3c: 3b:09:5a:fe:e8:ff:0b:5b:73:67:14:a9:71:2e:40:1c:77:af: 49:40:67:a6:4e:d7:60:a8:8a:ee:28:06:de:b8:e9:49:d4:73: 00:6f:1c:b5:11:90:2b:56:d3:0d:d9:37:89:ee:4f:18:ab:16: 07:95:0b:ca:fe:c4:bd:70:4d:20:eb:24:0b:8d:7e:ef:76:2c: f7:e2:04:0a:d3:7f:7c:06:24:8e:fc:35:c5:18:33:2d:3a:59: 1d:56:43:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYALyZUVwUJgDkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk NDc5YmFiNmEtNzA5MC00OWRmLTljM2MtODU3OWI4ZDVhMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnndH4GiDV9wtn0Wu478bvgif9T02AV4pMsNP EcshsWU0C/5DwZPsPsXYlBhMA/LB73z0DGms1XAeNkITw5JNtvgIhOfk5ZAuAc+J 7DIChu/7BXCTvVOMreHLamgh3H2nyji9np6Hge1ZcJqMwKbu9dV8az1GwHNBn7bF qM1q+iCv2RhH7RPHq2H/S2+S4YHViiFkN2ZdMdgr++m05SjN6i8I2fdE8QAvre7W 7vnsKQ0QBu9LLpqRI4hSpFYijR9rtHnd815B8v0vJ1OZNG2fiJGmOSAk6WkVJLfe +4qwiKX7TxkM8t+EAhJLlhHk7UckYMNHfQTvyHI2rXivmO5rjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYKtzsrjqM0ZP311IWW8Nxqyl+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZjMwYTA2YmYtYTBjNy0z YmViLTgxMmEtODQ0OWZmNmY0ZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjjugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa6E6PMav/Rw1UTahpG9tC8ioOZxGHoXONGeqLC4ZcSUyiJDaIpsp8O WRfKonIM+eQhLCiyYRrzLm+9ic7u1u/x9abXdgU0Tj4kqlxizxRR8ojSGu1pJ3hk lb4P8M8v42xMWkzRicpG3ZyVNtqX0sZK4KZwbCnysuhDjAwx1g+i+9N4ke+kHx5Y 4A6m8ZPWuYcWX2M1cKrB5ToY9sLjajTzPDsJWv7o/wtbc2cUqXEuQBx3r0lAZ6ZO 12Coiu4oBt646UnUcwBvHLURkCtW0w3ZN4nuTxirFgeVC8r+xL1wTSDrJAuNfu92 LPfiBArTf3wGJI78NcUYMy06WR1WQ0s= -----END CERTIFICATE-----Generated at Mon Jun 30 15:36:16 2025 by rpki-client