$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a09f29d9-8f3a-3838-8ace-3ee93d7eb3a1.roa File: a09f29d9-8f3a-3838-8ace-3ee93d7eb3a1.roa (raw, json) Hash identifier: GnUl3k341eLhP7U79SY2kP2J8IXPD81HdXPAUCQanSU= Subject key identifier: F8:FD:33:68:6E:1B:C6:06:DD:F0:2B:33:7A:4E:12:2B:29:D3:14:AF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F2E55088E6641E1886EA9B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a09f29d9-8f3a-3838-8ace-3ee93d7eb3a1.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 7342 IP address blocks: 216.87.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:50:88:e6:64:1e:18:86:ea:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=f9f30e64-87d8-42f2-908d-b42e5cd2708d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4c:b8:45:ea:c9:3b:6b:25:70:44:67:51:58: 8a:ce:fe:f7:09:b8:b3:df:b8:f2:49:b9:e5:f7:4e: d8:25:68:39:b5:47:43:af:fb:75:ca:6c:f8:8f:26: 9e:0e:1b:47:fc:a7:44:d5:b3:d7:7b:35:35:31:1e: 02:3d:07:21:c1:f0:db:76:94:a6:cc:49:23:4d:83: c1:95:ed:c1:a3:f5:ce:6c:a7:f0:55:0c:df:55:be: ca:52:91:7d:7f:0e:65:9b:0f:ef:e2:4e:80:0f:00: 09:4a:22:e2:8e:39:b2:2d:0a:ca:50:c2:2c:fc:33: e5:34:d8:1b:5c:5a:cf:ad:af:32:35:06:80:b4:23: 3a:7c:67:4c:45:4e:53:bf:98:60:8f:f6:7c:2f:c1: 39:a6:bd:fe:9c:cf:a3:a7:ac:78:e0:64:05:25:3a: 21:99:af:f7:22:24:64:02:dd:a7:02:23:9e:99:1b: 66:2d:bf:d3:b4:85:21:6d:55:e7:29:f6:4f:2f:80: 5c:c5:22:ba:09:fd:88:9e:a8:dd:6d:7d:5a:0f:b7: 9f:ea:a7:b3:c7:29:03:df:ca:d7:ed:75:97:d4:ba: 22:63:6a:45:cb:bf:26:1e:1a:d4:00:93:ae:eb:50: 63:8a:88:dd:ed:dd:22:0e:6e:38:ee:c1:2e:57:55: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FD:33:68:6E:1B:C6:06:DD:F0:2B:33:7A:4E:12:2B:29:D3:14:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a09f29d9-8f3a-3838-8ace-3ee93d7eb3a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:25:a5:2e:a2:35:75:16:3f:ae:6f:c9:1a:35:db:1a:76:7e: 8f:8a:1a:76:98:c8:9f:37:45:c7:e2:37:90:1b:c4:67:70:cd: 64:5d:95:23:fa:d3:cd:2c:fb:66:f3:29:ae:20:d6:39:6f:42: bd:10:e9:87:1e:2f:b8:5e:4e:f9:a9:b5:05:8d:f2:67:81:9f: 69:de:99:cb:38:01:c0:69:55:87:0a:66:a7:cf:a3:c0:90:0f: 6b:13:c8:44:89:66:ed:dd:60:75:f0:ec:ec:59:22:39:8e:49: c5:d2:4f:0b:f7:a1:5a:cb:05:43:d2:62:b7:60:dc:03:90:4b: a8:eb:c4:b6:07:5d:d9:93:a2:59:a0:87:17:69:54:d8:8b:cf: 0c:56:26:79:58:9b:80:84:06:71:32:14:e6:c9:c7:39:ea:3a: 8a:a2:ba:14:1a:8e:5b:49:30:91:e8:a5:d5:4c:0e:dd:ee:93: 88:38:b5:d9:c0:4a:7c:74:02:25:ff:dc:0f:24:02:b1:35:4b: ae:ad:6d:7a:85:7b:40:53:d1:57:91:09:2e:46:d9:b4:8b:1c: d9:51:50:9e:ad:71:bd:95:57:82:88:b4:bf:5a:32:e5:1b:df: 9c:46:52:f5:3a:71:bb:09:79:71:eb:3e:71:7f:a9:03:d8:0c: 24:d9:5b:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5VCI5mQeGIbqmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZjlmMzBlNjQtODdkOC00MmYyLTkwOGQtYjQyZTVjZDI3MDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiky4RerJO2slcERnUViKzv73Cbiz37jySbnl 907YJWg5tUdDr/t1ymz4jyaeDhtH/KdE1bPXezU1MR4CPQchwfDbdpSmzEkjTYPB le3Bo/XObKfwVQzfVb7KUpF9fw5lmw/v4k6ADwAJSiLijjmyLQrKUMIs/DPlNNgb XFrPra8yNQaAtCM6fGdMRU5Tv5hgj/Z8L8E5pr3+nM+jp6x44GQFJTohma/3IiRk At2nAiOemRtmLb/TtIUhbVXnKfZPL4BcxSK6Cf2InqjdbX1aD7ef6qezxykD38rX 7XWX1LoiY2pFy78mHhrUAJOu61Bjiojd7d0iDm447sEuV1W0RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPj9M2huG8YG3fArM3pOEisp0xSvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTA5ZjI5ZDktOGYzYS0z ODM4LThhY2UtM2VlOTNkN2ViM2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMlpS6iNXUWP65vyRo12xp2fo+KGnaYyJ83RcfiN5AbxGdwzWRdlSP6 080s+2bzKa4g1jlvQr0Q6YceL7heTvmptQWN8meBn2nemcs4AcBpVYcKZqfPo8CQ D2sTyESJZu3dYHXw7OxZIjmOScXSTwv3oVrLBUPSYrdg3AOQS6jrxLYHXdmTolmg hxdpVNiLzwxWJnlYm4CEBnEyFObJxznqOoqiuhQajltJMJHopdVMDt3uk4g4tdnA Snx0AiX/3A8kArE1S66tbXqFe0BT0VeRCS5G2bSLHNlRUJ6tcb2VV4KItL9aMuUb 35xGUvU6cbsJeXHrPnF/qQPYDCTZWyc= -----END CERTIFICATE-----Generated at Mon Jun 30 05:27:45 2025 by rpki-client