$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/1bbc7e25-e72b-3efc-9332-cb2ce1d50309.roa File: 1bbc7e25-e72b-3efc-9332-cb2ce1d50309.roa (raw, json) Hash identifier: yKKaPxu2f8S483dm4T+vj/G/y7XObn8zEcGOAwBJYuQ= Subject key identifier: C3:F5:89:18:54:A2:08:3D:99:20:C2:FB:E8:80:0F:25:2C:12:69:67 Certificate issuer: /CN=a3e75940-8ff7-4128-ac13-6fa2836a9b2b Certificate serial: 010D0C9F4328584AD3A0F7DB9EAB008946D3F1A0 Authority key identifier: B6:77:D7:4B:52:36:09:D5:81:C5:95:07:00:B9:B2:2A:CA:27:BA:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/1bbc7e25-e72b-3efc-9332-cb2ce1d50309.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 22773 IP address blocks: 139.64.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f7:db:9e:ab:00:89:46:d3:f1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e75940-8ff7-4128-ac13-6fa2836a9b2b Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=6c851e8a-9439-4386-a7c8-a74e081bac93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:0c:6f:e3:49:ce:d5:5a:c7:ce:4d:d8:53:6b: 41:51:66:4e:bf:15:3f:2b:e0:4e:81:54:e3:df:ae: 5e:09:56:32:c1:57:1c:9a:08:c9:63:23:e9:2d:cc: d2:18:dd:32:5e:35:87:1a:99:c2:12:61:d7:83:58: b8:31:a6:03:84:dd:29:26:4e:fe:9d:bf:c3:c2:14: c0:65:1c:4a:7b:a4:89:07:4c:23:87:c3:42:95:3e: 39:bf:6c:55:c5:c2:26:25:55:2d:8c:02:45:a6:af: e2:2e:d0:4b:58:6f:9e:a7:2b:76:42:23:69:0e:ae: ac:7b:da:a1:c0:43:35:15:81:e0:54:11:97:5d:c4: 71:66:b5:61:16:71:14:bc:c0:ca:0e:e7:3c:92:10: 7e:42:7d:03:26:68:af:90:c4:ec:49:17:85:e1:d4: bd:2d:99:19:de:31:7e:a0:d4:55:6a:e4:4a:0f:78: f8:16:1a:f7:a6:a4:31:07:43:88:8b:5b:ec:32:fc: fd:42:9e:b2:6e:0a:7b:0e:64:bb:a7:be:9f:51:da: 59:14:18:b6:be:bb:0e:bb:ec:07:3a:2a:c6:5a:33: 24:1e:c3:25:46:e5:7e:bf:75:4c:d0:2e:19:f6:38: 8e:1a:d0:85:d6:04:a9:64:83:8b:0e:69:b9:4e:d7: 21:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F5:89:18:54:A2:08:3D:99:20:C2:FB:E8:80:0F:25:2C:12:69:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/1bbc7e25-e72b-3efc-9332-cb2ce1d50309.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.crl X509v3 Authority Key Identifier: keyid:B6:77:D7:4B:52:36:09:D5:81:C5:95:07:00:B9:B2:2A:CA:27:BA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer sbgp-ipAddrBlock: critical IPv4: 139.64.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:df:35:f4:a9:37:17:16:65:18:91:cc:9e:a6:58:1e:25:6f: 11:f8:e6:af:8c:2a:5f:91:67:67:3a:3a:44:ba:51:1c:29:2b: a7:96:16:7e:9f:03:a5:11:5f:d0:50:34:1b:b7:cc:0d:d9:99: 4d:e0:c9:e8:eb:14:f1:9a:9d:2f:84:ce:f2:64:cc:b0:45:02: a3:5b:b0:84:26:4e:3d:36:f8:4f:2a:3f:9a:23:6f:b0:93:7b: 6b:b2:eb:ec:27:19:12:15:16:39:89:4a:b5:c1:df:d2:97:f2: b0:21:dc:f3:f4:dc:60:d4:09:f8:e5:d2:4a:1d:1f:88:e5:14: a5:43:e3:19:75:fe:f3:47:22:f9:69:8a:e6:7d:a4:1f:f4:4a: 22:dd:6b:1f:2e:28:88:f7:8e:34:77:99:e7:5d:a4:c7:86:5e: 47:bd:1e:f6:84:eb:46:fe:c3:20:c7:23:fa:a4:9f:6c:6a:4c: 9f:97:4c:32:da:32:13:1c:24:2b:a5:5a:d4:d8:4d:c2:8d:06: b5:7b:06:44:48:74:1a:e9:11:2e:05:46:58:7d:50:f2:81:03: 68:99:5d:02:c0:1b:56:e5:74:48:68:16:c5:f0:c5:41:c4:61: 2b:85:4c:22:18:60:98:c9:9a:55:94:a4:d3:e6:f4:80:a6:16: c1:f9:32:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPfbnqsAiUbT8aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlNzU5NDAtOGZmNy00MTI4LWFjMTMtNmZhMjgzNmE5 YjJiMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk NmM4NTFlOGEtOTQzOS00Mzg2LWE3YzgtYTc0ZTA4MWJhYzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9wxv40nO1VrHzk3YU2tBUWZOvxU/K+BOgVTj 365eCVYywVccmgjJYyPpLczSGN0yXjWHGpnCEmHXg1i4MaYDhN0pJk7+nb/DwhTA ZRxKe6SJB0wjh8NClT45v2xVxcImJVUtjAJFpq/iLtBLWG+epyt2QiNpDq6se9qh wEM1FYHgVBGXXcRxZrVhFnEUvMDKDuc8khB+Qn0DJmivkMTsSReF4dS9LZkZ3jF+ oNRVauRKD3j4Fhr3pqQxB0OIi1vsMvz9Qp6ybgp7DmS7p76fUdpZFBi2vrsOu+wH OirGWjMkHsMlRuV+v3VM0C4Z9jiOGtCF1gSpZIOLDmm5Ttch1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMP1iRhUogg9mSDC++iADyUsEmlnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hM2U3 NTk0MC04ZmY3LTQxMjgtYWMxMy02ZmEyODM2YTliMmIvMWJiYzdlMjUtZTcyYi0z ZWZjLTkzMzItY2IyY2UxZDUwMzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTNlNzU5NDAtOGZmNy00MTI4LWFj MTMtNmZhMjgzNmE5YjJiL2EzZTc1OTQwLThmZjctNDEyOC1hYzEzLTZmYTI4MzZh OWIyYi5jcmwwHwYDVR0jBBgwFoAUtnfXS1I2CdWBxZUHALmyKsonuvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hM2U3NTk0MC04ZmY3LTQxMjgtYWMxMy02ZmEy ODM2YTliMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi0DEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzfNfSpNxcWZRiRzJ6mWB4lbxH45q+MKl+RZ2c6OkS6URwpK6eWFn6f A6URX9BQNBu3zA3ZmU3gyejrFPGanS+EzvJkzLBFAqNbsIQmTj02+E8qP5ojb7CT e2uy6+wnGRIVFjmJSrXB39KX8rAh3PP03GDUCfjl0kodH4jlFKVD4xl1/vNHIvlp iuZ9pB/0SiLdax8uKIj3jjR3meddpMeGXke9HvaE60b+wyDHI/qkn2xqTJ+XTDLa MhMcJCulWtTYTcKNBrV7BkRIdBrpES4FRlh9UPKBA2iZXQLAG1bldEhoFsXwxUHE YSuFTCIYYJjJmlWUpNPm9ICmFsH5Mos= -----END CERTIFICATE-----Generated at Sat Aug 23 14:31:59 2025 by rpki-client