$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/fd1ed52a-b712-37ae-9e08-625a0869dd53.roa File: fd1ed52a-b712-37ae-9e08-625a0869dd53.roa (raw, json) Hash identifier: ppwVJo0Sai/10q6mp+ULUrkLB6Al0nbi3GtvuE5Lax0= Subject key identifier: 72:EE:35:8B:77:DF:E6:B6:1E:FB:C5:A4:43:3A:49:FE:6E:91:20:D5 Certificate issuer: /CN=4a55c0a6-eaa8-4039-be15-220f288acd5a Certificate serial: 010D0C9F4328584A46A5B10E3C1F3E5A89F2E6F0 Authority key identifier: 46:2A:E0:63:81:62:E2:AA:74:7C:20:E2:C9:6A:14:60:99:22:35:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/fd1ed52a-b712-37ae-9e08-625a0869dd53.roa Signing time: Sun 22 Jun 2025 13:01:03 +0000 ROA not before: Sun 22 Jun 2025 13:01:03 +0000 ROA not after: Sat 20 Sep 2025 13:01:03 +0000 asID: 63129 IP address blocks: 140.235.164.0/22 maxlen: 24 2602:f7d5::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:a5:b1:0e:3c:1f:3e:5a:89:f2:e6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a55c0a6-eaa8-4039-be15-220f288acd5a Validity Not Before: Jun 22 13:01:03 2025 GMT Not After : Sep 20 13:01:03 2025 GMT Subject: CN=31e8644d-0b9b-4dea-880a-b76efa5a2795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a9:5b:1b:c9:9f:32:58:a8:fc:7d:8d:1a:6f: ca:d5:36:2a:ac:a3:39:d6:ec:7e:50:30:14:6c:51: c2:79:44:d8:ae:ee:1d:41:4f:13:42:8c:a2:00:2b: bc:70:47:f0:11:9e:4b:60:4b:17:f8:a7:dd:90:f0: 6b:44:f0:e4:b1:d3:b8:ff:d5:4a:03:d4:33:d7:6a: c0:ca:39:cd:4f:f7:ec:ba:29:ad:5d:20:9c:81:aa: 7f:da:a7:de:e7:87:17:56:e4:4d:1d:e5:ab:1e:2d: 91:58:da:dc:0f:b0:d5:9a:ee:3a:c3:ca:d3:68:74: 98:e0:7e:62:fa:34:9f:91:bb:a6:85:d6:11:db:54: 2a:1a:f4:2b:71:b1:8c:29:16:84:6b:1b:28:71:87: 32:a6:38:0d:42:5d:41:d5:96:cc:7c:39:b7:50:25: 26:3c:01:83:44:a9:f3:fb:e9:c8:d3:3c:67:48:72: 08:9c:1f:45:f3:b4:d0:95:4d:ad:e5:dc:27:f4:95: 15:8e:14:61:27:be:da:ce:4d:e0:95:ac:61:fd:01: c4:76:15:ce:2a:40:44:9c:67:e5:d8:db:54:a1:e9: 16:66:25:aa:3f:79:c8:bd:53:6e:db:68:07:4f:af: c9:56:b9:2d:84:24:94:a8:c5:f4:43:f9:d6:f4:d6: 61:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EE:35:8B:77:DF:E6:B6:1E:FB:C5:A4:43:3A:49:FE:6E:91:20:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/fd1ed52a-b712-37ae-9e08-625a0869dd53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.crl X509v3 Authority Key Identifier: keyid:46:2A:E0:63:81:62:E2:AA:74:7C:20:E2:C9:6A:14:60:99:22:35:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a.cer sbgp-ipAddrBlock: critical IPv4: 140.235.164.0/22 IPv6: 2602:f7d5::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:71:90:94:31:60:86:60:e0:c6:9d:79:4e:72:f9:c2:b6:09: 89:54:4c:f5:be:00:e6:4d:a7:1c:af:d6:ae:69:4a:9a:46:28: f2:97:a4:93:f2:a0:16:62:1d:e3:81:3b:ad:75:20:94:12:b7: 74:46:e3:e9:e3:f4:c5:7f:8d:98:fe:73:ca:5b:03:cf:e0:e9: 85:59:dc:8c:7d:82:d3:e9:21:8c:ec:7f:51:6a:2c:e9:53:80: db:8f:8e:df:94:e3:06:1a:ee:df:0c:2c:f8:05:b5:92:29:51: d2:4e:68:bd:ba:59:ea:01:96:e0:f8:04:05:ea:60:74:a7:9a: f1:94:63:0e:09:18:f1:04:70:dd:e7:fa:d3:02:12:3b:ad:c7: db:b4:5c:16:b2:c9:3c:52:04:9a:31:41:38:dd:2c:b0:da:b2: 05:ca:c8:7e:46:8f:f3:13:4a:f5:b6:42:35:2e:9c:79:32:cb: 83:7b:cf:28:fc:79:38:7e:d0:25:e4:1b:ba:85:a1:a6:e2:dd: c2:9d:7d:df:65:c6:99:05:c8:25:f5:d3:a3:5b:84:72:68:3d: b1:44:26:eb:d0:d0:82:cc:6f:d4:df:ec:01:73:e1:8f:9d:ae: 12:63:e8:96:54:ae:4c:a1:a8:a1:dd:65:0e:53:79:86:34:65: 9a:6c:81:f7 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpGpbEOPB8+Wony5vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE1NWMwYTYtZWFhOC00MDM5LWJlMTUtMjIwZjI4OGFj ZDVhMB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk MzFlODY0NGQtMGI5Yi00ZGVhLTg4MGEtYjc2ZWZhNWEyNzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6lbG8mfMlio/H2NGm/K1TYqrKM51ux+UDAU bFHCeUTYru4dQU8TQoyiACu8cEfwEZ5LYEsX+KfdkPBrRPDksdO4/9VKA9Qz12rA yjnNT/fsuimtXSCcgap/2qfe54cXVuRNHeWrHi2RWNrcD7DVmu46w8rTaHSY4H5i +jSfkbumhdYR21QqGvQrcbGMKRaEaxsocYcypjgNQl1B1ZbMfDm3UCUmPAGDRKnz ++nI0zxnSHIInB9F87TQlU2t5dwn9JUVjhRhJ77azk3glaxh/QHEdhXOKkBEnGfl 2NtUoekWZiWqP3nIvVNu22gHT6/JVrkthCSUqMX0Q/nW9NZh6QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHLuNYt33+a2HvvFpEM6Sf5ukSDVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YTU1 YzBhNi1lYWE4LTQwMzktYmUxNS0yMjBmMjg4YWNkNWEvZmQxZWQ1MmEtYjcxMi0z N2FlLTllMDgtNjI1YTA4NjlkZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGE1NWMwYTYtZWFhOC00MDM5LWJl MTUtMjIwZjI4OGFjZDVhLzRhNTVjMGE2LWVhYTgtNDAzOS1iZTE1LTIyMGYyODhh Y2Q1YS5jcmwwHwYDVR0jBBgwFoAURirgY4Fi4qp0fCDiyWoUYJkiNaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YTU1YzBhNi1lYWE4LTQwMzktYmUxNS0yMjBm Mjg4YWNkNWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCjOukMA4E AgACMAgDBgQmAvfVADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzcZCUMWCGYODGnXlOcvnCtgmJVEz1vgDm Taccr9auaUqaRijyl6ST8qAWYh3jgTutdSCUErd0RuPp4/TFf42Y/nPKWwPP4OmF WdyMfYLT6SGM7H9RaizpU4Dbj47flOMGGu7fDCz4BbWSKVHSTmi9ulnqAZbg+AQF 6mB0p5rxlGMOCRjxBHDd5/rTAhI7rcfbtFwWssk8UgSaMUE43Syw2rIFysh+Ro/z E0r1tkI1Lpx5MsuDe88o/Hk4ftAl5Bu6haGm4t3CnX3fZcaZBcgl9dOjW4RyaD2x RCbr0NCCzG/U3+wBc+GPna4SY+iWVK5Moaih3WUOU3mGNGWabIH3 -----END CERTIFICATE-----Generated at Tue Jul 1 20:35:10 2025 by rpki-client