$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/533c1010-86c1-3b13-ad2b-6347a5b8bd79.roa File: 533c1010-86c1-3b13-ad2b-6347a5b8bd79.roa (raw, json) Hash identifier: xlZr8z6vp/IguqHl82J5D56PaVi8txEAqRUFoOf+4VE= Subject key identifier: 3E:AB:70:30:F4:E8:D5:64:F2:E1:65:42:A0:B7:38:DC:34:17:9F:B2 Certificate issuer: /CN=78308f5f-20d8-4869-b8d0-cced78ce51b7 Certificate serial: 010D0C9F4328584A5335ABED7C64AAD5A3B6BA60 Authority key identifier: CF:18:EF:06:CD:10:C0:4E:11:AD:49:8D:23:B7:68:A1:2D:FD:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/533c1010-86c1-3b13-ad2b-6347a5b8bd79.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 396982 IP address blocks: 140.235.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/78308f5f-20d8-4869-b8d0-cced78ce51b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/78308f5f-20d8-4869-b8d0-cced78ce51b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:ab:ed:7c:64:aa:d5:a3:b6:ba:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78308f5f-20d8-4869-b8d0-cced78ce51b7 Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=b7cde98a-8452-4be0-bae7-f21ac62f506f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:58:d9:e0:1e:3f:8c:94:b3:bc:e7:5f:a5:e1: fe:a7:72:87:11:9c:dc:c9:9a:11:65:16:07:be:70: 81:e3:b6:aa:6e:7f:37:7c:12:2a:88:e6:2b:14:32: be:ba:fc:08:ab:47:4a:e3:15:78:8e:f8:0a:fd:d5: 26:c5:05:47:cf:8c:5d:27:9f:71:64:ec:44:d9:35: 36:1c:47:8d:fb:1c:c6:2f:22:a4:2e:c8:9b:14:d3: dd:2a:79:03:44:16:46:d4:31:08:5b:b8:ba:af:15: 74:d5:98:22:f6:c5:95:d2:91:67:bc:8e:a5:fe:f7: ed:38:68:69:54:59:de:df:02:85:0a:61:e8:1b:3c: 94:9e:cd:23:ad:b7:09:c3:f7:b1:e0:8e:07:a0:60: 0b:be:24:24:b8:c1:e5:7b:9f:70:21:e8:52:c4:3a: 23:d9:87:9f:83:ad:8b:84:40:41:e5:13:d6:e6:99: 1b:3a:3a:05:21:ea:96:30:d6:e6:0b:91:78:f5:48: 00:db:77:56:61:fe:dd:73:d6:de:5d:83:9d:e9:f3: a0:1f:aa:2c:4c:3c:02:21:35:4b:b9:82:5b:0f:6b: 12:47:33:93:cd:78:ba:15:77:92:c7:16:95:d6:b5: cc:4b:ab:c1:c2:f7:f5:99:39:12:f6:ae:84:41:92: d3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AB:70:30:F4:E8:D5:64:F2:E1:65:42:A0:B7:38:DC:34:17:9F:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/533c1010-86c1-3b13-ad2b-6347a5b8bd79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/78308f5f-20d8-4869-b8d0-cced78ce51b7.crl X509v3 Authority Key Identifier: keyid:CF:18:EF:06:CD:10:C0:4E:11:AD:49:8D:23:B7:68:A1:2D:FD:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7.cer sbgp-ipAddrBlock: critical IPv4: 140.235.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:3d:26:da:35:62:c4:c5:50:3c:1b:5c:a1:44:88:c7:58:dd: 0c:59:da:3e:2c:1c:01:4b:c2:19:83:7b:bc:e7:07:dd:15:bd: 67:28:22:9a:8f:1c:30:c7:8b:2a:be:68:01:2f:74:e6:d8:1d: ec:c3:a7:c1:29:f2:13:06:45:0a:7f:f2:2a:7a:90:b6:d1:2f: d6:50:66:c8:a6:30:63:1e:01:d7:df:76:90:0a:32:f4:b7:34: 4a:56:4c:06:0b:c0:1e:e7:24:ee:60:b8:4c:54:af:54:c2:9c: 80:33:5e:b0:7d:1a:d8:1d:97:26:51:8c:c9:ba:8d:34:1e:9e: 4a:24:59:98:16:5a:3d:3d:c9:5a:2c:50:b9:5b:44:da:35:bc: 08:45:f4:9f:99:38:ab:9d:43:ef:9c:59:10:ac:cf:d3:cb:ae: 4d:36:cf:be:a0:cc:e3:0c:55:1a:6b:02:0c:4b:d5:36:fe:de: a2:10:b0:cb:6b:2b:9b:3c:a9:d8:a6:74:9f:27:70:e8:99:21: 0b:a3:4d:31:e5:53:cd:b8:8f:ca:6c:58:22:97:5a:6b:f4:c2: b7:2d:c9:df:73:5a:1c:f8:42:70:c7:34:6f:83:1f:7d:66:47: 4c:41:55:b7:9a:8e:2f:d2:1d:35:ef:c7:ab:6a:4f:3b:49:e6: fd:d7:e1:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNavtfGSq1aO2umAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzgzMDhmNWYtMjBkOC00ODY5LWI4ZDAtY2NlZDc4Y2U1 MWI3MB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk YjdjZGU5OGEtODQ1Mi00YmUwLWJhZTctZjIxYWM2MmY1MDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFjZ4B4/jJSzvOdfpeH+p3KHEZzcyZoRZRYH vnCB47aqbn83fBIqiOYrFDK+uvwIq0dK4xV4jvgK/dUmxQVHz4xdJ59xZOxE2TU2 HEeN+xzGLyKkLsibFNPdKnkDRBZG1DEIW7i6rxV01Zgi9sWV0pFnvI6l/vftOGhp VFne3wKFCmHoGzyUns0jrbcJw/ex4I4HoGALviQkuMHle59wIehSxDoj2Yefg62L hEBB5RPW5pkbOjoFIeqWMNbmC5F49UgA23dWYf7dc9beXYOd6fOgH6osTDwCITVL uYJbD2sSRzOTzXi6FXeSxxaV1rXMS6vBwvf1mTkS9q6EQZLTEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6rcDD06NVk8uFlQqC3ONw0F5+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83ODMw OGY1Zi0yMGQ4LTQ4NjktYjhkMC1jY2VkNzhjZTUxYjcvNTMzYzEwMTAtODZjMS0z YjEzLWFkMmItNjM0N2E1YjhiZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzgzMDhmNWYtMjBkOC00ODY5LWI4 ZDAtY2NlZDc4Y2U1MWI3Lzc4MzA4ZjVmLTIwZDgtNDg2OS1iOGQwLWNjZWQ3OGNl NTFiNy5jcmwwHwYDVR0jBBgwFoAUzxjvBs0QwE4RrUmNI7dooS39h/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83ODMwOGY1Zi0yMGQ4LTQ4NjktYjhkMC1jY2Vk NzhjZTUxYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw9Jto1YsTFUDwbXKFEiMdY3QxZ2j4sHAFLwhmDe7znB90VvWcoIpqP HDDHiyq+aAEvdObYHezDp8Ep8hMGRQp/8ip6kLbRL9ZQZsimMGMeAdffdpAKMvS3 NEpWTAYLwB7nJO5guExUr1TCnIAzXrB9GtgdlyZRjMm6jTQenkokWZgWWj09yVos ULlbRNo1vAhF9J+ZOKudQ++cWRCsz9PLrk02z76gzOMMVRprAgxL1Tb+3qIQsMtr K5s8qdimdJ8ncOiZIQujTTHlU824j8psWCKXWmv0wrctyd9zWhz4QnDHNG+DH31m R0xBVbeaji/SHTXvx6tqTztJ5v3X4c0= -----END CERTIFICATE-----Generated at Tue Jul 1 13:54:42 2025 by rpki-client