$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa File: a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa (raw, json) Hash identifier: rOqeugRS0hVNUsurkROVXPH1hSOXfVWC3ejUMap1y/s= Subject key identifier: 27:5B:69:3D:AF:D3:E3:4B:00:FE:83:85:E4:3C:C1:F1:87:13:32:5E Certificate issuer: /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Certificate serial: 010D0C9F4328584A3B7B044A8180D4C276383790 Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 27313 IP address blocks: 204.79.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:04:4a:81:80:d4:c2:76:38:37:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=81e8d190-c42b-42f7-bb95-9f24b1a9a482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0f:a7:bf:5d:72:6d:e0:4f:fd:01:c5:b0:ed: 86:79:8a:28:bf:1b:e7:2e:7d:d9:49:6f:76:c8:c3: 54:d9:22:8c:19:44:56:56:84:2f:c3:90:e6:d2:35: a2:2c:58:e5:f0:e3:bd:b4:4c:9f:42:ee:f6:35:07: 82:87:3c:f2:fd:ad:d2:3e:f3:19:fe:c2:11:b0:fd: fb:84:1e:29:d0:fb:d8:e2:5e:33:c4:67:d6:ee:21: e3:42:26:d4:65:4f:96:9e:dd:f5:e4:41:64:53:ed: ca:98:95:ca:42:d4:4e:65:51:d2:30:88:93:7b:36: 27:4f:0f:8c:73:4b:09:8b:d2:3f:cc:01:bd:e2:0f: 8d:47:4f:4f:a6:9d:5a:dd:c3:1d:4d:56:1b:c5:09: 43:0d:4c:73:0e:35:40:45:50:e4:95:04:9b:14:29: c9:19:54:2a:4d:d8:b6:26:e0:92:c1:12:6f:32:0e: fa:30:42:2f:c5:f4:b0:52:2f:90:ce:73:00:e1:c7: 92:d5:b9:9b:79:be:d1:1f:06:aa:65:7a:a5:a3:bf: cf:9e:87:5a:5f:0f:f2:1b:d3:7b:ca:e3:93:23:5e: aa:41:8c:f9:23:af:a6:22:a4:ff:eb:4a:c8:e0:e1: 4a:a5:32:af:ba:b0:1f:69:dc:51:e1:5e:cf:66:4d: 0a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:5B:69:3D:AF:D3:E3:4B:00:FE:83:85:E4:3C:C1:F1:87:13:32:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl X509v3 Authority Key Identifier: keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer sbgp-ipAddrBlock: critical IPv4: 204.79.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:14:5f:fb:cf:27:91:d5:84:b1:bc:f0:78:4d:55:50:a6:e3: 5d:ae:dc:c8:5c:b8:d5:e1:54:dd:2c:1e:4c:e1:91:94:6a:6d: eb:02:62:c2:9e:69:65:9a:49:29:18:cc:6e:6f:47:cf:ca:85: 4f:f4:eb:02:11:19:ac:9b:20:88:7e:d8:28:81:22:18:3b:f9: 0b:a7:ff:2b:ae:26:d7:2c:37:12:b0:88:f1:92:61:5c:b0:b1: a8:f7:98:a6:1e:91:7a:cf:14:54:fd:7b:d5:0e:c4:c4:fc:c9: 5c:1d:9d:8d:36:7c:bd:93:cb:c0:39:61:0c:7d:ed:f9:6d:78: c7:38:df:ba:e8:e2:81:0d:6a:94:16:c2:dd:ad:f6:88:37:56: d6:73:c5:6a:37:7f:c4:2b:08:ec:ea:a0:3e:5a:9b:88:b3:49: c9:6a:4d:af:d1:49:15:16:e7:33:ba:75:95:8c:65:0e:44:ee: e9:16:c3:41:94:09:59:06:40:7d:a0:fc:8f:27:00:85:41:9c: 7d:84:13:17:b0:6c:ff:6e:b8:60:f1:12:39:22:7a:89:35:83: fd:a3:56:12:16:67:c6:62:e1:65:8d:99:8a:4b:fc:b6:16:f7: fa:ad:bf:e1:56:a8:a1:0b:56:24:f4:de:42:4c:25:f4:16:a3: 39:3e:0a:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewRKgYDUwnY4N5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxNGY4ZDctNTQwYi00YTRhLWI1YWUtMGFmMTQ3Zjdj MWU0MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk ODFlOGQxOTAtYzQyYi00MmY3LWJiOTUtOWYyNGIxYTlhNDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA+nv11ybeBP/QHFsO2GeYoovxvnLn3ZSW92 yMNU2SKMGURWVoQvw5Dm0jWiLFjl8OO9tEyfQu72NQeChzzy/a3SPvMZ/sIRsP37 hB4p0PvY4l4zxGfW7iHjQibUZU+Wnt315EFkU+3KmJXKQtROZVHSMIiTezYnTw+M c0sJi9I/zAG94g+NR09Ppp1a3cMdTVYbxQlDDUxzDjVARVDklQSbFCnJGVQqTdi2 JuCSwRJvMg76MEIvxfSwUi+QznMA4ceS1bmbeb7RHwaqZXqlo7/PnodaXw/yG9N7 yuOTI16qQYz5I6+mIqT/60rI4OFKpTKvurAfadxR4V7PZk0KawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdbaT2v0+NLAP6DheQ8wfGHEzJeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0 ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYxNDdmN2MxZTQvYTIzZjhiNTQtNGE3MS0z YjBmLTkyYTEtMmFmNzNjYzI0MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGYxNGY4ZDctNTQwYi00YTRhLWI1 YWUtMGFmMTQ3ZjdjMWU0LzhmMTRmOGQ3LTU0MGItNGE0YS1iNWFlLTBhZjE0N2Y3 YzFlNC5jcmwwHwYDVR0jBBgwFoAUT0s4jV9dhOfRkQSO1EfrBXSzPhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYx NDdmN2MxZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE+MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsUX/vPJ5HVhLG88HhNVVCm412u3MhcuNXhVN0sHkzhkZRqbesCYsKe aWWaSSkYzG5vR8/KhU/06wIRGaybIIh+2CiBIhg7+Qun/yuuJtcsNxKwiPGSYVyw saj3mKYekXrPFFT9e9UOxMT8yVwdnY02fL2Ty8A5YQx97flteMc437ro4oENapQW wt2t9og3VtZzxWo3f8QrCOzqoD5am4izSclqTa/RSRUW5zO6dZWMZQ5E7ukWw0GU CVkGQH2g/I8nAIVBnH2EExewbP9uuGDxEjkieok1g/2jVhIWZ8Zi4WWNmYpL/LYW 9/qtv+FWqKELViT03kJMJfQWozk+Ck4= -----END CERTIFICATE-----Generated at Mon Jun 30 10:47:10 2025 by rpki-client