$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/a84c16cb-cb0a-3039-9291-cc4f71a48db2.roa File: a84c16cb-cb0a-3039-9291-cc4f71a48db2.roa (raw, json) Hash identifier: pIV1NvqUXK7ae0nSyVVLXRza+puqTpuDV4ACEplbu8c= Subject key identifier: 08:85:0E:6D:B6:C3:32:15:EA:E2:47:9D:67:50:C0:74:4D:87:68:55 Certificate issuer: /CN=9cf68654-01a9-4653-b981-d0349f39e0a5 Certificate serial: 010D0C9F4328584A4F05D2CEF52E7A6C31E95A00 Authority key identifier: 18:21:EA:E5:D6:56:8C:F3:BB:76:A4:4B:12:26:E0:B8:E7:9F:90:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/a84c16cb-cb0a-3039-9291-cc4f71a48db2.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 7029 IP address blocks: 140.235.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:d2:ce:f5:2e:7a:6c:31:e9:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cf68654-01a9-4653-b981-d0349f39e0a5 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=321ad954-f4a9-470c-b311-e9a75512041c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f5:12:17:02:3a:00:b3:5f:71:5f:81:19:80: 5d:7c:da:43:3f:f4:a4:46:89:94:48:cc:9e:41:a2: 53:68:6b:02:31:ee:72:a2:15:3c:46:ad:b2:6c:4b: 69:80:2c:a9:33:c0:68:9a:5b:8c:70:6d:27:23:e0: 8d:19:42:8a:ce:ae:ef:f2:1e:a4:cd:14:cb:12:29: 48:17:74:ef:a0:26:69:ea:09:3a:e8:a8:05:6e:ad: b6:59:e9:21:5b:33:2f:c2:3a:bf:55:a3:d0:c1:b8: 9f:32:5f:45:66:f4:35:3c:f9:32:ce:f2:a9:86:47: 6c:1a:e5:4c:bb:80:44:85:1d:aa:41:8c:9c:52:b8: 89:f8:ce:94:5b:42:c4:36:1d:33:34:2e:08:c2:7f: 6b:43:84:90:8c:d7:46:36:dc:81:7a:3f:bf:14:d6: 52:13:b3:c8:15:13:27:26:35:f6:68:83:91:b4:ff: f5:21:46:c9:9e:8c:3a:41:2c:52:76:81:b5:b7:a1: 47:5c:c6:00:d5:a5:a2:1f:79:5b:08:e6:0c:7d:96: fc:e7:89:81:70:e4:4b:36:1d:a8:37:c9:dc:33:c4: 10:1a:fa:97:b5:83:be:20:e7:1c:4e:7c:df:c4:5e: 17:a1:20:1c:b1:db:aa:24:af:90:14:05:06:f6:8b: 82:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:85:0E:6D:B6:C3:32:15:EA:E2:47:9D:67:50:C0:74:4D:87:68:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/a84c16cb-cb0a-3039-9291-cc4f71a48db2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.crl X509v3 Authority Key Identifier: keyid:18:21:EA:E5:D6:56:8C:F3:BB:76:A4:4B:12:26:E0:B8:E7:9F:90:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer sbgp-ipAddrBlock: critical IPv4: 140.235.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ac:5b:4a:85:a3:d9:2d:a7:de:c7:0a:a0:6a:75:3d:03:a7: b6:e1:27:23:14:59:0f:69:44:82:95:10:cb:90:17:bc:55:89: 84:9f:a1:ba:5f:68:09:7c:0e:8c:b3:af:b6:52:b6:33:f1:dd: 77:c1:d2:07:5f:a8:ba:69:e9:44:27:48:e9:8f:6b:f7:a2:86: 7d:01:dd:19:34:7e:16:5c:47:36:0d:84:f1:b3:20:9d:ac:34: 59:28:3d:2f:ff:c3:01:43:d9:ee:e4:92:ea:96:3a:43:5e:9a: 19:8e:89:7e:c3:3a:9d:0f:e3:22:ee:9d:36:37:e8:37:67:fd: 83:4f:e4:29:8f:80:12:8e:47:f0:ff:64:21:59:9b:ef:f6:9b: f2:fa:7e:fb:69:3e:09:af:14:c4:b2:1a:21:d9:02:da:c7:93: 6d:a3:c6:65:ea:9f:1b:ef:83:fd:4c:5a:17:f9:34:25:79:aa: 44:ed:d2:e0:48:32:d3:0b:c6:8f:7e:4a:64:14:41:1b:e3:3b: 91:52:30:fe:d9:30:af:b8:24:14:a5:94:c2:b1:49:d4:ff:61: f5:54:fa:d2:d0:65:1b:8c:46:7d:f5:cd:5c:db:aa:bc:fe:8e: bc:76:24:1f:98:00:9f:4a:d3:1e:b1:c4:20:84:41:ec:47:5d: de:b1:07:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBdLO9S56bDHpWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNmNjg2NTQtMDFhOS00NjUzLWI5ODEtZDAzNDlmMzll MGE1MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk MzIxYWQ5NTQtZjRhOS00NzBjLWIzMTEtZTlhNzU1MTIwNDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vUSFwI6ALNfcV+BGYBdfNpDP/SkRomUSMye QaJTaGsCMe5yohU8Rq2ybEtpgCypM8BomluMcG0nI+CNGUKKzq7v8h6kzRTLEilI F3TvoCZp6gk66KgFbq22WekhWzMvwjq/VaPQwbifMl9FZvQ1PPkyzvKphkdsGuVM u4BEhR2qQYycUriJ+M6UW0LENh0zNC4Iwn9rQ4SQjNdGNtyBej+/FNZSE7PIFRMn JjX2aIORtP/1IUbJnow6QSxSdoG1t6FHXMYA1aWiH3lbCOYMfZb854mBcORLNh2o N8ncM8QQGvqXtYO+IOccTnzfxF4XoSAcsduqJK+QFAUG9ouCbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiFDm22wzIV6uJHnWdQwHRNh2hVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85Y2Y2 ODY1NC0wMWE5LTQ2NTMtYjk4MS1kMDM0OWYzOWUwYTUvYTg0YzE2Y2ItY2IwYS0z MDM5LTkyOTEtY2M0ZjcxYTQ4ZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOWNmNjg2NTQtMDFhOS00NjUzLWI5 ODEtZDAzNDlmMzllMGE1LzljZjY4NjU0LTAxYTktNDY1My1iOTgxLWQwMzQ5ZjM5 ZTBhNS5jcmwwHwYDVR0jBBgwFoAUGCHq5dZWjPO7dqRLEibguOefkNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85Y2Y2ODY1NC0wMWE5LTQ2NTMtYjk4MS1kMDM0 OWYzOWUwYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOssMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+sW0qFo9ktp97HCqBqdT0Dp7bhJyMUWQ9pRIKVEMuQF7xViYSfobpf aAl8Doyzr7ZStjPx3XfB0gdfqLpp6UQnSOmPa/eihn0B3Rk0fhZcRzYNhPGzIJ2s NFkoPS//wwFD2e7kkuqWOkNemhmOiX7DOp0P4yLunTY36Ddn/YNP5CmPgBKOR/D/ ZCFZm+/2m/L6fvtpPgmvFMSyGiHZAtrHk22jxmXqnxvvg/1MWhf5NCV5qkTt0uBI MtMLxo9+SmQUQRvjO5FSMP7ZMK+4JBSllMKxSdT/YfVU+tLQZRuMRn31zVzbqrz+ jrx2JB+YAJ9K0x6xxCCEQexHXd6xB4s= -----END CERTIFICATE-----Generated at Sun Jun 29 09:05:59 2025 by rpki-client