$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/ebd0d51e-76e9-3a0d-aa3f-673f195fc28e.roa File: ebd0d51e-76e9-3a0d-aa3f-673f195fc28e.roa (raw, json) Hash identifier: 8x7fKFEVafvaOkfGAt+UrTSJEy5b1BSWEfKpYIAM52Y= Subject key identifier: 9C:70:80:DE:5B:40:97:73:17:63:59:77:AA:BF:ED:7D:07:93:86:49 Certificate issuer: /CN=e04d8190-ec33-4551-9197-d06746d399d0 Certificate serial: 010D0C9F4328584A3E4592B06106CEBB62B86580 Authority key identifier: 02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/ebd0d51e-76e9-3a0d-aa3f-673f195fc28e.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 26658 IP address blocks: 146.148.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:92:b0:61:06:ce:bb:62:b8:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e04d8190-ec33-4551-9197-d06746d399d0 Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=d4d5cef7-b9a6-44cb-bb9c-e9316cbea1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b8:10:c3:1c:b4:ba:ac:a5:03:26:c0:00:19: 99:f7:d3:5d:4d:9a:2c:8d:68:49:b9:93:48:35:f6: 25:9b:77:b9:3c:73:72:b6:72:97:d5:c8:4b:21:cf: 38:ba:50:49:70:3f:a0:63:95:8a:72:58:06:2a:ac: 68:4e:40:82:9a:9f:ed:93:0f:ea:f2:7d:a3:5c:24: 40:ad:9f:c6:ac:53:cb:ec:d1:00:d4:bf:5a:8c:5a: 76:49:af:06:72:58:f1:cb:05:e6:f2:6c:88:c1:14: 6f:21:18:07:19:ae:4e:1c:2f:1f:f3:d3:6e:79:e1: b7:2d:49:3a:81:47:45:63:c9:a8:78:a8:c3:b8:c0: c0:4c:55:7a:fd:5e:e0:7e:ed:d5:b8:82:8e:d4:3f: db:d3:07:de:77:a6:ff:6b:01:01:bb:c0:73:1b:79: b5:fc:5b:57:5b:5e:78:f0:8f:a7:66:6b:d0:9e:17: 37:8f:b5:44:37:c4:6b:e9:1d:b3:e0:9c:93:51:21: 8c:55:5b:24:0b:fc:8a:05:6e:89:70:1b:e4:19:83: 07:d2:12:fe:ad:35:80:ed:38:7f:d7:c2:51:b4:79: 21:34:0c:7d:52:93:81:93:ed:7d:16:3f:17:b7:72: 32:2c:20:7a:8c:0d:78:02:fd:0e:78:2a:4e:0e:2a: 4c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:70:80:DE:5B:40:97:73:17:63:59:77:AA:BF:ED:7D:07:93:86:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/ebd0d51e-76e9-3a0d-aa3f-673f195fc28e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl X509v3 Authority Key Identifier: keyid:02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer sbgp-ipAddrBlock: critical IPv4: 146.148.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ba:99:ef:26:8c:51:a1:ee:a2:75:56:a1:fe:a4:88:24:5b: f8:b7:7c:ed:45:09:df:f2:82:0d:73:62:44:ae:4d:5e:c8:ca: 55:c2:d7:e0:04:0f:0d:85:d5:9e:b1:43:30:59:d8:fd:3c:cd: f9:57:e2:75:d6:7b:37:86:c8:68:36:c1:21:fa:93:82:d3:d9: 6a:23:45:27:6c:17:d3:58:f5:b9:20:6b:2a:14:e4:5b:56:76: 4e:38:c0:98:56:4e:b4:bd:44:1a:8c:99:bb:fb:e7:70:f2:b6: c8:78:43:22:ce:7b:b3:db:f7:7b:48:11:72:06:d0:01:68:ba: bc:6a:64:2b:f5:20:fa:af:56:72:77:ca:8a:52:60:d4:b5:bc: 80:8b:80:84:fb:fd:e2:c0:23:00:19:dc:17:38:7d:fa:6e:93: d7:51:fe:e5:d5:b4:c9:c9:43:0d:9e:1d:e3:97:43:a9:d0:b1: eb:90:c9:ed:86:21:37:97:80:5f:f9:98:32:16:69:91:45:24: cd:e1:5a:9a:29:cb:ce:9f:d6:6a:2e:c6:e8:aa:d0:47:95:1c: 1e:6f:d5:ae:6d:58:0c:58:5f:4b:b1:f0:c5:c0:50:a0:94:bc: 95:c4:f4:6b:88:dd:70:b9:fa:56:56:46:f2:53:6d:4a:68:77: 47:6f:d1:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RZKwYQbOu2K4ZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA0ZDgxOTAtZWMzMy00NTUxLTkxOTctZDA2NzQ2ZDM5 OWQwMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk ZDRkNWNlZjctYjlhNi00NGNiLWJiOWMtZTkzMTZjYmVhMWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbgQwxy0uqylAybAABmZ99NdTZosjWhJuZNI NfYlm3e5PHNytnKX1chLIc84ulBJcD+gY5WKclgGKqxoTkCCmp/tkw/q8n2jXCRA rZ/GrFPL7NEA1L9ajFp2Sa8GcljxywXm8myIwRRvIRgHGa5OHC8f89NueeG3LUk6 gUdFY8moeKjDuMDATFV6/V7gfu3VuIKO1D/b0wfed6b/awEBu8BzG3m1/FtXW154 8I+nZmvQnhc3j7VEN8Rr6R2z4JyTUSGMVVskC/yKBW6JcBvkGYMH0hL+rTWA7Th/ 18JRtHkhNAx9UpOBk+19Fj8Xt3IyLCB6jA14Av0OeCpODipMrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxwgN5bQJdzF2NZd6q/7X0Hk4ZJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lMDRk ODE5MC1lYzMzLTQ1NTEtOTE5Ny1kMDY3NDZkMzk5ZDAvZWJkMGQ1MWUtNzZlOS0z YTBkLWFhM2YtNjczZjE5NWZjMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTA0ZDgxOTAtZWMzMy00NTUxLTkx OTctZDA2NzQ2ZDM5OWQwL2UwNGQ4MTkwLWVjMzMtNDU1MS05MTk3LWQwNjc0NmQz OTlkMC5jcmwwHwYDVR0jBBgwFoAUAqiuDisRyRiLX4iDa2scgwg7eOYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lMDRkODE5MC1lYzMzLTQ1NTEtOTE5Ny1kMDY3 NDZkMzk5ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGkpTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa6me8mjFGh7qJ1VqH+pIgkW/i3fO1FCd/ygg1zYkSuTV7IylXC1+AE Dw2F1Z6xQzBZ2P08zflX4nXWezeGyGg2wSH6k4LT2WojRSdsF9NY9bkgayoU5FtW dk44wJhWTrS9RBqMmbv753Dytsh4QyLOe7Pb93tIEXIG0AFourxqZCv1IPqvVnJ3 yopSYNS1vICLgIT7/eLAIwAZ3Bc4ffpuk9dR/uXVtMnJQw2eHeOXQ6nQseuQye2G ITeXgF/5mDIWaZFFJM3hWpopy86f1mouxuiq0EeVHB5v1a5tWAxYX0ux8MXAUKCU vJXE9GuI3XC5+lZWRvJTbUpod0dv0d4= -----END CERTIFICATE-----Generated at Mon Jun 30 11:28:26 2025 by rpki-client