$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d5d135e7-1096-3bd6-adb5-319d4160d1e0.roa File: d5d135e7-1096-3bd6-adb5-319d4160d1e0.roa (raw, json) Hash identifier: H/PTUbv534dnlzcD2D0LS1IiJl2erAJORdhcDqdnL6g= Subject key identifier: 16:85:B5:D1:A2:E5:35:61:73:64:D4:51:53:00:5C:F1:2D:B6:4E:85 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F43285849F5AFD03FD085423268E65A80 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d5d135e7-1096-3bd6-adb5-319d4160d1e0.roa Signing time: Sat 24 May 2025 13:01:04 +0000 ROA not before: Sat 24 May 2025 13:01:04 +0000 ROA not after: Fri 22 Aug 2025 13:01:04 +0000 asID: 33598 IP address blocks: 148.86.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f5:af:d0:3f:d0:85:42:32:68:e6:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: May 24 13:01:04 2025 GMT Not After : Aug 22 13:01:04 2025 GMT Subject: CN=f0eddb42-02c1-47a4-b0d5-909e28147b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:6b:3c:1e:47:cc:95:6e:ae:f6:5c:c4:50: a6:07:0f:80:3c:7f:3d:83:e7:48:ec:07:1c:5f:cb: ab:47:93:73:d6:27:69:52:6c:d8:6f:2e:8f:4b:c9: c6:2c:3f:b3:95:36:37:97:4b:a9:99:49:fd:70:87: 2a:c2:72:2f:db:b6:31:f7:05:64:6e:22:13:c1:f5: bd:26:53:8e:dd:6b:cb:98:65:53:f6:5b:66:cb:e9: 9a:1d:c7:eb:41:74:5f:34:67:1b:7c:94:58:8e:14: 88:c1:b9:df:0d:68:6f:42:36:5d:48:b1:40:e5:df: e0:b0:a3:bd:8a:c9:02:5e:ea:d7:c1:f2:80:29:23: 28:b3:9e:63:d6:cd:cd:e4:52:bf:05:ac:12:92:3b: 94:e6:a6:b2:9c:07:15:bb:aa:78:36:62:ae:bc:fa: 17:be:88:74:38:4d:8f:79:11:b7:f8:fc:40:43:3d: 74:59:d4:80:57:7f:ca:13:9e:3b:ae:a7:88:78:1b: f4:00:3e:d3:e8:b2:63:b0:45:5d:3a:9c:aa:b2:66: ce:90:f5:81:d4:2d:2b:a3:b3:54:62:a4:80:a1:31: 5a:f1:34:f7:58:25:ee:54:88:b7:65:b4:96:9b:71: 4f:ca:f9:81:bb:68:7d:d2:d5:6f:90:db:11:fb:6c: 24:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:85:B5:D1:A2:E5:35:61:73:64:D4:51:53:00:5C:F1:2D:B6:4E:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d5d135e7-1096-3bd6-adb5-319d4160d1e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 148.86.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:49:9b:5a:89:e3:45:a0:6f:7a:ad:18:ec:9a:69:52:c2:50: 76:c5:c7:90:4f:fd:ed:13:06:46:06:3b:dc:df:84:1d:76:79: 75:75:50:ac:21:04:02:00:4d:d7:32:85:c9:a1:89:3c:0c:df: 9a:3a:08:13:09:e7:55:db:16:23:60:5b:88:92:26:c4:43:fe: 48:30:d8:35:18:f5:2a:9b:ed:6c:24:39:e0:84:1b:8c:d5:3e: 6b:7d:ad:49:39:d8:63:2a:2d:f1:49:d8:39:36:09:1e:55:c8: 0c:52:f2:ce:e1:4c:a0:c1:27:3d:3b:61:cf:6b:59:35:e8:10: 07:a9:1b:13:d0:08:39:e2:0c:52:4e:89:39:8a:db:9e:ec:9d: 51:87:ae:ca:d5:89:bf:20:17:d6:1b:76:ca:63:9a:b3:94:6a: 48:c4:fd:1a:80:7a:ce:e0:73:3b:3d:fe:16:83:fb:ca:16:92: ed:0e:83:71:1a:b8:81:b7:d5:25:11:af:9e:bf:2f:7c:24:be: 23:9c:83:16:e4:8a:c2:bb:60:8c:84:55:ff:3f:09:aa:16:32: 95:66:80:bf:d9:35:0b:a5:d1:4c:ee:d2:d1:e8:31:e9:a4:04: e2:55:1e:53:6b:79:f4:91:9b:59:cb:4b:10:05:b2:ec:55:01: 57:55:64:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn1r9A/0IVCMmjmWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDUyNDEzMDEwNFoXDTI1MDgyMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjBlZGRiNDItMDJjMS00N2E0LWIwZDUtOTA5ZTI4MTQ3YjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOlrPB5HzJVurvZcxFCmBw+APH89g+dI7Acc X8urR5Nz1idpUmzYby6PS8nGLD+zlTY3l0upmUn9cIcqwnIv27Yx9wVkbiITwfW9 JlOO3WvLmGVT9ltmy+maHcfrQXRfNGcbfJRYjhSIwbnfDWhvQjZdSLFA5d/gsKO9 iskCXurXwfKAKSMos55j1s3N5FK/BawSkjuU5qaynAcVu6p4NmKuvPoXvoh0OE2P eRG3+PxAQz10WdSAV3/KE547rqeIeBv0AD7T6LJjsEVdOpyqsmbOkPWB1C0ro7NU YqSAoTFa8TT3WCXuVIi3ZbSWm3FPyvmBu2h90tVvkNsR+2wkvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaFtdGi5TVhc2TUUVMAXPEttk6FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvZDVkMTM1ZTctMTA5Ni0z YmQ2LWFkYjUtMzE5ZDQxNjBkMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlFZQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNJm1qJ40Wgb3qtGOyaaVLCUHbFx5BP/e0TBkYGO9zfhB12eXV1UKwh BAIATdcyhcmhiTwM35o6CBMJ51XbFiNgW4iSJsRD/kgw2DUY9Sqb7WwkOeCEG4zV Pmt9rUk52GMqLfFJ2Dk2CR5VyAxS8s7hTKDBJz07Yc9rWTXoEAepGxPQCDniDFJO iTmK257snVGHrsrVib8gF9YbdspjmrOUakjE/RqAes7gczs9/haD+8oWku0Og3Ea uIG31SURr56/L3wkviOcgxbkisK7YIyEVf8/CaoWMpVmgL/ZNQul0Uzu0tHoMemk BOJVHlNrefSRm1nLSxAFsuxVAVdVZGI= -----END CERTIFICATE-----Generated at Mon Jun 30 00:50:55 2025 by rpki-client