$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/d4077d9c-bdad-34b7-88f3-d7a067314e78.roa File: d4077d9c-bdad-34b7-88f3-d7a067314e78.roa (raw, json) Hash identifier: ktkpTbFLFPH5lYjRPtOiUBA/X3NFalbGRCnQg9jbF+c= Subject key identifier: A5:53:F5:C6:ED:66:88:19:47:3F:5A:92:84:40:02:4C:9A:A1:7D:F7 Certificate issuer: /CN=544240c0-1aad-4163-8ada-3b71180eac4f Certificate serial: 010D0C9F4328584AC2E0E495B293544DFB929500 Authority key identifier: A7:B0:96:5B:48:01:56:7A:E0:42:9A:9F:7E:0C:3E:42:9A:BB:59:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/d4077d9c-bdad-34b7-88f3-d7a067314e78.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 2924 IP address blocks: 147.146.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:e4:95:b2:93:54:4d:fb:92:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544240c0-1aad-4163-8ada-3b71180eac4f Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=cf33a9a7-e433-4c3b-b24d-40c5fc7a666f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cb:01:e8:1b:f7:58:71:e3:42:60:bf:7e:74: bc:e6:67:98:b7:05:7a:88:b0:af:2e:64:67:d6:40: e8:8a:7b:f4:f0:7c:78:0e:92:ae:30:f1:9c:e5:0e: f0:2b:86:6a:66:30:79:f6:d4:e7:58:4b:0d:b9:32: 98:b8:59:fc:23:39:7d:b8:58:38:aa:60:94:69:9d: a5:a2:e9:c4:2d:6f:6e:83:c5:58:19:17:2e:06:72: 27:4e:c6:2e:de:11:67:d0:11:82:c4:8e:57:bd:30: 9e:ef:aa:59:32:9f:54:01:c2:1a:50:87:9f:22:bc: 8d:86:67:9f:b8:ab:73:6e:e5:1f:e5:48:0b:de:5d: 72:38:0b:0b:89:84:26:6e:9f:2c:04:73:2c:fc:74: fb:43:d6:72:d7:8c:77:2e:5d:59:09:bd:dc:c7:0b: df:9e:2f:65:69:f8:d5:9c:e3:4a:3e:62:93:38:fc: 93:80:4c:f9:c6:9a:bc:33:97:3e:ee:f7:43:6b:c0: 54:bf:29:e9:b6:cc:01:47:ce:eb:15:24:c1:97:55: 70:3a:61:b3:cc:42:58:24:59:7a:e0:be:01:de:18: f4:bf:11:c0:b8:e8:82:83:65:fb:5a:6b:30:e5:c6: 91:75:eb:98:8d:0f:9a:45:9b:6c:db:30:f7:7a:f7: 68:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:53:F5:C6:ED:66:88:19:47:3F:5A:92:84:40:02:4C:9A:A1:7D:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/d4077d9c-bdad-34b7-88f3-d7a067314e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.crl X509v3 Authority Key Identifier: keyid:A7:B0:96:5B:48:01:56:7A:E0:42:9A:9F:7E:0C:3E:42:9A:BB:59:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer sbgp-ipAddrBlock: critical IPv4: 147.146.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:b6:3a:9a:5d:c8:0d:6c:04:5f:b5:b8:dd:41:7a:b7:6c:c0: e1:32:fe:3c:5c:1a:88:7a:04:3d:49:ee:92:e6:74:3c:8f:74: 5d:c1:4c:fa:94:f5:e7:fe:24:59:fe:e0:05:34:f7:bc:b7:8a: db:49:85:0f:66:09:01:25:ba:da:3d:bf:60:0a:e4:33:e6:b8: a2:2c:f9:ae:ea:d7:6f:14:bf:e8:d9:91:88:84:51:f3:02:90: f7:c4:e7:d0:5b:4f:b9:f3:3f:5f:d9:51:0d:71:26:c4:76:25: 24:79:99:33:62:5b:14:78:ea:fb:f1:3e:46:15:b7:f8:8a:0c: 9b:3a:7d:ef:72:e6:a3:99:5c:c2:e5:d9:e8:3a:70:96:eb:76: ca:39:8f:94:ad:56:dd:46:cd:f2:6e:43:ae:ff:db:b8:da:e7: 93:86:d2:76:2d:ef:4d:6a:91:67:88:cb:8b:8b:10:84:e0:20: 3a:4d:5c:ff:70:97:f2:75:53:fc:0a:6b:54:5f:88:05:cd:bc: 4f:24:33:40:4c:e5:38:c8:dd:b0:55:90:49:04:07:e6:b1:d3: 45:0f:57:29:00:13:de:52:a2:55:e3:42:7f:2e:cc:97:af:a4: 64:e5:3d:c4:8f:ad:79:90:00:7b:de:02:01:a3:3b:36:50:16: 5b:21:df:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4OSVspNUTfuSlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQ0MjQwYzAtMWFhZC00MTYzLThhZGEtM2I3MTE4MGVh YzRmMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk Y2YzM2E5YTctZTQzMy00YzNiLWIyNGQtNDBjNWZjN2E2NjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1csB6Bv3WHHjQmC/fnS85meYtwV6iLCvLmRn 1kDoinv08Hx4DpKuMPGc5Q7wK4ZqZjB59tTnWEsNuTKYuFn8Izl9uFg4qmCUaZ2l ounELW9ug8VYGRcuBnInTsYu3hFn0BGCxI5XvTCe76pZMp9UAcIaUIefIryNhmef uKtzbuUf5UgL3l1yOAsLiYQmbp8sBHMs/HT7Q9Zy14x3Ll1ZCb3cxwvfni9lafjV nONKPmKTOPyTgEz5xpq8M5c+7vdDa8BUvynptswBR87rFSTBl1VwOmGzzEJYJFl6 4L4B3hj0vxHAuOiCg2X7Wmsw5caRdeuYjQ+aRZts2zD3evdotQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVT9cbtZogZRz9akoRAAkyaoX33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NDQy NDBjMC0xYWFkLTQxNjMtOGFkYS0zYjcxMTgwZWFjNGYvZDQwNzdkOWMtYmRhZC0z NGI3LTg4ZjMtZDdhMDY3MzE0ZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTQ0MjQwYzAtMWFhZC00MTYzLThh ZGEtM2I3MTE4MGVhYzRmLzU0NDI0MGMwLTFhYWQtNDE2My04YWRhLTNiNzExODBl YWM0Zi5jcmwwHwYDVR0jBBgwFoAUp7CWW0gBVnrgQpqffgw+Qpq7WR0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NDQyNDBjMC0xYWFkLTQxNjMtOGFkYS0zYjcx MTgwZWFjNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5LwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFO2OppdyA1sBF+1uN1BerdswOEy/jxcGoh6BD1J7pLmdDyPdF3BTPqU 9ef+JFn+4AU097y3ittJhQ9mCQEluto9v2AK5DPmuKIs+a7q128Uv+jZkYiEUfMC kPfE59BbT7nzP1/ZUQ1xJsR2JSR5mTNiWxR46vvxPkYVt/iKDJs6fe9y5qOZXMLl 2eg6cJbrdso5j5StVt1GzfJuQ67/27ja55OG0nYt701qkWeIy4uLEITgIDpNXP9w l/J1U/wKa1RfiAXNvE8kM0BM5TjI3bBVkEkEB+ax00UPVykAE95SolXjQn8uzJev pGTlPcSPrXmQAHveAgGjOzZQFlsh3x0= -----END CERTIFICATE-----Generated at Sat Aug 23 23:00:32 2025 by rpki-client