$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/f2fcc349-624c-38b7-88a5-9fee47bc052d.roa File: f2fcc349-624c-38b7-88a5-9fee47bc052d.roa (raw, json) Hash identifier: oytTkp9BzEjSqjJ/tCcMUeoKluRQClzsnTipJr+USu0= Subject key identifier: 89:89:B7:6D:9D:25:D1:A0:23:38:ED:BB:99:20:4C:C0:2D:7D:C2:50 Certificate issuer: /CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Certificate serial: 010D0C9F4328584A5335A4E6D1BDADE5B3C9AF40 Authority key identifier: 4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/f2fcc349-624c-38b7-88a5-9fee47bc052d.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 54542 IP address blocks: 148.59.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a4:e6:d1:bd:ad:e5:b3:c9:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=a33c0ab2-9b3d-401c-8b2d-e45ac3098136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:67:f6:7c:66:dc:3c:6b:4c:b1:ca:f1:8d:9d: 1d:f6:41:68:5b:3c:45:0a:28:25:2b:34:11:7d:fb: e0:b8:ad:09:d4:20:cc:09:0d:68:d7:9b:9a:20:fd: d9:e8:5c:e0:29:5d:af:33:4c:b5:66:e1:33:e3:b0: c3:32:0b:55:86:34:28:48:bb:59:9a:0b:b1:89:48: c4:86:c6:17:0b:b9:8b:f2:b2:77:d9:40:d6:bc:1c: 49:23:a4:94:14:2a:77:7a:c9:74:8f:89:ba:ec:c2: 0c:91:c8:a5:75:f7:e0:0d:57:2e:60:90:41:cf:06: 9a:f9:67:c9:1c:69:08:f4:fd:b4:d3:73:8e:88:12: ac:3b:aa:b7:30:2f:95:66:49:6d:1d:90:3b:a4:45: 7e:f4:f8:c4:98:e8:7b:e8:f4:65:3d:26:39:3f:8b: 87:1f:d1:1b:de:88:92:4c:cf:b1:13:5e:11:57:1a: b8:c0:6b:8d:53:b6:97:dd:8c:65:64:26:3f:1e:34: d2:00:e2:32:3b:01:85:38:a8:e4:71:62:ed:8a:43: 71:67:f1:fd:20:06:72:a0:81:8a:1c:0a:c2:46:cc: cf:e4:3a:db:45:67:7d:51:68:ae:bb:57:32:0d:be: 9f:cd:d7:e6:21:ea:f5:1d:ee:33:dc:25:d2:95:47: 4b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:89:B7:6D:9D:25:D1:A0:23:38:ED:BB:99:20:4C:C0:2D:7D:C2:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/f2fcc349-624c-38b7-88a5-9fee47bc052d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl X509v3 Authority Key Identifier: keyid:4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer sbgp-ipAddrBlock: critical IPv4: 148.59.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:02:98:42:6b:5f:b7:63:22:b8:7d:73:66:b8:90:fe:89:55: 12:4e:25:0c:db:e8:4b:d0:a1:57:30:da:be:84:93:d2:3d:df: e4:14:d5:95:bb:50:bb:72:7e:7f:9b:5e:61:60:23:b3:1d:f7: 0a:a0:0e:36:b7:dc:32:38:48:a5:8d:f2:ad:3c:e5:62:00:ae: 93:f0:60:6f:55:c4:5c:00:4e:3f:6c:d9:d6:f7:c5:96:23:ab: ef:7b:18:ca:ac:6a:b6:f3:51:56:11:2a:ac:da:6d:c5:b4:b0: 85:2c:01:65:ad:5e:7a:9c:56:0f:85:ad:67:86:48:11:00:a3: d6:51:b9:0e:36:4c:a4:01:c4:b8:0c:0b:4e:24:b8:6d:9c:81: da:43:44:3f:78:c2:d1:98:57:7c:35:59:fe:a3:85:ff:b8:e1: a0:25:95:6d:2d:db:7c:1e:7e:d8:bb:f7:7d:8c:9d:d8:51:6b: e4:22:21:14:34:3b:53:70:9e:34:58:a4:9e:a9:73:f3:e0:a3: 3a:3c:6c:ab:09:a8:88:ef:99:c5:24:83:b8:a7:39:16:13:16: 12:49:5d:78:27:e4:93:32:b8:bf:5e:71:9b:57:45:06:42:4d: fa:62:83:f3:8f:74:25:e9:86:bc:38:d3:5c:79:73:88:a7:c4: 8b:88:8e:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNaTm0b2t5bPJr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTliMzJhMmMtM2U0OS00M2YxLWE5NjktMjYwNGRlZDQ1 OGZlMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk YTMzYzBhYjItOWIzZC00MDFjLThiMmQtZTQ1YWMzMDk4MTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGf2fGbcPGtMscrxjZ0d9kFoWzxFCiglKzQR ffvguK0J1CDMCQ1o15uaIP3Z6FzgKV2vM0y1ZuEz47DDMgtVhjQoSLtZmguxiUjE hsYXC7mL8rJ32UDWvBxJI6SUFCp3esl0j4m67MIMkcildffgDVcuYJBBzwaa+WfJ HGkI9P2003OOiBKsO6q3MC+VZkltHZA7pEV+9PjEmOh76PRlPSY5P4uHH9Eb3oiS TM+xE14RVxq4wGuNU7aX3YxlZCY/HjTSAOIyOwGFOKjkcWLtikNxZ/H9IAZyoIGK HArCRszP5DrbRWd9UWiuu1cyDb6fzdfmIer1He4z3CXSlUdLVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImJt22dJdGgIzjtu5kgTMAtfcJQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIz MmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0ZGVkNDU4ZmUvZjJmY2MzNDktNjI0Yy0z OGI3LTg4YTUtOWZlZTQ3YmMwNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTliMzJhMmMtM2U0OS00M2YxLWE5 NjktMjYwNGRlZDQ1OGZlL2E5YjMyYTJjLTNlNDktNDNmMS1hOTY5LTI2MDRkZWQ0 NThmZS5jcmwwHwYDVR0jBBgwFoAUT/BSBiFVKJlxWf9/uslKw2UVfCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIzMmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0 ZGVkNDU4ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlDvSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAICmEJrX7djIrh9c2a4kP6JVRJOJQzb6EvQoVcw2r6Ek9I93+QU1ZW7 ULtyfn+bXmFgI7Md9wqgDja33DI4SKWN8q085WIArpPwYG9VxFwATj9s2db3xZYj q+97GMqsarbzUVYRKqzabcW0sIUsAWWtXnqcVg+FrWeGSBEAo9ZRuQ42TKQBxLgM C04kuG2cgdpDRD94wtGYV3w1Wf6jhf+44aAllW0t23wefti7932MndhRa+QiIRQ0 O1NwnjRYpJ6pc/Pgozo8bKsJqIjvmcUkg7inORYTFhJJXXgn5JMyuL9ecZtXRQZC Tfpig/OPdCXphrw401x5c4inxIuIjn0= -----END CERTIFICATE-----Generated at Mon Jun 30 00:52:28 2025 by rpki-client