$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2dd6f539-f0a8-3109-acc2-e6b04eed1f2e.roa File: 2dd6f539-f0a8-3109-acc2-e6b04eed1f2e.roa (raw, json) Hash identifier: q5WIfMAuWfW3tzrm2MShtOKrLyGOR3snrbTuEga+s0Q= Subject key identifier: EF:DD:A3:16:08:60:E0:E8:90:60:70:63:64:13:EA:0E:BF:C9:46:01 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584A331B12DEC0A9825F29E60E00 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2dd6f539-f0a8-3109-acc2-e6b04eed1f2e.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 54113 IP address blocks: 140.248.252.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1b:12:de:c0:a9:82:5f:29:e6:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=a8956ca5-d284-4605-8e3f-d596b00c3ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:2c:5b:f6:ff:a4:ad:49:0d:9b:94:b4:7b: af:58:ab:bf:b0:6e:fc:17:c2:95:21:3d:cc:59:99: 2c:41:17:6c:61:06:08:e9:db:ff:3a:51:1d:03:08: ad:cb:24:94:b9:61:ac:ef:94:bc:95:21:ec:e0:8f: 89:a4:40:ec:f9:1c:cb:4d:70:e3:05:dd:eb:af:1b: 50:5b:96:97:05:0d:5c:88:d0:a5:17:b8:da:6c:31: 70:f3:fa:92:e7:18:86:f6:35:93:3c:3a:aa:70:79: 3a:b1:fe:09:d0:ad:fd:b0:43:17:f1:66:18:dd:ce: 68:09:39:7c:c5:76:a5:70:9c:d3:cb:0d:d7:0a:b3: d1:db:e2:c9:d6:ef:43:89:bc:d4:a9:40:03:48:05: 1b:04:45:b9:7a:69:17:d2:7e:0f:62:98:83:01:b7: c7:d3:e6:12:ae:e3:b6:43:68:91:6a:4b:4d:b5:ab: dd:2f:ed:fd:42:03:b7:52:91:de:d3:9c:45:9f:5e: e4:dc:5c:cd:f6:58:9e:e7:ff:c1:cd:96:cc:82:82: 70:ae:15:5e:04:37:b6:af:75:2b:4d:e3:dc:18:18: 6e:5f:29:0e:9e:27:bc:be:72:34:db:ee:14:e8:a1: c9:aa:a6:27:32:d9:6f:68:82:89:33:a9:20:52:b9: 87:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DD:A3:16:08:60:E0:E8:90:60:70:63:64:13:EA:0E:BF:C9:46:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2dd6f539-f0a8-3109-acc2-e6b04eed1f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.252.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:33:8c:fc:08:b0:f6:85:cf:c1:01:2b:9c:85:90:9e:52:75: af:62:8c:0a:fd:01:3f:62:0d:55:bc:e6:55:cc:7a:6d:92:21: 07:49:49:3d:3e:22:ac:3d:0c:8f:4d:f3:79:09:90:97:43:25: 92:c8:de:12:36:64:f7:18:19:62:6b:91:30:f1:f3:d2:0b:e6: cf:13:1f:db:a9:79:4c:7e:c9:17:83:bb:b1:31:2e:cd:a8:68: 83:78:89:89:e6:e2:64:23:6e:73:35:55:1f:f1:9b:f3:17:10: 6f:15:5e:01:1f:2d:3e:70:44:72:84:50:c0:78:d5:5f:2a:a9: 0a:10:fe:a5:08:10:6f:23:2f:fb:09:37:9d:36:06:82:62:6b: 44:7d:85:2d:6c:39:6b:a4:41:bd:40:b3:06:7b:36:61:0d:ac: 96:6a:5e:90:f4:9d:8e:d8:71:57:2c:75:d8:69:4a:b5:6d:c0: 6c:24:4f:63:ea:88:38:ec:b7:14:22:e6:48:75:40:dc:a0:f4: 15:0e:d5:04:8a:c4:79:b3:d9:fb:b0:54:df:82:a3:bd:2f:af: e8:d1:42:90:02:d6:4c:93:73:ee:31:70:1c:3a:38:ef:ff:24: 9a:36:0e:b9:77:40:aa:16:0e:ba:23:4b:61:6c:3b:55:38:31: ed:30:1b:6c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEozGxLewKmCXynmDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk YTg5NTZjYTUtZDI4NC00NjA1LThlM2YtZDU5NmIwMGMzYWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFgsW/b/pK1JDZuUtHuvWKu/sG78F8KVIT3M WZksQRdsYQYI6dv/OlEdAwityySUuWGs75S8lSHs4I+JpEDs+RzLTXDjBd3rrxtQ W5aXBQ1ciNClF7jabDFw8/qS5xiG9jWTPDqqcHk6sf4J0K39sEMX8WYY3c5oCTl8 xXalcJzTyw3XCrPR2+LJ1u9DibzUqUADSAUbBEW5emkX0n4PYpiDAbfH0+YSruO2 Q2iRaktNtavdL+39QgO3UpHe05xFn17k3FzN9lie5//BzZbMgoJwrhVeBDe2r3Ur TePcGBhuXykOnie8vnI02+4U6KHJqqYnMtlvaIKJM6kgUrmH8wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO/doxYIYODokGBwY2QT6g6/yUYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMmRkNmY1MzktZjBhOC0z MTA5LWFjYzItZTZiMDRlZWQxZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPj8ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCqM4z8CLD2hc/BASuchZCeUnWvYowK/QE/Yg1VvOZVzHptkiEHSUk9 PiKsPQyPTfN5CZCXQyWSyN4SNmT3GBlia5Ew8fPSC+bPEx/bqXlMfskXg7uxMS7N qGiDeImJ5uJkI25zNVUf8ZvzFxBvFV4BHy0+cERyhFDAeNVfKqkKEP6lCBBvIy/7 CTedNgaCYmtEfYUtbDlrpEG9QLMGezZhDayWal6Q9J2O2HFXLHXYaUq1bcBsJE9j 6og47LcUIuZIdUDcoPQVDtUEisR5s9n7sFTfgqO9L6/o0UKQAtZMk3PuMXAcOjjv /ySaNg65d0CqFg66I0thbDtVODHtMBts -----END CERTIFICATE-----Generated at Tue Jul 1 04:01:59 2025 by rpki-client