$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4daded78-f2e7-340c-a4d4-b42d9b29585d.roa File: 4daded78-f2e7-340c-a4d4-b42d9b29585d.roa (raw, json) Hash identifier: gjVx3f4Mq/VF4X/gT6LhsC6a5ZmylcrL3z7ZS+1u0bU= Subject key identifier: 24:8F:61:3E:F4:D7:68:10:76:DE:00:A1:29:2A:28:A5:C6:0F:F8:80 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584A331B154EB073EBCE91712620 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4daded78-f2e7-340c-a4d4-b42d9b29585d.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 54113 IP address blocks: 140.248.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1b:15:4e:b0:73:eb:ce:91:71:26:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=da78ef83-18ba-4a07-a50f-4cccddb492cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1c:bf:45:2e:8b:8f:67:19:66:14:a8:56:51: a9:0f:53:6e:6e:6b:80:80:82:81:63:d9:0b:73:8a: 43:c3:41:a7:bf:b4:2b:6c:cb:14:db:1c:b1:15:bb: c7:e1:05:e0:fe:f6:2d:83:fc:b7:25:a5:3d:b5:46: 19:9d:19:a9:06:bb:55:e3:40:32:06:df:02:a9:4a: 51:4f:01:fb:e0:65:90:5d:6a:b2:d9:cf:12:f7:84: ee:7f:95:b8:72:66:c5:c5:e4:ad:10:5d:7d:da:7a: 4d:34:18:28:87:25:a5:75:cb:3b:8e:03:a7:30:d5: 15:f5:32:b5:69:32:ab:c9:6b:64:e7:1d:49:42:41: e1:de:fa:64:ab:01:5c:c7:01:d8:9a:40:69:1e:30: fc:c0:c8:43:6d:a9:dc:69:58:43:0a:95:04:ac:21: a0:c7:cb:5f:0d:4a:4a:b6:99:20:a2:f6:1e:bf:0a: e4:ff:11:8b:90:a6:95:39:2f:d9:78:f1:5c:1a:04: b8:9d:88:60:7d:ae:d0:ea:8b:32:a9:d1:38:85:78: 4e:f2:1a:72:04:39:a2:9d:5a:a8:af:45:28:19:7a: 27:10:f6:8f:32:3a:d1:38:2c:d1:08:6c:a9:6e:27: 19:31:1f:33:6c:1e:03:cd:cc:ba:0e:76:4e:d1:4b: 42:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8F:61:3E:F4:D7:68:10:76:DE:00:A1:29:2A:28:A5:C6:0F:F8:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4daded78-f2e7-340c-a4d4-b42d9b29585d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:92:c0:63:91:f3:2e:38:7d:ec:b5:5b:36:9f:9f:95:9a:7c: c7:a9:69:54:ee:7d:a7:b3:8e:d6:52:97:a1:f2:28:f1:b7:58: 09:a7:d7:1f:d3:dc:ad:59:63:e2:09:73:6a:81:d1:c0:a8:89: b3:d1:10:29:32:f1:21:ce:33:09:6c:70:27:97:be:3c:9a:59: 32:ea:12:0c:47:d5:0c:85:fd:1d:ee:3b:f6:f3:eb:31:db:b1: f4:37:11:55:a3:f8:b3:a5:02:a3:63:7c:9e:63:83:d9:25:ed: 80:07:2f:9e:7c:ab:dc:84:6f:65:27:ef:d7:2d:3e:d5:3c:78: e0:1e:59:5a:4f:28:00:ab:e0:35:b4:70:79:90:08:81:24:7c: 30:5e:fe:58:d6:7e:f8:ae:dd:54:05:7d:55:ec:7c:cd:6d:1a: 15:79:d6:6d:1e:d2:25:4b:86:ab:cb:68:46:00:e8:00:df:1e: 71:73:94:bb:7b:e7:50:91:5b:71:73:41:f3:d5:9a:00:6c:a4: c6:b8:b7:49:8d:4e:24:49:51:cc:a4:03:59:16:19:b0:be:5c: 37:d9:cc:6b:19:32:61:9b:7b:35:59:53:dd:a8:1a:01:61:ea: ca:5a:ff:b7:03:1f:3d:e7:22:ca:17:d9:31:ea:6d:f8:04:cd: 0c:52:cc:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGxVOsHPrzpFxJiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk ZGE3OGVmODMtMThiYS00YTA3LWE1MGYtNGNjY2RkYjQ5MmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRy/RS6Lj2cZZhSoVlGpD1NubmuAgIKBY9kL c4pDw0Gnv7QrbMsU2xyxFbvH4QXg/vYtg/y3JaU9tUYZnRmpBrtV40AyBt8CqUpR TwH74GWQXWqy2c8S94Tuf5W4cmbFxeStEF192npNNBgohyWldcs7jgOnMNUV9TK1 aTKryWtk5x1JQkHh3vpkqwFcxwHYmkBpHjD8wMhDbancaVhDCpUErCGgx8tfDUpK tpkgovYevwrk/xGLkKaVOS/ZePFcGgS4nYhgfa7Q6osyqdE4hXhO8hpyBDminVqo r0UoGXonEPaPMjrROCzRCGypbicZMR8zbB4Dzcy6DnZO0UtCFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSPYT7012gQdt4AoSkqKKXGD/iAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNGRhZGVkNzgtZjJlNy0z NDBjLWE0ZDQtYjQyZDliMjk1ODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPgSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqSwGOR8y44fey1Wzafn5WafMepaVTufaezjtZSl6HyKPG3WAmn1x/T 3K1ZY+IJc2qB0cCoibPRECky8SHOMwlscCeXvjyaWTLqEgxH1QyF/R3uO/bz6zHb sfQ3EVWj+LOlAqNjfJ5jg9kl7YAHL558q9yEb2Un79ctPtU8eOAeWVpPKACr4DW0 cHmQCIEkfDBe/ljWfviu3VQFfVXsfM1tGhV51m0e0iVLhqvLaEYA6ADfHnFzlLt7 51CRW3FzQfPVmgBspMa4t0mNTiRJUcykA1kWGbC+XDfZzGsZMmGbezVZU92oGgFh 6spa/7cDHz3nIsoX2THqbfgEzQxSzCE= -----END CERTIFICATE-----Generated at Mon Jun 30 19:35:42 2025 by rpki-client