$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/53848da7-1182-36ef-b0d2-4d00728cdbd6.roa File: 53848da7-1182-36ef-b0d2-4d00728cdbd6.roa (raw, json) Hash identifier: PXjA30sI25x+6/6cOHOg4IRHqtGi1NvcyKQyGcVJnik= Subject key identifier: F8:DA:AA:98:5A:4F:83:AA:4C:11:09:F1:F5:E6:56:E0:71:3D:42:FA Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584A331B11AB60803151B975AA80 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/53848da7-1182-36ef-b0d2-4d00728cdbd6.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 54113 IP address blocks: 140.248.220.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1b:11:ab:60:80:31:51:b9:75:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=211ef84f-5ca9-438b-a43a-c71149c0882f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3d:16:9e:d1:ae:e6:b4:44:70:7e:26:51:ec: 81:13:ad:5b:b5:f2:60:2c:d1:29:48:1d:d0:54:53: 81:5c:5b:dd:ac:37:31:07:a0:d6:f9:b0:8a:c3:49: b4:3c:f0:b5:7c:e1:de:10:44:77:bd:3d:c3:ac:28: e6:0b:78:e2:61:d0:c1:c1:06:0e:45:c9:1a:94:5d: 8b:03:0d:a6:b7:42:68:20:a6:92:bd:96:4b:ec:eb: 6f:0c:4f:78:dc:92:f7:3d:74:48:aa:7c:cb:f9:e4: f6:02:a7:6d:8b:01:81:14:fa:85:02:3e:2a:69:64: 7e:38:53:e1:19:a8:a8:73:93:00:ee:a5:d3:71:aa: 9e:8f:96:0e:09:83:20:fd:e0:88:ab:d1:91:85:69: 64:da:df:e6:71:38:40:0c:35:97:47:cf:67:ee:40: fe:75:c4:15:92:05:1f:ca:46:8f:6e:e5:2b:b5:22: 86:6a:07:a2:08:d4:74:40:59:be:c2:5a:b9:5a:e4: 23:38:37:8b:7d:75:57:03:a0:7a:e1:83:4a:f0:9a: 24:ae:68:ed:1b:fa:bf:82:df:c5:06:57:bc:fd:03: 78:a2:1b:64:34:33:e5:12:ed:f0:77:80:f6:6b:38: 2e:33:4e:53:ab:9c:5e:16:3d:cf:4a:c9:c2:30:af: 66:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DA:AA:98:5A:4F:83:AA:4C:11:09:F1:F5:E6:56:E0:71:3D:42:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/53848da7-1182-36ef-b0d2-4d00728cdbd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.220.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d9:45:de:ae:dd:2e:b5:7c:85:ef:13:d4:76:7d:92:6d:28: e5:13:49:1c:6c:f7:42:07:ed:36:be:85:8b:55:e6:4e:d2:e7: fb:bf:1a:fa:81:4f:b2:31:29:4e:68:5f:3b:ac:f6:46:c2:64: 63:ce:bc:cf:86:be:ea:36:4b:5d:26:3c:03:8a:9e:2f:da:8c: 72:25:4c:68:15:ac:7a:2c:e4:91:e9:e6:1c:46:ae:2f:2a:8f: 02:6f:a5:80:4a:22:19:05:b4:f9:76:15:99:f5:fa:b6:3c:49: 72:67:d0:21:df:c4:dd:c5:d5:8c:4a:d5:94:41:0d:c9:60:e3: f3:22:7f:5e:d5:74:0b:84:29:81:0d:46:ee:f9:0e:2e:11:1d: ee:b9:85:09:2c:b7:47:a5:10:cc:43:16:f7:3b:f9:25:ff:68: a3:5a:c5:0a:3d:d0:ac:70:a5:27:c8:cb:44:ba:07:3d:c8:75: c0:7b:f2:98:7c:b0:dd:6b:8d:e9:51:3e:b3:0e:34:19:3c:df: 1a:86:d9:62:41:c3:07:0b:05:6f:a7:64:3a:3a:3f:97:b4:0f: 25:6d:ae:71:ac:40:8e:89:03:45:20:0c:5c:ed:6b:66:73:45: 71:79:b5:b9:8f:cf:ba:ee:28:bf:0f:c4:2a:a4:8d:91:13:8f: d0:d8:8e:71 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEozGxGrYIAxUbl1qoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk MjExZWY4NGYtNWNhOS00MzhiLWE0M2EtYzcxMTQ5YzA4ODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT0WntGu5rREcH4mUeyBE61btfJgLNEpSB3Q VFOBXFvdrDcxB6DW+bCKw0m0PPC1fOHeEER3vT3DrCjmC3jiYdDBwQYORckalF2L Aw2mt0JoIKaSvZZL7OtvDE943JL3PXRIqnzL+eT2AqdtiwGBFPqFAj4qaWR+OFPh Gaioc5MA7qXTcaqej5YOCYMg/eCIq9GRhWlk2t/mcThADDWXR89n7kD+dcQVkgUf ykaPbuUrtSKGageiCNR0QFm+wlq5WuQjODeLfXVXA6B64YNK8JokrmjtG/q/gt/F Ble8/QN4ohtkNDPlEu3wd4D2azguM05Tq5xeFj3PSsnCMK9mwQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPjaqphaT4OqTBEJ8fXmVuBxPUL6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNTM4NDhkYTctMTE4Mi0z NmVmLWIwZDItNGQwMDcyOGNkYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPjcADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAj2UXert0utXyF7xPUdn2SbSjlE0kcbPdCB+02voWLVeZO0uf7vxr6 gU+yMSlOaF87rPZGwmRjzrzPhr7qNktdJjwDip4v2oxyJUxoFax6LOSR6eYcRq4v Ko8Cb6WASiIZBbT5dhWZ9fq2PElyZ9Ah38TdxdWMStWUQQ3JYOPzIn9e1XQLhCmB DUbu+Q4uER3uuYUJLLdHpRDMQxb3O/kl/2ijWsUKPdCscKUnyMtEugc9yHXAe/KY fLDda43pUT6zDjQZPN8ahtliQcMHCwVvp2Q6Oj+XtA8lba5xrECOiQNFIAxc7Wtm c0VxebW5j8+67ii/D8QqpI2RE4/Q2I5x -----END CERTIFICATE-----Generated at Tue Jul 1 19:09:17 2025 by rpki-client