$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cc7f2701-a19d-35b1-ae7d-b1d72ab473b7.roa File: cc7f2701-a19d-35b1-ae7d-b1d72ab473b7.roa (raw, json) Hash identifier: q0f2vgQTK6trwZbYk594pXrJGMDLytnJFkgOOj/MgsQ= Subject key identifier: E6:9E:EE:1C:3B:4E:64:A0:C4:D0:89:EA:E4:A5:CC:A6:DB:5C:75:89 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584A14658C46AF84B88DC75DB2C0 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cc7f2701-a19d-35b1-ae7d-b1d72ab473b7.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 54113 IP address blocks: 140.248.236.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:8c:46:af:84:b8:8d:c7:5d:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=1f71f62a-1462-4085-9f8f-affbfdd54ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:d6:4a:25:38:48:86:fc:63:a8:b8:22:ed: b9:60:69:cd:95:21:3c:71:33:d9:9a:b0:03:b0:7d: f1:bf:57:b0:98:ae:34:e2:be:96:30:73:22:58:db: dd:cc:c2:51:3e:31:8a:dc:3b:3d:d7:5c:b4:dc:35: 50:31:e4:17:da:eb:01:22:86:dc:90:a9:71:36:aa: c3:46:17:1c:10:ca:10:e3:ac:4a:bd:72:3f:d3:1f: 0c:98:76:8e:35:2b:00:d3:99:37:4c:48:49:9b:0a: ba:9c:4c:57:cc:db:2c:6a:fa:70:30:b0:25:c4:8d: a3:5c:03:1f:04:e4:36:21:6f:f3:e3:45:2d:8a:e6: d7:9d:33:0c:85:d2:e8:86:1a:a8:df:96:b2:45:01: a4:f1:d4:0d:ae:00:af:d4:66:00:a1:9d:c6:19:a4: ce:6b:6e:7a:b6:d0:80:47:57:4a:ce:cc:24:f3:e4: 3d:72:f7:8b:ce:b7:6a:e5:b4:be:15:d5:fc:f7:a6: bc:0e:95:03:aa:eb:00:53:4e:eb:94:b7:30:57:fe: c3:ac:62:8f:bc:08:79:62:94:2f:fb:7c:77:21:91: 48:e9:43:1e:20:de:02:07:ad:5c:ed:6e:e3:e6:fd: f0:63:b3:bf:96:30:cf:02:94:03:a5:2a:01:13:ea: c4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9E:EE:1C:3B:4E:64:A0:C4:D0:89:EA:E4:A5:CC:A6:DB:5C:75:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cc7f2701-a19d-35b1-ae7d-b1d72ab473b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.236.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:0b:11:87:48:b5:b9:fe:f3:5d:90:41:72:2c:35:3c:ac:81: ad:43:90:04:79:d4:e7:3b:fe:9b:c3:f1:ca:00:28:5e:00:e7: 09:26:b5:09:bd:6c:9b:51:9a:4b:69:d9:e3:f3:34:cc:b5:38: d4:ed:1e:41:e5:ea:16:fd:6f:e6:10:77:65:9b:c2:ec:ac:f9: 44:3d:2f:3a:97:55:01:aa:b4:2a:9d:33:92:cc:ff:68:bb:db: 2a:23:9d:b4:a1:4d:39:29:41:3b:53:02:e0:33:09:07:bb:f6: bf:1d:23:26:ca:1a:bc:04:22:47:a9:37:a3:0f:c8:56:02:d2: 48:3c:39:67:80:92:4b:23:d0:e0:49:6f:33:4d:9c:6f:48:13: 72:c6:5a:06:41:d8:44:36:e7:2d:01:ee:a2:b7:e1:e9:73:6f: 58:54:ea:3e:d5:12:d0:e8:36:ea:39:cc:93:a3:2c:e2:57:d5: 34:4f:d3:58:f1:c3:0f:af:44:55:bd:ad:f3:aa:d2:50:82:9e: ff:48:3f:db:ee:2e:8b:f2:f5:fc:67:eb:d7:90:f4:ea:53:3f: 1e:1e:f0:09:9c:01:da:b1:92:2e:d6:02:78:fe:8e:b5:06:97: 07:17:50:5f:d6:90:91:c7:58:66:8e:ac:b8:cc:b4:1e:0f:08: 2a:23:a4:ef -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoUZYxGr4S4jcddssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk MWY3MWY2MmEtMTQ2Mi00MDg1LTlmOGYtYWZmYmZkZDU0Y2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB/WSiU4SIb8Y6i4Iu25YGnNlSE8cTPZmrAD sH3xv1ewmK404r6WMHMiWNvdzMJRPjGK3Ds911y03DVQMeQX2usBIobckKlxNqrD RhccEMoQ46xKvXI/0x8MmHaONSsA05k3TEhJmwq6nExXzNssavpwMLAlxI2jXAMf BOQ2IW/z40UtiubXnTMMhdLohhqo35ayRQGk8dQNrgCv1GYAoZ3GGaTOa256ttCA R1dKzswk8+Q9cveLzrdq5bS+FdX896a8DpUDqusAU07rlLcwV/7DrGKPvAh5YpQv +3x3IZFI6UMeIN4CB61c7W7j5v3wY7O/ljDPApQDpSoBE+rESQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOae7hw7TmSgxNCJ6uSlzKbbXHWJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvY2M3ZjI3MDEtYTE5ZC0z NWIxLWFlN2QtYjFkNzJhYjQ3M2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPjsADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmCxGHSLW5/vNdkEFyLDU8rIGtQ5AEedTnO/6bw/HKACheAOcJJrUJ vWybUZpLadnj8zTMtTjU7R5B5eoW/W/mEHdlm8LsrPlEPS86l1UBqrQqnTOSzP9o u9sqI520oU05KUE7UwLgMwkHu/a/HSMmyhq8BCJHqTejD8hWAtJIPDlngJJLI9Dg SW8zTZxvSBNyxloGQdhENuctAe6it+Hpc29YVOo+1RLQ6DbqOcyToyziV9U0T9NY 8cMPr0RVva3zqtJQgp7/SD/b7i6L8vX8Z+vXkPTqUz8eHvAJnAHasZIu1gJ4/o61 BpcHF1Bf1pCRx1hmjqy4zLQeDwgqI6Tv -----END CERTIFICATE-----Generated at Tue Jul 1 06:00:45 2025 by rpki-client