$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/1b514e1b-42b6-30f9-bbaa-1a960a2af6e2.roa File: 1b514e1b-42b6-30f9-bbaa-1a960a2af6e2.roa (raw, json) Hash identifier: galBFTmKTjSpgaPX3uBESBsNB5qcxG9BZrzGaddXQFQ= Subject key identifier: 43:52:D0:BB:73:4F:9A:49:59:FB:DA:98:3C:54:FF:A7:0D:3B:A4:77 Certificate issuer: /CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Certificate serial: 010D0C9F4328584A5A306B5322419A0576698780 Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/1b514e1b-42b6-30f9-bbaa-1a960a2af6e2.roa Signing time: Sun 29 Jun 2025 13:01:03 +0000 ROA not before: Sun 29 Jun 2025 13:01:03 +0000 ROA not after: Sat 27 Sep 2025 13:01:03 +0000 asID: 6407 IP address blocks: 108.63.0.0/21 maxlen: 24 108.63.8.0/22 maxlen: 24 108.63.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:30:6b:53:22:41:9a:05:76:69:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Validity Not Before: Jun 29 13:01:03 2025 GMT Not After : Sep 27 13:01:03 2025 GMT Subject: CN=403736fd-b68a-4176-89a2-2781b8549b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:f4:4a:fd:85:46:f7:69:64:d2:6b:77:8f: 12:12:72:6a:9f:8f:35:43:86:d3:7d:ae:60:86:8d: 7c:57:e1:71:68:58:ee:58:db:2c:34:12:84:99:d8: a9:74:ae:a9:c8:c8:78:7f:30:c8:72:8f:86:b8:58: db:15:d3:c7:ea:91:5e:c7:28:a7:3b:32:fa:3c:c5: 1c:24:94:ca:10:07:45:24:47:65:83:03:07:06:d7: dd:0e:9b:aa:c6:94:4a:72:d0:44:5d:60:a9:b0:6b: 38:15:ac:db:9e:5e:8d:d2:2a:c3:83:6b:5e:fc:4e: d6:16:56:ee:c8:89:fc:8f:63:68:5e:19:85:b7:14: 24:f0:f5:3a:ba:00:df:8b:01:a0:a9:2d:c9:86:a4: 00:be:fe:ce:f6:f0:91:d7:8b:31:47:9b:46:38:75: be:2c:35:a1:f9:66:56:31:00:68:3b:1e:9b:64:67: 8a:98:fa:bd:1f:c1:16:b5:ac:a8:26:95:0c:6d:86: 75:81:49:f5:8d:e9:e7:58:32:d2:79:f1:2c:96:dc: 04:67:8f:ea:2f:47:90:47:55:a9:5e:f6:49:97:ae: c6:61:0c:33:4a:c8:72:8f:49:96:df:c9:3a:13:52: f3:52:ee:49:c5:48:69:12:fa:18:87:50:c9:16:ba: 72:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:52:D0:BB:73:4F:9A:49:59:FB:DA:98:3C:54:FF:A7:0D:3B:A4:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/1b514e1b-42b6-30f9-bbaa-1a960a2af6e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl X509v3 Authority Key Identifier: keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer sbgp-ipAddrBlock: critical IPv4: 108.63.0.0-108.63.13.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:64:f7:d9:e8:59:fc:ec:2a:40:a2:19:14:8b:8b:88:bb:20: c2:26:69:01:bd:78:8b:9c:ba:8b:8e:6c:ae:d4:6e:de:1f:68: fa:17:7d:37:1a:ed:a6:a0:f1:9a:1f:52:28:de:98:80:bd:58: ce:5e:ef:2b:20:4d:1a:f8:ae:b7:48:e3:45:80:aa:ba:ee:0f: 7e:0c:8c:3b:29:e2:d1:f3:55:93:64:7c:30:b5:1b:7d:2d:b0: 65:b4:78:07:98:e9:69:09:43:d3:f7:60:a4:fe:ea:26:0d:8b: 07:46:cf:1a:ed:1a:58:3b:3e:1d:dc:86:0d:10:6a:9b:b1:5f: be:54:10:d0:c7:63:4b:29:18:24:c5:f9:5c:45:62:b5:73:03: 8c:e7:29:9b:52:3a:36:d2:a0:91:81:8e:94:c2:54:d4:f9:1b: f1:61:24:d3:7e:a7:b0:31:d9:5d:a9:a4:08:b4:8c:a6:24:12: 2c:be:14:aa:fa:c5:1f:bd:6d:27:c1:b7:32:8a:36:20:72:67: e9:fa:76:f2:94:ee:9c:3f:b7:2c:f7:e2:ff:c5:78:82:12:f7: a5:f1:6c:cd:05:f4:65:5c:d0:b9:4b:38:f9:f0:07:98:41:8a: 81:a2:9e:0f:1a:3d:98:d1:52:4b:4c:ae:0e:79:13:6b:0f:72: 4f:ac:02:ca -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEpaMGtTIkGaBXZph4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0OTQwZjQtNjFjMi00MjUxLWFjZGItMzZiZTgzY2Rj NzQ0MB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk NDAzNzM2ZmQtYjY4YS00MTc2LTg5YTItMjc4MWI4NTQ5YjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBP0Sv2FRvdpZNJrd48SEnJqn481Q4bTfa5g ho18V+FxaFjuWNssNBKEmdipdK6pyMh4fzDIco+GuFjbFdPH6pFexyinOzL6PMUc JJTKEAdFJEdlgwMHBtfdDpuqxpRKctBEXWCpsGs4Fazbnl6N0irDg2te/E7WFlbu yIn8j2NoXhmFtxQk8PU6ugDfiwGgqS3JhqQAvv7O9vCR14sxR5tGOHW+LDWh+WZW MQBoOx6bZGeKmPq9H8EWtayoJpUMbYZ1gUn1jennWDLSefEsltwEZ4/qL0eQR1Wp XvZJl67GYQwzSshyj0mW38k6E1LzUu5JxUhpEvoYh1DJFrpytQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFENS0LtzT5pJWfvamDxU/6cNO6R3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5 NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJlODNjZGM3NDQvMWI1MTRlMWItNDJiNi0z MGY5LWJiYWEtMWE5NjBhMmFmNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGQ0OTQwZjQtNjFjMi00MjUxLWFj ZGItMzZiZTgzY2RjNzQ0LzRkNDk0MGY0LTYxYzItNDI1MS1hY2RiLTM2YmU4M2Nk Yzc0NC5jcmwwHwYDVR0jBBgwFoAUPdev1k6DmBY4LIH9klbSh2ozmcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJl ODNjZGM3NDQuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwBsPwME AWw/DDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQB+ZPfZ6Fn87CpAohkUi4uIuyDCJmkBvXiLnLqLjmyu1G7e H2j6F303Gu2moPGaH1Io3piAvVjOXu8rIE0a+K63SONFgKq67g9+DIw7KeLR81WT ZHwwtRt9LbBltHgHmOlpCUPT92Ck/uomDYsHRs8a7RpYOz4d3IYNEGqbsV++VBDQ x2NLKRgkxflcRWK1cwOM5ymbUjo20qCRgY6UwlTU+RvxYSTTfqewMdldqaQItIym JBIsvhSq+sUfvW0nwbcyijYgcmfp+nbylO6cP7cs9+L/xXiCEvel8WzNBfRlXNC5 Szj58AeYQYqBop4PGj2Y0VJLTK4OeRNrD3JPrALK -----END CERTIFICATE-----Generated at Mon Jun 30 01:09:21 2025 by rpki-client