$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4b28e7f2-bfbc-3ba5-b344-d6c35d9526af.roa File: 4b28e7f2-bfbc-3ba5-b344-d6c35d9526af.roa (raw, json) Hash identifier: Ej4aV0CsLoMgEDwspSbw98yg/qCPDmn+cREzG+rLf5I= Subject key identifier: 83:BA:3B:F1:BD:DB:94:CE:3F:D8:0E:2C:69:06:FC:80:98:94:62:9B Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F43285849EDA539EE0A89EDCAFCA85880 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4b28e7f2-bfbc-3ba5-b344-d6c35d9526af.roa Signing time: Wed 21 May 2025 15:53:19 +0000 ROA not before: Wed 21 May 2025 15:53:19 +0000 ROA not after: Tue 19 Aug 2025 15:53:19 +0000 asID: 20326 IP address blocks: 140.235.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:a5:39:ee:0a:89:ed:ca:fc:a8:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: May 21 15:53:19 2025 GMT Not After : Aug 19 15:53:19 2025 GMT Subject: CN=96dc0d8c-ecb4-4ea5-b9fe-266f42af1d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1e:0f:89:76:3e:60:8a:54:75:83:b2:8e:1a: 78:e9:44:1e:53:ce:82:44:76:77:cb:4a:f7:78:53: 0c:36:76:63:f6:97:1e:4e:49:d3:2c:ec:35:c6:fd: 39:06:19:82:dd:ab:26:6b:6c:85:1c:42:a5:d4:68: 4f:49:cb:b7:39:fb:2c:66:36:5e:a0:db:58:48:6c: 9b:60:55:54:35:2d:76:46:37:6e:fc:af:49:91:e3: ca:b7:db:a6:d5:6f:51:94:c7:e9:05:78:61:8a:f7: 8f:fa:c6:41:db:d1:5b:34:ce:f0:1e:eb:6c:60:8d: 1a:ee:c8:97:7d:2d:71:78:ec:31:1b:7b:9c:8b:75: ad:f8:3f:85:72:b7:1e:f5:02:91:fe:71:1c:86:e4: 67:d5:1d:0d:3f:06:3d:6e:0c:c5:d3:b6:b3:53:16: 07:b1:30:0d:65:a5:90:40:a6:39:ff:2f:a6:72:84: 2a:67:4a:6f:51:47:e1:d2:9e:2e:2f:14:05:11:c0: cf:2e:56:e9:77:bd:49:90:72:e0:fe:c3:e1:e2:58: 5c:5e:42:d8:b6:98:43:87:32:22:01:47:60:33:d5: d4:f2:f6:0a:eb:fb:c8:2a:df:21:3c:98:a5:c6:64: 7f:80:42:37:50:08:c5:d9:26:79:6b:4d:08:f1:90: b9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BA:3B:F1:BD:DB:94:CE:3F:D8:0E:2C:69:06:FC:80:98:94:62:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4b28e7f2-bfbc-3ba5-b344-d6c35d9526af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv4: 140.235.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:4a:d2:c7:1e:82:3a:5d:d4:54:1e:48:d0:1d:8d:d1:0f:40: fb:0e:41:76:94:1e:3e:3e:a7:48:7c:e3:8a:10:34:f8:81:df: c5:e0:ac:13:39:d1:1d:77:16:ca:61:87:b2:bc:36:56:36:e8: 9b:fa:40:ea:8d:5c:be:bc:e6:41:2b:88:43:63:47:40:14:d9: 2a:a0:03:72:6c:c0:c9:00:5d:6c:33:e7:4a:6f:77:70:99:f8: 52:23:ca:bc:91:b4:a8:73:d1:9f:8f:36:05:7c:33:ba:6d:08: 2b:b0:f7:09:72:70:0f:10:77:53:17:bf:2e:6b:6b:6f:42:a2: 8e:eb:14:f6:8e:18:50:34:0e:2f:26:d7:1f:af:b9:8d:eb:57: f8:2f:44:26:86:51:0b:66:e3:c3:1f:16:c6:6a:5a:b8:51:42: da:70:42:87:b2:72:f7:be:ca:72:ee:73:83:68:bf:0a:50:c0: 09:41:aa:1f:32:96:4d:1a:02:f3:de:55:8f:3f:3e:fe:c2:4e: d8:93:2f:4c:b1:1e:8e:8e:2e:b5:a1:a5:89:40:14:9c:aa:2f: 5b:f3:b5:9b:66:e0:17:15:05:4f:de:f3:ba:d6:a4:e2:cb:4d: d0:4a:da:c0:4b:9f:fe:19:d8:6f:42:44:99:de:e8:8a:68:44: 44:0e:08:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntpTnuContyvyoWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI1MDUyMTE1NTMxOVoXDTI1MDgxOTE1NTMxOVowLzEtMCsGA1UEAxMk OTZkYzBkOGMtZWNiNC00ZWE1LWI5ZmUtMjY2ZjQyYWYxZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh4PiXY+YIpUdYOyjhp46UQeU86CRHZ3y0r3 eFMMNnZj9pceTknTLOw1xv05BhmC3asma2yFHEKl1GhPScu3OfssZjZeoNtYSGyb YFVUNS12Rjdu/K9JkePKt9um1W9RlMfpBXhhiveP+sZB29FbNM7wHutsYI0a7siX fS1xeOwxG3uci3Wt+D+Fcrce9QKR/nEchuRn1R0NPwY9bgzF07azUxYHsTANZaWQ QKY5/y+mcoQqZ0pvUUfh0p4uLxQFEcDPLlbpd71JkHLg/sPh4lhcXkLYtphDhzIi AUdgM9XU8vYK6/vIKt8hPJilxmR/gEI3UAjF2SZ5a00I8ZC5vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIO6O/G925TOP9gOLGkG/ICYlGKbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvNGIyOGU3ZjItYmZiYy0z YmE1LWIzNDQtZDZjMzVkOTUyNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOudMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpK0scegjpd1FQeSNAdjdEPQPsOQXaUHj4+p0h844oQNPiB38XgrBM5 0R13Fsphh7K8NlY26Jv6QOqNXL685kEriENjR0AU2SqgA3JswMkAXWwz50pvd3CZ +FIjyryRtKhz0Z+PNgV8M7ptCCuw9wlycA8Qd1MXvy5ra29Coo7rFPaOGFA0Di8m 1x+vuY3rV/gvRCaGUQtm48MfFsZqWrhRQtpwQoeycve+ynLuc4NovwpQwAlBqh8y lk0aAvPeVY8/Pv7CTtiTL0yxHo6OLrWhpYlAFJyqL1vztZtm4BcVBU/e87rWpOLL TdBK2sBLn/4Z2G9CRJne6IpoREQOCD8= -----END CERTIFICATE-----Generated at Tue Jul 1 04:24:04 2025 by rpki-client