$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/7e31f3de-8642-3397-8931-556523bd10ad.roa File: 7e31f3de-8642-3397-8931-556523bd10ad.roa (raw, json) Hash identifier: GC+z8+r8tWuBlQmvTnaoDPxR9IkzJDUMWEhD+ReaaRM= Subject key identifier: EE:1D:DD:F8:41:C6:1F:1E:25:97:3A:99:B2:EB:A8:52:76:F2:71:39 Certificate issuer: /CN=c3927d26-c229-496a-8940-c88a834f5196 Certificate serial: 010D0C9F4328584A51D073FDCBEAF187CE7E6C80 Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/7e31f3de-8642-3397-8931-556523bd10ad.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 12119 IP address blocks: 140.141.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:73:fd:cb:ea:f1:87:ce:7e:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=f0b28620-cab9-4dcc-a6e9-3bac7a0a28f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:29:a0:f9:b0:98:0c:f2:0c:63:db:a9:34:94: 39:57:8c:14:e5:bd:da:93:ce:2b:0b:bf:42:57:77: df:dc:d5:74:64:7b:93:b3:c2:ef:be:60:8f:b2:de: 8a:1c:98:12:2b:65:18:e0:9c:16:e6:52:be:25:53: 60:a3:02:9a:4e:02:96:d8:2d:f8:e5:75:1c:f2:b8: a0:a8:c5:be:72:5c:ab:e4:ae:d3:e7:10:6d:7a:71: c2:14:de:f7:65:29:b5:f1:6e:21:7e:9b:16:50:06: 39:3b:0a:f1:44:2f:e0:7f:e9:8d:7d:95:68:e2:f3: f5:87:73:8c:94:55:7d:fe:2c:42:a8:9d:2b:10:5b: be:d7:41:97:35:c2:d1:c4:c4:18:b8:b1:54:04:d8: 5a:78:11:16:5f:2d:d5:5b:4b:a8:39:52:1d:09:b3: 64:ef:4b:93:b3:c4:5f:b2:16:46:35:ac:b1:28:3b: da:f3:e3:6b:de:11:84:0d:15:3b:b5:11:e5:ad:40: 71:c6:03:89:17:83:03:ad:2d:41:2f:b7:2e:97:f5: 76:5d:2e:91:1a:c0:07:f5:1d:d5:64:19:81:2f:da: 18:21:88:1b:f2:ca:06:41:9c:9d:c2:62:f7:ad:a5: 9c:66:9f:e0:9b:ae:0e:26:7e:8a:c1:ac:e3:a8:3a: 00:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1D:DD:F8:41:C6:1F:1E:25:97:3A:99:B2:EB:A8:52:76:F2:71:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/7e31f3de-8642-3397-8931-556523bd10ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl X509v3 Authority Key Identifier: keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer sbgp-ipAddrBlock: critical IPv4: 140.141.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:fe:ab:3a:38:d8:07:93:f8:91:15:4e:28:39:fe:3f:23:ef: 94:3e:f6:91:ed:61:44:3e:02:b0:58:b7:e7:9d:52:ba:24:0a: be:3e:81:17:6f:ea:38:94:99:09:c9:c5:c5:f5:35:61:47:a8: 5b:d9:07:de:72:5e:da:c8:91:c3:8d:d2:ba:8c:31:69:5c:69: df:65:5c:54:ef:13:81:05:43:38:1e:b9:2e:da:b4:f8:17:92: 6e:9e:6e:e6:68:90:84:36:f3:e0:f7:79:6d:b9:20:e6:a4:c5: 61:3f:9a:f2:03:23:5b:9f:7c:37:8c:66:3e:3d:15:4c:3f:e9: e7:d9:7a:52:32:9e:50:dc:1d:bf:b8:5f:dc:8d:0d:68:2e:3b: 7c:e2:75:ae:b1:1f:ac:bf:92:7a:3f:49:44:7a:95:a3:63:56: 3d:9c:08:98:3e:76:2a:55:4e:24:61:c5:43:96:36:e6:f7:73: bb:4a:e2:45:e9:6e:85:b5:4f:f4:a3:f2:1b:bf:cc:16:58:11: a6:9a:d4:36:77:81:71:70:0d:c1:99:5e:4c:2b:66:04:fc:05: 38:e5:b7:e4:27:9e:cb:c9:e8:27:d8:b8:35:ff:fd:3e:e9:6c: 0f:cd:bd:46:c3:fb:88:93:a2:34:5e:7b:7a:3f:c3:f1:16:8c: b4:8d:6b:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0HP9y+rxh85+bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MjdkMjYtYzIyOS00OTZhLTg5NDAtYzg4YTgzNGY1 MTk2MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk ZjBiMjg2MjAtY2FiOS00ZGNjLWE2ZTktM2JhYzdhMGEyOGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSmg+bCYDPIMY9upNJQ5V4wU5b3ak84rC79C V3ff3NV0ZHuTs8LvvmCPst6KHJgSK2UY4JwW5lK+JVNgowKaTgKW2C345XUc8rig qMW+clyr5K7T5xBtenHCFN73ZSm18W4hfpsWUAY5OwrxRC/gf+mNfZVo4vP1h3OM lFV9/ixCqJ0rEFu+10GXNcLRxMQYuLFUBNhaeBEWXy3VW0uoOVIdCbNk70uTs8Rf shZGNayxKDva8+Nr3hGEDRU7tRHlrUBxxgOJF4MDrS1BL7cul/V2XS6RGsAH9R3V ZBmBL9oYIYgb8soGQZydwmL3raWcZp/gm64OJn6KwazjqDoAswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4d3fhBxh8eJZc6mbLrqFJ28nE5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMzky N2QyNi1jMjI5LTQ5NmEtODk0MC1jODhhODM0ZjUxOTYvN2UzMWYzZGUtODY0Mi0z Mzk3LTg5MzEtNTU2NTIzYmQxMGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzM5MjdkMjYtYzIyOS00OTZhLTg5 NDAtYzg4YTgzNGY1MTk2L2MzOTI3ZDI2LWMyMjktNDk2YS04OTQwLWM4OGE4MzRm NTE5Ni5jcmwwHwYDVR0jBBgwFoAU3iC7Zcii3YxtAozJJDHZDGDF51owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMzkyN2QyNi1jMjI5LTQ5NmEtODk0MC1jODhh ODM0ZjUxOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjI2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFj+qzo42AeT+JEVTig5/j8j75Q+9pHtYUQ+ArBYt+edUrokCr4+gRdv 6jiUmQnJxcX1NWFHqFvZB95yXtrIkcON0rqMMWlcad9lXFTvE4EFQzgeuS7atPgX km6ebuZokIQ28+D3eW25IOakxWE/mvIDI1uffDeMZj49FUw/6efZelIynlDcHb+4 X9yNDWguO3zida6xH6y/kno/SUR6laNjVj2cCJg+dipVTiRhxUOWNub3c7tK4kXp boW1T/Sj8hu/zBZYEaaa1DZ3gXFwDcGZXkwrZgT8BTjlt+QnnsvJ6CfYuDX//T7p bA/NvUbD+4iTojRee3o/w/EWjLSNa4A= -----END CERTIFICATE-----Generated at Mon Jun 30 06:09:12 2025 by rpki-client