$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/0436e288-ef8c-340a-97d6-710cb375a578.roa File: 0436e288-ef8c-340a-97d6-710cb375a578.roa (raw, json) Hash identifier: qG3a4CIQBMMBjVC/dNroS/HdkgfkXZYTPy+vPPiI8ZU= Subject key identifier: 33:C9:83:18:25:8E:DA:9B:57:14:90:40:CA:47:BB:8F:E8:62:FD:7C Certificate issuer: /CN=ccdced21-8f04-4273-8f8a-07593c3968fb Certificate serial: 010D0C9F4328584A54058B80DA157B8A569A1500 Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/0436e288-ef8c-340a-97d6-710cb375a578.roa Signing time: Fri 27 Jun 2025 07:59:50 +0000 ROA not before: Fri 27 Jun 2025 07:59:50 +0000 ROA not after: Thu 25 Sep 2025 07:59:50 +0000 asID: 401243 IP address blocks: 140.235.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:05:8b:80:da:15:7b:8a:56:9a:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb Validity Not Before: Jun 27 07:59:50 2025 GMT Not After : Sep 25 07:59:50 2025 GMT Subject: CN=b567d71d-586a-4ff7-b1a7-f9e9a5560f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c9:09:58:05:72:f3:15:13:ed:ed:f7:f6:4c: 0e:88:40:ff:51:7d:44:e4:1b:2b:ef:86:1e:e4:71: 3f:27:68:fd:3a:cb:14:d1:4e:e9:7f:98:bc:af:f8: bb:22:cc:5f:dc:c8:0f:71:19:1b:e1:18:af:0e:25: 0a:95:25:43:c1:b8:41:5f:86:3e:a0:fb:ac:b1:f2: 7f:f7:ec:f1:78:fb:0b:25:d8:99:e3:22:51:9b:7f: 42:a9:b0:77:42:e6:03:ac:a8:8c:19:ed:c9:71:6f: 9f:97:16:2b:ae:bd:87:5d:4f:96:0e:12:c8:3b:12: 1c:4a:0f:0f:1a:c6:21:ce:61:52:fd:34:6a:7e:70: 98:dd:52:4f:5a:72:72:20:1c:0f:3f:2c:c2:c1:62: 2b:13:f3:27:ef:ea:13:f0:f1:67:6f:5e:20:30:a0: c6:83:99:f5:67:b7:90:e8:a5:fd:a9:00:3a:ee:12: 76:6d:1e:27:4d:a6:9b:89:0f:f8:57:78:4c:ba:06: ba:b7:69:ca:e0:14:0c:ed:7e:b6:e7:b0:55:70:00: 94:43:1e:01:34:b2:6d:ae:25:25:5f:b3:e2:22:39: 14:db:52:31:7a:a7:f7:00:9b:4e:9d:70:24:6a:2a: 82:36:03:a5:7f:1c:51:fd:c8:c6:24:c3:af:a8:85: 34:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C9:83:18:25:8E:DA:9B:57:14:90:40:CA:47:BB:8F:E8:62:FD:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/0436e288-ef8c-340a-97d6-710cb375a578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl X509v3 Authority Key Identifier: keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer sbgp-ipAddrBlock: critical IPv4: 140.235.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:99:5d:dc:79:ac:ee:f9:55:52:1f:25:b7:9d:04:9d:ec:03: 25:86:41:ce:6f:89:89:ad:43:02:de:08:ca:05:e2:4a:76:53: b3:21:91:2e:53:64:f0:1e:83:bf:29:99:e8:53:35:c0:02:27: cf:38:c7:54:20:a7:6a:26:2a:2d:03:f7:d9:89:58:cd:40:01: 8a:3d:28:eb:58:f6:63:9c:5b:b1:2b:6e:e0:f1:7b:2e:e5:fb: 62:ae:4b:c3:05:9c:a2:7f:bf:b4:85:6e:8b:4c:e9:19:d6:86: 5f:8b:ab:51:89:f8:b1:7b:f7:43:59:62:c2:e3:47:a4:d8:95: b3:e7:47:78:ec:01:1a:36:28:4d:7f:b7:bb:b9:a9:d6:77:9f: 89:4f:68:d5:a3:39:2b:a2:a8:20:9d:f1:c7:97:af:59:d3:a9: bd:37:72:cf:e6:ba:54:ed:48:f6:b4:0c:94:95:3a:77:38:bc: e1:e8:6f:0c:50:7c:38:c1:81:81:0f:18:4e:d4:3e:45:c8:24: a1:c7:4c:e5:43:a3:25:03:c3:86:ba:8c:c8:21:06:fb:35:10: 5c:f7:01:65:f2:2a:d7:e8:be:ff:53:44:d0:e3:18:c6:9f:7f: 2b:a4:92:c6:c9:8c:e1:51:b3:b0:5c:bf:6d:d9:59:05:1d:44: b0:65:de:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUBYuA2hV7ilaaFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NkY2VkMjEtOGYwNC00MjczLThmOGEtMDc1OTNjMzk2 OGZiMB4XDTI1MDYyNzA3NTk1MFoXDTI1MDkyNTA3NTk1MFowLzEtMCsGA1UEAxMk YjU2N2Q3MWQtNTg2YS00ZmY3LWIxYTctZjllOWE1NTYwZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMkJWAVy8xUT7e339kwOiED/UX1E5Bsr74Ye 5HE/J2j9OssU0U7pf5i8r/i7Isxf3MgPcRkb4RivDiUKlSVDwbhBX4Y+oPussfJ/ 9+zxePsLJdiZ4yJRm39CqbB3QuYDrKiMGe3JcW+flxYrrr2HXU+WDhLIOxIcSg8P GsYhzmFS/TRqfnCY3VJPWnJyIBwPPyzCwWIrE/Mn7+oT8PFnb14gMKDGg5n1Z7eQ 6KX9qQA67hJ2bR4nTaabiQ/4V3hMuga6t2nK4BQM7X6257BVcACUQx4BNLJtriUl X7PiIjkU21Ixeqf3AJtOnXAkaiqCNgOlfxxR/cjGJMOvqIU0TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPJgxgljtqbVxSQQMpHu4/oYv18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jY2Rj ZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5M2MzOTY4ZmIvMDQzNmUyODgtZWY4Yy0z NDBhLTk3ZDYtNzEwY2IzNzVhNTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2NkY2VkMjEtOGYwNC00MjczLThm OGEtMDc1OTNjMzk2OGZiL2NjZGNlZDIxLThmMDQtNDI3My04ZjhhLTA3NTkzYzM5 NjhmYi5jcmwwHwYDVR0jBBgwFoAUstSdhUSY71nqCHYPz711A7DiR8cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jY2RjZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5 M2MzOTY4ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOuOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCZXdx5rO75VVIfJbedBJ3sAyWGQc5viYmtQwLeCMoF4kp2U7MhkS5T ZPAeg78pmehTNcACJ884x1Qgp2omKi0D99mJWM1AAYo9KOtY9mOcW7ErbuDxey7l +2KuS8MFnKJ/v7SFbotM6RnWhl+Lq1GJ+LF790NZYsLjR6TYlbPnR3jsARo2KE1/ t7u5qdZ3n4lPaNWjOSuiqCCd8ceXr1nTqb03cs/mulTtSPa0DJSVOnc4vOHobwxQ fDjBgYEPGE7UPkXIJKHHTOVDoyUDw4a6jMghBvs1EFz3AWXyKtfovv9TRNDjGMaf fyukksbJjOFRs7Bcv23ZWQUdRLBl3q0= -----END CERTIFICATE-----Generated at Tue Jul 1 20:46:55 2025 by rpki-client