$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/714ca7b2-f876-35db-9239-9283a111da5a.roa File: 714ca7b2-f876-35db-9239-9283a111da5a.roa (raw, json) Hash identifier: 8jR/2TeeDE/Wy5SpQbVYOwzXxBKeLeAuQ/DjlCEH2pQ= Subject key identifier: 04:F3:7A:E4:C4:0C:62:4D:55:FC:A6:C2:DE:46:C8:53:34:61:72:44 Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F43285849E6FE76ED50EDB9F4F072C700 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/714ca7b2-f876-35db-9239-9283a111da5a.roa Signing time: Mon 19 May 2025 06:42:28 +0000 ROA not before: Mon 19 May 2025 06:42:28 +0000 ROA not after: Sun 17 Aug 2025 06:42:28 +0000 asID: 14618 IP address blocks: 157.239.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:fe:76:ed:50:ed:b9:f4:f0:72:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: May 19 06:42:28 2025 GMT Not After : Aug 17 06:42:28 2025 GMT Subject: CN=403d66a7-6446-4f54-afa0-759176c9a532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:51:80:62:13:2e:fe:74:43:92:be:8c:90: 1c:dd:03:80:c8:8a:2e:76:51:2c:57:19:bf:e3:21: 39:89:bc:17:b6:d4:1c:a7:81:29:35:0e:1f:75:45: 49:0e:f9:45:2b:9c:e7:df:ab:19:1e:62:bf:f1:71: 5c:c6:78:28:ad:65:06:01:d8:99:4a:8c:ac:3e:71: 84:26:98:44:79:28:4b:60:0a:81:55:04:18:dc:0b: df:0b:bc:4c:9e:a8:be:cb:e5:b3:c9:b6:f6:aa:e9: 5e:cc:b9:ec:7e:03:12:00:a6:5e:67:33:9b:67:fd: 2f:93:11:f6:88:11:0d:80:ac:2b:35:88:0e:dd:e3: 65:35:4b:79:90:ef:0c:5d:6a:6c:bf:25:c0:f9:2d: 53:1c:34:4a:47:b0:88:79:c5:31:0d:fc:00:b9:c1: f5:07:1e:52:bf:fc:d7:ce:8f:9b:27:8d:d1:95:36: a5:64:c4:a8:e4:73:d9:3b:a7:28:c6:57:a4:e3:a4: bf:16:b4:1c:48:93:7d:73:a9:ce:ec:40:3f:0d:f7: 73:90:18:50:ed:0d:3c:0c:90:f7:40:06:10:f8:35: d4:43:5c:b8:cd:98:29:6b:0e:1e:7e:30:e8:fd:79: 84:9f:3f:f3:be:f8:bd:76:d7:93:8d:02:7f:75:7b: ad:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F3:7A:E4:C4:0C:62:4D:55:FC:A6:C2:DE:46:C8:53:34:61:72:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/714ca7b2-f876-35db-9239-9283a111da5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:12:2f:97:7b:d8:65:45:33:04:86:d0:f9:e0:cc:fb:1f:09: f8:58:e6:18:ea:af:f4:c2:ac:15:02:e1:71:d7:c1:35:b6:31: 89:f8:16:7a:bb:de:5a:e4:c4:ad:33:07:37:d5:f5:d8:aa:cc: e0:e5:9b:f7:1d:62:42:27:38:11:1b:87:50:13:4d:d7:4e:f0: 8e:5e:c1:f2:9f:8e:99:39:1f:c6:f6:f5:dd:ec:95:f5:67:2d: be:5c:02:01:2b:b9:4d:ff:1f:96:04:a9:7f:df:49:7e:48:9b: 9b:f8:7a:32:db:10:3e:a6:11:5b:24:6b:fd:66:1f:c6:ac:ad: db:90:63:34:e2:23:a3:2a:75:ef:98:f6:65:10:e9:3a:27:11: 39:ef:30:63:19:d8:98:7c:4d:c8:01:2a:d6:77:d5:e5:c4:67: 08:47:af:84:2c:4d:86:5f:2c:c8:b1:50:85:43:3f:3b:47:92: b4:2b:cf:48:f6:60:e2:f8:93:7d:cf:c2:31:5f:e5:e9:f7:bd: 3a:c7:f5:ba:94:26:65:65:1b:03:93:90:71:b6:4a:70:05:05: a4:3d:25:3d:dc:03:31:9c:56:6f:35:9b:56:1d:2e:a4:7a:78: 26:cf:6c:87:8e:8f:9b:58:6a:cf:b9:8b:a7:ef:ee:1a:86:b2: 51:95:b4:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnm/nbtUO259PByxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI1MDUxOTA2NDIyOFoXDTI1MDgxNzA2NDIyOFowLzEtMCsGA1UEAxMk NDAzZDY2YTctNjQ0Ni00ZjU0LWFmYTAtNzU5MTc2YzlhNTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSRRgGITLv50Q5K+jJAc3QOAyIoudlEsVxm/ 4yE5ibwXttQcp4EpNQ4fdUVJDvlFK5zn36sZHmK/8XFcxngorWUGAdiZSoysPnGE JphEeShLYAqBVQQY3AvfC7xMnqi+y+Wzybb2qulezLnsfgMSAKZeZzObZ/0vkxH2 iBENgKwrNYgO3eNlNUt5kO8MXWpsvyXA+S1THDRKR7CIecUxDfwAucH1Bx5Sv/zX zo+bJ43RlTalZMSo5HPZO6coxlek46S/FrQcSJN9c6nO7EA/DfdzkBhQ7Q08DJD3 QAYQ+DXUQ1y4zZgpaw4efjDo/XmEnz/zvvi9dteTjQJ/dXutlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATzeuTEDGJNVfymwt5GyFM0YXJEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvNzE0Y2E3YjItZjg3Ni0z NWRiLTkyMzktOTI4M2ExMTFkYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDne8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8SL5d72GVFMwSG0PngzPsfCfhY5hjqr/TCrBUC4XHXwTW2MYn4Fnq7 3lrkxK0zBzfV9diqzODlm/cdYkInOBEbh1ATTddO8I5ewfKfjpk5H8b29d3slfVn Lb5cAgEruU3/H5YEqX/fSX5Im5v4ejLbED6mEVska/1mH8asrduQYzTiI6Mqde+Y 9mUQ6TonETnvMGMZ2Jh8TcgBKtZ31eXEZwhHr4QsTYZfLMixUIVDPztHkrQrz0j2 YOL4k33PwjFf5en3vTrH9bqUJmVlGwOTkHG2SnAFBaQ9JT3cAzGcVm81m1YdLqR6 eCbPbIeOj5tYas+5i6fv7hqGslGVtHU= -----END CERTIFICATE-----Generated at Tue Jul 1 11:02:38 2025 by rpki-client