$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7403d2f1-fdd5-3897-94e7-e40b8959be9b.roa File: 7403d2f1-fdd5-3897-94e7-e40b8959be9b.roa (raw, json) Hash identifier: vbVDwNjuZRjpoQ6wQ6Kx3WpsgWBYvI09AscS+zbTRqg= Subject key identifier: 24:18:D0:FB:5A:CC:D1:9B:56:0A:19:AF:83:FA:5F:1A:6B:F8:1D:5C Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F43285849C4D4BA94D3F4C934FC588380 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7403d2f1-fdd5-3897-94e7-e40b8959be9b.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 14618 IP address blocks: 168.149.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:ba:94:d3:f4:c9:34:fc:58:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=321af39e-de93-4f0f-ba30-aff2b7b5cba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:34:35:5a:b3:13:5e:46:64:4a:d0:06:38:92: ab:38:b7:a5:d4:17:6c:2a:71:72:1c:09:ba:3d:50: 32:ef:91:1d:d9:29:b0:1c:49:6b:2e:f6:28:70:82: 72:21:3d:45:d1:b2:38:de:e9:5e:4c:f8:f0:02:f3: 0a:b0:db:70:7e:f1:23:7f:3b:67:bc:5a:23:59:90: 7f:ab:93:cd:9d:fd:a4:03:ee:bd:62:e1:0f:6b:21: 63:fd:02:f3:28:bd:2b:ec:ef:f7:d2:a0:74:41:6e: ad:94:e2:e2:6d:00:28:d2:62:ce:81:ad:81:71:7c: da:cf:6f:20:98:95:01:16:2e:97:9d:40:ba:49:ed: 52:8d:59:af:7d:81:d5:59:e4:0f:57:05:50:da:77: 12:6b:32:6f:fc:d8:3b:d7:41:a7:3b:8e:ae:7f:eb: 01:0c:f5:c7:1f:88:f1:49:5d:3b:90:e8:6d:76:af: c5:d7:d4:39:4d:b2:cc:66:b3:6c:97:6b:42:3a:39: 2e:ee:31:2b:39:ec:b4:82:e8:67:d2:3c:a7:39:15: 77:7f:1d:a2:6a:e8:38:ef:1c:50:09:bb:00:5d:2b: 31:ab:18:57:04:72:9a:61:58:fb:43:74:24:8e:99: 2e:0b:0c:18:ce:c9:f0:bb:af:b4:7f:71:f2:09:7d: 5f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:18:D0:FB:5A:CC:D1:9B:56:0A:19:AF:83:FA:5F:1A:6B:F8:1D:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7403d2f1-fdd5-3897-94e7-e40b8959be9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv4: 168.149.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:6a:04:a3:8c:a8:e6:5b:52:6c:51:77:70:37:42:61:8c:50: ab:c9:6f:50:bf:0f:4c:f2:2f:34:a7:11:a3:a8:34:99:1c:ff: 47:ee:01:c2:b0:e7:c7:36:96:24:45:31:58:57:7d:4f:df:68: 82:6b:7f:7d:e6:33:28:44:c4:6f:72:85:f5:04:0b:df:5d:8b: d8:02:8d:ed:2d:7c:09:1c:6b:4e:85:ff:2c:f8:58:c9:35:ee: 75:f5:16:ef:4d:91:29:3d:74:e7:61:bb:21:0e:30:98:d6:9d: b9:09:0f:49:35:0a:96:7b:86:e7:c1:b1:25:52:3b:f3:fb:8f: da:f3:eb:24:8f:03:3c:81:f5:19:b2:11:ab:37:b3:22:57:50: 2f:71:eb:aa:50:56:8a:b5:47:9d:0f:d0:db:e4:ff:6e:bc:1b: 35:dc:14:fd:c1:25:80:68:3c:e3:df:2a:3a:69:9b:cd:b7:8a: 7c:22:33:9c:8d:a2:56:fd:68:5a:9f:81:b8:88:d4:97:db:04: 3c:f6:67:c4:22:f3:0f:28:93:1d:c9:0e:ec:1a:0a:1d:dd:80: 56:dd:2a:09:2e:c9:a2:5a:e9:f3:a2:6a:6c:05:6c:d0:4b:7c: c3:8d:b3:38:f9:ab:34:e0:4a:d8:d5:2b:88:e9:8b:26:df:b5: 64:57:9d:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1LqU0/TJNPxYg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MzIxYWYzOWUtZGU5My00ZjBmLWJhMzAtYWZmMmI3YjVjYmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjQ1WrMTXkZkStAGOJKrOLel1BdsKnFyHAm6 PVAy75Ed2SmwHElrLvYocIJyIT1F0bI43uleTPjwAvMKsNtwfvEjfztnvFojWZB/ q5PNnf2kA+69YuEPayFj/QLzKL0r7O/30qB0QW6tlOLibQAo0mLOga2BcXzaz28g mJUBFi6XnUC6Se1SjVmvfYHVWeQPVwVQ2ncSazJv/Ng710GnO46uf+sBDPXHH4jx SV07kOhtdq/F19Q5TbLMZrNsl2tCOjku7jErOey0guhn0jynORV3fx2iaug47xxQ CbsAXSsxqxhXBHKaYVj7Q3QkjpkuCwwYzsnwu6+0f3HyCX1frwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQY0PtazNGbVgoZr4P6Xxpr+B1cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvNzQwM2QyZjEtZmRkNS0z ODk3LTk0ZTctZTQwYjg5NTliZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqJXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlqBKOMqOZbUmxRd3A3QmGMUKvJb1C/D0zyLzSnEaOoNJkc/0fuAcKw 58c2liRFMVhXfU/faIJrf33mMyhExG9yhfUEC99di9gCje0tfAkca06F/yz4WMk1 7nX1Fu9NkSk9dOdhuyEOMJjWnbkJD0k1CpZ7hufBsSVSO/P7j9rz6ySPAzyB9Rmy Eas3syJXUC9x66pQVoq1R50P0Nvk/268GzXcFP3BJYBoPOPfKjppm823inwiM5yN olb9aFqfgbiI1JfbBDz2Z8Qi8w8okx3JDuwaCh3dgFbdKgkuyaJa6fOiamwFbNBL fMONszj5qzTgStjVK4jpiybftWRXnUc= -----END CERTIFICATE-----Generated at Sun Jun 15 08:57:18 2025 by rpki-client