$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cde87bfa-7d06-34bf-9c03-15214404e72e.roa File: cde87bfa-7d06-34bf-9c03-15214404e72e.roa (raw, json) Hash identifier: k08cBG4mrnKeui4299nDS0MdBJybis5iy55dswKVGdg= Subject key identifier: 74:0C:82:FD:D0:A7:85:27:E8:22:DF:1C:DC:71:D2:DC:5C:E8:3C:6B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849E654FA1FA7B820AF2C8433A6 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cde87bfa-7d06-34bf-9c03-15214404e72e.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 29852 IP address blocks: 140.174.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:54:fa:1f:a7:b8:20:af:2c:84:33:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=28824b9c-2132-434f-be36-62caedd3b6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ec:63:5d:c7:da:29:dd:3f:af:54:d3:35:fe: ba:04:71:86:1f:39:72:7d:07:74:8a:f7:f2:be:9c: 66:0e:92:03:f9:f9:0e:3b:b3:81:51:39:db:8d:20: 54:1d:dc:04:6f:02:37:6d:6d:7e:49:e5:e8:9c:bb: 92:b4:f3:3b:a1:be:4e:54:1c:dd:c8:45:e7:d6:19: b5:60:c5:08:44:a5:ce:2e:df:cc:90:3f:bb:9d:b1: 51:cb:48:d6:a8:cf:c4:b6:34:83:ca:e6:5f:2b:95: 25:df:ca:75:ec:05:5e:93:27:1d:81:2c:e2:a8:3e: 37:95:5b:9d:69:e1:8f:f4:98:4b:cd:4a:4d:67:bc: 96:0b:6f:8f:b4:22:3b:85:81:b4:31:6d:51:0e:e0: 59:94:99:77:65:1f:a4:af:34:73:9f:54:2e:57:85: 46:48:ec:d0:99:20:f0:4e:9e:49:fe:8a:df:38:3b: 24:d1:3a:e4:11:8e:0c:61:ae:71:41:6b:24:67:44: b3:68:bc:b8:3a:10:c8:62:aa:31:df:a6:4f:b3:45: dd:c8:a8:cc:f8:66:8f:64:d0:23:75:1c:19:19:ff: 82:29:2d:fd:d1:a3:f6:69:04:f2:39:0d:a0:08:23: 4b:14:e7:b5:a3:b5:1e:82:c6:58:3d:6a:e1:4b:13: 89:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0C:82:FD:D0:A7:85:27:E8:22:DF:1C:DC:71:D2:DC:5C:E8:3C:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cde87bfa-7d06-34bf-9c03-15214404e72e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:a2:05:ce:18:36:ca:19:1c:2f:0a:99:7d:86:62:24:7c:d4: 9a:38:eb:20:21:6e:d0:98:13:36:a7:57:6d:a2:71:05:66:d8: 40:1c:c7:ac:5a:95:10:9e:3d:0c:ec:63:56:6c:8a:d9:2b:9f: a3:19:68:5e:f5:2a:54:52:1f:fd:52:e3:c4:b2:8a:79:3a:97: 06:79:07:69:17:f7:0f:99:23:fd:fc:2b:63:00:30:9f:e1:96: 85:71:66:78:b7:47:52:33:5c:62:88:88:88:b8:c9:90:b0:0f: 8a:64:66:c5:34:05:8d:26:2f:d5:45:d5:41:5c:5b:fa:eb:e0: 83:19:f8:28:6a:56:e2:f9:9c:07:06:73:69:ea:6b:2e:eb:7a: 38:b0:a6:c4:04:1d:3c:50:e8:5a:8b:a9:fb:6d:49:78:52:8e: 8b:c7:6a:5e:4b:6e:1c:ce:e2:33:47:51:ff:6a:13:cd:00:81: 9b:ef:db:14:10:87:8d:28:e8:34:42:3e:13:78:c8:42:c6:e0: 62:0f:47:2f:67:7c:1e:6b:e4:85:fb:62:b7:5f:ca:90:a1:c6: 28:3e:45:15:55:ff:72:82:76:30:c8:7e:0e:47:ec:16:71:15: 3b:17:df:b6:b0:54:09:13:9a:62:53:f3:62:1a:8f:d4:33:7f: 4a:0d:41:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVPofp7ggryyEM6YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk Mjg4MjRiOWMtMjEzMi00MzRmLWJlMzYtNjJjYWVkZDNiNmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmexjXcfaKd0/r1TTNf66BHGGHzlyfQd0ivfy vpxmDpID+fkOO7OBUTnbjSBUHdwEbwI3bW1+SeXonLuStPM7ob5OVBzdyEXn1hm1 YMUIRKXOLt/MkD+7nbFRy0jWqM/EtjSDyuZfK5Ul38p17AVekycdgSziqD43lVud aeGP9JhLzUpNZ7yWC2+PtCI7hYG0MW1RDuBZlJl3ZR+krzRzn1QuV4VGSOzQmSDw Tp5J/orfODsk0TrkEY4MYa5xQWskZ0SzaLy4OhDIYqox36ZPs0XdyKjM+GaPZNAj dRwZGf+CKS390aP2aQTyOQ2gCCNLFOe1o7UegsZYPWrhSxOJJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQMgv3Qp4Un6CLfHNxx0txc6DxrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2RlODdiZmEtN2QwNi0z NGJmLTljMDMtMTUyMTQ0MDRlNzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjK5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKiBc4YNsoZHC8KmX2GYiR81Jo46yAhbtCYEzanV22icQVm2EAcx6xa lRCePQzsY1Zsitkrn6MZaF71KlRSH/1S48Syink6lwZ5B2kX9w+ZI/38K2MAMJ/h loVxZni3R1IzXGKIiIi4yZCwD4pkZsU0BY0mL9VF1UFcW/rr4IMZ+ChqVuL5nAcG c2nqay7rejiwpsQEHTxQ6FqLqfttSXhSjovHal5LbhzO4jNHUf9qE80AgZvv2xQQ h40o6DRCPhN4yELG4GIPRy9nfB5r5IX7YrdfypChxig+RRVV/3KCdjDIfg5H7BZx FTsX37awVAkTmmJT82Iaj9Qzf0oNQRE= -----END CERTIFICATE-----Generated at Mon Jun 16 12:01:41 2025 by rpki-client