$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7b69dd82-5d7b-3ef8-bd9b-ec006fdc88ef.roa File: 7b69dd82-5d7b-3ef8-bd9b-ec006fdc88ef.roa (raw, json) Hash identifier: uOY4I/3EWcS6HKkbD0D2BjgA1cqGANwFoYA/mZ4iL4E= Subject key identifier: 7A:11:88:E1:80:49:68:21:B4:FB:86:10:27:49:DA:54:AA:47:B9:A0 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584A0D6A90C9E1739BB3373A3980 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7b69dd82-5d7b-3ef8-bd9b-ec006fdc88ef.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 21949 IP address blocks: 134.128.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:90:c9:e1:73:9b:b3:37:3a:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=3f754ac1-72bc-4b9a-b2cc-324eb69b4811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fd:c5:69:20:96:c6:85:e0:79:c0:91:e5:bd: d9:93:71:60:0f:52:11:62:4d:cc:b0:31:67:6a:57: 4b:e7:08:e3:b5:a1:fa:e4:3c:73:55:36:55:b7:3c: 0a:8b:66:28:8d:26:41:f9:1f:5c:5d:e7:fa:ca:c7: 8a:cb:bb:8c:d3:83:85:ce:79:76:95:3e:b7:0a:ad: 7f:1e:67:a2:ef:68:dc:40:6e:81:07:e2:7e:9c:ba: 30:ca:e6:b0:25:cb:dd:73:a8:1c:97:2c:89:f4:16: 43:53:e3:2a:63:0f:ec:67:0a:a4:03:01:b3:bf:c8: 77:3a:20:f0:26:2f:52:26:42:6d:8b:75:8c:c7:cb: 05:e8:89:49:22:07:a1:3a:a1:f5:0a:d1:1c:2b:04: 6e:f3:54:36:fc:c2:64:b6:35:cd:22:1b:dd:ed:ff: f7:1d:ed:3f:c1:57:cc:e4:a5:0a:3e:87:78:70:93: d1:9c:6e:43:73:cc:c1:16:4a:22:39:17:6b:ab:71: 11:43:88:43:e5:e6:11:63:eb:43:2a:bd:66:7d:c3: 78:ce:3f:95:24:c9:36:42:67:2e:a4:19:54:98:ec: a4:25:73:24:6a:67:7e:68:53:f6:73:73:22:fb:dd: 0c:17:06:5c:82:30:2f:63:97:9d:a8:49:e7:f8:b1: a7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:11:88:E1:80:49:68:21:B4:FB:86:10:27:49:DA:54:AA:47:B9:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7b69dd82-5d7b-3ef8-bd9b-ec006fdc88ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 134.128.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:9b:41:4c:ac:a5:fc:c4:4d:3d:3f:c9:3c:17:f2:d4:01:71: f6:f5:e5:17:38:d6:7e:d7:f1:36:96:79:2f:30:08:7c:92:2c: fc:81:6d:41:eb:5b:b0:36:a0:a8:6c:4b:f4:59:c3:b3:74:7c: 55:c5:8c:fb:ba:d5:e8:fb:e2:3a:a6:3e:88:28:06:73:fc:fa: 6e:2d:b3:7c:8a:23:8f:7f:d5:b5:36:0e:10:1f:fa:36:14:c3: e9:6e:e2:23:f8:8a:34:62:e5:e6:8f:f6:e1:fc:37:33:43:b9: 2d:05:62:91:2a:e5:26:90:9f:99:cf:a0:8e:e7:7a:19:0a:c6: d8:2a:e6:96:fa:27:36:18:e4:a6:75:9d:ae:2a:e8:7b:60:13: 9a:ad:9e:79:8a:d3:7c:b4:bf:c2:80:fa:5e:c1:5b:5e:16:80: fa:2d:8a:c0:72:ad:66:be:6f:51:00:5c:93:8f:95:e9:6d:12: eb:8d:a5:3a:09:62:9b:bc:d9:c4:f8:83:29:c3:b1:99:23:98: ac:24:00:9b:18:dc:32:0b:c4:c1:16:fe:11:8c:76:f5:08:75: bb:44:dd:ef:8c:d1:ad:86:47:35:9f:b3:88:9f:bd:62:6c:fb: 30:30:74:d1:a6:82:b6:38:56:f2:a8:61:ae:ea:06:3f:bd:56: 3f:89:4f:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNapDJ4XObszc6OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk M2Y3NTRhYzEtNzJiYy00YjlhLWIyY2MtMzI0ZWI2OWI0ODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv3FaSCWxoXgecCR5b3Zk3FgD1IRYk3MsDFn aldL5wjjtaH65DxzVTZVtzwKi2YojSZB+R9cXef6yseKy7uM04OFznl2lT63Cq1/ Hmei72jcQG6BB+J+nLowyuawJcvdc6gclyyJ9BZDU+MqYw/sZwqkAwGzv8h3OiDw Ji9SJkJti3WMx8sF6IlJIgehOqH1CtEcKwRu81Q2/MJktjXNIhvd7f/3He0/wVfM 5KUKPod4cJPRnG5Dc8zBFkoiORdrq3ERQ4hD5eYRY+tDKr1mfcN4zj+VJMk2Qmcu pBlUmOykJXMkamd+aFP2c3Mi+90MFwZcgjAvY5edqEnn+LGnjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoRiOGASWghtPuGECdJ2lSqR7mgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvN2I2OWRkODItNWQ3Yi0z ZWY4LWJkOWItZWMwMDZmZGM4OGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFhoDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADabQUyspfzETT0/yTwX8tQBcfb15Rc41n7X8TaWeS8wCHySLPyBbUHr W7A2oKhsS/RZw7N0fFXFjPu61ej74jqmPogoBnP8+m4ts3yKI49/1bU2DhAf+jYU w+lu4iP4ijRi5eaP9uH8NzNDuS0FYpEq5SaQn5nPoI7nehkKxtgq5pb6JzYY5KZ1 na4q6HtgE5qtnnmK03y0v8KA+l7BW14WgPotisByrWa+b1EAXJOPleltEuuNpToJ Ypu82cT4gynDsZkjmKwkAJsY3DILxMEW/hGMdvUIdbtE3e+M0a2GRzWfs4ifvWJs +zAwdNGmgrY4VvKoYa7qBj+9Vj+JT5s= -----END CERTIFICATE-----Generated at Mon Jun 16 15:56:10 2025 by rpki-client