$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b36d5e8f-bac8-378b-8482-3e6f208fa162.roa File: b36d5e8f-bac8-378b-8482-3e6f208fa162.roa (raw, json) Hash identifier: lLlfIkZ5XOBV7Jki6W7U/pLZm+4Yvz6sL+sy9b8WuVs= Subject key identifier: 37:E0:F6:71:63:38:43:74:4D:0B:96:F9:40:B3:5C:F8:28:00:3A:10 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584AA42B8E683ABF51BDCB4A2780 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b36d5e8f-bac8-378b-8482-3e6f208fa162.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 22065 IP address blocks: 40.143.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:8e:68:3a:bf:51:bd:cb:4a:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=aa9fbf4c-8bc5-49a8-8da4-6c3d84930e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3a:2a:1a:11:a9:c7:c3:c9:02:e5:5f:7d:0c: 8c:ca:e1:20:cc:20:5d:3f:bd:09:85:71:1e:2f:6c: 2f:47:63:38:f9:86:ed:1a:e5:61:98:eb:1e:87:e8: 62:ae:bc:7d:d6:d1:e4:79:1d:92:9e:6e:25:73:35: 81:4c:a7:0d:43:83:5a:07:34:81:b6:ff:53:d1:51: d0:da:5f:8d:eb:b5:cf:b2:00:48:33:8c:29:24:e0: bc:78:52:b5:99:cd:68:59:ed:5c:9f:e2:84:f5:97: ea:18:51:68:96:ea:a2:65:a7:03:83:7e:ba:ed:6c: b6:df:31:dc:61:87:d5:6f:e2:e1:06:9c:9c:b4:7e: 4c:64:d9:2a:d5:e8:e0:8d:bc:a0:8b:b6:c3:de:38: a6:a2:4c:ff:bb:bb:78:fc:1d:6b:bb:6a:3e:14:b7: 9d:7e:d1:37:7f:83:c8:ea:2d:db:f7:d1:28:e0:67: 72:06:a5:63:95:63:f3:5b:d0:c8:71:3e:1a:b1:25: 74:b7:ae:12:4e:12:1b:d9:94:f6:98:7e:7b:21:e3: 79:7d:f7:fd:a5:e7:39:9f:d5:95:d9:82:d9:96:1e: 27:96:d3:01:14:ab:01:06:06:71:12:54:f0:bb:4d: 92:10:a2:36:4d:29:0e:69:43:cc:7a:18:22:43:9f: 4f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E0:F6:71:63:38:43:74:4D:0B:96:F9:40:B3:5C:F8:28:00:3A:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b36d5e8f-bac8-378b-8482-3e6f208fa162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.143.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:5f:fc:c1:73:5a:54:b4:50:e4:08:ff:7c:d6:7e:9d:4e:0d: 35:41:1b:db:11:b1:92:0c:cc:cc:61:52:2e:d5:50:e4:35:56: b7:de:73:e6:57:71:76:5a:e8:eb:cc:0f:4c:f1:90:20:c0:4b: ee:04:96:91:a5:2a:c7:0a:9d:ea:55:d9:05:de:e8:4d:5c:25: d2:d2:c6:47:f1:a3:e5:d2:b7:55:a4:3e:96:e5:38:bb:87:f2: 39:9a:c6:e2:bf:12:cb:3f:a7:65:76:53:12:d8:96:4b:b4:d8: b7:d1:fd:9a:a0:f3:b2:a3:1f:fc:3c:f3:24:5e:49:79:47:d2: 7c:87:ba:64:e0:72:aa:0a:3e:81:71:52:77:4f:ce:07:7d:c9: a1:83:28:b4:3d:f3:71:49:e9:7f:c4:8a:0a:85:e5:33:5d:20: 96:92:c4:5e:8d:64:1c:7a:0e:0e:2f:a8:22:fe:36:82:dc:fd: b9:fe:d6:9b:cd:74:f3:7d:ad:c9:5f:32:73:28:24:48:0b:7b: eb:1b:7a:a5:64:6a:a6:07:67:d8:52:0e:62:cd:72:49:55:2c: d1:18:2a:7a:74:e8:12:b6:9e:17:57:7b:94:f3:b5:ce:53:24: 12:e9:ad:40:48:df:28:20:22:64:83:68:4b:66:a4:a0:73:4d: 59:97:66:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK45oOr9RvctKJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YWE5ZmJmNGMtOGJjNS00OWE4LThkYTQtNmMzZDg0OTMwZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjToqGhGpx8PJAuVffQyMyuEgzCBdP70JhXEe L2wvR2M4+YbtGuVhmOseh+hirrx91tHkeR2Snm4lczWBTKcNQ4NaBzSBtv9T0VHQ 2l+N67XPsgBIM4wpJOC8eFK1mc1oWe1cn+KE9ZfqGFFoluqiZacDg3667Wy23zHc YYfVb+LhBpyctH5MZNkq1ejgjbygi7bD3jimokz/u7t4/B1ru2o+FLedftE3f4PI 6i3b99Eo4GdyBqVjlWPzW9DIcT4asSV0t64SThIb2ZT2mH57IeN5fff9pec5n9WV 2YLZlh4nltMBFKsBBgZxElTwu02SEKI2TSkOaUPMehgiQ59PFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfg9nFjOEN0TQuW+UCzXPgoADoQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYjM2ZDVlOGYtYmFjOC0z NzhiLTg0ODItM2U2ZjIwOGZhMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI8dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1f/MFzWlS0UOQI/3zWfp1ODTVBG9sRsZIMzMxhUi7VUOQ1Vrfec+ZX cXZa6OvMD0zxkCDAS+4ElpGlKscKnepV2QXe6E1cJdLSxkfxo+XSt1WkPpblOLuH 8jmaxuK/Ess/p2V2UxLYlku02LfR/Zqg87KjH/w88yReSXlH0nyHumTgcqoKPoFx UndPzgd9yaGDKLQ983FJ6X/EigqF5TNdIJaSxF6NZBx6Dg4vqCL+NoLc/bn+1pvN dPN9rclfMnMoJEgLe+sbeqVkaqYHZ9hSDmLNcklVLNEYKnp06BK2nhdXe5Tztc5T JBLprUBI3yggImSDaEtmpKBzTVmXZj0= -----END CERTIFICATE-----Generated at Wed Aug 6 16:03:50 2025 by rpki-client