$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/158788ef-52cb-31cc-9ac3-50df5a8f9263.roa File: 158788ef-52cb-31cc-9ac3-50df5a8f9263.roa (raw, json) Hash identifier: 2hh2/mxliVkWdktMusio/q5cJdkh/FF6rVxbxhaXhtE= Subject key identifier: 16:69:A7:AC:B6:6F:C1:5C:91:B5:68:93:16:A3:0E:4E:DD:A2:4F:64 Certificate issuer: /CN=20a16a9a-6641-447a-8644-025fca0c6683 Certificate serial: 010D0C9F432858499FCE9B3606B7B61BACCA4C80 Authority key identifier: B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/158788ef-52cb-31cc-9ac3-50df5a8f9263.roa Signing time: Wed 23 Apr 2025 18:43:38 +0000 ROA not before: Wed 23 Apr 2025 18:43:38 +0000 ROA not after: Tue 22 Jul 2025 18:43:38 +0000 asID: 211440 IP address blocks: 140.235.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:ce:9b:36:06:b7:b6:1b:ac:ca:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20a16a9a-6641-447a-8644-025fca0c6683 Validity Not Before: Apr 23 18:43:38 2025 GMT Not After : Jul 22 18:43:38 2025 GMT Subject: CN=b67af3b8-299d-4573-94c7-47a6c416e8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9d:b5:23:72:b1:e7:62:46:4f:99:93:c5:32: d8:ae:d4:e2:0e:8e:35:f6:e0:6b:d4:d4:30:1f:6f: 0d:f9:b6:f0:c9:1e:c6:71:0e:12:1c:25:34:05:e5: e0:77:cd:4c:d4:38:e4:a8:af:e8:38:c7:19:08:2c: 78:64:f3:c6:a6:1b:9c:4c:72:0c:2a:e0:3a:c8:4f: 75:00:a0:75:ff:f6:3a:b1:9e:7b:d4:bb:2c:d0:7f: 49:c8:82:25:17:7d:1f:c0:a2:29:6d:2a:aa:52:aa: f9:b3:ff:f1:18:74:25:d4:b3:31:28:38:3e:f9:ef: 0b:6d:f6:73:5f:e3:88:d9:b3:d1:d3:5c:a7:38:09: 96:5b:76:49:0c:86:20:ae:da:d2:31:fa:fc:45:1a: a0:b3:04:ff:9a:7a:76:50:a2:5d:65:7e:64:b0:8e: fe:3a:5b:22:ec:27:55:03:c9:8b:ce:ed:30:2b:70: 7e:40:e0:9e:c4:0f:b3:7c:d0:18:80:21:af:a8:90: 45:b6:e8:8a:9e:90:af:7f:5b:26:43:b5:d5:62:c3: 30:f8:84:f7:00:9a:c7:1b:a1:5a:6a:64:ff:c9:10: 5f:79:17:d7:25:f0:80:bc:44:12:33:1e:b0:7b:aa: a2:da:ba:50:c4:1f:40:fd:c0:2e:be:77:86:6c:b6: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:69:A7:AC:B6:6F:C1:5C:91:B5:68:93:16:A3:0E:4E:DD:A2:4F:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/158788ef-52cb-31cc-9ac3-50df5a8f9263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl X509v3 Authority Key Identifier: keyid:B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer sbgp-ipAddrBlock: critical IPv4: 140.235.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b5:89:d7:5d:e7:3c:e8:90:aa:17:08:fb:1f:a9:5e:c6:62: 98:ae:13:67:8a:ee:c6:c2:89:40:08:9b:44:d1:a0:53:41:58: 29:6e:db:28:e6:20:bc:eb:98:c3:28:25:e1:2b:e6:16:8a:48: ce:83:7f:09:ae:d6:e2:fd:37:5c:79:2a:60:f4:08:27:6b:12: 54:2a:b6:85:c2:52:a4:d3:e5:6a:08:9e:c1:be:af:43:6a:b8: ee:44:5b:98:c7:2b:41:e4:d2:2c:13:eb:14:5f:10:49:1f:ff: 1e:f9:89:13:34:a0:b3:7c:83:83:79:0b:b3:0f:ea:75:04:58: 52:84:c7:4d:db:69:c7:c0:32:22:a1:89:19:93:99:28:1b:e9: 88:e8:e6:49:06:88:57:0b:7f:97:fa:9e:b8:78:28:42:04:66: 81:2d:25:64:50:b2:be:4a:be:09:e3:25:4f:01:29:7e:46:5d: 58:3d:ad:f0:62:07:cb:dd:4b:4e:da:02:15:75:12:74:46:68: c2:68:99:28:f6:25:e3:a4:a4:84:02:37:3a:e8:9e:b8:27:62: b9:f2:10:6d:8d:e5:f0:fe:69:22:36:82:c4:41:24:11:9c:75: 9e:4b:1b:49:7c:e6:e0:c2:95:36:ee:c8:c5:e7:d1:cb:4e:a0: f9:a2:4d:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfzps2Bre2G6zKTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBhMTZhOWEtNjY0MS00NDdhLTg2NDQtMDI1ZmNhMGM2 NjgzMB4XDTI1MDQyMzE4NDMzOFoXDTI1MDcyMjE4NDMzOFowLzEtMCsGA1UEAxMk YjY3YWYzYjgtMjk5ZC00NTczLTk0YzctNDdhNmM0MTZlOGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm521I3Kx52JGT5mTxTLYrtTiDo419uBr1NQw H28N+bbwyR7GcQ4SHCU0BeXgd81M1DjkqK/oOMcZCCx4ZPPGphucTHIMKuA6yE91 AKB1//Y6sZ571Lss0H9JyIIlF30fwKIpbSqqUqr5s//xGHQl1LMxKDg++e8LbfZz X+OI2bPR01ynOAmWW3ZJDIYgrtrSMfr8RRqgswT/mnp2UKJdZX5ksI7+Olsi7CdV A8mLzu0wK3B+QOCexA+zfNAYgCGvqJBFtuiKnpCvf1smQ7XVYsMw+IT3AJrHG6Fa amT/yRBfeRfXJfCAvEQSMx6we6qi2rpQxB9A/cAuvneGbLb6qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZpp6y2b8FckbVokxajDk7dok9kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMGEx NmE5YS02NjQxLTQ0N2EtODY0NC0wMjVmY2EwYzY2ODMvMTU4Nzg4ZWYtNTJjYi0z MWNjLTlhYzMtNTBkZjVhOGY5MjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjBhMTZhOWEtNjY0MS00NDdhLTg2 NDQtMDI1ZmNhMGM2NjgzLzIwYTE2YTlhLTY2NDEtNDQ3YS04NjQ0LTAyNWZjYTBj NjY4My5jcmwwHwYDVR0jBBgwFoAUts8sCD3xQj5nbO2j387su5swxgMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMGExNmE5YS02NjQxLTQ0N2EtODY0NC0wMjVm Y2EwYzY2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIe1iddd5zzokKoXCPsfqV7GYpiuE2eK7sbCiUAIm0TRoFNBWClu2yjm ILzrmMMoJeEr5haKSM6Dfwmu1uL9N1x5KmD0CCdrElQqtoXCUqTT5WoInsG+r0Nq uO5EW5jHK0Hk0iwT6xRfEEkf/x75iRM0oLN8g4N5C7MP6nUEWFKEx03bacfAMiKh iRmTmSgb6Yjo5kkGiFcLf5f6nrh4KEIEZoEtJWRQsr5KvgnjJU8BKX5GXVg9rfBi B8vdS07aAhV1EnRGaMJomSj2JeOkpIQCNzronrgnYrnyEG2N5fD+aSI2gsRBJBGc dZ5LG0l85uDClTbuyMXn0ctOoPmiTSM= -----END CERTIFICATE-----Generated at Wed Apr 30 22:39:21 2025 by rpki-client