$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/e746abd4-c62e-3b05-88bc-b654eeb90c84.roa File: e746abd4-c62e-3b05-88bc-b654eeb90c84.roa (raw, json) Hash identifier: NODiQ28pC0168Nk22hr9PKHX9Jnkow/CjGHQm2yyc+w= Subject key identifier: DE:5F:EC:8F:51:08:0F:8A:D8:26:43:44:70:D5:83:E4:52:DF:74:69 Certificate issuer: /CN=3b8cec25-d1c2-4372-bf39-1fe2015ee1a9 Certificate serial: 010D0C9F4328584A9E961215D3C34FF6298C3380 Authority key identifier: 7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/e746abd4-c62e-3b05-88bc-b654eeb90c84.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 6079 IP address blocks: 140.235.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:12:15:d3:c3:4f:f6:29:8c:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b8cec25-d1c2-4372-bf39-1fe2015ee1a9 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=4aba7118-b4a1-4459-b5e9-49094e0407b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:7c:63:d7:f1:ac:c8:bf:f4:e3:0b:4e:52: e4:bd:54:ba:80:0c:0f:8e:49:60:30:e5:17:3c:72: b7:9a:1a:55:94:3d:fd:9d:0b:88:20:b8:7f:01:1c: 24:c2:74:9c:9a:88:b0:70:6f:2b:66:85:59:d8:5d: 37:84:d1:47:3c:95:31:32:0e:1b:c5:a7:46:5c:26: cc:02:7d:50:20:85:3c:e3:9b:d7:21:80:83:40:1c: 60:bb:01:42:16:f8:d5:d0:b5:b5:9d:7a:19:04:64: 78:fc:87:c3:43:49:d3:bb:3d:aa:2d:01:4d:70:84: 41:32:b6:25:5d:5c:0a:9e:a2:43:eb:36:0f:02:00: 8d:54:03:f2:4b:fb:99:f2:a9:24:75:b6:81:6f:66: 6b:f7:4a:af:50:6e:0f:8b:c4:8d:82:26:c6:12:74: c6:95:c8:3a:22:33:75:4d:bd:d3:24:88:08:3f:ea: b1:36:00:81:4f:09:30:e7:5f:08:3c:7d:94:f9:20: dd:4c:79:72:0b:e9:d7:cc:66:60:fe:08:6f:b7:6a: f4:72:23:83:d5:19:51:82:e9:85:79:de:73:91:c9: 66:f6:1c:4f:89:00:7f:31:c8:fa:15:c5:de:e5:05: a3:ce:50:4e:36:8f:ad:05:ac:cb:46:d6:0e:12:f4: 7b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5F:EC:8F:51:08:0F:8A:D8:26:43:44:70:D5:83:E4:52:DF:74:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/e746abd4-c62e-3b05-88bc-b654eeb90c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.crl X509v3 Authority Key Identifier: keyid:7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer sbgp-ipAddrBlock: critical IPv4: 140.235.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:7e:76:e7:a9:57:b6:aa:2d:e9:07:bd:86:b6:ca:23:4c:36: 12:df:2f:af:77:73:44:85:2c:b4:42:6d:28:2b:71:c2:78:f0: 14:f9:ae:4e:0f:f4:ea:f6:65:41:bd:12:23:1a:9d:51:44:9e: bb:97:c9:27:06:40:57:af:9b:34:4a:1b:a7:31:b5:f1:f0:84: 4b:25:9d:5e:fd:3b:3a:c4:8d:37:05:f2:ef:8d:64:0d:eb:6d: a0:6f:85:0b:cd:ab:f4:b6:30:9f:b0:6c:53:26:27:f2:a0:3a: fb:4f:49:71:f3:72:c0:be:26:6f:b8:a1:56:95:ac:94:d2:dc: 03:92:de:29:0e:d1:42:fb:96:2b:78:1c:94:0a:2e:4b:4c:a1: 54:16:de:d7:88:11:5f:98:35:ad:16:33:b4:01:63:6d:c8:57: b5:91:20:42:b0:bb:bc:75:8f:b0:50:b8:24:b4:90:f1:ab:63: d0:31:b8:f7:81:8a:19:90:d0:1e:0e:7d:2f:1e:5b:33:76:e5: 91:e7:a0:da:be:d8:61:a6:2d:8c:ee:e7:7a:20:6a:ce:85:2c: e1:d9:58:df:25:52:5d:35:df:9a:c0:8f:6c:f5:75:c0:74:e9: da:d7:e3:af:e4:3f:b2:7e:c3:4e:fc:e3:17:d2:2e:60:d5:ab: 83:57:c8:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelhIV08NP9imMM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I4Y2VjMjUtZDFjMi00MzcyLWJmMzktMWZlMjAxNWVl MWE5MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NGFiYTcxMTgtYjRhMS00NDU5LWI1ZTktNDkwOTRlMDQwN2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyat8Y9fxrMi/9OMLTlLkvVS6gAwPjklgMOUX PHK3mhpVlD39nQuIILh/ARwkwnScmoiwcG8rZoVZ2F03hNFHPJUxMg4bxadGXCbM An1QIIU845vXIYCDQBxguwFCFvjV0LW1nXoZBGR4/IfDQ0nTuz2qLQFNcIRBMrYl XVwKnqJD6zYPAgCNVAPyS/uZ8qkkdbaBb2Zr90qvUG4Pi8SNgibGEnTGlcg6IjN1 Tb3TJIgIP+qxNgCBTwkw518IPH2U+SDdTHlyC+nXzGZg/ghvt2r0ciOD1RlRgumF ed5zkclm9hxPiQB/Mcj6FcXe5QWjzlBONo+tBazLRtYOEvR7/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5f7I9RCA+K2CZDRHDVg+RS33RpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYjhj ZWMyNS1kMWMyLTQzNzItYmYzOS0xZmUyMDE1ZWUxYTkvZTc0NmFiZDQtYzYyZS0z YjA1LTg4YmMtYjY1NGVlYjkwYzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2I4Y2VjMjUtZDFjMi00MzcyLWJm MzktMWZlMjAxNWVlMWE5LzNiOGNlYzI1LWQxYzItNDM3Mi1iZjM5LTFmZTIwMTVl ZTFhOS5jcmwwHwYDVR0jBBgwFoAUfJShhFC9NQ4zymZKtOBm7vEKO+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYjhjZWMyNS1kMWMyLTQzNzItYmYzOS0xZmUy MDE1ZWUxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABx+duepV7aqLekHvYa2yiNMNhLfL693c0SFLLRCbSgrccJ48BT5rk4P 9Or2ZUG9EiManVFEnruXyScGQFevmzRKG6cxtfHwhEslnV79OzrEjTcF8u+NZA3r baBvhQvNq/S2MJ+wbFMmJ/KgOvtPSXHzcsC+Jm+4oVaVrJTS3AOS3ikO0UL7lit4 HJQKLktMoVQW3teIEV+YNa0WM7QBY23IV7WRIEKwu7x1j7BQuCS0kPGrY9AxuPeB ihmQ0B4OfS8eWzN25ZHnoNq+2GGmLYzu53ogas6FLOHZWN8lUl0135rAj2z1dcB0 6drX46/kP7J+w0784xfSLmDVq4NXyLA= -----END CERTIFICATE-----Generated at Mon Aug 4 15:30:17 2025 by rpki-client