$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/e746abd4-c62e-3b05-88bc-b654eeb90c84.roa File: e746abd4-c62e-3b05-88bc-b654eeb90c84.roa (raw, json) Hash identifier: 9VSZkD29IME13SCZcXBzzApM2Zdbv8/SvV24Jqg6ZmU= Subject key identifier: 84:B7:75:4B:5F:BA:C9:9D:6E:DB:27:07:0F:C7:CE:BC:11:1C:67:49 Certificate issuer: /CN=3b8cec25-d1c2-4372-bf39-1fe2015ee1a9 Certificate serial: 010D0C9F43285849BE6EA115849C6A4543BCAA00 Authority key identifier: 7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/e746abd4-c62e-3b05-88bc-b654eeb90c84.roa Signing time: Sun 04 May 2025 18:00:19 +0000 ROA not before: Sun 04 May 2025 18:00:19 +0000 ROA not after: Sat 02 Aug 2025 18:00:19 +0000 asID: 6079 IP address blocks: 140.235.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:be:6e:a1:15:84:9c:6a:45:43:bc:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b8cec25-d1c2-4372-bf39-1fe2015ee1a9 Validity Not Before: May 4 18:00:19 2025 GMT Not After : Aug 2 18:00:19 2025 GMT Subject: CN=7c6fc873-78af-4542-b45c-9df360ac2133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6f:e0:88:f7:37:b4:84:84:98:81:76:28:93: 7c:19:44:5e:83:47:62:3d:28:70:f9:9c:26:90:6b: 2b:78:c8:2a:e9:c9:28:82:b8:0c:fe:c2:c6:21:d3: 10:6d:79:80:7b:e2:90:cd:57:e3:74:69:78:c0:c1: e6:99:08:8d:e9:7a:ec:75:03:8c:ea:b2:a6:0a:d8: b6:a2:79:9d:a0:45:67:a6:28:39:0f:5e:0b:fa:26: 92:b8:8d:56:cf:bc:5e:85:82:4b:a6:21:25:c7:ff: 97:d9:2c:f1:03:ca:f4:44:b6:4a:35:99:7f:aa:1c: 32:a5:0a:d3:09:7a:f3:af:d4:b5:a2:91:0d:24:e4: 10:cd:6c:4c:6c:51:c6:8b:c2:f9:26:40:f7:80:e3: f3:39:6c:0b:90:05:14:d7:21:e0:4f:de:d3:3c:f6: e2:f2:8a:b7:59:eb:26:93:17:25:4f:0d:a4:dd:b5: 13:1b:1b:ac:2b:9e:bc:d9:c7:07:95:e2:d4:a3:6f: 57:22:87:56:4d:57:23:b3:d4:23:23:d3:9c:5b:0f: a9:11:44:3c:23:19:e6:59:b6:2d:97:06:de:42:d1: 02:e5:8f:57:9a:52:51:29:70:54:a6:ac:3f:f9:03: 34:db:cd:88:e9:fb:10:2a:2d:8e:e7:aa:d8:21:2d: 9d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B7:75:4B:5F:BA:C9:9D:6E:DB:27:07:0F:C7:CE:BC:11:1C:67:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/e746abd4-c62e-3b05-88bc-b654eeb90c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.crl X509v3 Authority Key Identifier: keyid:7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer sbgp-ipAddrBlock: critical IPv4: 140.235.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:67:7d:b8:d2:bb:16:e8:11:47:d1:49:9c:7b:e7:61:9b:b0: df:a7:aa:5e:36:e5:74:5c:f4:c7:e3:b1:44:55:bb:aa:38:fe: 2d:08:d2:8a:7d:de:67:ec:1c:49:75:a2:96:3e:a2:cf:4d:b2: 85:0f:f5:ad:29:12:3d:0e:51:63:19:a4:89:c8:3f:94:f1:b5: 43:ad:70:20:c8:c2:14:e6:66:d6:a8:5b:54:8f:6a:06:7e:5f: 8f:d4:ba:23:4a:5f:a0:84:40:40:9e:52:18:f7:fb:d8:cf:51: b3:e2:6b:eb:2f:e0:39:14:1a:09:b9:de:88:39:2f:20:8f:08: 64:73:b4:47:40:84:cc:05:83:17:3d:59:2b:75:a7:82:6e:d2: 90:3a:1f:23:ba:71:b2:ba:6a:4e:c1:aa:9f:31:ed:d6:cc:11: b2:74:66:2b:79:90:5b:ea:7c:db:99:50:ba:8c:48:41:4e:4a: d8:57:bd:ef:e4:ad:df:e1:a4:00:b4:33:8f:c7:75:e4:86:5d: ad:64:26:8e:41:f9:8c:ee:2a:06:92:48:c3:c7:f9:66:c5:0c: 51:41:8e:68:ae:ee:fb:87:36:b7:76:af:62:cd:8f:d3:4d:f8: 41:6a:00:73:82:2e:a1:3d:0a:f6:62:7a:cf:bb:63:ef:2f:fb: e7:7c:28:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm+bqEVhJxqRUO8qgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I4Y2VjMjUtZDFjMi00MzcyLWJmMzktMWZlMjAxNWVl MWE5MB4XDTI1MDUwNDE4MDAxOVoXDTI1MDgwMjE4MDAxOVowLzEtMCsGA1UEAxMk N2M2ZmM4NzMtNzhhZi00NTQyLWI0NWMtOWRmMzYwYWMyMTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW/giPc3tISEmIF2KJN8GUReg0diPShw+Zwm kGsreMgq6ckogrgM/sLGIdMQbXmAe+KQzVfjdGl4wMHmmQiN6XrsdQOM6rKmCti2 onmdoEVnpig5D14L+iaSuI1Wz7xehYJLpiElx/+X2SzxA8r0RLZKNZl/qhwypQrT CXrzr9S1opENJOQQzWxMbFHGi8L5JkD3gOPzOWwLkAUU1yHgT97TPPbi8oq3Wesm kxclTw2k3bUTGxusK5682ccHleLUo29XIodWTVcjs9QjI9OcWw+pEUQ8IxnmWbYt lwbeQtEC5Y9XmlJRKXBUpqw/+QM0282I6fsQKi2O56rYIS2dSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS3dUtfusmdbtsnBw/HzrwRHGdJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYjhj ZWMyNS1kMWMyLTQzNzItYmYzOS0xZmUyMDE1ZWUxYTkvZTc0NmFiZDQtYzYyZS0z YjA1LTg4YmMtYjY1NGVlYjkwYzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2I4Y2VjMjUtZDFjMi00MzcyLWJm MzktMWZlMjAxNWVlMWE5LzNiOGNlYzI1LWQxYzItNDM3Mi1iZjM5LTFmZTIwMTVl ZTFhOS5jcmwwHwYDVR0jBBgwFoAUfJShhFC9NQ4zymZKtOBm7vEKO+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYjhjZWMyNS1kMWMyLTQzNzItYmYzOS0xZmUy MDE1ZWUxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5nfbjSuxboEUfRSZx752GbsN+nql425XRc9MfjsURVu6o4/i0I0op9 3mfsHEl1opY+os9NsoUP9a0pEj0OUWMZpInIP5TxtUOtcCDIwhTmZtaoW1SPagZ+ X4/UuiNKX6CEQECeUhj3+9jPUbPia+sv4DkUGgm53og5LyCPCGRztEdAhMwFgxc9 WSt1p4Ju0pA6HyO6cbK6ak7Bqp8x7dbMEbJ0Zit5kFvqfNuZULqMSEFOSthXve/k rd/hpAC0M4/HdeSGXa1kJo5B+YzuKgaSSMPH+WbFDFFBjmiu7vuHNrd2r2LNj9NN +EFqAHOCLqE9CvZies+7Y+8v++d8KCg= -----END CERTIFICATE-----Generated at Sun Jun 15 11:36:50 2025 by rpki-client