$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/a684e03c-762f-380d-9364-a51ce895efa3.roa File: a684e03c-762f-380d-9364-a51ce895efa3.roa (raw, json) Hash identifier: iDW0aUTlLw8zPFksqjsGzi1TEa5cfsKtrkz7zSaGCxU= Subject key identifier: E0:27:95:11:AD:C4:96:D7:27:53:07:77:C4:02:57:12:D9:83:8A:21 Certificate issuer: /CN=7a0faf4a-643d-4023-8090-81f838253675 Certificate serial: 010D0C9F4328584A936B5EF513C243138D97C480 Authority key identifier: EF:C8:A4:48:B5:9E:36:86:28:E9:62:B0:0B:D6:1C:92:8F:24:44:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/a684e03c-762f-380d-9364-a51ce895efa3.roa Signing time: Sun 20 Jul 2025 01:00:50 +0000 ROA not before: Sun 20 Jul 2025 01:00:50 +0000 ROA not after: Sat 18 Oct 2025 01:00:50 +0000 asID: 26214 IP address blocks: 148.59.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/7a0faf4a-643d-4023-8090-81f838253675.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/7a0faf4a-643d-4023-8090-81f838253675.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:93:6b:5e:f5:13:c2:43:13:8d:97:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0faf4a-643d-4023-8090-81f838253675 Validity Not Before: Jul 20 01:00:50 2025 GMT Not After : Oct 18 01:00:50 2025 GMT Subject: CN=bfc9ea37-9e3f-4833-b4b9-cd4ca5ebf542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:02:39:30:c6:b7:79:1a:a1:3c:36:af:4d:1c: ea:09:46:ac:b8:02:20:5c:54:1d:f9:69:e4:b7:2f: 0d:d3:87:9e:cf:d0:07:bb:8a:f1:c0:73:cf:50:42: a3:8b:2e:15:da:5a:39:ee:c9:8e:bd:3a:7c:ac:14: 70:0d:35:96:bb:d4:16:06:19:3e:84:08:ab:e4:e8: 1b:11:0a:68:40:14:44:52:75:97:07:cf:c5:a8:5f: d5:ee:ce:6d:12:1b:58:e8:ef:17:92:5b:5f:18:fa: 7b:1d:83:b4:25:28:7e:80:84:94:07:7d:3f:66:a4: af:02:2f:b5:67:ff:d1:28:5a:e1:c9:f6:28:d1:76: b0:cc:3c:66:79:b6:f4:60:bb:4a:f0:f6:08:5e:cb: 6b:00:e5:26:cf:2d:a2:2f:7b:d2:5d:42:c6:65:bc: a6:83:4f:6d:5b:39:1b:a3:3f:fc:9c:00:e2:f8:8f: 7d:3e:bb:f5:c7:b1:74:33:93:68:10:06:e9:f8:68: 98:4b:81:04:51:de:98:c5:e5:47:4e:87:c3:d2:69: b2:da:f2:33:c0:0c:72:1d:79:5f:ee:c7:60:5a:d8: b0:a0:63:86:1e:ab:00:06:36:f0:77:b9:30:b5:d3: 70:8a:6e:a7:bb:8a:a7:81:dd:6b:05:b8:9e:b2:29: 18:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:27:95:11:AD:C4:96:D7:27:53:07:77:C4:02:57:12:D9:83:8A:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/a684e03c-762f-380d-9364-a51ce895efa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/7a0faf4a-643d-4023-8090-81f838253675.crl X509v3 Authority Key Identifier: keyid:EF:C8:A4:48:B5:9E:36:86:28:E9:62:B0:0B:D6:1C:92:8F:24:44:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675.cer sbgp-ipAddrBlock: critical IPv4: 148.59.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:cc:c2:b9:33:e6:c1:1a:f5:de:40:c2:35:91:0e:bb:1a:c1: b6:86:1b:4c:3f:7a:41:1b:2f:da:d9:91:48:6b:b0:0b:04:a1: 52:9d:c0:d4:e3:c3:be:70:a1:e4:01:26:73:82:0b:60:4d:c3: ae:b2:4a:e5:4b:52:b2:aa:98:ba:c6:68:08:0d:3d:9e:74:d9: 46:b3:5c:35:82:0b:76:00:8b:6e:5d:c2:1a:b0:79:eb:6f:f5: 1c:6e:25:76:76:8b:5b:26:cd:84:8d:7f:a6:72:40:16:5a:01: 2f:36:1f:fb:54:25:ba:66:17:32:66:20:54:85:59:93:af:d8: 1e:95:18:73:10:27:48:6a:2a:3e:fd:1d:17:83:e7:4d:b5:6a: 51:c7:eb:68:89:2e:18:f8:f2:84:2d:06:08:8d:17:57:ed:1c: 28:3e:53:fc:a9:40:42:fc:1b:c6:05:5a:89:a7:e3:b8:8f:ef: df:7a:93:d4:02:a5:6a:fc:c4:6f:ec:b7:2d:ff:ff:41:f4:23: e5:a9:ea:c4:cb:ef:a7:e9:de:7e:af:ed:40:52:ea:28:d9:79: 62:f1:e0:74:08:f1:61:99:01:9f:3a:71:88:86:bb:d7:c3:a8: 2f:d9:a3:29:18:e4:0c:c5:f3:70:68:0a:91:06:55:b9:5f:9c: eb:40:86:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqTa171E8JDE42XxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZmFmNGEtNjQzZC00MDIzLTgwOTAtODFmODM4MjUz Njc1MB4XDTI1MDcyMDAxMDA1MFoXDTI1MTAxODAxMDA1MFowLzEtMCsGA1UEAxMk YmZjOWVhMzctOWUzZi00ODMzLWI0YjktY2Q0Y2E1ZWJmNTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgI5MMa3eRqhPDavTRzqCUasuAIgXFQd+Wnk ty8N04eez9AHu4rxwHPPUEKjiy4V2lo57smOvTp8rBRwDTWWu9QWBhk+hAir5Ogb EQpoQBREUnWXB8/FqF/V7s5tEhtY6O8XkltfGPp7HYO0JSh+gISUB30/ZqSvAi+1 Z//RKFrhyfYo0XawzDxmebb0YLtK8PYIXstrAOUmzy2iL3vSXULGZbymg09tWzkb oz/8nADi+I99Prv1x7F0M5NoEAbp+GiYS4EEUd6YxeVHTofD0mmy2vIzwAxyHXlf 7sdgWtiwoGOGHqsABjbwd7kwtdNwim6nu4qngd1rBbiesikYIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAnlRGtxJbXJ1MHd8QCVxLZg4ohMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YTBm YWY0YS02NDNkLTQwMjMtODA5MC04MWY4MzgyNTM2NzUvYTY4NGUwM2MtNzYyZi0z ODBkLTkzNjQtYTUxY2U4OTVlZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2EwZmFmNGEtNjQzZC00MDIzLTgw OTAtODFmODM4MjUzNjc1LzdhMGZhZjRhLTY0M2QtNDAyMy04MDkwLTgxZjgzODI1 MzY3NS5jcmwwHwYDVR0jBBgwFoAU78ikSLWeNoYo6WKwC9Ycko8kRBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YTBmYWY0YS02NDNkLTQwMjMtODA5MC04MWY4 MzgyNTM2NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfMwrkz5sEa9d5AwjWRDrsawbaGG0w/ekEbL9rZkUhrsAsEoVKdwNTj w75woeQBJnOCC2BNw66ySuVLUrKqmLrGaAgNPZ502UazXDWCC3YAi25dwhqweetv 9RxuJXZ2i1smzYSNf6ZyQBZaAS82H/tUJbpmFzJmIFSFWZOv2B6VGHMQJ0hqKj79 HReD5021alHH62iJLhj48oQtBgiNF1ftHCg+U/ypQEL8G8YFWomn47iP7996k9QC pWr8xG/sty3//0H0I+Wp6sTL76fp3n6v7UBS6ijZeWLx4HQI8WGZAZ86cYiGu9fD qC/ZoykY5AzF83BoCpEGVblfnOtAhhU= -----END CERTIFICATE-----Generated at Sun Aug 10 03:45:06 2025 by rpki-client