$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/2a6bf328-cf96-3ace-bda5-7008e51790d7.roa File: 2a6bf328-cf96-3ace-bda5-7008e51790d7.roa (raw, json) Hash identifier: fCIdJbIGG0GVQqy8d2HIwWlmpKjMA3H3UAPVrMqAD7g= Subject key identifier: 5A:9F:E3:5A:D8:CC:35:5D:70:37:17:0B:73:82:1A:97:C3:EF:E3:5E Certificate issuer: /CN=fd41a5ea-0768-429c-8541-83d829a5518c Certificate serial: 010D0C9F43285849F87A943A7321EB0508036880 Authority key identifier: F3:6D:03:2A:F7:BB:FF:77:C1:97:8A:1A:D0:C9:09:51:92:3C:A7:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/2a6bf328-cf96-3ace-bda5-7008e51790d7.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 1239 IP address blocks: 139.64.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:94:3a:73:21:eb:05:08:03:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd41a5ea-0768-429c-8541-83d829a5518c Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=09a07cff-ccd1-4b43-b79b-33214d477d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ee:f2:12:76:10:20:14:23:05:f9:f2:00:d8: 30:fa:3e:57:fc:6c:13:5f:13:13:1c:c4:36:31:b7: eb:9d:43:1c:ba:0c:39:8b:45:a1:46:17:69:08:f0: 73:9e:ed:88:3a:80:93:ce:be:17:b4:f0:70:10:09: d7:3e:6c:ae:b6:a0:ab:17:7d:24:cf:a8:a4:68:e8: 4a:a9:d8:46:ef:a7:80:ad:44:20:c8:5a:d6:27:8b: ab:75:90:6c:2c:de:49:1d:f6:2b:af:da:c1:03:71: 44:a7:7a:f4:5d:aa:8d:ba:fd:20:8b:37:b5:3c:9f: 43:00:47:94:96:a4:5f:63:e1:20:e4:d8:7f:a4:6c: c8:01:f6:69:8b:ee:95:65:61:5a:b8:93:f8:12:0b: f9:94:ab:5c:ad:92:28:c2:b8:69:2d:4d:06:11:5e: 34:b0:76:45:7c:62:d0:d5:c0:ec:08:be:19:f9:04: 0e:99:23:8d:36:62:53:bf:da:36:25:05:83:9f:f4: 6d:f2:7d:1d:4b:b9:d5:63:15:d9:85:9c:5c:5e:b1: b3:da:d4:2f:69:e6:53:29:7b:23:b5:03:67:48:10: 98:8f:a9:14:11:7d:f8:70:73:80:d1:64:3b:b3:e3: b9:f8:9d:f7:de:3a:fc:d1:3c:a0:95:55:30:db:0c: f7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9F:E3:5A:D8:CC:35:5D:70:37:17:0B:73:82:1A:97:C3:EF:E3:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/2a6bf328-cf96-3ace-bda5-7008e51790d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.crl X509v3 Authority Key Identifier: keyid:F3:6D:03:2A:F7:BB:FF:77:C1:97:8A:1A:D0:C9:09:51:92:3C:A7:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer sbgp-ipAddrBlock: critical IPv4: 139.64.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:46:2f:37:68:6e:23:47:af:df:15:70:4a:40:34:71:5d:0c: 2f:9e:44:46:3e:01:8d:c8:cb:1a:47:b4:60:c3:7d:7e:90:4c: 78:6c:f4:cd:02:ae:fd:90:57:55:3a:f4:98:b0:d0:b5:ed:35: 4b:51:00:f3:90:d3:13:1f:bb:fa:e3:6b:ab:ca:e8:cb:e0:a3: 34:28:1a:7e:f4:27:f2:01:ac:86:76:20:cf:c9:0f:28:c1:bf: 8e:c3:a6:c2:25:65:d6:7a:b7:87:c7:f3:3c:15:a4:0c:34:f5: 94:e6:3b:ff:1e:5a:53:57:65:c3:b6:95:61:27:4f:c0:35:78: 06:ff:a2:08:ef:6d:6b:f7:50:ec:12:24:f4:e9:34:dc:85:79: 15:2b:13:d9:f6:21:19:1b:1e:8b:3d:5e:6d:b1:3b:63:bf:9b: e3:81:36:ab:96:ba:cb:80:de:04:c9:58:d1:e4:ab:12:c6:69: 71:73:5a:b5:62:97:d3:ce:82:aa:a2:97:e9:ee:90:a0:aa:29: f2:90:ba:47:78:7f:39:a3:3d:8b:2d:ce:71:74:ad:60:d1:6c: 98:cd:cf:37:5d:1b:c9:d3:75:dd:03:2f:53:64:15:cb:ea:0c: 11:e4:fd:bc:ca:e4:7a:b7:e2:2b:d0:b6:4c:69:f4:fc:91:b8: 72:21:e4:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4epQ6cyHrBQgDaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ0MWE1ZWEtMDc2OC00MjljLTg1NDEtODNkODI5YTU1 MThjMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk MDlhMDdjZmYtY2NkMS00YjQzLWI3OWItMzMyMTRkNDc3ZDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+7yEnYQIBQjBfnyANgw+j5X/GwTXxMTHMQ2 MbfrnUMcugw5i0WhRhdpCPBznu2IOoCTzr4XtPBwEAnXPmyutqCrF30kz6ikaOhK qdhG76eArUQgyFrWJ4urdZBsLN5JHfYrr9rBA3FEp3r0XaqNuv0gize1PJ9DAEeU lqRfY+Eg5Nh/pGzIAfZpi+6VZWFauJP4Egv5lKtcrZIowrhpLU0GEV40sHZFfGLQ 1cDsCL4Z+QQOmSONNmJTv9o2JQWDn/Rt8n0dS7nVYxXZhZxcXrGz2tQvaeZTKXsj tQNnSBCYj6kUEX34cHOA0WQ7s+O5+J333jr80TyglVUw2wz3mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqf41rYzDVdcDcXC3OCGpfD7+NeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDQx YTVlYS0wNzY4LTQyOWMtODU0MS04M2Q4MjlhNTUxOGMvMmE2YmYzMjgtY2Y5Ni0z YWNlLWJkYTUtNzAwOGU1MTc5MGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQ0MWE1ZWEtMDc2OC00MjljLTg1 NDEtODNkODI5YTU1MThjL2ZkNDFhNWVhLTA3NjgtNDI5Yy04NTQxLTgzZDgyOWE1 NTE4Yy5jcmwwHwYDVR0jBBgwFoAU820DKve7/3fBl4oa0MkJUZI8pyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDQxYTVlYS0wNzY4LTQyOWMtODU0MS04M2Q4 MjlhNTUxOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi0DsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNGLzdobiNHr98VcEpANHFdDC+eREY+AY3IyxpHtGDDfX6QTHhs9M0C rv2QV1U69Jiw0LXtNUtRAPOQ0xMfu/rja6vK6MvgozQoGn70J/IBrIZ2IM/JDyjB v47DpsIlZdZ6t4fH8zwVpAw09ZTmO/8eWlNXZcO2lWEnT8A1eAb/ogjvbWv3UOwS JPTpNNyFeRUrE9n2IRkbHos9Xm2xO2O/m+OBNquWusuA3gTJWNHkqxLGaXFzWrVi l9POgqqil+nukKCqKfKQukd4fzmjPYstznF0rWDRbJjNzzddG8nTdd0DL1NkFcvq DBHk/bzK5Hq34ivQtkxp9PyRuHIh5FY= -----END CERTIFICATE-----Generated at Sun Jun 15 05:17:02 2025 by rpki-client