$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/21e16498-e39c-38cd-a8f8-470bb4f66f80.roa File: 21e16498-e39c-38cd-a8f8-470bb4f66f80.roa (raw, json) Hash identifier: oaIeBU/XbZUNXp+VWlf4CXZfsHfe1gszosNUCwnSuPA= Subject key identifier: BF:EB:5E:05:E6:23:6D:54:72:7F:84:DC:75:2E:9B:94:2F:A6:7F:87 Certificate issuer: /CN=1c5adecb-4ac8-432f-817c-84bec47b7708 Certificate serial: 010D0C9F4328584AB91B9FA0F60D08DA7BFFF3C0 Authority key identifier: 55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/21e16498-e39c-38cd-a8f8-470bb4f66f80.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 398416 IP address blocks: 149.234.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:9f:a0:f6:0d:08:da:7b:ff:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5adecb-4ac8-432f-817c-84bec47b7708 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=6303a5e1-2f3e-42bf-8314-11d5dc1231c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:90:5c:43:60:1d:80:d9:7d:12:ac:b3:f4:7b: 44:44:34:4e:c4:a6:ad:e9:84:1f:0a:91:3d:7d:c6: e6:08:7a:2f:d8:9b:d0:7b:a9:f5:ef:9e:d7:2e:ce: 50:50:b4:67:9f:28:84:b4:60:43:56:ca:6d:4b:4c: 3e:4f:10:8a:80:1c:bd:d5:9b:07:02:8a:0f:dd:a8: 7d:00:0b:98:a9:b6:da:91:51:b8:3e:48:44:ab:41: 34:fa:b4:3e:65:96:be:a7:8c:fa:1e:0e:25:2d:21: 24:9c:ed:83:84:72:c3:0f:29:6d:a0:65:ba:cd:68: 30:05:ca:7a:7f:4f:20:09:4e:be:af:fd:60:6c:49: a1:18:90:d5:c0:dd:d4:ae:cb:d9:85:fe:a3:fd:b5: b2:d9:41:f1:bf:b9:c8:e9:75:b4:45:51:85:61:8c: 99:79:95:f1:f5:27:83:5e:e0:1f:6a:37:2d:f1:90: 5d:d9:a6:34:ea:f4:46:6c:b1:25:40:f9:85:01:22: 7b:c3:34:1e:e9:98:79:1a:f2:2a:f1:88:99:07:b4: 46:1b:f9:35:11:fe:f0:47:8a:ba:4d:b6:da:92:68: 30:e5:98:76:4e:df:7f:e9:4b:2a:07:2a:4f:6f:b0: d9:42:7e:38:68:d5:6e:55:3a:a8:07:41:d6:36:7c: 40:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EB:5E:05:E6:23:6D:54:72:7F:84:DC:75:2E:9B:94:2F:A6:7F:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/21e16498-e39c-38cd-a8f8-470bb4f66f80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl X509v3 Authority Key Identifier: keyid:55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer sbgp-ipAddrBlock: critical IPv4: 149.234.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:89:4d:65:9b:4c:e9:61:cf:c0:b1:e5:97:1a:3a:b0:0e:e1: 55:8f:ea:ad:b0:cb:4c:53:c8:00:2d:59:ba:26:aa:59:8a:15: 70:21:0d:22:02:10:39:f8:0c:d2:d1:d9:88:66:55:17:f9:24: 81:29:a3:0a:3e:96:93:53:05:de:98:3b:48:e4:0e:f4:a1:e5: 17:85:f0:90:b2:42:6e:8b:8a:82:00:05:d9:08:b5:7e:0d:ce: 9d:2c:25:44:11:f4:58:be:c3:41:e6:4f:41:31:42:40:24:5c: 06:73:a5:2e:a6:e9:7d:13:7a:14:ba:b2:42:d3:10:94:e9:10: de:7a:69:4b:9e:cb:78:50:26:a5:60:1a:8e:e7:da:a2:06:7c: de:8e:a2:0f:59:83:87:7f:48:d0:1e:e9:24:6d:47:0d:ee:b4: ac:4f:81:d7:af:02:ca:6e:7d:ef:19:4f:5d:de:29:43:e8:d6: fd:a8:84:a0:2f:82:36:b3:49:f1:e6:c9:4c:70:7a:9b:58:c3: ee:51:88:97:3a:52:02:88:f5:4c:5f:c6:b1:8a:5b:50:1c:ab: 83:42:53:45:75:c1:f6:67:18:7f:47:6b:84:56:d3:95:86:cd: 60:b1:6f:b5:01:73:da:d7:fe:35:43:57:23:52:8b:85:fc:45: e4:dc:ed:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G5+g9g0I2nv/88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWRlY2ItNGFjOC00MzJmLTgxN2MtODRiZWM0N2I3 NzA4MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NjMwM2E1ZTEtMmYzZS00MmJmLTgzMTQtMTFkNWRjMTIzMWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5BcQ2AdgNl9Eqyz9HtERDROxKat6YQfCpE9 fcbmCHov2JvQe6n1757XLs5QULRnnyiEtGBDVsptS0w+TxCKgBy91ZsHAooP3ah9 AAuYqbbakVG4PkhEq0E0+rQ+ZZa+p4z6Hg4lLSEknO2DhHLDDyltoGW6zWgwBcp6 f08gCU6+r/1gbEmhGJDVwN3UrsvZhf6j/bWy2UHxv7nI6XW0RVGFYYyZeZXx9SeD XuAfajct8ZBd2aY06vRGbLElQPmFASJ7wzQe6Zh5GvIq8YiZB7RGG/k1Ef7wR4q6 Tbbakmgw5Zh2Tt9/6UsqBypPb7DZQn44aNVuVTqoB0HWNnxAfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/rXgXmI21Ucn+E3HUum5Qvpn+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZGVjYi00YWM4LTQzMmYtODE3Yy04NGJlYzQ3Yjc3MDgvMjFlMTY0OTgtZTM5Yy0z OGNkLWE4ZjgtNDcwYmI0ZjY2ZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWRlY2ItNGFjOC00MzJmLTgx N2MtODRiZWM0N2I3NzA4LzFjNWFkZWNiLTRhYzgtNDMyZi04MTdjLTg0YmVjNDdi NzcwOC5jcmwwHwYDVR0jBBgwFoAUVaoUdtgDOMPMCm7zFN4yMK4vgBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZGVjYi00YWM4LTQzMmYtODE3Yy04NGJl YzQ3Yjc3MDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlerwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISJTWWbTOlhz8Cx5ZcaOrAO4VWP6q2wy0xTyAAtWbomqlmKFXAhDSIC EDn4DNLR2YhmVRf5JIEpowo+lpNTBd6YO0jkDvSh5ReF8JCyQm6LioIABdkItX4N zp0sJUQR9Fi+w0HmT0ExQkAkXAZzpS6m6X0TehS6skLTEJTpEN56aUuey3hQJqVg Go7n2qIGfN6Oog9Zg4d/SNAe6SRtRw3utKxPgdevAspufe8ZT13eKUPo1v2ohKAv gjazSfHmyUxweptYw+5RiJc6UgKI9UxfxrGKW1Acq4NCU0V1wfZnGH9Ha4RW05WG zWCxb7UBc9rX/jVDVyNSi4X8ReTc7eg= -----END CERTIFICATE-----Generated at Mon Aug 4 14:20:07 2025 by rpki-client