$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/1659b1c5-41b8-3427-8d26-98e2e6e50854.roa File: 1659b1c5-41b8-3427-8d26-98e2e6e50854.roa (raw, json) Hash identifier: qKT0gIIkRDVwh6OGw5xWgzbqbyl1yuApvoN3QYFyHgE= Subject key identifier: 8A:3D:55:9E:C3:A7:2A:A7:BD:02:93:18:BB:43:28:C5:B0:85:9E:CC Certificate issuer: /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263 Certificate serial: 010D0C9F43285849EBEA5134B2A063CF7BA35AE0 Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/1659b1c5-41b8-3427-8d26-98e2e6e50854.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 14618 IP address blocks: 140.98.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:51:34:b2:a0:63:cf:7b:a3:5a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=166e0c54-69fe-4e00-aa2d-d044cbd73553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:45:12:5d:76:0c:75:76:6f:98:f1:a9:bd:3b: 3d:a2:64:d5:a1:9d:15:19:17:05:63:c4:b9:b7:7d: 76:3a:77:68:26:14:52:2c:1e:bc:2d:34:e6:0e:61: f9:5e:fe:8e:74:76:d5:f1:7a:26:d5:fd:c2:26:70: 2e:eb:65:9e:3d:7a:3c:b8:e1:97:10:a5:9a:9e:34: 34:70:59:10:dd:37:fb:b3:9f:2d:ce:39:a3:cd:91: bd:50:17:f0:c3:63:d3:fe:de:22:12:e4:08:20:b0: 7d:8a:c2:7d:3e:33:c5:1d:a4:bc:e2:82:65:93:31: b6:66:bf:a5:6c:ec:7c:4b:b6:21:e3:dc:d5:90:a1: 3d:61:e1:4c:38:a8:65:15:d7:34:ec:e2:06:74:b8: 28:59:69:d7:af:bc:54:5d:7e:d1:cf:f7:90:d8:6d: 69:3b:2c:41:6f:be:6c:a0:d1:ea:9c:44:75:d6:d6: c3:3d:a2:29:5a:b0:78:28:90:32:d7:d6:95:60:4d: ed:46:27:e0:e9:66:b1:ab:2f:45:f7:77:37:d8:51: 4c:36:90:99:37:dd:e4:63:3c:40:79:29:62:db:6c: 3e:34:07:47:5f:7e:19:51:57:0b:18:a9:03:4d:28: 81:c7:d8:08:f2:77:c8:f8:26:83:d6:0f:0c:1b:50: 72:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3D:55:9E:C3:A7:2A:A7:BD:02:93:18:BB:43:28:C5:B0:85:9E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/1659b1c5-41b8-3427-8d26-98e2e6e50854.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl X509v3 Authority Key Identifier: keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer sbgp-ipAddrBlock: critical IPv4: 140.98.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ea:a4:7d:19:f2:1a:79:3d:fc:4e:1b:9b:47:f5:7d:fb:ff: 84:43:fa:8d:af:dc:1a:28:f8:88:95:39:76:e2:ac:02:95:4d: 98:1d:8e:ea:3b:31:e8:59:f6:ac:05:d1:8f:b6:07:e6:d8:bb: 01:08:96:66:95:03:ec:33:19:9e:b2:b7:6c:11:4c:21:39:86: 74:c3:2b:2e:bc:07:60:34:db:b3:12:0c:e1:dd:5e:b1:5c:b8: c7:2b:93:c6:0f:e6:ff:56:fd:93:4a:36:82:5d:3e:9b:1e:ac: 02:72:29:ad:26:ee:bb:be:ce:96:c6:33:b7:eb:b1:d9:df:e6: 3d:37:74:e9:d7:fc:eb:f4:d8:72:bf:ef:11:84:8d:fb:63:c8: f7:ff:e2:d0:82:d2:a5:2b:97:7e:10:a6:75:e3:b0:08:9d:61: 69:0a:d0:c1:f8:07:88:d2:ea:41:2f:e4:1a:55:51:55:9a:3f: e3:bd:c9:c3:73:cb:a1:dd:74:dc:97:ab:85:9b:3d:c3:63:dd: 16:4e:a0:18:27:f9:a1:4f:2b:15:e4:90:df:e7:8c:f3:14:ed: 09:02:4f:8b:c0:9c:d1:b1:b4:7a:84:77:5a:14:f3:25:32:53: 33:31:c3:50:ca:df:d1:03:b6:8c:ad:cc:9a:c4:52:37:31:47: 45:8f:c4:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6lE0sqBjz3ujWuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUxMWE1Y2MtZGYwYi00YzZlLWEyMjgtMjkwMmZiZWE0 MjYzMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MTY2ZTBjNTQtNjlmZS00ZTAwLWFhMmQtZDA0NGNiZDczNTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEUSXXYMdXZvmPGpvTs9omTVoZ0VGRcFY8S5 t312OndoJhRSLB68LTTmDmH5Xv6OdHbV8Xom1f3CJnAu62WePXo8uOGXEKWanjQ0 cFkQ3Tf7s58tzjmjzZG9UBfww2PT/t4iEuQIILB9isJ9PjPFHaS84oJlkzG2Zr+l bOx8S7Yh49zVkKE9YeFMOKhlFdc07OIGdLgoWWnXr7xUXX7Rz/eQ2G1pOyxBb75s oNHqnER11tbDPaIpWrB4KJAy19aVYE3tRifg6Waxqy9F93c32FFMNpCZN93kYzxA eSli22w+NAdHX34ZUVcLGKkDTSiBx9gI8nfI+CaD1g8MG1By5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo9VZ7DpyqnvQKTGLtDKMWwhZ7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NTEx YTVjYy1kZjBiLTRjNmUtYTIyOC0yOTAyZmJlYTQyNjMvMTY1OWIxYzUtNDFiOC0z NDI3LThkMjYtOThlMmU2ZTUwODU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjUxMWE1Y2MtZGYwYi00YzZlLWEy MjgtMjkwMmZiZWE0MjYzLzY1MTFhNWNjLWRmMGItNGM2ZS1hMjI4LTI5MDJmYmVh NDI2My5jcmwwHwYDVR0jBBgwFoAU7bIECmX2igA0Jez8q6Ur+CaZGxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NTExYTVjYy1kZjBiLTRjNmUtYTIyOC0yOTAy ZmJlYTQyNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjGIZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbqpH0Z8hp5PfxOG5tH9X37/4RD+o2v3Boo+IiVOXbirAKVTZgdjuo7 MehZ9qwF0Y+2B+bYuwEIlmaVA+wzGZ6yt2wRTCE5hnTDKy68B2A027MSDOHdXrFc uMcrk8YP5v9W/ZNKNoJdPpserAJyKa0m7ru+zpbGM7frsdnf5j03dOnX/Ov02HK/ 7xGEjftjyPf/4tCC0qUrl34QpnXjsAidYWkK0MH4B4jS6kEv5BpVUVWaP+O9ycNz y6HddNyXq4WbPcNj3RZOoBgn+aFPKxXkkN/njPMU7QkCT4vAnNGxtHqEd1oU8yUy UzMxw1DK39EDtoytzJrEUjcxR0WPxJs= -----END CERTIFICATE-----Generated at Sun Jun 15 11:44:06 2025 by rpki-client