$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6eb08eda-b23a-3953-8077-3280ae29b254.roa File: 6eb08eda-b23a-3953-8077-3280ae29b254.roa (raw, json) Hash identifier: kyliUF9zvDNgd2F0rV3rSc+VyL1GRRnPaPmqkWs0u7o= Subject key identifier: 6A:66:B7:28:84:AB:10:BA:7D:1D:17:3F:C9:06:F8:3C:92:19:9F:FA Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584A331B1893242F3945DD8C32F0 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6eb08eda-b23a-3953-8077-3280ae29b254.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 54113 IP address blocks: 140.248.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1b:18:93:24:2f:39:45:dd:8c:32:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=2e4838d7-afba-4c49-bde8-45d7f41101f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:68:20:b3:91:f0:14:12:d7:21:dd:d5:2e:76: bc:7b:b8:86:2e:1c:a5:12:79:85:fe:7b:af:1a:d4: 28:bb:74:d6:57:a2:5e:ba:25:0b:7e:d3:0b:c5:cc: 68:e9:42:ba:c8:ff:be:dc:ba:2c:0c:00:64:1f:eb: cc:5a:c0:81:52:d9:bc:1f:44:10:ba:cd:42:1c:63: a8:a7:4f:dd:3c:aa:16:11:ef:63:74:10:3c:1c:5a: f5:a3:da:3a:39:3e:9e:ef:04:a3:22:68:6c:b5:47: 4d:22:d8:f1:21:6d:8f:b2:c5:bd:99:c4:fb:85:85: 50:68:a2:d9:02:3b:8b:4d:2c:69:7d:14:71:7c:46: 74:ed:30:ab:cb:37:15:52:5d:e7:55:c2:1a:19:13: ad:c3:bd:17:51:99:85:79:23:10:35:97:f6:c9:7d: 31:2a:17:c7:81:0a:fb:0a:4c:8e:66:b3:21:98:15: cf:c5:84:59:4c:f8:40:5f:5e:4a:cc:86:29:f9:b9: 41:75:41:df:0c:a2:eb:08:ab:6d:25:a9:87:f1:9e: dc:f7:36:7e:b6:64:3f:bf:41:9c:47:24:92:de:e1: dc:70:df:8a:79:68:d5:bd:71:a7:76:9a:b2:5a:e7: 97:3a:4c:94:c6:40:22:df:fd:43:90:d3:54:b5:d7: 6f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:66:B7:28:84:AB:10:BA:7D:1D:17:3F:C9:06:F8:3C:92:19:9F:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6eb08eda-b23a-3953-8077-3280ae29b254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:3a:00:7f:74:ea:8f:c7:bb:30:e7:cc:5d:31:6f:d0:a5:51: 1c:27:36:d0:97:03:81:d7:6b:80:45:6c:a0:6d:41:f5:ff:2a: f3:f5:58:2c:31:4a:46:c3:59:7c:7d:c4:57:65:86:8a:2a:fb: 8b:7b:05:f2:9b:9e:45:64:40:d0:03:e0:47:ef:cd:90:55:82: 48:e7:8f:13:05:5f:8d:72:20:27:39:db:0b:e5:86:b5:02:bd: fc:8f:31:20:9c:f2:09:f4:b8:24:eb:3d:bf:dc:88:76:b4:42: ce:8a:a1:56:c5:9a:e0:d0:63:60:f2:2f:e5:70:cb:08:d4:a9: f5:fe:9b:e1:e9:c1:89:d2:39:e8:a9:35:ce:c9:2d:ac:9d:5a: 88:42:c7:93:21:3f:eb:5a:61:f8:e7:f2:a8:f4:e7:69:d5:e1: bf:a5:9b:ab:f5:ab:70:5a:69:6b:52:c8:88:a0:e4:b7:b5:9d: 8f:29:ea:d8:52:ed:da:04:a2:0f:0f:71:2e:64:48:50:8f:b1: da:9d:80:c1:e3:7d:14:54:ea:c2:d5:4e:93:08:dd:30:a4:eb: 4f:21:74:10:2c:a5:75:3d:8d:a5:d8:9e:b5:20:e8:0b:21:72: fa:13:b6:59:4b:24:4a:67:2b:45:d8:f8:1b:da:e1:cf:2b:93: 2d:a3:01:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGxiTJC85Rd2MMvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk MmU0ODM4ZDctYWZiYS00YzQ5LWJkZTgtNDVkN2Y0MTEwMWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWggs5HwFBLXId3VLna8e7iGLhylEnmF/nuv GtQou3TWV6JeuiULftMLxcxo6UK6yP++3LosDABkH+vMWsCBUtm8H0QQus1CHGOo p0/dPKoWEe9jdBA8HFr1o9o6OT6e7wSjImhstUdNItjxIW2PssW9mcT7hYVQaKLZ AjuLTSxpfRRxfEZ07TCryzcVUl3nVcIaGROtw70XUZmFeSMQNZf2yX0xKhfHgQr7 CkyOZrMhmBXPxYRZTPhAX15KzIYp+blBdUHfDKLrCKttJamH8Z7c9zZ+tmQ/v0Gc RySS3uHccN+KeWjVvXGndpqyWueXOkyUxkAi3/1DkNNUtddvJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpmtyiEqxC6fR0XP8kG+DySGZ/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNmViMDhlZGEtYjIzYS0z OTUzLTgwNzctMzI4MGFlMjliMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM6AH906o/HuzDnzF0xb9ClURwnNtCXA4HXa4BFbKBtQfX/KvP1WCwx SkbDWXx9xFdlhooq+4t7BfKbnkVkQNAD4EfvzZBVgkjnjxMFX41yICc52wvlhrUC vfyPMSCc8gn0uCTrPb/ciHa0Qs6KoVbFmuDQY2DyL+VwywjUqfX+m+HpwYnSOeip Nc7JLaydWohCx5MhP+taYfjn8qj052nV4b+lm6v1q3BaaWtSyIig5Le1nY8p6thS 7doEog8PcS5kSFCPsdqdgMHjfRRU6sLVTpMI3TCk608hdBAspXU9jaXYnrUg6Ash cvoTtllLJEpnK0XY+Bva4c8rky2jAWs= -----END CERTIFICATE-----Generated at Tue Jun 17 12:13:54 2025 by rpki-client