$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa File: 774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa (raw, json) Hash identifier: i1TgF7e8L38Hrpwkuq/4YsmbPRZM9k17ZsD2RLn7i4E= Subject key identifier: 5A:DE:65:C0:4D:7A:98:87:B4:68:D8:A8:88:B3:E7:04:2F:65:84:F0 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584A8B0B50E8A0B4B5A6F814E700 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 16433 IP address blocks: 173.240.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:50:e8:a0:b4:b5:a6:f8:14:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=bbde6b53-7d07-4d40-a12d-5f92dd98cc3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4c:12:49:ea:a7:f9:eb:90:ad:d1:ee:44:10: da:1f:ed:8e:66:0d:b4:77:5a:63:96:4b:63:bc:43: 85:27:c8:42:cc:c9:93:2e:ed:e3:8d:de:a7:22:3c: 9d:cd:a2:59:bc:65:07:28:1e:7b:c4:4f:b9:6f:78: 5c:30:41:5f:4e:86:0f:9b:94:ba:d6:1e:86:f0:30: 0c:ae:b3:3d:e4:fb:e6:75:50:38:7a:67:20:16:96: 3f:ac:be:32:a4:b9:29:9f:c2:0f:84:ba:1d:b0:e0: 22:9b:a6:1b:a6:80:29:29:16:ae:a4:ca:86:c7:04: 66:51:ae:df:99:3b:25:a2:4c:e6:41:29:bc:58:29: 4a:3e:03:33:91:e5:b3:ed:86:82:30:7e:f5:8e:5f: af:dc:06:44:4b:9a:6a:56:e5:b6:48:1d:ff:fd:c4: 71:06:99:00:74:ad:e4:4a:43:c4:7d:82:08:d7:87: d2:23:9a:74:91:ee:42:c2:98:b4:1e:7c:e5:08:d2: c8:56:97:61:4f:a6:86:2e:a9:f4:50:e3:e0:84:4c: 22:1e:36:b1:ce:75:35:b6:f4:45:af:1f:48:04:b2: de:b6:b9:35:e3:aa:b5:d6:93:d9:48:1d:68:b9:d1: db:fd:03:e0:db:32:b0:24:1c:76:63:93:73:f3:d9: 86:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DE:65:C0:4D:7A:98:87:B4:68:D8:A8:88:B3:E7:04:2F:65:84:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 173.240.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e2:a1:0a:a7:c9:8e:3a:1f:e2:92:63:c5:e5:29:de:2f:d0: e2:b3:be:f3:fb:e5:0a:ce:20:47:d6:26:02:f4:86:35:e6:f0: 6a:c0:b9:bc:99:b0:36:17:fb:c1:49:1c:86:a1:2b:28:58:c0: 57:83:1d:b1:a8:4f:74:b8:5f:2d:94:db:98:6d:d4:04:7f:d8: 89:40:8c:96:4e:98:b0:0b:aa:d5:f9:f1:1d:30:a6:3c:ac:dc: dd:1a:e6:80:5b:c8:42:9c:2c:28:f1:6b:fc:69:c6:8c:a2:80: d3:e6:b6:d8:2d:6e:a8:6d:10:d0:ed:e4:7c:df:f7:6f:d2:bd: e1:ef:ee:bd:d4:2a:4a:c9:cb:46:c1:c8:a0:7b:d4:10:5e:12: 81:70:ec:d8:4a:6f:7a:b6:81:e1:64:ed:f0:cf:71:e6:b6:6c: 8a:14:38:4b:cc:c8:0d:98:32:9c:70:b6:95:ab:75:59:3b:cb: 16:c7:15:d8:5d:b7:63:6b:e9:9b:1b:f8:8a:e2:d2:b5:58:6e: dd:c0:ed:2b:54:f9:ff:5e:d9:11:d9:33:2f:bb:37:a8:52:cd: c6:eb:8a:6c:9a:51:ef:c6:96:bb:76:03:98:27:c8:3f:11:3d: 94:a8:27:11:3e:48:0b:49:e6:7d:11:57:93:ab:13:c2:91:93: 96:75:54:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1DooLS1pvgU5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk YmJkZTZiNTMtN2QwNy00ZDQwLWExMmQtNWY5MmRkOThjYzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kwSSeqn+euQrdHuRBDaH+2OZg20d1pjlktj vEOFJ8hCzMmTLu3jjd6nIjydzaJZvGUHKB57xE+5b3hcMEFfToYPm5S61h6G8DAM rrM95PvmdVA4emcgFpY/rL4ypLkpn8IPhLodsOAim6YbpoApKRaupMqGxwRmUa7f mTslokzmQSm8WClKPgMzkeWz7YaCMH71jl+v3AZES5pqVuW2SB3//cRxBpkAdK3k SkPEfYII14fSI5p0ke5Cwpi0HnzlCNLIVpdhT6aGLqn0UOPghEwiHjaxznU1tvRF rx9IBLLetrk146q11pPZSB1oudHb/QPg2zKwJBx2Y5Nz89mGswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFreZcBNepiHtGjYqIiz5wQvZYTwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNzc0ZGI2ZjAtY2YyZC0z OTVlLWI1YTctNDBhNWQyMTEzNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/ioQqnyY46H+KSY8XlKd4v0OKzvvP75QrOIEfWJgL0hjXm8GrAubyZ sDYX+8FJHIahKyhYwFeDHbGoT3S4Xy2U25ht1AR/2IlAjJZOmLALqtX58R0wpjys 3N0a5oBbyEKcLCjxa/xpxoyigNPmttgtbqhtENDt5Hzf92/SveHv7r3UKkrJy0bB yKB71BBeEoFw7NhKb3q2geFk7fDPcea2bIoUOEvMyA2YMpxwtpWrdVk7yxbHFdhd t2Nr6Zsb+Iri0rVYbt3A7StU+f9e2RHZMy+7N6hSzcbrimyaUe/Glrt2A5gnyD8R PZSoJxE+SAtJ5n0RV5OrE8KRk5Z1VEA= -----END CERTIFICATE-----Generated at Mon Aug 4 14:18:57 2025 by rpki-client