$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/08b02de8-23ba-3ab2-8f75-68c300ab4615.roa File: 08b02de8-23ba-3ab2-8f75-68c300ab4615.roa (raw, json) Hash identifier: JS9K/MViZoQxgQgbnkpu0F2wcLP6CRCxLbl+xcx/vvs= Subject key identifier: 02:71:79:8F:1E:A3:E6:F6:34:97:C0:08:CE:7F:90:EF:16:7A:14:7B Certificate issuer: /CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Certificate serial: 010D0C9F4328584A2DA66DB7F20DD55DB2153830 Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/08b02de8-23ba-3ab2-8f75-68c300ab4615.roa Signing time: Fri 13 Jun 2025 14:07:28 +0000 ROA not before: Fri 13 Jun 2025 14:07:28 +0000 ROA not after: Thu 11 Sep 2025 14:07:28 +0000 asID: 1403 IP address blocks: 67.230.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:a6:6d:b7:f2:0d:d5:5d:b2:15:38:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Validity Not Before: Jun 13 14:07:28 2025 GMT Not After : Sep 11 14:07:28 2025 GMT Subject: CN=30501700-dd17-40c5-8d0d-7f0f8a3b40c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b8:09:1a:d7:a4:90:44:55:1f:60:2b:7f:d2: 1a:9e:e7:9d:a0:f7:49:a5:db:7f:35:a7:ac:10:24: ea:7f:03:14:57:c6:06:af:80:54:25:97:1a:75:71: ef:1e:ae:23:47:39:2c:57:fb:17:f4:98:e8:39:7d: 99:88:b5:7b:c2:2e:ac:c8:79:37:6c:25:58:08:b6: 10:4c:57:72:d5:46:05:5a:cb:03:2c:fa:65:01:b4: d9:fe:f5:da:41:fe:e7:76:78:ab:64:d5:6f:b7:bc: 67:f2:b5:43:52:16:e2:b9:e7:59:c9:10:fe:82:18: 02:ef:f8:0c:30:f6:9a:80:73:ea:8b:12:b5:b5:94: 6e:6a:3a:f3:c7:b1:de:7f:7d:74:a8:6b:22:63:3a: ad:f1:5b:27:da:ec:ea:0c:19:5b:50:9a:e0:f7:73: a8:ac:40:7e:e9:de:56:d3:f7:0b:81:d0:50:57:68: 7f:b9:78:d2:9d:d5:0d:25:cd:5e:99:7d:64:f1:c5: ad:c3:6f:22:6a:9d:05:5b:02:44:e0:fe:d4:6a:fd: 4b:57:27:48:f1:56:df:67:8b:34:76:50:63:11:d2: 17:3f:53:c6:4d:53:93:dc:db:4d:bf:5e:1d:12:14: fc:74:04:ab:e8:8e:98:f2:c1:a7:f7:79:4b:fc:3b: 56:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:71:79:8F:1E:A3:E6:F6:34:97:C0:08:CE:7F:90:EF:16:7A:14:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/08b02de8-23ba-3ab2-8f75-68c300ab4615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl X509v3 Authority Key Identifier: keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer sbgp-ipAddrBlock: critical IPv4: 67.230.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:71:53:88:3e:c9:3d:e5:4f:df:40:77:5b:89:f7:e9:d9:14: 0f:ba:b7:0c:b2:b8:62:4a:01:4f:bd:f2:c7:b3:65:b2:aa:b1: 04:78:7e:89:22:43:bf:8e:e2:ec:67:51:4c:44:21:0f:5f:bd: bc:ea:3d:07:c6:b4:f3:6a:65:fd:5f:69:f7:c4:49:79:e5:9d: a0:3c:92:62:fe:75:09:55:09:d1:f0:dc:18:19:e0:4c:c6:f8: 78:42:20:c1:a4:25:be:1b:dd:79:3f:fc:f1:73:5f:28:90:b0: f6:a2:ce:fa:46:c1:f6:19:9d:57:fd:29:ee:f5:28:87:58:b3: a6:4f:50:80:4d:a7:aa:30:37:e7:93:31:87:f6:b5:b9:de:28: 79:8b:3a:80:4d:be:95:6f:94:95:6a:22:6d:81:4f:95:fa:79: bf:b0:f7:e4:7e:31:4f:39:d9:ec:05:78:23:58:d6:fb:4f:64: 74:08:69:34:a7:6b:b3:dc:a4:e7:58:ec:68:75:b2:cd:eb:98: 70:98:41:b8:61:18:59:eb:25:37:8a:78:0d:5c:dc:95:a5:68: c4:f2:a9:c6:10:c9:38:41:ed:11:7c:f7:74:83:55:d2:d0:38: df:83:26:41:69:ff:2d:5f:6b:52:8b:8f:04:01:63:97:3b:2e: 7f:9a:b5:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEotpm238g3VXbIVODAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0OTQwZjQtNjFjMi00MjUxLWFjZGItMzZiZTgzY2Rj NzQ0MB4XDTI1MDYxMzE0MDcyOFoXDTI1MDkxMTE0MDcyOFowLzEtMCsGA1UEAxMk MzA1MDE3MDAtZGQxNy00MGM1LThkMGQtN2YwZjhhM2I0MGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbgJGtekkERVH2Arf9IanuedoPdJpdt/Naes ECTqfwMUV8YGr4BUJZcadXHvHq4jRzksV/sX9JjoOX2ZiLV7wi6syHk3bCVYCLYQ TFdy1UYFWssDLPplAbTZ/vXaQf7ndnirZNVvt7xn8rVDUhbiuedZyRD+ghgC7/gM MPaagHPqixK1tZRuajrzx7Hef310qGsiYzqt8Vsn2uzqDBlbUJrg93OorEB+6d5W 0/cLgdBQV2h/uXjSndUNJc1emX1k8cWtw28iap0FWwJE4P7Uav1LVydI8VbfZ4s0 dlBjEdIXP1PGTVOT3NtNv14dEhT8dASr6I6Y8sGn93lL/DtWmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJxeY8eo+b2NJfACM5/kO8WehR7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5 NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJlODNjZGM3NDQvMDhiMDJkZTgtMjNiYS0z YWIyLThmNzUtNjhjMzAwYWI0NjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGQ0OTQwZjQtNjFjMi00MjUxLWFj ZGItMzZiZTgzY2RjNzQ0LzRkNDk0MGY0LTYxYzItNDI1MS1hY2RiLTM2YmU4M2Nk Yzc0NC5jcmwwHwYDVR0jBBgwFoAUPdev1k6DmBY4LIH9klbSh2ozmcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJl ODNjZGM3NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ+aQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElxU4g+yT3lT99Ad1uJ9+nZFA+6twyyuGJKAU+98sezZbKqsQR4foki Q7+O4uxnUUxEIQ9fvbzqPQfGtPNqZf1faffESXnlnaA8kmL+dQlVCdHw3BgZ4EzG +HhCIMGkJb4b3Xk//PFzXyiQsPaizvpGwfYZnVf9Ke71KIdYs6ZPUIBNp6owN+eT MYf2tbneKHmLOoBNvpVvlJVqIm2BT5X6eb+w9+R+MU852ewFeCNY1vtPZHQIaTSn a7PcpOdY7Gh1ss3rmHCYQbhhGFnrJTeKeA1c3JWlaMTyqcYQyThB7RF893SDVdLQ ON+DJkFp/y1fa1KLjwQBY5c7Ln+atZ4= -----END CERTIFICATE-----Generated at Sun Jun 15 16:45:28 2025 by rpki-client