$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa File: 41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa (raw, json) Hash identifier: k6VCt9U3Ia1tS+jpI9HztpcllCf7X+gYlS/eMcGWTLQ= Subject key identifier: EB:1B:FB:FA:69:74:19:C0:EC:99:F3:2C:E9:7F:80:0D:4E:9A:E0:8C Certificate issuer: /CN=70ddad33-55eb-4125-9221-0129168a645b Certificate serial: 010D0C9F43285849F87A88E1D8C8CF214FB38080 Authority key identifier: 7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 400341 IP address blocks: 165.140.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:88:e1:d8:c8:cf:21:4f:b3:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ddad33-55eb-4125-9221-0129168a645b Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=9e84b213-8e40-486f-a88b-57ad0b41a54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9b:e3:5a:71:0f:74:b5:4d:c8:14:78:43:60: a8:25:a1:54:32:19:b7:ef:89:0d:34:31:af:b1:07: c6:ac:d8:fb:70:8e:f9:db:4a:e8:93:de:f9:0f:92: 74:5f:98:78:11:a8:ea:33:b5:dc:19:fe:ac:a4:9b: 4e:4a:e3:a3:f3:7b:c9:28:0d:a4:95:c9:c7:dc:83: 01:b8:a1:00:c8:3e:7a:bc:6f:57:26:60:c1:85:e9: a2:89:76:2c:1f:7e:51:8b:de:55:ce:33:1c:30:1f: 16:a5:77:49:a7:45:15:a2:d1:65:b8:00:ca:ed:3f: ee:81:65:4c:ed:0c:80:d1:d2:19:d5:e1:cb:06:68: fe:1f:9b:d4:2f:a6:87:9d:0b:3c:a2:01:a5:c5:8a: 18:75:06:ad:52:69:c0:24:27:9c:4b:fc:7d:91:67: 10:3f:bc:5b:84:2a:89:bf:dd:d2:73:d2:19:17:91: aa:58:fd:27:6f:53:4b:a1:db:a2:3b:14:74:53:dc: fb:1c:39:35:cb:28:f6:55:24:ef:fb:30:73:3e:b0: df:28:ea:f6:ff:be:37:85:07:98:7c:cd:65:43:2e: 11:be:a5:26:dd:c7:c5:45:ba:92:f5:89:33:e3:3c: e0:fe:02:5f:5d:51:33:cd:39:20:9c:05:de:ee:d6: db:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1B:FB:FA:69:74:19:C0:EC:99:F3:2C:E9:7F:80:0D:4E:9A:E0:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl X509v3 Authority Key Identifier: keyid:7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer sbgp-ipAddrBlock: critical IPv4: 165.140.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:5a:2c:07:d6:44:2e:ed:66:d4:23:a8:0f:0f:d1:97:83:9a: d4:b4:09:30:fe:43:5c:d6:c2:c6:95:1e:71:83:03:77:db:5a: 3a:6a:30:15:46:63:8d:5d:d4:cc:ea:62:3e:09:61:b9:77:71: 02:7c:cd:6c:09:9d:31:45:83:44:34:94:63:70:e0:b6:5a:a3: 31:49:5d:c2:b7:cf:c0:a1:ee:f2:08:74:fa:a5:44:13:a9:32: 06:d6:ad:62:b4:f7:4b:c3:74:3a:9d:a8:45:13:27:0a:b3:b0: 07:22:a6:e9:55:db:df:21:4a:df:99:15:d1:8a:30:1b:e5:84: ce:39:41:3a:6f:89:e6:8c:b9:5c:86:e6:15:99:f9:24:b1:e4: 96:18:c1:77:75:08:a0:f8:64:e7:08:6e:22:b1:85:91:39:7b: 44:cc:58:0c:d5:84:50:fa:07:d2:2e:ad:9f:6f:f4:0e:3f:5f: d8:09:7e:0d:20:76:22:4c:51:97:7c:d8:de:22:fd:9d:48:03: 78:8d:02:f8:87:8e:2e:ad:a6:b8:13:a5:57:7b:50:eb:c8:60: 56:db:e0:98:17:69:45:b5:04:2f:8c:01:8b:9c:88:ce:92:f7: 49:ae:5d:de:6e:5b:ff:9a:d2:56:32:ac:62:eb:e0:17:44:47: 9a:74:96:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eojh2MjPIU+zgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBkZGFkMzMtNTVlYi00MTI1LTkyMjEtMDEyOTE2OGE2 NDViMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk OWU4NGIyMTMtOGU0MC00ODZmLWE4OGItNTdhZDBiNDFhNTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5vjWnEPdLVNyBR4Q2CoJaFUMhm374kNNDGv sQfGrNj7cI7520rok975D5J0X5h4EajqM7XcGf6spJtOSuOj83vJKA2klcnH3IMB uKEAyD56vG9XJmDBhemiiXYsH35Ri95VzjMcMB8WpXdJp0UVotFluADK7T/ugWVM 7QyA0dIZ1eHLBmj+H5vUL6aHnQs8ogGlxYoYdQatUmnAJCecS/x9kWcQP7xbhCqJ v93Sc9IZF5GqWP0nb1NLoduiOxR0U9z7HDk1yyj2VSTv+zBzPrDfKOr2/743hQeY fM1lQy4RvqUm3cfFRbqS9Ykz4zzg/gJfXVEzzTkgnAXe7tbb0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsb+/ppdBnA7JnzLOl/gA1OmuCMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MGRk YWQzMy01NWViLTQxMjUtOTIyMS0wMTI5MTY4YTY0NWIvNDExMzg3MjgtNGIwYS0z M2U3LWE1YmQtZWE3Y2I0MmE2MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzBkZGFkMzMtNTVlYi00MTI1LTky MjEtMDEyOTE2OGE2NDViLzcwZGRhZDMzLTU1ZWItNDEyNS05MjIxLTAxMjkxNjhh NjQ1Yi5jcmwwHwYDVR0jBBgwFoAUf0ykIqPLu6XWd5wlAfN/5dkOtL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MGRkYWQzMy01NWViLTQxMjUtOTIyMS0wMTI5 MTY4YTY0NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFaLAfWRC7tZtQjqA8P0ZeDmtS0CTD+Q1zWwsaVHnGDA3fbWjpqMBVG Y41d1MzqYj4JYbl3cQJ8zWwJnTFFg0Q0lGNw4LZaozFJXcK3z8Ch7vIIdPqlRBOp MgbWrWK090vDdDqdqEUTJwqzsAcipulV298hSt+ZFdGKMBvlhM45QTpvieaMuVyG 5hWZ+SSx5JYYwXd1CKD4ZOcIbiKxhZE5e0TMWAzVhFD6B9IurZ9v9A4/X9gJfg0g diJMUZd82N4i/Z1IA3iNAviHji6tprgTpVd7UOvIYFbb4JgXaUW1BC+MAYuciM6S 90muXd5uW/+a0lYyrGLr4BdER5p0ljc= -----END CERTIFICATE-----Generated at Mon Jun 16 19:53:57 2025 by rpki-client