$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/25dcf021-d643-33d2-b7c8-9a3520f1b453.roa File: 25dcf021-d643-33d2-b7c8-9a3520f1b453.roa (raw, json) Hash identifier: tLZ0Ux6KRMr5N2Xi9Ei/f9szQwYQ4kGqPPQ/Mpwszw4= Subject key identifier: 64:A9:99:22:48:3B:D7:5E:7C:31:AE:BC:3E:A8:99:DF:0D:55:99:19 Certificate issuer: /CN=90867e5c-2c8f-4999-a134-dc9418f84496 Certificate serial: 010D0C9F4328584A8DD5F7B5A420968BDAB08F80 Authority key identifier: 7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/25dcf021-d643-33d2-b7c8-9a3520f1b453.roa Signing time: Fri 18 Jul 2025 01:00:48 +0000 ROA not before: Fri 18 Jul 2025 01:00:48 +0000 ROA not after: Thu 16 Oct 2025 01:00:48 +0000 asID: 40623 IP address blocks: 140.208.0.0/18 maxlen: 18 140.208.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:d5:f7:b5:a4:20:96:8b:da:b0:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90867e5c-2c8f-4999-a134-dc9418f84496 Validity Not Before: Jul 18 01:00:48 2025 GMT Not After : Oct 16 01:00:48 2025 GMT Subject: CN=0bde9c48-d51e-4c4b-bc5a-50c120488b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:1d:53:b2:7d:7b:17:27:56:d6:b5:cc:df: 02:b3:d2:2e:bf:83:b5:8c:84:31:59:8e:12:c4:a4: 2e:8c:c7:df:de:6c:da:a7:c8:ee:7a:b0:81:92:d5: 87:34:89:5e:7e:58:51:20:37:c0:ba:60:82:09:e0: 56:c8:80:99:03:bf:98:f2:39:6d:8d:66:8c:8c:45: 88:6b:36:0f:a1:e8:77:38:51:53:82:f6:ba:a7:65: 30:e8:fd:f8:44:b4:d0:18:fe:12:92:2c:da:6a:13: 18:56:49:69:eb:24:7f:a9:4e:2b:af:45:ce:b4:a1: af:b7:41:7d:90:85:91:32:50:bc:66:33:ab:ec:ec: 0c:27:38:0a:e9:10:40:af:b7:d5:3b:9e:b5:da:69: ec:ee:4c:73:58:17:d8:ac:ab:6c:7f:8e:fd:03:de: 2b:af:98:8a:67:49:77:d9:92:17:44:6f:67:7f:6b: 7d:cb:42:8e:3b:b4:fc:f6:a3:f8:30:e1:61:1c:9c: 31:e6:f2:5e:56:56:d6:77:ae:91:27:a1:6a:93:a4: a2:92:bf:a0:38:94:08:84:fd:c2:2e:cd:ff:aa:0e: 08:bf:7e:6d:96:0c:36:eb:df:96:81:c4:ed:04:1a: 57:37:ec:15:c4:96:50:e2:55:a7:cc:50:52:35:65: 98:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A9:99:22:48:3B:D7:5E:7C:31:AE:BC:3E:A8:99:DF:0D:55:99:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/25dcf021-d643-33d2-b7c8-9a3520f1b453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl X509v3 Authority Key Identifier: keyid:7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer sbgp-ipAddrBlock: critical IPv4: 140.208.0.0/18 140.208.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:68:fc:32:f9:8c:3e:ff:4a:6c:72:11:9f:77:78:6d:a4:76: 2e:9a:cf:ba:9b:5f:fe:b2:12:c8:06:77:dd:fe:87:7d:03:88: 8e:c7:36:f0:13:25:59:b5:e9:e0:18:cc:dc:1d:c3:09:3b:04: 62:7d:e6:10:a4:c8:d5:8a:50:f7:b8:4d:e2:8d:d7:98:06:5e: 7f:2e:2e:61:d6:e3:49:97:1c:6a:18:4a:00:f7:a0:91:b4:6e: bd:0a:25:21:db:b7:52:ce:2d:b7:36:6b:29:b7:e5:d7:c5:02: e0:bf:81:9f:63:33:a3:ba:b3:6d:e2:cd:98:f1:70:4c:d2:ca: 30:4f:60:c1:20:77:cd:70:e6:20:33:0f:12:5b:d4:fc:8a:47: c0:77:dc:48:ce:b8:3f:ac:26:f3:8d:43:fe:91:1c:aa:ca:b9: 50:1f:9a:8e:60:98:e1:78:7c:11:9f:f2:77:32:45:d0:23:5f: 8b:3b:ff:92:a3:4e:39:e8:df:db:d4:e0:be:a2:dd:d4:cc:a3: 63:e0:ec:ff:ee:7d:bd:04:2f:ad:2f:69:9b:9a:93:1f:a6:74: 6a:fd:70:23:29:c8:93:05:f6:6b:00:ce:f8:69:da:2d:71:ff: fa:4f:2a:76:c6:4f:ed:75:b4:75:6e:30:98:0e:db:83:c9:cd: c4:1a:0c:80 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqN1fe1pCCWi9qwj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NjdlNWMtMmM4Zi00OTk5LWExMzQtZGM5NDE4Zjg0 NDk2MB4XDTI1MDcxODAxMDA0OFoXDTI1MTAxNjAxMDA0OFowLzEtMCsGA1UEAxMk MGJkZTljNDgtZDUxZS00YzRiLWJjNWEtNTBjMTIwNDg4YjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb0dU7J9excnVta1zN8Cs9Iuv4O1jIQxWY4S xKQujMff3mzap8juerCBktWHNIleflhRIDfAumCCCeBWyICZA7+Y8jltjWaMjEWI azYPoeh3OFFTgva6p2Uw6P34RLTQGP4SkizaahMYVklp6yR/qU4rr0XOtKGvt0F9 kIWRMlC8ZjOr7OwMJzgK6RBAr7fVO5612mns7kxzWBfYrKtsf479A94rr5iKZ0l3 2ZIXRG9nf2t9y0KOO7T89qP4MOFhHJwx5vJeVlbWd66RJ6Fqk6Sikr+gOJQIhP3C Ls3/qg4Iv35tlgw269+WgcTtBBpXN+wVxJZQ4lWnzFBSNWWYVwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGSpmSJIO9defDGuvD6omd8NVZkZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MDg2 N2U1Yy0yYzhmLTQ5OTktYTEzNC1kYzk0MThmODQ0OTYvMjVkY2YwMjEtZDY0My0z M2QyLWI3YzgtOWEzNTIwZjFiNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTA4NjdlNWMtMmM4Zi00OTk5LWEx MzQtZGM5NDE4Zjg0NDk2LzkwODY3ZTVjLTJjOGYtNDk5OS1hMTM0LWRjOTQxOGY4 NDQ5Ni5jcmwwHwYDVR0jBBgwFoAUf8xLPpcetQD2ekEynFBvsLdhnSwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MDg2N2U1Yy0yYzhmLTQ5OTktYTEzNC1kYzk0 MThmODQ0OTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGjNAAAwQE jNCQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG5o/DL5jD7/SmxyEZ93eG2kdi6az7qbX/6yEsgGd93+h30D iI7HNvATJVm16eAYzNwdwwk7BGJ95hCkyNWKUPe4TeKN15gGXn8uLmHW40mXHGoY SgD3oJG0br0KJSHbt1LOLbc2aym35dfFAuC/gZ9jM6O6s23izZjxcEzSyjBPYMEg d81w5iAzDxJb1PyKR8B33EjOuD+sJvONQ/6RHKrKuVAfmo5gmOF4fBGf8ncyRdAj X4s7/5KjTjno39vU4L6i3dTMo2Pg7P/ufb0EL60vaZuakx+mdGr9cCMpyJMF9msA zvhp2i1x//pPKnbGT+11tHVuMJgO24PJzcQaDIA= -----END CERTIFICATE-----Generated at Thu Aug 7 17:28:01 2025 by rpki-client