$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/d1c8dec1-cf4c-3500-a840-366e754a8c33.roa File: d1c8dec1-cf4c-3500-a840-366e754a8c33.roa (raw, json) Hash identifier: c2TRZjzFyT9CLI2dW3xi/5ap7bWwGwNbAR5UZA4XsAI= Subject key identifier: 2A:87:27:03:4F:9E:91:9A:2C:8C:FC:5F:2D:73:4C:07:4E:4A:EE:50 Certificate issuer: /CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e Certificate serial: 010D0C9F4328584A268AC7C1A40F6E850D113CE0 Authority key identifier: 8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/d1c8dec1-cf4c-3500-a840-366e754a8c33.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 30114 IP address blocks: 140.235.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:c7:c1:a4:0f:6e:85:0d:11:3c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=1d140b95-c278-4dbd-af9f-05b63cd90c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8f:e5:1f:cb:50:40:3e:f2:31:d2:3d:eb:7c: 59:5f:02:97:09:33:56:3c:8a:3f:b3:eb:b2:7a:f8: 50:5f:ae:3b:98:39:30:80:34:8b:b1:54:49:25:60: e2:db:d4:cb:48:38:f9:40:a5:12:7a:9d:cd:3f:4d: 14:d4:8c:c2:35:af:ef:d4:7f:a0:32:2d:95:e2:56: 5e:a0:67:5c:29:8f:80:ce:1e:83:55:53:5d:9b:5c: cd:30:59:0b:e8:57:dd:af:1c:6e:e6:31:31:ff:0d: ad:81:08:5c:d7:93:b0:6b:d4:22:3d:3e:d7:ae:82: c0:42:02:38:49:96:52:bf:1b:ee:11:a7:bf:c4:f7: dd:3e:6b:07:0e:42:be:1b:a0:ac:f7:85:27:95:84: f8:57:00:c2:70:34:85:6a:83:7c:c2:45:52:ec:89: 2b:54:8f:62:e3:ac:71:9f:0c:e8:42:90:63:44:b0: cc:31:80:c0:95:95:78:18:47:43:00:cd:f0:19:7a: 2e:0e:ac:37:47:a1:d2:d1:40:4c:7a:9c:ff:ba:9c: e4:ff:f9:4c:23:71:d3:4c:49:e3:4f:24:f1:e6:99: 1a:6d:d9:e8:ae:e1:8a:7c:8b:19:91:73:58:f7:a3: 49:7d:34:31:04:5b:65:87:3c:25:ad:bc:ad:b8:ab: f0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:87:27:03:4F:9E:91:9A:2C:8C:FC:5F:2D:73:4C:07:4E:4A:EE:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/d1c8dec1-cf4c-3500-a840-366e754a8c33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl X509v3 Authority Key Identifier: keyid:8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer sbgp-ipAddrBlock: critical IPv4: 140.235.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:6b:26:66:ea:70:94:48:ef:05:ee:6e:ad:4f:bd:7a:b6:ca: 89:7b:dd:23:23:e2:5f:da:de:3b:77:9e:25:15:bb:77:54:ba: cf:9e:81:13:15:c9:78:01:25:f1:97:ef:d3:39:fb:82:ad:4e: 8f:1a:04:44:2a:89:6c:e5:d9:0f:9e:15:46:49:00:7f:75:f3: 53:11:c4:92:aa:94:64:e6:2e:87:b6:b7:9b:bb:e4:09:7b:fc: 18:53:4d:c0:63:03:ac:6a:01:2d:bf:39:0c:7b:99:58:22:43: b5:4f:98:ba:31:4c:3b:65:28:b4:2d:65:c5:30:3d:b9:3d:27: 39:21:ce:c6:5d:82:b5:75:27:68:02:93:3f:69:fb:03:4e:6f: b2:ff:bd:62:a5:1c:c2:16:cc:c9:f8:33:34:c7:7c:c1:1a:3d: 2f:01:a8:8a:c4:2d:67:20:91:fd:e7:5b:bf:0d:f5:e6:1b:dd: 44:a7:fe:e6:05:d9:01:d3:f1:5a:4c:a2:11:5b:05:32:43:75: 8d:7d:43:75:c0:2b:a4:c6:d0:3b:b1:40:fe:c3:88:f9:85:cf: e5:df:17:be:37:7c:7d:48:aa:cf:87:91:73:38:d4:df:6f:b5: 8a:18:25:29:b9:c3:95:ff:43:37:fa:4a:f8:bb:77:75:69:65: f0:ab:98:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomisfBpA9uhQ0RPOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc0YmIyZjEtNTk2Ni00YzRhLWE1ZTQtYWNlNTllMWZh MjdlMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk MWQxNDBiOTUtYzI3OC00ZGJkLWFmOWYtMDViNjNjZDkwYzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY/lH8tQQD7yMdI963xZXwKXCTNWPIo/s+uy evhQX647mDkwgDSLsVRJJWDi29TLSDj5QKUSep3NP00U1IzCNa/v1H+gMi2V4lZe oGdcKY+Azh6DVVNdm1zNMFkL6Ffdrxxu5jEx/w2tgQhc15Owa9QiPT7XroLAQgI4 SZZSvxvuEae/xPfdPmsHDkK+G6Cs94UnlYT4VwDCcDSFaoN8wkVS7IkrVI9i46xx nwzoQpBjRLDMMYDAlZV4GEdDAM3wGXouDqw3R6HS0UBMepz/upzk//lMI3HTTEnj TyTx5pkabdnoruGKfIsZkXNY96NJfTQxBFtlhzwlrbytuKvwgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqHJwNPnpGaLIz8Xy1zTAdOSu5QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzRi YjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1OWUxZmEyN2UvZDFjOGRlYzEtY2Y0Yy0z NTAwLWE4NDAtMzY2ZTc1NGE4YzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTc0YmIyZjEtNTk2Ni00YzRhLWE1 ZTQtYWNlNTllMWZhMjdlL2E3NGJiMmYxLTU5NjYtNGM0YS1hNWU0LWFjZTU5ZTFm YTI3ZS5jcmwwHwYDVR0jBBgwFoAUjywaXYc3fEchHhd6esViwQde3lgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNzRiYjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1 OWUxZmEyN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1rJmbqcJRI7wXubq1PvXq2yol73SMj4l/a3jt3niUVu3dUus+egRMV yXgBJfGX79M5+4KtTo8aBEQqiWzl2Q+eFUZJAH9181MRxJKqlGTmLoe2t5u75Al7 /BhTTcBjA6xqAS2/OQx7mVgiQ7VPmLoxTDtlKLQtZcUwPbk9JzkhzsZdgrV1J2gC kz9p+wNOb7L/vWKlHMIWzMn4MzTHfMEaPS8BqIrELWcgkf3nW78N9eYb3USn/uYF 2QHT8VpMohFbBTJDdY19Q3XAK6TG0DuxQP7DiPmFz+XfF743fH1Iqs+HkXM41N9v tYoYJSm5w5X/Qzf6Svi7d3VpZfCrmJA= -----END CERTIFICATE-----Generated at Mon Jun 16 15:43:13 2025 by rpki-client