$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/64b2fb2a-a043-3594-bcf7-ae49c664733c.roa File: 64b2fb2a-a043-3594-bcf7-ae49c664733c.roa (raw, json) Hash identifier: POkISfQGKRAl3KtQfQ0eIXVKgUCzqh33ovpCNQgf5Sk= Subject key identifier: F8:22:B7:DE:09:6C:B4:FF:A1:46:B0:41:86:CD:E0:3D:9D:F7:C2:97 Certificate issuer: /CN=78ffdd14-7e7a-46d4-993a-4b51f8031030 Certificate serial: 010D0C9F43285849D594CC3B85FEA07867907800 Authority key identifier: FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/64b2fb2a-a043-3594-bcf7-ae49c664733c.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 165.140.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:cc:3b:85:fe:a0:78:67:90:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78ffdd14-7e7a-46d4-993a-4b51f8031030 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=b36f5e83-f313-4fbb-b097-98a3e7ca7007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:99:26:7e:f5:42:26:25:00:b0:f7:41:0f:18: 6a:98:88:4d:24:98:18:90:3e:bf:33:c1:f2:02:d4: 43:ee:87:25:60:91:88:c5:62:9f:5c:05:5d:83:25: 48:eb:59:d6:76:4a:3a:82:fe:e5:3c:c2:2e:2c:bc: ad:d8:55:67:ba:56:6e:aa:06:57:ac:1c:ae:63:1c: 68:35:92:0c:07:6b:1e:c2:24:2c:0f:32:89:7a:33: 59:67:af:5e:32:1b:92:45:85:89:21:00:1e:81:9d: 43:9d:d4:94:f5:90:84:e2:4c:e9:36:03:4b:5e:65: b2:d4:28:29:6e:59:20:95:e8:1e:a2:b1:08:ec:54: b3:ac:b3:78:b3:71:5d:a6:55:fa:46:df:66:e4:b2: cd:1f:dd:0c:3a:4b:4e:a7:aa:ed:2d:9a:6a:56:c4: 8e:52:c6:a5:3e:0b:25:6d:26:5b:b6:06:9a:d0:47: f2:b0:16:2f:27:c2:a2:be:36:1e:55:4c:16:98:48: de:50:07:3d:8d:63:6b:6c:fa:74:b3:6c:ed:5b:eb: 69:20:65:ff:ef:44:d6:b5:1a:e6:dc:c9:56:14:75: 1a:e6:d3:f0:bb:d9:2c:47:82:da:0c:61:8d:9a:23: 4a:86:00:fe:41:ac:7e:7c:90:e7:84:e7:0b:a1:35: 2e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:22:B7:DE:09:6C:B4:FF:A1:46:B0:41:86:CD:E0:3D:9D:F7:C2:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/64b2fb2a-a043-3594-bcf7-ae49c664733c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl X509v3 Authority Key Identifier: keyid:FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer sbgp-ipAddrBlock: critical IPv4: 165.140.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:66:26:3f:e0:fc:ac:bf:ad:72:ef:ba:43:cf:ca:ab:18:02: d5:d8:50:6c:0f:9a:0a:38:2d:33:1e:6c:83:24:cc:d0:72:59: dc:e4:46:58:eb:09:27:9d:c6:3f:4c:6e:e3:28:9e:21:fe:4e: 90:78:5b:ab:10:95:55:58:43:95:62:4f:b6:5b:72:27:87:f9: 9e:0b:cf:69:11:0a:35:75:c6:f7:e9:c1:83:56:65:33:46:94: b3:4d:27:8c:33:a7:cc:54:d9:af:ff:87:f8:30:ce:ae:f3:b3: bd:ba:98:0d:b8:86:7e:89:22:35:cc:67:9b:61:9c:2c:b2:46: b4:d6:3a:74:8d:ab:fb:fb:d0:d1:25:83:c3:52:e7:ad:e2:c8: a4:0c:48:e2:2d:ac:8e:42:e6:57:49:cf:81:6a:54:4d:08:26: 39:83:30:cb:f5:c2:61:d3:5e:21:2a:ed:52:e1:4c:f9:9b:3c: 80:57:c4:e9:5d:2e:62:81:5b:87:22:89:9e:85:1c:c1:8c:35: e8:68:36:ab:e7:da:3a:d2:bf:e5:cd:9f:96:56:3e:3b:8b:a2: c1:d5:99:5a:6c:42:f2:f2:36:d7:fc:1d:05:8f:35:c3:af:97: ba:79:31:2b:d6:ca:c4:60:f7:47:6a:c5:c3:4f:df:c2:a6:29: 0b:f9:01:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlMw7hf6geGeQeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhmZmRkMTQtN2U3YS00NmQ0LTk5M2EtNGI1MWY4MDMx MDMwMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk YjM2ZjVlODMtZjMxMy00ZmJiLWIwOTctOThhM2U3Y2E3MDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJkmfvVCJiUAsPdBDxhqmIhNJJgYkD6/M8Hy AtRD7oclYJGIxWKfXAVdgyVI61nWdko6gv7lPMIuLLyt2FVnulZuqgZXrByuYxxo NZIMB2sewiQsDzKJejNZZ69eMhuSRYWJIQAegZ1DndSU9ZCE4kzpNgNLXmWy1Cgp blkglegeorEI7FSzrLN4s3FdplX6Rt9m5LLNH90MOktOp6rtLZpqVsSOUsalPgsl bSZbtgaa0EfysBYvJ8KivjYeVUwWmEjeUAc9jWNrbPp0s2ztW+tpIGX/70TWtRrm 3MlWFHUa5tPwu9ksR4LaDGGNmiNKhgD+Qax+fJDnhOcLoTUubQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgit94JbLT/oUawQYbN4D2d98KXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83OGZm ZGQxNC03ZTdhLTQ2ZDQtOTkzYS00YjUxZjgwMzEwMzAvNjRiMmZiMmEtYTA0My0z NTk0LWJjZjctYWU0OWM2NjQ3MzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzhmZmRkMTQtN2U3YS00NmQ0LTk5 M2EtNGI1MWY4MDMxMDMwLzc4ZmZkZDE0LTdlN2EtNDZkNC05OTNhLTRiNTFmODAz MTAzMC5jcmwwHwYDVR0jBBgwFoAU/QuzhgAVhg19Ci8bWzOXl7mVTrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83OGZmZGQxNC03ZTdhLTQ2ZDQtOTkzYS00YjUx ZjgwMzEwMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpYw6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElmJj/g/Ky/rXLvukPPyqsYAtXYUGwPmgo4LTMebIMkzNByWdzkRljr CSedxj9MbuMoniH+TpB4W6sQlVVYQ5ViT7ZbcieH+Z4Lz2kRCjV1xvfpwYNWZTNG lLNNJ4wzp8xU2a//h/gwzq7zs726mA24hn6JIjXMZ5thnCyyRrTWOnSNq/v70NEl g8NS563iyKQMSOItrI5C5ldJz4FqVE0IJjmDMMv1wmHTXiEq7VLhTPmbPIBXxOld LmKBW4ciiZ6FHMGMNehoNqvn2jrSv+XNn5ZWPjuLosHVmVpsQvLyNtf8HQWPNcOv l7p5MSvWysRg90dqxcNP38KmKQv5ATk= -----END CERTIFICATE-----Generated at Sat Jun 14 06:14:05 2025 by rpki-client