$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/04178817-0de3-3778-8d33-af1f0c4f208f.roa File: 04178817-0de3-3778-8d33-af1f0c4f208f.roa (raw, json) Hash identifier: KJIUtBdrZ8pJJBJF1tVQwCiB/uqs/xbncRLREaXERSs= Subject key identifier: B8:34:07:E0:11:24:7B:7C:D8:86:12:34:6A:34:D3:B7:49:DE:55:9C Certificate issuer: /CN=ac22a1e5-62cd-4608-a584-a3d08be071d8 Certificate serial: 010D0C9F4328584A20F54CD1370441F0AD222200 Authority key identifier: 82:46:D7:98:06:54:B8:AE:CA:04:DB:12:7E:9C:71:5F:34:97:4A:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/04178817-0de3-3778-8d33-af1f0c4f208f.roa Signing time: Mon 09 Jun 2025 01:00:50 +0000 ROA not before: Mon 09 Jun 2025 01:00:50 +0000 ROA not after: Sun 07 Sep 2025 01:00:50 +0000 asID: 397617 IP address blocks: 139.64.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/ac22a1e5-62cd-4608-a584-a3d08be071d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/ac22a1e5-62cd-4608-a584-a3d08be071d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:20:f5:4c:d1:37:04:41:f0:ad:22:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac22a1e5-62cd-4608-a584-a3d08be071d8 Validity Not Before: Jun 9 01:00:50 2025 GMT Not After : Sep 7 01:00:50 2025 GMT Subject: CN=513dd86f-06dc-4148-b169-abbffa3ef1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0b:50:e6:b9:30:23:e5:1b:ec:4b:49:11:15: 10:c9:59:98:7a:52:7c:d9:40:66:63:48:fa:cf:a2: dd:af:d9:92:dc:6a:3d:c3:3d:82:08:8e:4e:2f:4b: 5b:4a:ba:44:72:b0:f2:31:a8:25:4d:c1:47:71:2a: 06:1a:f7:40:97:c6:b0:82:4f:84:9e:8d:c7:f8:5e: 19:95:09:29:38:8a:f3:61:22:87:7a:0a:33:fa:8c: cf:eb:33:26:52:dd:4b:a2:84:93:bd:c4:6a:11:82: 6c:c4:53:a2:8c:67:56:cd:ac:f4:68:27:cb:85:30: f9:88:4b:64:34:f1:85:3c:50:0b:cb:c1:70:a2:ee: dd:c8:a9:0a:05:e2:6d:8a:14:69:f3:4a:24:ca:f0: ca:f3:88:98:13:47:71:9f:86:46:a7:6f:39:86:e3: be:56:21:0d:a5:4b:36:01:2e:16:3c:7e:a0:37:6b: fd:35:a7:37:59:26:4f:ec:d5:88:59:68:5a:87:3b: 00:45:16:d9:3a:bc:50:9a:1e:6b:f9:1a:84:df:2e: c1:9f:0a:9d:b5:25:6f:4a:75:08:f9:96:4f:54:33: b0:82:f7:77:e8:64:07:f7:dc:28:0b:3d:fb:52:c9: a7:00:17:74:b0:4d:a9:bf:b0:dc:ed:68:d5:da:32: 57:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:34:07:E0:11:24:7B:7C:D8:86:12:34:6A:34:D3:B7:49:DE:55:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/04178817-0de3-3778-8d33-af1f0c4f208f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/ac22a1e5-62cd-4608-a584-a3d08be071d8.crl X509v3 Authority Key Identifier: keyid:82:46:D7:98:06:54:B8:AE:CA:04:DB:12:7E:9C:71:5F:34:97:4A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8.cer sbgp-ipAddrBlock: critical IPv4: 139.64.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:94:3d:c3:e3:7f:8e:c8:13:2b:4f:01:90:10:79:6d:86:81: 39:37:84:da:4e:9e:1b:2a:c7:7a:91:3e:36:9c:97:3c:f2:05: 53:70:6e:ed:d3:6b:39:1e:bd:8c:f6:49:cd:70:3a:90:cf:6f: c0:e9:70:2f:50:fe:0c:b5:4a:61:e6:88:47:76:45:2c:a7:71: fa:95:a7:21:d0:77:f4:c8:56:97:8e:07:4f:5b:e2:a7:3c:5b: 2d:88:66:ae:d9:9e:7f:f9:6c:53:b6:7e:ae:ee:28:06:29:a6: 72:7e:8c:e3:08:99:fa:88:18:d2:51:c4:36:87:90:d3:f3:07: 37:a6:cd:44:2c:d2:15:db:7e:53:25:e9:0e:e4:85:ea:21:9b: 62:2f:e9:52:51:0f:60:05:2e:bd:58:94:85:96:68:a4:fa:a7: 4d:3c:24:c0:9f:d7:d3:f4:5c:56:d0:9d:d7:dc:5a:ce:88:86: 99:d9:32:f6:35:92:92:b8:78:82:de:c4:6b:80:38:8e:77:d6: 2f:fa:55:86:85:f0:92:c9:7a:8a:e9:99:e7:27:f7:4b:11:ae: 5f:f8:1e:22:8c:23:e4:61:3d:b9:47:32:d6:6f:8f:9a:0b:9f: 92:f5:94:65:b7:ae:52:8a:4e:3f:73:d7:4c:8d:7e:de:ce:e3: 54:cf:93:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEog9UzRNwRB8K0iIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyMmExZTUtNjJjZC00NjA4LWE1ODQtYTNkMDhiZTA3 MWQ4MB4XDTI1MDYwOTAxMDA1MFoXDTI1MDkwNzAxMDA1MFowLzEtMCsGA1UEAxMk NTEzZGQ4NmYtMDZkYy00MTQ4LWIxNjktYWJiZmZhM2VmMWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwtQ5rkwI+Ub7EtJERUQyVmYelJ82UBmY0j6 z6Ldr9mS3Go9wz2CCI5OL0tbSrpEcrDyMaglTcFHcSoGGvdAl8awgk+Eno3H+F4Z lQkpOIrzYSKHegoz+ozP6zMmUt1LooSTvcRqEYJsxFOijGdWzaz0aCfLhTD5iEtk NPGFPFALy8Fwou7dyKkKBeJtihRp80okyvDK84iYE0dxn4ZGp285huO+ViENpUs2 AS4WPH6gN2v9Nac3WSZP7NWIWWhahzsARRbZOrxQmh5r+RqE3y7BnwqdtSVvSnUI +ZZPVDOwgvd36GQH99woCz37UsmnABd0sE2pv7Dc7WjV2jJXcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLg0B+ARJHt82IYSNGo007dJ3lWcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYzIy YTFlNS02MmNkLTQ2MDgtYTU4NC1hM2QwOGJlMDcxZDgvMDQxNzg4MTctMGRlMy0z Nzc4LThkMzMtYWYxZjBjNGYyMDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWMyMmExZTUtNjJjZC00NjA4LWE1 ODQtYTNkMDhiZTA3MWQ4L2FjMjJhMWU1LTYyY2QtNDYwOC1hNTg0LWEzZDA4YmUw NzFkOC5jcmwwHwYDVR0jBBgwFoAUgkbXmAZUuK7KBNsSfpxxXzSXSpYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYzIyYTFlNS02MmNkLTQ2MDgtYTU4NC1hM2Qw OGJlMDcxZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi0DwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuUPcPjf47IEytPAZAQeW2GgTk3hNpOnhsqx3qRPjaclzzyBVNwbu3T azkevYz2Sc1wOpDPb8DpcC9Q/gy1SmHmiEd2RSyncfqVpyHQd/TIVpeOB09b4qc8 Wy2IZq7Znn/5bFO2fq7uKAYppnJ+jOMImfqIGNJRxDaHkNPzBzemzUQs0hXbflMl 6Q7kheohm2Iv6VJRD2AFLr1YlIWWaKT6p008JMCf19P0XFbQndfcWs6IhpnZMvY1 kpK4eILexGuAOI531i/6VYaF8JLJeorpmecn90sRrl/4HiKMI+RhPblHMtZvj5oL n5L1lGW3rlKKTj9z10yNft7O41TPkzc= -----END CERTIFICATE-----Generated at Sun Jun 15 15:05:10 2025 by rpki-client