$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/a126dc2a-ea12-360f-884a-c034289f0aee.roa File: a126dc2a-ea12-360f-884a-c034289f0aee.roa (raw, json) Hash identifier: vWplr9RuaBLrpiVYGya+iPR2JWsL++MbtI8YkU+5rao= Subject key identifier: 1F:BD:52:61:0D:6F:80:9B:53:15:49:DD:32:5C:AE:07:6C:C4:BF:7C Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584A1B5FF6148AC920D9525AB640 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/a126dc2a-ea12-360f-884a-c034289f0aee.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 397423 IP address blocks: 165.140.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:f6:14:8a:c9:20:d9:52:5a:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=3795c4e6-ebec-4a25-b0af-beb52100da28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:df:0a:35:30:80:a1:03:27:9b:f4:9d:39:90: 81:13:cb:8c:3f:05:f4:72:44:d0:cb:c7:ff:b9:c2: 5c:b0:5f:c5:b3:d6:41:95:81:d5:47:fa:b2:86:a3: c7:85:50:85:80:0f:b8:f8:22:e1:a6:8b:5e:66:a0: 9c:01:12:8a:b4:32:17:4a:54:c8:81:be:22:5c:c1: 66:e3:7c:15:5c:9a:05:f8:fe:d1:e0:70:b5:ec:f5: 89:0b:d0:82:24:da:1a:2e:99:0a:d0:08:79:bf:08: bf:ea:fd:ca:db:d6:4e:bf:16:4c:f0:55:30:00:b8: 20:50:e3:98:b0:a0:0e:54:5e:e4:6c:f4:c8:f1:53: 62:15:00:47:bc:a7:bd:e5:ac:33:e3:16:d2:ab:44: e8:12:ae:04:4e:1c:71:a6:ae:0a:57:ce:e4:b4:53: 33:b6:62:0c:85:28:2b:94:be:8f:0f:85:63:fe:0f: dc:7f:59:bc:20:62:a1:a1:0a:1c:2b:71:1f:ee:65: 79:56:ac:02:cf:56:9a:2e:6d:56:43:a2:bc:17:19: 14:11:47:da:7c:a6:bb:93:70:ae:09:95:9c:d4:16: 62:29:6b:ea:c4:99:5a:0e:3e:27:0f:bb:0e:11:9e: c4:78:fd:67:28:49:ba:89:67:4f:96:96:a7:f1:6f: bb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BD:52:61:0D:6F:80:9B:53:15:49:DD:32:5C:AE:07:6C:C4:BF:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/a126dc2a-ea12-360f-884a-c034289f0aee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 165.140.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:61:dd:77:b8:53:d0:07:b6:f5:19:ab:6e:07:18:c4:e1:0e: b2:46:28:03:97:20:bb:80:27:6b:c5:45:ed:cf:64:15:37:e9: 1f:ca:19:e9:47:67:ae:f0:62:56:f8:e7:f6:44:12:2a:90:6e: 8d:88:c4:48:39:98:07:8d:79:ed:ab:b7:3d:a8:b1:70:be:a5: 13:18:47:98:11:e1:d0:75:b9:0b:01:ce:9d:fd:1c:cb:75:e3: bf:1b:d8:e0:c7:12:e6:22:c3:49:7d:84:d9:b2:ff:79:70:a0: 0b:4b:10:b6:8e:f2:31:02:28:47:26:18:ab:ac:0d:0f:81:fd: 8e:f6:58:b1:23:da:ed:53:71:01:af:9f:d6:8d:11:b9:c4:f2: af:bc:fd:05:9a:49:f1:0e:aa:e0:f4:3c:d9:7d:90:4f:bb:64: 8b:8b:1a:58:43:70:de:b3:98:e8:73:ec:1b:ba:5a:46:7a:a8: e0:b7:1d:34:b3:c7:be:18:af:71:0e:af:c4:63:d5:6b:aa:bb: 89:3a:3f:99:ec:c5:ff:c4:4e:63:1a:6c:1e:c4:e2:ec:ee:f9: ff:27:ca:fd:06:41:42:da:19:24:f1:63:3f:f6:90:f0:e8:db: 4f:03:f7:55:3d:49:4b:c7:a9:3b:0d:34:89:75:1e:50:69:81: 27:69:9d:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobX/YUiskg2VJatkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk Mzc5NWM0ZTYtZWJlYy00YTI1LWIwYWYtYmViNTIxMDBkYTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d8KNTCAoQMnm/SdOZCBE8uMPwX0ckTQy8f/ ucJcsF/Fs9ZBlYHVR/qyhqPHhVCFgA+4+CLhpoteZqCcARKKtDIXSlTIgb4iXMFm 43wVXJoF+P7R4HC17PWJC9CCJNoaLpkK0Ah5vwi/6v3K29ZOvxZM8FUwALggUOOY sKAOVF7kbPTI8VNiFQBHvKe95awz4xbSq0ToEq4EThxxpq4KV87ktFMztmIMhSgr lL6PD4Vj/g/cf1m8IGKhoQocK3Ef7mV5VqwCz1aaLm1WQ6K8FxkUEUfafKa7k3Cu CZWc1BZiKWvqxJlaDj4nD7sOEZ7EeP1nKEm6iWdPlpan8W+7CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+9UmENb4CbUxVJ3TJcrgdsxL98MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvYTEyNmRjMmEtZWExMi0z NjBmLTg4NGEtYzAzNDI4OWYwYWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYxUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxh3Xe4U9AHtvUZq24HGMThDrJGKAOXILuAJ2vFRe3PZBU36R/KGelH Z67wYlb45/ZEEiqQbo2IxEg5mAeNee2rtz2osXC+pRMYR5gR4dB1uQsBzp39HMt1 478b2ODHEuYiw0l9hNmy/3lwoAtLELaO8jECKEcmGKusDQ+B/Y72WLEj2u1TcQGv n9aNEbnE8q+8/QWaSfEOquD0PNl9kE+7ZIuLGlhDcN6zmOhz7Bu6WkZ6qOC3HTSz x74Yr3EOr8Rj1Wuqu4k6P5nsxf/ETmMabB7E4uzu+f8nyv0GQULaGSTxYz/2kPDo 208D91U9SUvHqTsNNIl1HlBpgSdpnRo= -----END CERTIFICATE-----Generated at Sun Jun 15 15:38:32 2025 by rpki-client