$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af2f61d-8f0d-34de-9b2b-b2529c2c5de1.roa File: 3af2f61d-8f0d-34de-9b2b-b2529c2c5de1.roa (raw, json) Hash identifier: NJpESytUKpRPR4u22gdHRgSBo0vJJVdqoORGMGVYz9Y= Subject key identifier: 43:C8:A9:69:5B:FF:E2:15:C1:F4:5B:45:D4:C8:0F:31:91:6F:AC:3F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCF40022A8776A4A801800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af2f61d-8f0d-34de-9b2b-b2529c2c5de1.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 21508 IP address blocks: 69.139.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:f4:00:22:a8:77:6a:4a:80:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=e0ef857a-3a3a-4d30-8228-22a881c13795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:35:02:b6:d6:02:7e:36:2a:f6:15:70:62:4d: 93:e8:96:8a:d9:70:d2:82:f8:63:65:e3:95:2a:01: 68:84:70:5c:66:81:6a:17:80:70:3a:d3:e0:8c:33: b8:34:4c:a6:7f:cd:fd:c1:96:7e:58:28:b3:0c:2f: c4:9a:67:42:ea:d6:90:04:24:a2:9a:69:08:20:9c: fc:99:b7:42:96:ea:f4:d2:b2:44:d6:c1:94:2b:8c: e2:44:3c:f3:b4:02:e8:16:96:25:88:e0:b8:4b:2c: 72:b5:0f:2d:70:67:82:6f:41:ce:41:e7:df:93:27: c3:e6:62:79:e4:3b:77:9b:87:a6:d6:3c:e9:47:3f: d3:f2:a4:ce:6f:b5:13:a5:78:8d:cf:dd:a4:7d:25: e9:36:c7:f3:04:ca:6a:2d:06:98:40:60:ab:bb:38: 3c:3e:54:3a:c7:3b:ce:52:7b:11:6a:0d:11:a4:12: 20:37:f6:d3:60:11:0c:9a:68:29:2e:4c:6f:67:17: 51:35:59:42:1f:b4:16:e6:34:65:ec:9b:fd:aa:8f: fb:07:04:de:00:6b:ba:04:20:6e:5b:72:0a:ae:8b: 5d:e0:d1:36:11:6f:e2:33:16:6b:51:ba:de:4a:39: d4:99:d8:d5:de:bb:42:2b:51:28:d0:ed:47:7f:7a: f7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C8:A9:69:5B:FF:E2:15:C1:F4:5B:45:D4:C8:0F:31:91:6F:AC:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af2f61d-8f0d-34de-9b2b-b2529c2c5de1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.139.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:85:e5:6c:16:3e:90:65:5c:11:d7:f8:22:e1:4a:1a:f3:4b: 8f:f0:2f:1e:ec:c8:82:85:4a:eb:1e:f1:fa:3b:99:ba:47:64: 60:ab:81:08:5f:b9:5b:ab:12:e6:84:c2:4d:10:01:f1:63:99: 84:d1:f5:f1:69:76:e2:25:a9:22:90:41:ee:fc:0f:a6:60:2e: da:4c:24:58:3c:f0:08:d0:de:50:77:8b:3e:5c:65:71:51:2f: 32:bc:32:5e:7f:90:ff:5f:4e:f2:6d:1a:8d:93:a3:e0:40:a6: a8:d2:47:59:b0:86:ff:2e:c4:2c:64:74:03:72:2e:15:a4:65: 89:57:d3:54:24:16:95:ef:d5:d4:da:10:0f:ac:f2:21:0d:eb: 25:8c:f1:0e:59:80:8b:98:5b:5c:e3:1f:34:d4:3e:d1:53:9e: d5:6d:33:12:a9:e1:e4:40:17:7a:c1:91:00:97:6b:40:b7:48: c2:f5:f2:ea:69:0f:93:4a:f2:c3:1a:f4:c2:0e:9b:1c:45:49: 12:83:7d:21:82:6f:02:8e:96:17:fa:a7:71:2a:f6:02:18:8b: c5:a3:b4:dc:f4:08:f6:37:80:7d:d5:93:41:ee:f1:e4:8d:a1: 91:8c:ba:21:1a:11:b4:d8:33:4b:e1:6c:e1:6c:f3:e1:d8:ff: 48:6a:98:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/PQAIqh3akqAGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZTBlZjg1N2EtM2EzYS00ZDMwLTgyMjgtMjJhODgxYzEzNzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTUCttYCfjYq9hVwYk2T6JaK2XDSgvhjZeOV KgFohHBcZoFqF4BwOtPgjDO4NEymf839wZZ+WCizDC/EmmdC6taQBCSimmkIIJz8 mbdClur00rJE1sGUK4ziRDzztALoFpYliOC4SyxytQ8tcGeCb0HOQeffkyfD5mJ5 5Dt3m4em1jzpRz/T8qTOb7UTpXiNz92kfSXpNsfzBMpqLQaYQGCruzg8PlQ6xzvO UnsRag0RpBIgN/bTYBEMmmgpLkxvZxdRNVlCH7QW5jRl7Jv9qo/7BwTeAGu6BCBu W3IKrotd4NE2EW/iMxZrUbreSjnUmdjV3rtCK1Eo0O1Hf3r3gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPIqWlb/+IVwfRbRdTIDzGRb6w/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FmMmY2MWQtOGYwZC0z NGRlLTliMmItYjI1MjljMmM1ZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARYu6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGF5WwWPpBlXBHX+CLhShrzS4/wLx7syIKFSuse8fo7mbpHZGCrgQhf uVurEuaEwk0QAfFjmYTR9fFpduIlqSKQQe78D6ZgLtpMJFg88AjQ3lB3iz5cZXFR LzK8Ml5/kP9fTvJtGo2To+BApqjSR1mwhv8uxCxkdANyLhWkZYlX01QkFpXv1dTa EA+s8iEN6yWM8Q5ZgIuYW1zjHzTUPtFTntVtMxKp4eRAF3rBkQCXa0C3SML18upp D5NK8sMa9MIOmxxFSRKDfSGCbwKOlhf6p3Eq9gIYi8WjtNz0CPY3gH3Vk0Hu8eSN oZGMuiEaEbTYM0vhbOFs8+HY/0hqmNc= -----END CERTIFICATE-----Generated at Sun Jul 20 17:35:04 2025 by rpki-client