$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a3f85181-11c0-326a-830f-14c1fb40c85f.roa File: a3f85181-11c0-326a-830f-14c1fb40c85f.roa (raw, json) Hash identifier: eB4EbvLHDE/yrS3VfZntWmF2w35H4R5u/iKSo9UdoyE= Subject key identifier: 05:04:41:0D:31:1A:AE:4E:A1:77:86:03:CE:55:7C:6F:C8:29:4E:D6 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584A1B6003C8845BE747563D7980 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a3f85181-11c0-326a-830f-14c1fb40c85f.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 21949 IP address blocks: 96.45.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:03:c8:84:5b:e7:47:56:3d:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=ab86a2f7-c6e6-4bb9-bc97-7e109ae41836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:30:46:62:cd:68:96:60:0f:0b:e8:4c:26:1b: a7:18:0b:79:86:ee:b7:3d:79:f7:37:53:35:5c:a8: 70:70:b1:fe:c4:96:84:3a:4e:3a:2b:4b:1c:76:d6: 2e:bf:16:4c:6d:57:13:ab:50:c2:4b:52:27:49:16: de:73:bf:fd:c3:ce:e4:7a:35:94:a9:ee:92:18:d9: d8:6d:41:50:97:8c:1c:a4:27:ae:d7:e0:2c:1c:66: f1:ba:c1:a8:5d:98:d7:2d:ab:ef:22:8e:0f:91:88: 7a:3f:23:a3:3c:ff:0d:4d:2d:59:e4:b2:15:92:4f: 92:4f:cd:20:b1:e1:e5:fb:c6:98:8b:5d:46:54:0b: e6:00:59:15:e8:0e:a4:e1:80:56:69:a7:a6:47:ea: e6:30:82:c5:e1:9e:db:dc:07:ce:4a:c5:93:33:d5: 61:aa:f3:fb:06:27:79:26:b1:89:4a:ee:4e:dd:f3: f7:86:b2:c8:1c:74:97:29:e7:4a:5b:2d:74:b2:e2: e5:1d:02:86:8e:81:6d:3f:5b:75:6f:da:0c:4f:96: fd:d7:8c:a2:6d:1a:fb:ad:89:0f:cb:75:ba:ba:60: 54:22:31:50:75:ed:ba:f0:bc:21:c8:5b:bd:d4:90: d3:18:67:b2:1e:43:64:1d:35:d5:89:01:3f:1d:21: 6c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:04:41:0D:31:1A:AE:4E:A1:77:86:03:CE:55:7C:6F:C8:29:4E:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a3f85181-11c0-326a-830f-14c1fb40c85f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 96.45.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:95:7e:83:fc:e5:e7:61:7c:58:09:95:48:1d:6e:39:e6:5c: c3:49:8b:fe:a3:94:3b:68:dd:77:5e:1e:57:4d:01:98:be:45: 95:84:81:5d:b6:2b:fa:d7:a4:00:90:5b:3b:3a:c2:e1:f4:57: 5b:b2:5f:6b:e4:90:45:95:47:b3:0b:d4:4f:e1:4c:d6:ed:3f: f7:9e:18:96:f1:cc:33:8d:0b:19:53:3c:68:d4:91:84:2d:06: 83:2e:cd:5e:6c:89:32:66:a8:89:db:94:62:fc:5e:96:ad:ec: c7:93:7c:f4:44:7b:32:50:e9:1e:dc:e2:16:f6:59:00:2d:46: 48:8a:8b:f2:db:a4:c0:14:06:0f:fc:1d:12:d1:91:ca:f2:a2: fc:4e:6a:1a:b9:72:7b:fe:11:16:af:0d:67:7b:e8:de:87:55: 2a:f3:55:61:15:a6:6d:26:2d:a5:bf:db:73:3f:ff:97:0d:c5: 8f:45:56:15:25:1c:6e:e6:29:f8:39:ed:b2:f1:cb:9b:47:99: b4:19:22:32:1a:9c:f1:d1:c7:14:e5:88:7f:a4:c1:00:f1:ab: 06:9a:11:3d:49:21:b8:d5:5b:9b:89:c4:ef:4b:cd:23:31:5a: c5:3f:cd:c1:a1:77:12:3a:54:93:53:a2:f3:ed:69:50:8a:ea: e2:e5:87:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYAPIhFvnR1Y9eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk YWI4NmEyZjctYzZlNi00YmI5LWJjOTctN2UxMDlhZTQxODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTBGYs1olmAPC+hMJhunGAt5hu63PXn3N1M1 XKhwcLH+xJaEOk46K0scdtYuvxZMbVcTq1DCS1InSRbec7/9w87kejWUqe6SGNnY bUFQl4wcpCeu1+AsHGbxusGoXZjXLavvIo4PkYh6PyOjPP8NTS1Z5LIVkk+ST80g seHl+8aYi11GVAvmAFkV6A6k4YBWaaemR+rmMILF4Z7b3AfOSsWTM9VhqvP7Bid5 JrGJSu5O3fP3hrLIHHSXKedKWy10suLlHQKGjoFtP1t1b9oMT5b914yibRr7rYkP y3W6umBUIjFQde268LwhyFu91JDTGGeyHkNkHTXViQE/HSFsqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUEQQ0xGq5OoXeGA85VfG/IKU7WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYTNmODUxODEtMTFjMC0z MjZhLTgzMGYtMTRjMWZiNDBjODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYC3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaVfoP85edhfFgJlUgdbjnmXMNJi/6jlDto3XdeHldNAZi+RZWEgV22 K/rXpACQWzs6wuH0V1uyX2vkkEWVR7ML1E/hTNbtP/eeGJbxzDONCxlTPGjUkYQt BoMuzV5siTJmqInblGL8Xpat7MeTfPREezJQ6R7c4hb2WQAtRkiKi/LbpMAUBg/8 HRLRkcryovxOahq5cnv+ERavDWd76N6HVSrzVWEVpm0mLaW/23M//5cNxY9FVhUl HG7mKfg57bLxy5tHmbQZIjIanPHRxxTliH+kwQDxqwaaET1JIbjVW5uJxO9LzSMx WsU/zcGhdxI6VJNTovPtaVCK6uLlh4o= -----END CERTIFICATE-----Generated at Thu Jul 31 15:00:50 2025 by rpki-client