$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/158788ef-52cb-31cc-9ac3-50df5a8f9263.roa File: 158788ef-52cb-31cc-9ac3-50df5a8f9263.roa (raw, json) Hash identifier: qlunBUA6UP28+1OntK5EScfHqQxadlcTKx0PVrOdrG8= Subject key identifier: B6:91:20:59:8F:32:48:64:3A:BB:F4:79:23:A0:F1:8E:D2:8F:44:96 Certificate issuer: /CN=20a16a9a-6641-447a-8644-025fca0c6683 Certificate serial: 010D0C9F4328584A7FE08ECA5C362717C6F41A80 Authority key identifier: B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/158788ef-52cb-31cc-9ac3-50df5a8f9263.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 211440 IP address blocks: 140.235.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:8e:ca:5c:36:27:17:c6:f4:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20a16a9a-6641-447a-8644-025fca0c6683 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=d630aa00-f2f8-40bf-ba25-3edfdf50f22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:14:1c:6b:3f:41:55:4c:e2:29:49:3b:1b:25: aa:4d:05:9d:20:9c:8f:cf:38:c6:12:ae:38:17:7b: ab:3f:86:19:65:56:ac:d5:ab:33:6f:b4:1c:44:b6: 3e:96:bd:6d:79:0b:cf:b8:4c:d2:8d:eb:9b:10:0d: df:f2:37:08:fc:9c:6f:e1:47:6d:a1:e2:68:4d:5e: 29:3e:fd:33:3c:b0:58:7d:79:3a:9f:a1:28:90:e6: 5b:b4:cc:c6:11:ce:e5:e0:e8:e1:0c:d9:ff:f0:1c: 93:01:aa:78:98:c2:cf:70:22:4b:23:39:50:07:8b: 4e:30:22:7f:f2:f3:24:59:4f:c0:5c:2b:c4:d4:f1: 8c:d6:7d:b8:6c:08:8d:91:36:e8:57:15:92:9c:a5: 2c:ae:7d:9c:98:a7:a5:a7:2d:fb:8e:f5:a5:85:91: 06:9c:ee:b5:9c:84:d3:d5:74:ca:fd:df:94:ef:a6: 91:0c:38:a0:27:b1:23:73:7d:c2:70:0a:b7:5d:1b: f6:68:62:45:1f:3e:a8:81:fc:e0:45:60:d7:bf:74: 6a:f8:0e:d1:30:ee:d1:5d:0e:20:75:0c:e7:75:e9: 48:c8:0e:3b:76:2e:50:7f:72:b3:93:63:3c:2e:fe: 54:fd:50:25:ab:95:81:08:d5:c4:2b:94:c3:b5:0e: d7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:91:20:59:8F:32:48:64:3A:BB:F4:79:23:A0:F1:8E:D2:8F:44:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/158788ef-52cb-31cc-9ac3-50df5a8f9263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl X509v3 Authority Key Identifier: keyid:B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer sbgp-ipAddrBlock: critical IPv4: 140.235.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:10:b8:ac:d7:cf:43:88:ad:13:c5:dc:29:85:e7:0b:86:0f: f9:1d:be:b8:88:18:3c:6d:9d:f8:b4:ca:24:00:4c:55:75:12: 6e:f3:96:37:54:f6:9a:30:b4:0d:26:9d:f3:a5:9d:38:0f:cf: 3e:22:bc:e8:5c:26:db:24:7e:bd:39:2c:82:74:9f:b1:ab:47: e8:e5:5d:8a:d5:fb:5b:b8:49:71:50:d6:89:d5:16:03:38:ba: 21:41:96:4f:3b:55:60:a9:cc:44:7d:30:e8:a4:02:0c:75:18: 4c:43:cb:e4:27:4f:58:b0:21:03:82:29:2c:de:6e:24:74:b0: 30:9c:5e:31:4c:c8:82:dd:1c:41:ed:36:25:f5:a9:19:ea:86: 0e:6c:6b:6f:3b:d5:14:85:45:88:55:a4:fa:49:10:3e:7f:21: af:e1:ee:22:96:95:79:ac:70:a2:f4:ef:97:6b:0d:53:c0:ce: 16:81:d4:75:70:8d:09:7e:7b:65:fa:10:ef:8b:1e:77:fe:07: 84:e6:81:c1:97:4b:41:66:22:16:b3:68:fd:8c:33:ae:79:e6: 0d:a7:21:06:19:3a:d5:77:40:a6:c4:7a:ab:3c:af:1c:19:e9: 8d:d2:9e:6f:e5:79:ca:f0:99:e9:0a:6f:59:d0:d6:e9:83:03: 4b:f7:7a:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4I7KXDYnF8b0GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBhMTZhOWEtNjY0MS00NDdhLTg2NDQtMDI1ZmNhMGM2 NjgzMB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk ZDYzMGFhMDAtZjJmOC00MGJmLWJhMjUtM2VkZmRmNTBmMjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBQcaz9BVUziKUk7GyWqTQWdIJyPzzjGEq44 F3urP4YZZVas1aszb7QcRLY+lr1teQvPuEzSjeubEA3f8jcI/Jxv4UdtoeJoTV4p Pv0zPLBYfXk6n6EokOZbtMzGEc7l4OjhDNn/8ByTAap4mMLPcCJLIzlQB4tOMCJ/ 8vMkWU/AXCvE1PGM1n24bAiNkTboVxWSnKUsrn2cmKelpy37jvWlhZEGnO61nITT 1XTK/d+U76aRDDigJ7Ejc33CcAq3XRv2aGJFHz6ogfzgRWDXv3Rq+A7RMO7RXQ4g dQzndelIyA47di5Qf3Kzk2M8Lv5U/VAlq5WBCNXEK5TDtQ7XRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaRIFmPMkhkOrv0eSOg8Y7Sj0SWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMGEx NmE5YS02NjQxLTQ0N2EtODY0NC0wMjVmY2EwYzY2ODMvMTU4Nzg4ZWYtNTJjYi0z MWNjLTlhYzMtNTBkZjVhOGY5MjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjBhMTZhOWEtNjY0MS00NDdhLTg2 NDQtMDI1ZmNhMGM2NjgzLzIwYTE2YTlhLTY2NDEtNDQ3YS04NjQ0LTAyNWZjYTBj NjY4My5jcmwwHwYDVR0jBBgwFoAUts8sCD3xQj5nbO2j387su5swxgMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMGExNmE5YS02NjQxLTQ0N2EtODY0NC0wMjVm Y2EwYzY2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEQuKzXz0OIrRPF3CmF5wuGD/kdvriIGDxtnfi0yiQATFV1Em7zljdU 9powtA0mnfOlnTgPzz4ivOhcJtskfr05LIJ0n7GrR+jlXYrV+1u4SXFQ1onVFgM4 uiFBlk87VWCpzER9MOikAgx1GExDy+QnT1iwIQOCKSzebiR0sDCcXjFMyILdHEHt NiX1qRnqhg5sa2871RSFRYhVpPpJED5/Ia/h7iKWlXmscKL075drDVPAzhaB1HVw jQl+e2X6EO+LHnf+B4TmgcGXS0FmIhazaP2MM6555g2nIQYZOtV3QKbEeqs8rxwZ 6Y3Snm/lecrwmekKb1nQ1umDA0v3ek4= -----END CERTIFICATE-----Generated at Mon Jul 21 08:26:54 2025 by rpki-client