$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/f74da957-00b3-3dc6-aeef-4bdae138c507.roa File: f74da957-00b3-3dc6-aeef-4bdae138c507.roa (raw, json) Hash identifier: K4QgBW22gLGP0Uv36y+HaG9/uDwDfKakpYlQ7RIrPQE= Subject key identifier: 60:6B:4C:F7:7A:E6:A8:75:D9:11:FB:54:74:CE:00:7A:BC:A7:5C:94 Certificate issuer: /CN=997dfd51-5907-4d93-8ce3-05b9bc754eaa Certificate serial: 010D0C9F4328584A8CEF0B45CB8AE5F8FBFE7540 Authority key identifier: 39:23:B8:33:30:B7:D1:CD:A1:83:63:B8:D4:CF:17:FE:D6:91:64:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/f74da957-00b3-3dc6-aeef-4bdae138c507.roa Signing time: Thu 17 Jul 2025 17:15:35 +0000 ROA not before: Thu 17 Jul 2025 17:15:35 +0000 ROA not after: Wed 15 Oct 2025 17:15:35 +0000 asID: 16589 IP address blocks: 140.235.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/997dfd51-5907-4d93-8ce3-05b9bc754eaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/997dfd51-5907-4d93-8ce3-05b9bc754eaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:ef:0b:45:cb:8a:e5:f8:fb:fe:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997dfd51-5907-4d93-8ce3-05b9bc754eaa Validity Not Before: Jul 17 17:15:35 2025 GMT Not After : Oct 15 17:15:35 2025 GMT Subject: CN=48708c6e-210d-4fba-8f48-e6d2de7905b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:5c:73:6d:d4:3c:bd:f2:fd:d6:1e:e1:41: 20:09:78:e2:91:52:4c:6a:27:ef:b0:ec:f5:e9:eb: 67:a0:0b:ad:a6:95:92:84:94:7d:90:96:0c:77:d5: d4:25:63:91:e8:4a:9b:41:a3:b0:71:da:af:7a:83: a4:e4:d9:83:28:65:44:cf:3f:2b:60:63:93:a8:a6: 58:f6:97:88:66:35:46:4b:77:87:60:d4:dd:cd:ab: db:41:fa:3e:fa:c1:32:5e:ab:3a:57:db:78:0b:55: d0:c1:14:1c:16:b4:fa:6a:73:6b:40:0c:1b:e6:fb: 9f:f2:61:ad:63:54:1a:56:50:81:fd:10:45:15:8f: 83:96:f9:7c:0f:e1:87:da:94:fb:42:4f:df:f1:c2: 08:0f:17:4c:f4:36:57:21:4a:60:e8:d7:5a:12:b9: f1:ef:5b:28:6b:e1:51:91:ff:e0:af:4f:a5:02:04: f4:85:52:ca:0a:e0:70:81:b7:d2:ef:16:b0:f9:92: 89:b6:c3:8a:a6:59:76:13:74:be:da:2f:92:1a:5e: a9:8e:d1:33:da:5e:ea:3a:20:87:c5:92:50:cc:aa: f5:51:f5:06:bd:54:6e:c3:0e:1e:9f:61:72:5e:c9: 3e:03:b3:52:c1:8d:a9:d8:8e:22:b2:74:fd:99:66: 37:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6B:4C:F7:7A:E6:A8:75:D9:11:FB:54:74:CE:00:7A:BC:A7:5C:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/f74da957-00b3-3dc6-aeef-4bdae138c507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/997dfd51-5907-4d93-8ce3-05b9bc754eaa.crl X509v3 Authority Key Identifier: keyid:39:23:B8:33:30:B7:D1:CD:A1:83:63:B8:D4:CF:17:FE:D6:91:64:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa.cer sbgp-ipAddrBlock: critical IPv4: 140.235.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ce:42:11:2b:2e:56:e7:fe:9c:6f:8c:7e:9a:ed:15:71:a1: a8:39:da:61:6f:e4:e7:41:92:06:21:4c:88:2b:3b:15:bf:51: 69:ae:b0:70:2d:4b:b5:6c:c0:fe:08:d2:e4:72:91:5a:01:14: b2:00:68:b7:bf:6a:33:3b:ab:e4:aa:97:0c:d0:65:53:cd:9a: bf:e2:18:12:cf:46:17:48:03:5e:6a:01:07:27:9c:85:64:c3: 35:11:69:b1:c9:bb:93:ba:b1:4d:d3:cb:98:f3:9c:0d:8c:e8: 62:3b:e4:e4:79:a7:e2:3f:10:8b:1c:3c:66:45:1a:5e:b1:39: 7d:55:84:10:4e:16:b4:ca:17:5c:3c:62:c0:53:ba:87:20:52: 97:3c:e6:b0:aa:71:3d:fe:7e:3f:c4:32:78:71:c9:4a:3d:66: 72:50:70:f1:fa:e9:1e:30:60:27:f1:ad:3d:23:f8:29:62:fc: 5c:2e:3d:e3:15:ee:a7:21:8f:9f:3e:de:9a:b0:f8:7c:34:1a: dc:3b:af:82:e6:00:51:7f:79:05:67:76:b5:fb:18:44:97:8d: 4f:7e:11:fd:61:db:d7:56:91:55:6c:81:b0:f9:e7:e5:24:84: 93:55:59:77:56:df:7a:d7:fd:1e:6d:fc:b4:0f:50:15:bc:0a: cb:5b:5c:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqM7wtFy4rl+Pv+dUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZGZkNTEtNTkwNy00ZDkzLThjZTMtMDViOWJjNzU0 ZWFhMB4XDTI1MDcxNzE3MTUzNVoXDTI1MTAxNTE3MTUzNVowLzEtMCsGA1UEAxMk NDg3MDhjNmUtMjEwZC00ZmJhLThmNDgtZTZkMmRlNzkwNWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttdcc23UPL3y/dYe4UEgCXjikVJMaifvsOz1 6etnoAutppWShJR9kJYMd9XUJWOR6EqbQaOwcdqveoOk5NmDKGVEzz8rYGOTqKZY 9peIZjVGS3eHYNTdzavbQfo++sEyXqs6V9t4C1XQwRQcFrT6anNrQAwb5vuf8mGt Y1QaVlCB/RBFFY+Dlvl8D+GH2pT7Qk/f8cIIDxdM9DZXIUpg6NdaErnx71soa+FR kf/gr0+lAgT0hVLKCuBwgbfS7xaw+ZKJtsOKpll2E3S+2i+SGl6pjtEz2l7qOiCH xZJQzKr1UfUGvVRuww4en2FyXsk+A7NSwY2p2I4isnT9mWY34QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBrTPd65qh12RH7VHTOAHq8p1yUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85OTdk ZmQ1MS01OTA3LTRkOTMtOGNlMy0wNWI5YmM3NTRlYWEvZjc0ZGE5NTctMDBiMy0z ZGM2LWFlZWYtNGJkYWUxMzhjNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTk3ZGZkNTEtNTkwNy00ZDkzLThj ZTMtMDViOWJjNzU0ZWFhLzk5N2RmZDUxLTU5MDctNGQ5My04Y2UzLTA1YjliYzc1 NGVhYS5jcmwwHwYDVR0jBBgwFoAUOSO4MzC30c2hg2O41M8X/taRZJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85OTdkZmQ1MS01OTA3LTRkOTMtOGNlMy0wNWI5 YmM3NTRlYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOuoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7OQhErLlbn/pxvjH6a7RVxoag52mFv5OdBkgYhTIgrOxW/UWmusHAt S7VswP4I0uRykVoBFLIAaLe/ajM7q+SqlwzQZVPNmr/iGBLPRhdIA15qAQcnnIVk wzURabHJu5O6sU3Ty5jznA2M6GI75OR5p+I/EIscPGZFGl6xOX1VhBBOFrTKF1w8 YsBTuocgUpc85rCqcT3+fj/EMnhxyUo9ZnJQcPH66R4wYCfxrT0j+Cli/FwuPeMV 7qchj58+3pqw+Hw0Gtw7r4LmAFF/eQVndrX7GESXjU9+Ef1h29dWkVVsgbD55+Uk hJNVWXdW33rX/R5t/LQPUBW8CstbXME= -----END CERTIFICATE-----Generated at Sun Jul 20 15:02:01 2025 by rpki-client