$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bc133b7-157c-3e8c-8d01-b58abb3c6ab1.roa File: 3bc133b7-157c-3e8c-8d01-b58abb3c6ab1.roa (raw, json) Hash identifier: tk5JsJ2cTml+o1C/qy53d3TVReNuk/KkSDqSJtrg1hM= Subject key identifier: 00:22:F0:4E:C1:06:B1:48:04:7A:5A:69:04:F7:A5:E1:47:56:15:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5CFB2CDA002D353DEBF64E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bc133b7-157c-3e8c-8d01-b58abb3c6ab1.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 63949 IP address blocks: 139.144.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:2c:da:00:2d:35:3d:eb:f6:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=dc2b2c29-ab90-49a3-91e9-59263d087ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4d:ab:0a:cc:7f:96:73:76:02:5a:96:14:e5: 83:75:34:ad:27:b2:30:c3:ff:42:ee:c4:9c:8c:d1: ff:b1:0e:d7:68:1d:d7:b3:8a:29:f1:a5:8b:80:a7: 3c:6f:5a:65:b6:68:cf:db:71:14:75:5a:0a:ad:ca: a2:fc:56:b3:d1:da:07:24:38:72:7e:79:c6:8b:04: e0:8b:40:0f:67:6c:63:21:15:a0:7f:7a:17:56:a8: 73:66:d5:e2:00:a4:90:4f:80:5e:a9:5e:3e:01:19: 9f:1f:92:54:da:18:2b:c8:c4:48:63:75:0a:ab:c0: 5b:c4:e4:c2:e3:a1:a9:02:80:82:65:46:3f:71:47: f7:42:a8:7b:2d:39:f5:c4:dd:02:3b:fa:fc:cd:b2: 0d:a5:99:4e:ff:4b:d6:78:d4:41:e7:38:b4:aa:66: 3c:35:2d:88:75:9c:f4:9c:1d:51:2c:af:f9:52:fe: 78:92:ee:05:d1:54:02:05:5d:52:55:74:6a:b9:a4: 07:ff:b5:21:70:9d:18:99:2a:a5:01:11:6d:4b:d9: 7e:1d:21:d0:ae:92:d5:c9:e0:03:fc:55:41:14:23: 43:44:f3:c8:c2:3f:be:68:01:53:fe:da:b3:ee:6c: c0:a2:a1:30:76:dc:0b:87:fe:e4:f3:a5:66:92:e2: 05:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:22:F0:4E:C1:06:B1:48:04:7A:5A:69:04:F7:A5:E1:47:56:15:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bc133b7-157c-3e8c-8d01-b58abb3c6ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 139.144.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f0:87:29:14:08:15:7e:eb:79:d7:7f:ff:6c:b9:5f:aa:be: a6:d1:44:a4:e0:b3:14:82:49:c6:11:51:45:89:68:50:ea:b8: bd:38:43:53:ec:91:38:a9:e3:49:f0:c2:92:1f:bc:89:dc:37: 82:20:f8:f8:10:ca:47:4a:da:30:70:59:00:17:11:ee:17:d7: 06:7d:8c:0a:40:41:e3:8f:94:79:df:5b:f6:ad:4d:54:a4:cc: 0d:ba:08:e8:20:22:d0:47:5f:df:60:9d:80:48:40:c1:a1:f0: 49:29:18:3a:aa:e4:3a:23:ce:d8:f3:c9:3c:97:fe:8c:bd:e9: cc:91:85:58:92:f3:b6:3d:1e:98:ea:64:cc:7a:a4:1a:55:ec: a2:19:1e:90:03:3f:13:99:fb:3b:f5:aa:55:12:f8:1f:be:d4: de:08:18:fd:a7:54:55:08:ff:81:92:e0:10:8b:6e:d3:22:4e: 41:a9:f8:d9:55:0a:f1:2c:c8:2b:ab:54:72:ed:28:6d:18:46: f3:33:bf:7b:2a:66:27:2b:f5:7f:49:32:ef:ab:41:9d:6b:4f: a9:52:90:81:56:8b:9c:b9:a1:a0:23:45:ec:39:30:bd:34:ae: b0:b4:58:9d:1b:6f:db:b7:63:1a:cf:c8:8e:d1:69:df:65:dd: 95:3b:20:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+yzaAC01Pev2ToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZGMyYjJjMjktYWI5MC00OWEzLTkxZTktNTkyNjNkMDg3ZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok2rCsx/lnN2AlqWFOWDdTStJ7Iww/9C7sSc jNH/sQ7XaB3Xs4op8aWLgKc8b1pltmjP23EUdVoKrcqi/Faz0doHJDhyfnnGiwTg i0APZ2xjIRWgf3oXVqhzZtXiAKSQT4BeqV4+ARmfH5JU2hgryMRIY3UKq8BbxOTC 46GpAoCCZUY/cUf3Qqh7LTn1xN0CO/r8zbINpZlO/0vWeNRB5zi0qmY8NS2IdZz0 nB1RLK/5Uv54ku4F0VQCBV1SVXRquaQH/7UhcJ0YmSqlARFtS9l+HSHQrpLVyeAD /FVBFCNDRPPIwj++aAFT/tqz7mzAoqEwdtwLh/7k86VmkuIFxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAi8E7BBrFIBHpaaQT3peFHVhV3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2JjMTMzYjctMTU3Yy0z ZThjLThkMDEtYjU4YWJiM2M2YWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEi5AQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/whykUCBV+63nXf/9suV+qvqbRRKTgsxSCScYRUUWJaFDquL04Q1Ps kTip40nwwpIfvIncN4Ig+PgQykdK2jBwWQAXEe4X1wZ9jApAQeOPlHnfW/atTVSk zA26COggItBHX99gnYBIQMGh8EkpGDqq5DojztjzyTyX/oy96cyRhViS87Y9Hpjq ZMx6pBpV7KIZHpADPxOZ+zv1qlUS+B++1N4IGP2nVFUI/4GS4BCLbtMiTkGp+NlV CvEsyCurVHLtKG0YRvMzv3sqZicr9X9JMu+rQZ1rT6lSkIFWi5y5oaAjRew5ML00 rrC0WJ0bb9u3YxrPyI7Rad9l3ZU7IDY= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:48 2025 by rpki-client