$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4447899-c0d0-3bdf-a6ef-26d1c8de64e6.roa File: c4447899-c0d0-3bdf-a6ef-26d1c8de64e6.roa (raw, json) Hash identifier: 3ykD916/94CynOv1EhZ0LTlQd6qxDvtTIN+juT7+U5w= Subject key identifier: C0:21:8B:DA:0B:17:24:00:38:11:8F:38:F0:17:90:DE:1E:53:5F:BF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5A3073D0EA5A61B97CD85120 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4447899-c0d0-3bdf-a6ef-26d1c8de64e6.roa Signing time: Sun 29 Jun 2025 13:01:03 +0000 ROA not before: Sun 29 Jun 2025 13:01:03 +0000 ROA not after: Sat 27 Sep 2025 13:01:03 +0000 asID: 63949 IP address blocks: 139.144.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:30:73:d0:ea:5a:61:b9:7c:d8:51:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 29 13:01:03 2025 GMT Not After : Sep 27 13:01:03 2025 GMT Subject: CN=8636c927-6cc6-4c75-88c4-69abe288bd21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:37:bb:e6:e5:f9:ce:60:23:50:f4:c4:c3:6c: 5f:08:17:ba:43:b8:25:61:47:fa:5a:ef:57:b5:1e: 03:44:78:d6:72:b4:b5:28:80:10:f3:1f:82:d3:aa: 21:52:54:b4:e6:3f:ee:6a:4f:9d:3e:bd:3a:01:27: d0:46:a3:5c:57:12:bb:78:8c:47:49:be:13:e8:92: 81:ce:7f:f6:a4:3b:76:4d:66:19:af:2f:ea:9b:87: d4:5a:9c:3b:77:eb:18:16:77:b3:78:71:cf:6d:19: 13:bf:cc:ea:b2:a9:f5:1b:51:e8:d2:bf:b3:57:5c: ff:04:a8:a5:45:97:df:e3:1a:c3:fc:45:e2:bd:b9: 42:b1:32:74:65:fc:50:e9:26:ac:7f:d2:a0:46:61: 7f:a2:ae:36:d2:a6:ea:af:51:f9:4c:d2:0f:93:8e: e1:d7:78:74:93:53:eb:41:19:0e:f7:3c:65:5d:19: 2a:f8:76:1c:da:7d:cb:f7:22:d1:f6:f7:91:3d:49: 25:51:41:b9:41:04:ae:da:3a:0c:35:17:60:af:9d: e4:88:9e:d0:1f:bc:e8:31:8c:08:ee:87:93:a1:d1: b3:9e:8d:90:97:18:b2:5c:33:62:04:0d:4d:ea:02: fc:3e:b4:f2:12:23:eb:f0:cd:1a:15:d0:7b:40:07: b2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:21:8B:DA:0B:17:24:00:38:11:8F:38:F0:17:90:DE:1E:53:5F:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4447899-c0d0-3bdf-a6ef-26d1c8de64e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 139.144.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f1:de:12:36:d4:99:c0:d9:2a:20:56:b0:55:17:50:4e:ad: f0:05:34:69:55:62:58:93:58:9f:d1:e4:1f:c1:57:50:a3:a5: 4c:15:43:16:5d:d6:75:e4:85:2e:55:0f:b9:bd:44:51:3b:b1: 4f:e9:f9:5c:46:d5:78:b7:8f:ae:6d:3d:8a:46:9e:1d:1e:7f: 25:3c:6d:05:49:e4:db:1a:f4:93:93:df:a2:bc:e8:22:4c:da: 77:be:77:56:29:04:17:f5:4e:33:04:ab:1c:a5:e6:34:4e:b2: 88:f5:a3:87:a8:1a:e5:88:80:d0:70:2f:e1:a9:b6:ba:39:13: ad:c6:b2:f0:16:71:7f:54:ea:b4:eb:90:6f:b4:5c:25:97:84: 2f:31:96:a6:17:9f:e3:b6:d5:0d:6b:63:ad:47:8a:9a:12:74: f9:59:47:34:4d:13:aa:74:35:04:dc:36:8a:f4:2f:62:df:51: 89:7f:7c:d2:a0:9f:ce:3b:73:ac:81:52:fe:bf:bb:b4:77:4b: a9:89:9e:e7:0d:50:a4:0d:d5:a8:23:ef:d4:c4:08:49:b7:cc: a6:bb:33:68:6e:7a:57:27:2b:77:d0:ce:e4:da:f7:20:9f:ce: ec:37:bf:12:90:2c:3e:55:d6:8b:0a:08:1d:f5:8e:6a:ed:73: 92:d1:f7:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpaMHPQ6lphuXzYUSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk ODYzNmM5MjctNmNjNi00Yzc1LTg4YzQtNjlhYmUyODhiZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgje75uX5zmAjUPTEw2xfCBe6Q7glYUf6Wu9X tR4DRHjWcrS1KIAQ8x+C06ohUlS05j/uak+dPr06ASfQRqNcVxK7eIxHSb4T6JKB zn/2pDt2TWYZry/qm4fUWpw7d+sYFnezeHHPbRkTv8zqsqn1G1Ho0r+zV1z/BKil RZff4xrD/EXivblCsTJ0ZfxQ6Sasf9KgRmF/oq420qbqr1H5TNIPk47h13h0k1Pr QRkO9zxlXRkq+HYc2n3L9yLR9veRPUklUUG5QQSu2joMNRdgr53kiJ7QH7zoMYwI 7oeTodGzno2QlxiyXDNiBA1N6gL8PrTyEiPr8M0aFdB7QAeyyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAhi9oLFyQAOBGPOPAXkN4eU1+/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzQ0NDc4OTktYzBkMC0z YmRmLWE2ZWYtMjZkMWM4ZGU2NGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDi5D4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrx3hI21JnA2SogVrBVF1BOrfAFNGlVYliTWJ/R5B/BV1CjpUwVQxZd 1nXkhS5VD7m9RFE7sU/p+VxG1Xi3j65tPYpGnh0efyU8bQVJ5Nsa9JOT36K86CJM 2ne+d1YpBBf1TjMEqxyl5jROsoj1o4eoGuWIgNBwL+Gptro5E63GsvAWcX9U6rTr kG+0XCWXhC8xlqYXn+O21Q1rY61HipoSdPlZRzRNE6p0NQTcNor0L2LfUYl/fNKg n847c6yBUv6/u7R3S6mJnucNUKQN1agj79TECEm3zKa7M2huelcnK3fQzuTa9yCf zuw3vxKQLD5V1osKCB31jmrtc5LR90k= -----END CERTIFICATE-----Generated at Tue Jul 22 19:33:00 2025 by rpki-client