$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/b6dcd107-8c73-3b34-b8c9-5a3274cde545.roa File: b6dcd107-8c73-3b34-b8c9-5a3274cde545.roa (raw, json) Hash identifier: JbD9iaMjc7LWyyGBBvTE+IpDY1sXlN7Ln+yDImWS8ik= Subject key identifier: CB:AB:E0:2A:04:CE:FD:0D:CF:21:4F:8E:44:97:D7:A6:CB:F7:4F:7B Certificate issuer: /CN=843d051d-a734-4f3d-9544-a5ed8b60c976 Certificate serial: 010D0C9F4328584A0C056D3E9D856D32A7D67D00 Authority key identifier: FC:FE:3F:F0:23:F4:A4:22:8F:75:9F:AD:23:3F:81:99:70:42:B4:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/b6dcd107-8c73-3b34-b8c9-5a3274cde545.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 48927 IP address blocks: 140.235.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:6d:3e:9d:85:6d:32:a7:d6:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843d051d-a734-4f3d-9544-a5ed8b60c976 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=10a8e1c5-6297-4d2e-8db5-fb08c1c4ec64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2c:5c:fb:e8:cf:68:71:ef:c6:91:89:31:6d: 05:b1:eb:60:d1:4c:2e:03:9f:59:c1:8d:e8:64:a8: db:32:fc:20:51:a8:91:eb:9b:51:7a:b8:cb:ad:89: 4d:f4:d7:a6:1f:65:c4:1c:d9:d5:28:4a:9e:05:96: 63:74:69:49:67:fe:ae:9d:05:c8:22:a4:d6:59:7a: 4a:3d:7d:72:5c:6c:2e:59:bb:96:8e:a4:19:d0:db: d6:83:57:0c:c7:f6:da:57:c2:7a:6e:78:fd:90:de: 91:11:10:79:6a:6e:ea:a8:d2:63:e9:40:64:f4:43: 4a:65:71:50:12:e5:15:c7:28:cc:00:3c:dd:ff:fe: 9a:f2:8b:6e:2d:e1:cc:ad:50:fb:fc:78:be:7a:80: f1:bb:37:a7:a7:7b:cb:a4:d9:44:1f:5e:fa:c0:5c: 2c:5e:a2:dd:ce:07:05:79:34:5b:87:92:01:b0:8b: 04:ee:94:30:94:6d:a6:c2:05:36:ea:e6:53:47:75: 46:1b:81:b8:62:90:89:8f:c0:20:07:75:13:62:b2: cc:61:75:41:c4:2e:0e:38:b7:2e:18:b8:fd:30:e7: f5:18:7f:fc:05:08:e9:08:e8:b9:90:3f:3c:10:50: 96:a4:6c:cd:29:b2:75:22:86:a0:93:ea:2a:8a:b9: 6a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AB:E0:2A:04:CE:FD:0D:CF:21:4F:8E:44:97:D7:A6:CB:F7:4F:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/b6dcd107-8c73-3b34-b8c9-5a3274cde545.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.crl X509v3 Authority Key Identifier: keyid:FC:FE:3F:F0:23:F4:A4:22:8F:75:9F:AD:23:3F:81:99:70:42:B4:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer sbgp-ipAddrBlock: critical IPv4: 140.235.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b3:18:2a:77:40:4f:20:8a:f0:29:4b:5d:18:87:dc:c6:c0: 64:cf:88:c9:eb:44:95:93:c6:4f:ec:f5:0d:74:f3:23:35:01: 6d:67:0b:b4:a3:b0:f0:c5:ee:8b:32:ac:90:3a:8d:14:4c:22: 83:ee:b9:33:6a:a0:b4:ae:cf:19:41:6e:d5:64:4a:43:51:cd: 15:da:1c:a1:fd:4e:91:a0:79:20:39:b2:2f:b7:72:a7:f2:ac: 55:88:45:c2:64:86:fa:72:88:5e:c6:36:cb:5c:dc:95:b1:b7: bf:54:a2:69:f3:a1:b4:f4:f7:7e:31:56:ba:1a:00:6a:50:f8: 6b:8b:a3:63:4c:8d:e7:91:da:c3:92:32:fe:f5:7a:aa:91:f9: d8:ff:3d:c2:6e:b5:6c:cd:a5:cd:52:65:f9:ea:48:29:d6:04: d4:20:7c:5f:56:a7:fd:c6:99:45:8e:32:73:d7:80:55:af:e3: 4b:86:fe:27:9f:10:60:48:96:77:15:f7:28:83:7f:29:4f:d5: 75:89:df:aa:ee:a2:92:89:6d:86:3a:1c:42:dc:0f:4a:e4:c8: eb:94:3b:1f:e5:dd:c4:8a:70:dd:c0:c2:fc:9d:cf:a3:f7:ef: 2e:0c:b0:cc:9f:95:19:f9:ef:a6:79:a7:93:8b:01:7a:14:67: a9:ff:96:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBW0+nYVtMqfWfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQzZDA1MWQtYTczNC00ZjNkLTk1NDQtYTVlZDhiNjBj OTc2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MTBhOGUxYzUtNjI5Ny00ZDJlLThkYjUtZmIwOGMxYzRlYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhixc++jPaHHvxpGJMW0Fsetg0UwuA59ZwY3o ZKjbMvwgUaiR65tRerjLrYlN9NemH2XEHNnVKEqeBZZjdGlJZ/6unQXIIqTWWXpK PX1yXGwuWbuWjqQZ0NvWg1cMx/baV8J6bnj9kN6RERB5am7qqNJj6UBk9ENKZXFQ EuUVxyjMADzd//6a8otuLeHMrVD7/Hi+eoDxuzenp3vLpNlEH176wFwsXqLdzgcF eTRbh5IBsIsE7pQwlG2mwgU26uZTR3VGG4G4YpCJj8AgB3UTYrLMYXVBxC4OOLcu GLj9MOf1GH/8BQjpCOi5kD88EFCWpGzNKbJ1Ioagk+oqirlqwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMur4CoEzv0NzyFPjkSX16bL9097MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NDNk MDUxZC1hNzM0LTRmM2QtOTU0NC1hNWVkOGI2MGM5NzYvYjZkY2QxMDctOGM3My0z YjM0LWI4YzktNWEzMjc0Y2RlNTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODQzZDA1MWQtYTczNC00ZjNkLTk1 NDQtYTVlZDhiNjBjOTc2Lzg0M2QwNTFkLWE3MzQtNGYzZC05NTQ0LWE1ZWQ4YjYw Yzk3Ni5jcmwwHwYDVR0jBBgwFoAU/P4/8CP0pCKPdZ+tIz+BmXBCtJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NDNkMDUxZC1hNzM0LTRmM2QtOTU0NC1hNWVk OGI2MGM5NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOtEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2zGCp3QE8givApS10Yh9zGwGTPiMnrRJWTxk/s9Q108yM1AW1nC7Sj sPDF7osyrJA6jRRMIoPuuTNqoLSuzxlBbtVkSkNRzRXaHKH9TpGgeSA5si+3cqfy rFWIRcJkhvpyiF7GNstc3JWxt79UomnzobT0934xVroaAGpQ+GuLo2NMjeeR2sOS Mv71eqqR+dj/PcJutWzNpc1SZfnqSCnWBNQgfF9Wp/3GmUWOMnPXgFWv40uG/ief EGBIlncV9yiDfylP1XWJ36ruopKJbYY6HELcD0rkyOuUOx/l3cSKcN3Awvydz6P3 7y4MsMyflRn576Z5p5OLAXoUZ6n/los= -----END CERTIFICATE-----Generated at Sun Jun 8 20:40:38 2025 by rpki-client