$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/c3cea639-bd97-3f2e-8762-4883aede8a1f.roa File: c3cea639-bd97-3f2e-8762-4883aede8a1f.roa (raw, json) Hash identifier: 0RR6oundEkhUgo5xhgT7VGs7d3JH6grkDTe7RIxR2Nw= Subject key identifier: 76:1B:AD:A9:2A:5B:16:BE:E9:45:8C:EC:35:29:36:95:A5:58:64:C7 Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Certificate serial: 010D0C9F4328584A6F2077C2B730F66A804F8180 Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/c3cea639-bd97-3f2e-8762-4883aede8a1f.roa Signing time: Mon 07 Jul 2025 01:00:50 +0000 ROA not before: Mon 07 Jul 2025 01:00:50 +0000 ROA not after: Sun 05 Oct 2025 01:00:50 +0000 asID: 8075 IP address blocks: 142.229.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:20:77:c2:b7:30:f6:6a:80:4f:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Validity Not Before: Jul 7 01:00:50 2025 GMT Not After : Oct 5 01:00:50 2025 GMT Subject: CN=4839ed6c-ea25-4547-ba0e-9d26352afaa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1f:60:25:9c:4e:b2:62:f7:71:82:11:89:a9: 5a:d7:26:18:07:ac:46:99:b8:92:13:61:b7:bc:4e: 2f:9e:a8:d7:25:10:11:34:82:06:cf:94:d2:fa:81: 3c:6c:7b:2c:19:43:a4:ce:63:03:53:80:c3:92:e6: 03:4d:89:fd:f9:84:6a:b5:93:30:aa:97:c2:39:53: 09:93:e0:7a:df:6e:af:f8:7e:02:83:03:de:50:83: 72:86:3d:74:ff:4e:8b:5c:0b:44:7b:71:9b:01:c2: b7:ea:4f:d0:51:a0:b2:1e:34:6c:65:f6:b5:d0:49: be:3f:e5:b9:6b:ad:a8:7b:b1:3a:a2:39:bc:b7:7e: 33:d9:66:8c:e2:c2:87:30:4d:ec:03:b3:6f:dd:9f: 71:6c:3b:ca:81:0f:13:6e:c7:37:c2:65:3f:8f:13: 4e:34:0d:e9:92:00:31:d2:1b:1c:fa:2f:48:8e:f0: 2c:d9:d1:b0:76:a4:fa:74:cc:67:cf:24:23:66:59: c4:98:62:78:cd:9b:c6:8a:82:04:e9:26:f0:12:2c: d7:a3:39:fb:f0:93:88:8d:eb:dc:64:ab:80:16:da: fb:7a:5d:44:fd:5d:2e:49:b8:fc:0d:ae:2d:4b:92: 6c:65:7f:50:c0:cc:ad:08:d5:5c:b6:b1:67:41:a4: 8b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1B:AD:A9:2A:5B:16:BE:E9:45:8C:EC:35:29:36:95:A5:58:64:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/c3cea639-bd97-3f2e-8762-4883aede8a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl X509v3 Authority Key Identifier: keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer sbgp-ipAddrBlock: critical IPv4: 142.229.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:6e:22:16:2e:ec:58:e0:5d:80:26:b3:98:51:b8:08:d7:42: db:91:29:a2:2f:59:a1:d9:2c:e2:ad:09:46:67:f2:65:e1:98: ec:40:60:61:48:d9:c3:a5:81:76:bd:93:92:1d:41:ba:5b:95: e9:88:1b:fe:45:a1:76:04:1e:49:e7:f3:f9:eb:c1:ea:12:af: 04:f8:1d:b5:78:d3:a9:66:21:98:a2:01:a0:e1:c8:8e:df:12: 85:0a:16:7d:ce:d8:f7:81:46:8f:eb:5e:55:69:2f:71:49:2d: 5a:3e:14:f8:c4:90:e8:ac:0b:8a:33:f3:fc:bd:5c:4e:da:de: d1:a4:f3:f0:b2:1a:14:d5:4f:c3:f2:6b:a7:9a:a7:de:17:f5: dc:4c:cc:1a:7c:16:86:31:68:c7:d2:c7:bf:65:92:2f:7e:63: f2:9f:5e:05:f5:c1:7d:67:2b:3e:b5:79:c4:b9:71:05:49:99: 81:36:5b:a7:39:cd:fa:e7:a8:21:4e:f9:51:0d:ec:a4:62:0f: 74:bf:72:e8:b4:c7:95:6e:51:86:29:e0:4c:a8:7a:d2:b5:11: 29:e9:fe:e9:e6:b0:bd:d5:60:b4:93:2b:38:79:54:13:8d:0d: 77:23:ca:de:b1:99:87:92:8f:6a:0d:c6:d9:bf:c1:be:4a:97: 46:8b:28:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIHfCtzD2aoBPgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi MjM0MB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk NDgzOWVkNmMtZWEyNS00NTQ3LWJhMGUtOWQyNjM1MmFmYWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB9gJZxOsmL3cYIRiala1yYYB6xGmbiSE2G3 vE4vnqjXJRARNIIGz5TS+oE8bHssGUOkzmMDU4DDkuYDTYn9+YRqtZMwqpfCOVMJ k+B6326v+H4CgwPeUINyhj10/06LXAtEe3GbAcK36k/QUaCyHjRsZfa10Em+P+W5 a62oe7E6ojm8t34z2WaM4sKHME3sA7Nv3Z9xbDvKgQ8Tbsc3wmU/jxNONA3pkgAx 0hsc+i9IjvAs2dGwdqT6dMxnzyQjZlnEmGJ4zZvGioIE6SbwEizXozn78JOIjevc ZKuAFtr7el1E/V0uSbj8Da4tS5JsZX9QwMytCNVctrFnQaSLXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYbrakqWxa+6UWM7DUpNpWlWGTHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvYzNjZWE2MzktYmQ5Ny0z ZjJlLTg3NjItNDg4M2FlZGU4YTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0 ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3 YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjuXDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtuIhYu7FjgXYAms5hRuAjXQtuRKaIvWaHZLOKtCUZn8mXhmOxAYGFI 2cOlgXa9k5IdQbpblemIG/5FoXYEHknn8/nrweoSrwT4HbV406lmIZiiAaDhyI7f EoUKFn3O2PeBRo/rXlVpL3FJLVo+FPjEkOisC4oz8/y9XE7a3tGk8/CyGhTVT8Py a6eap94X9dxMzBp8FoYxaMfSx79lki9+Y/KfXgX1wX1nKz61ecS5cQVJmYE2W6c5 zfrnqCFO+VEN7KRiD3S/cui0x5VuUYYp4EyoetK1ESnp/unmsL3VYLSTKzh5VBON DXcjyt6xmYeSj2oNxtm/wb5Kl0aLKPE= -----END CERTIFICATE-----Generated at Wed Jul 9 15:45:37 2025 by rpki-client