$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa File: 43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa (raw, json) Hash identifier: WztjxjWSb30PcvvacPMgPzr+3JoB/zKZIQqlV/7FOqs= Subject key identifier: E9:16:65:79:DD:68:91:97:8F:A5:42:4D:AE:5B:F6:23:AC:CD:80:E6 Certificate issuer: /CN=e5db199d-9dc8-4b83-b53b-b092f0d6e78e Certificate serial: 010D0C9F4328584A5FC5E9D244BE20B8981B2C00 Authority key identifier: 93:40:47:E4:F1:10:78:69:FD:0C:88:F4:8E:77:C9:8A:2D:6A:A8:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 29900 IP address blocks: 66.146.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e9:d2:44:be:20:b8:98:1b:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5db199d-9dc8-4b83-b53b-b092f0d6e78e Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=d8831b3b-9049-467c-8524-208b835ab98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:be:a6:1c:e2:ea:b8:7a:1f:ca:58:31:37:9a: 03:b4:62:81:f0:4f:a3:bf:b5:19:7e:86:b9:17:28: d7:91:75:d4:c6:c9:9e:1b:74:8c:2d:ee:55:dc:ed: f9:fd:42:97:af:d8:36:3a:98:20:f1:b2:91:14:2e: 0c:a7:8e:b2:8f:5e:02:b1:e2:e4:44:0b:88:50:28: 18:50:aa:b9:55:f5:9b:30:e5:55:90:36:c9:d5:cc: a2:ae:14:44:9a:75:2b:1f:c5:2b:a5:1c:49:b7:2c: fe:dc:8f:a0:7f:30:82:e1:2f:09:e0:c2:fe:c3:2f: 9b:6c:15:bb:1c:26:74:75:93:6c:3b:64:3b:ab:8a: 98:e0:49:af:3c:6b:fc:38:a5:a0:45:11:e3:ef:5b: f8:c3:3c:87:7d:cb:8d:66:de:20:30:d7:ee:6d:77: e6:d1:f3:ca:52:1c:04:71:65:53:2c:d6:45:ce:c6: dd:7d:ff:a8:94:54:92:c3:5e:3c:6c:93:48:be:55: ef:1a:f5:2c:d0:92:13:02:46:22:27:71:aa:44:3e: 90:ad:4a:b8:7e:b7:40:86:07:93:f2:af:4e:a7:11: d1:03:5d:cb:36:c7:b9:e7:cc:7f:44:94:10:fd:db: 44:2a:03:76:62:4e:1f:43:03:00:28:b7:1a:73:09: 8f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:16:65:79:DD:68:91:97:8F:A5:42:4D:AE:5B:F6:23:AC:CD:80:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.crl X509v3 Authority Key Identifier: keyid:93:40:47:E4:F1:10:78:69:FD:0C:88:F4:8E:77:C9:8A:2D:6A:A8:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.cer sbgp-ipAddrBlock: critical IPv4: 66.146.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:a5:10:35:0f:35:ed:bd:4e:c3:2a:4b:54:a3:0b:e4:3d:ff: 5c:fa:d9:0c:58:8e:23:c0:34:a1:e8:ae:c3:f4:d3:30:b9:53: 69:92:81:5c:3a:d6:bf:a8:e6:f6:34:07:39:32:4e:a1:3d:26: 9f:c3:14:e3:54:92:f0:19:77:b5:02:a2:41:b0:4c:1b:6a:a9: 4b:91:f7:13:bc:39:18:84:ae:0a:c1:05:8e:2d:1b:98:db:63: 13:0d:38:3d:13:70:c6:98:fb:3b:a0:f1:a1:90:31:0c:89:e6: 85:eb:d6:04:fa:f8:fc:a0:29:48:68:61:20:01:29:f0:48:1c: af:89:9f:3b:cd:fc:65:82:52:35:83:b9:ab:12:26:62:5b:c8: 46:60:46:f4:7b:9c:56:94:c8:26:a7:47:5d:48:f1:19:09:bd: cd:d7:62:d4:f2:6c:0e:7e:75:46:7f:90:b1:1c:8b:0d:40:21: e9:0f:b5:e1:0d:9f:4e:35:f9:e2:69:24:76:59:e9:8b:8c:d3: 1b:e3:a1:5d:27:1f:11:1a:33:d3:5a:19:94:b0:a0:53:a3:cb: 8d:fd:f6:bb:58:9a:62:e5:da:d1:d1:68:2e:ed:e5:73:46:30: 54:9f:56:7d:6f:28:54:dc:01:7f:84:1d:00:fc:c0:6f:9a:43: 13:b1:06:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxenSRL4guJgbLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTVkYjE5OWQtOWRjOC00YjgzLWI1M2ItYjA5MmYwZDZl NzhlMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk ZDg4MzFiM2ItOTA0OS00NjdjLTg1MjQtMjA4YjgzNWFiOThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt76mHOLquHofylgxN5oDtGKB8E+jv7UZfoa5 FyjXkXXUxsmeG3SMLe5V3O35/UKXr9g2Opgg8bKRFC4Mp46yj14CseLkRAuIUCgY UKq5VfWbMOVVkDbJ1cyirhREmnUrH8UrpRxJtyz+3I+gfzCC4S8J4ML+wy+bbBW7 HCZ0dZNsO2Q7q4qY4EmvPGv8OKWgRRHj71v4wzyHfcuNZt4gMNfubXfm0fPKUhwE cWVTLNZFzsbdff+olFSSw148bJNIvlXvGvUs0JITAkYiJ3GqRD6QrUq4frdAhgeT 8q9OpxHRA13LNse558x/RJQQ/dtEKgN2Yk4fQwMAKLcacwmPhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkWZXndaJGXj6VCTa5b9iOszYDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNWRi MTk5ZC05ZGM4LTRiODMtYjUzYi1iMDkyZjBkNmU3OGUvNDNkZTNiNWYtN2ZlNS0z MmNkLWI3MzItOGJhOThmNTFkYjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTVkYjE5OWQtOWRjOC00YjgzLWI1 M2ItYjA5MmYwZDZlNzhlL2U1ZGIxOTlkLTlkYzgtNGI4My1iNTNiLWIwOTJmMGQ2 ZTc4ZS5jcmwwHwYDVR0jBBgwFoAUk0BH5PEQeGn9DIj0jnfJii1qqMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNWRiMTk5ZC05ZGM4LTRiODMtYjUzYi1iMDky ZjBkNmU3OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQpLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+lEDUPNe29TsMqS1SjC+Q9/1z62QxYjiPANKHorsP00zC5U2mSgVw6 1r+o5vY0BzkyTqE9Jp/DFONUkvAZd7UCokGwTBtqqUuR9xO8ORiErgrBBY4tG5jb YxMNOD0TcMaY+zug8aGQMQyJ5oXr1gT6+PygKUhoYSABKfBIHK+JnzvN/GWCUjWD uasSJmJbyEZgRvR7nFaUyCanR11I8RkJvc3XYtTybA5+dUZ/kLEciw1AIekPteEN n041+eJpJHZZ6YuM0xvjoV0nHxEaM9NaGZSwoFOjy4399rtYmmLl2tHRaC7t5XNG MFSfVn1vKFTcAX+EHQD8wG+aQxOxBtk= -----END CERTIFICATE-----Generated at Wed Jul 9 17:47:43 2025 by rpki-client