$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/f97f189a-180d-3cb0-b698-2d94be7d983a.roa File: f97f189a-180d-3cb0-b698-2d94be7d983a.roa (raw, json) Hash identifier: ENGVC3NDQaNUsWT4RsbR3/j3zip5cqg1PE97NRxDzwc= Subject key identifier: 8E:D1:D6:16:29:9D:B6:C1:72:4B:4D:60:1E:5B:52:35:BF:46:E0:8E Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584A03A546E83F1E688167D27FC0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/f97f189a-180d-3cb0-b698-2d94be7d983a.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 14061 IP address blocks: 138.197.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:46:e8:3f:1e:68:81:67:d2:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=9b843e7b-0adc-4656-a638-f02bf094b302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:07:c2:8f:d6:78:1f:64:e4:97:f9:59:02:e2: e7:e3:79:03:4f:c1:72:da:0c:6b:6b:f7:be:9c:ee: a2:a2:82:74:c3:6e:77:f8:56:86:8c:6e:eb:1a:e8: 72:c6:51:d0:4c:c9:15:83:ab:c0:d5:ed:4e:af:3e: 6c:2f:67:be:ac:84:d8:45:20:f6:50:7d:c0:d4:eb: 80:d7:73:8a:7c:83:59:ae:5e:07:b1:5f:29:11:9f: 4c:54:5c:ca:43:4a:c6:68:f6:18:ad:5c:34:62:25: e0:13:68:e3:bf:c0:6f:f1:38:68:23:c3:16:cc:e5: 6b:eb:a7:d0:56:0b:0e:08:e3:b0:09:08:8d:a1:51: 3a:3b:08:ba:48:1e:bc:06:16:5d:9b:99:d7:0d:ec: ec:d2:f3:3a:cb:ca:7b:24:41:49:8a:ae:98:2e:61: 1d:f8:6b:9f:71:85:52:be:c8:cf:4c:4a:ad:26:78: 4a:1e:1c:0e:02:41:59:83:57:4a:65:2f:d5:d9:a1: fb:8b:3b:e5:6f:bd:5a:e4:a2:ca:b2:3a:0d:1c:26: 03:ea:c8:47:c9:60:a5:a7:65:13:1c:9b:ff:89:ef: 7d:57:3b:29:7b:6d:9f:0a:6b:65:02:1a:1c:8c:7b: ef:f6:a4:a2:98:36:b1:a0:ac:0e:a1:e5:ff:0c:03: dd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D1:D6:16:29:9D:B6:C1:72:4B:4D:60:1E:5B:52:35:BF:46:E0:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/f97f189a-180d-3cb0-b698-2d94be7d983a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 138.197.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f4:b0:42:18:c7:14:f2:d7:29:a3:0a:ff:66:2c:38:3c:f6: 04:72:9c:a0:b9:87:9d:25:2f:09:93:4b:c7:38:c1:c7:dd:74: ea:45:b6:66:23:4f:b8:d3:e8:1d:72:aa:9c:41:69:00:42:68: a8:04:ff:34:ee:33:bd:6e:50:fd:79:82:30:11:6b:74:67:36: 6b:81:da:28:e6:37:06:d1:cf:43:b6:ec:f1:ea:0d:9b:71:da: 1a:25:eb:ae:e2:c5:a0:14:46:4a:d6:b8:1e:67:7f:b6:e0:92: cf:11:2f:57:b0:f5:2e:b1:bc:3e:13:42:3e:79:49:c1:2b:3d: 19:16:78:36:47:2c:ff:9e:7c:2d:5d:d8:aa:fa:6e:a7:d0:48: ab:99:c0:c8:cd:b2:ca:66:75:3c:29:53:54:a7:68:d0:19:fa: 48:3a:67:e8:eb:95:e4:8b:5b:a4:95:af:a3:9d:50:d5:6a:36: b3:06:31:49:52:79:cd:59:8e:d3:23:ed:db:c2:80:11:e3:65: 8b:2d:49:2d:c8:0e:e4:9e:36:51:4c:bc:69:5e:c8:8d:24:fb: 6f:74:27:12:9c:13:fe:a2:ac:37:ef:ff:42:b7:92:be:84:e2: 92:1a:a6:98:c0:32:53:55:b1:57:ab:d6:c6:ca:6b:55:53:f9: 7c:77:5f:27 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoDpUboPx5ogWfSf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk OWI4NDNlN2ItMGFkYy00NjU2LWE2MzgtZjAyYmYwOTRiMzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AfCj9Z4H2Tkl/lZAuLn43kDT8Fy2gxra/e+ nO6iooJ0w253+FaGjG7rGuhyxlHQTMkVg6vA1e1Orz5sL2e+rITYRSD2UH3A1OuA 13OKfINZrl4HsV8pEZ9MVFzKQ0rGaPYYrVw0YiXgE2jjv8Bv8ThoI8MWzOVr66fQ VgsOCOOwCQiNoVE6Owi6SB68BhZdm5nXDezs0vM6y8p7JEFJiq6YLmEd+GufcYVS vsjPTEqtJnhKHhwOAkFZg1dKZS/V2aH7izvlb71a5KLKsjoNHCYD6shHyWClp2UT HJv/ie99Vzspe22fCmtlAhocjHvv9qSimDaxoKwOoeX/DAPdbwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFI7R1hYpnbbBcktNYB5bUjW/RuCOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZjk3ZjE4OWEtMTgwZC0z Y2IwLWI2OTgtMmQ5NGJlN2Q5ODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAisUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAIvSwQhjHFPLXKaMK/2YsODz2BHKcoLmHnSUvCZNLxzjBx9106kW2ZiNP uNPoHXKqnEFpAEJoqAT/NO4zvW5Q/XmCMBFrdGc2a4HaKOY3BtHPQ7bs8eoNm3Ha GiXrruLFoBRGSta4Hmd/tuCSzxEvV7D1LrG8PhNCPnlJwSs9GRZ4Nkcs/558LV3Y qvpup9BIq5nAyM2yymZ1PClTVKdo0Bn6SDpn6OuV5ItbpJWvo51Q1Wo2swYxSVJ5 zVmO0yPt28KAEeNliy1JLcgO5J42UUy8aV7IjST7b3QnEpwT/qKsN+//QreSvoTi khqmmMAyU1WxV6vWxsprVVP5fHdfJw== -----END CERTIFICATE-----Generated at Mon Jun 16 05:08:25 2025 by rpki-client