$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa File: 0335608f-a9cd-3396-90f3-61164a83f73d.roa (raw, json) Hash identifier: cX1mr8AB7T4IvvusTM7LnCVrG0fxOLyfw0HoHhiGPLk= Subject key identifier: 1A:B0:DF:A5:2A:72:6B:EC:7B:38:F5:1B:CC:FC:A7:EB:93:4E:67:BD Certificate issuer: /CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Certificate serial: 010D0C9F4328584A66C06FDBF9476CA09AC41C00 Authority key identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 400245 IP address blocks: 165.140.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:6f:db:f9:47:6c:a0:9a:c4:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=ea13ef12-393e-404a-a79d-1aee593492b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:00:75:dc:9e:e2:34:93:11:4a:22:b0:5f:a6: 80:cc:a6:9c:2f:27:77:89:44:fd:64:10:13:56:39: 46:37:ae:2c:69:fa:2d:31:65:dc:6e:99:a9:d8:77: 9f:b6:ec:36:f1:a0:a0:f0:38:7a:0b:f8:c6:76:60: 81:4a:0d:3b:d0:00:02:5c:b8:21:2d:0b:37:80:7d: 0d:f3:76:12:17:df:12:3b:fd:6d:de:d8:ac:34:1d: 5b:2b:50:ac:42:0d:26:a6:38:00:12:54:1d:91:42: e8:16:67:3b:84:6b:47:55:02:66:41:eb:34:a9:7a: 70:ac:57:ef:3a:90:d6:f3:f8:2a:77:ba:1c:e0:c7: 53:7b:5b:03:ca:48:34:80:e4:37:c6:2d:01:72:34: 87:1f:0f:7d:55:63:20:38:6e:50:d2:1f:77:84:1f: a8:90:3e:09:88:d4:39:1e:a7:08:fb:27:e3:c2:cd: 35:29:f0:74:91:68:cb:f6:4b:bc:4b:1a:bf:e4:a6: 15:c7:00:14:7a:86:f8:15:a2:5a:b2:7c:ee:61:23: ec:ed:96:10:65:db:f4:41:5b:b9:fb:da:c9:2d:80: 0a:5a:13:63:4e:6a:a3:00:be:1a:a9:d9:93:dc:51: c3:14:99:fc:db:40:44:f5:19:23:ac:c8:f6:26:f3: 88:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B0:DF:A5:2A:72:6B:EC:7B:38:F5:1B:CC:FC:A7:EB:93:4E:67:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl X509v3 Authority Key Identifier: keyid:D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer sbgp-ipAddrBlock: critical IPv4: 165.140.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:3f:68:54:85:8c:2f:11:1f:b9:b6:00:1c:88:2f:c5:6e:20: f7:28:f6:e2:58:31:d2:72:c2:97:0e:81:67:35:13:56:ac:8d: 85:89:22:94:22:e6:93:1c:81:ac:49:4f:cf:5c:7a:86:e8:98: fa:c6:80:a9:57:92:e5:9c:54:25:1e:d9:18:9f:c9:cf:c8:3d: 9d:05:ab:47:d9:7f:ef:20:fd:8a:b1:ea:56:ef:e8:40:0f:da: 98:f8:e2:ca:8a:1c:10:3f:d9:de:03:60:db:d5:cb:11:cc:34: 69:4d:48:bc:aa:24:0e:3c:9d:7f:aa:f2:a4:8e:de:07:14:30: 77:dd:4b:c7:10:99:61:41:91:40:89:1c:a5:2c:0c:02:89:0d: 86:4f:2f:7c:c4:dc:fc:13:ac:e2:99:3a:75:ba:c8:2f:28:fe: 59:5a:ce:3f:ea:68:e0:1b:39:2a:84:ae:f7:95:c9:21:46:ea: 8f:8b:6e:38:9a:dd:7f:2c:77:6d:77:29:1c:7b:89:27:9a:07: 67:28:74:4e:43:29:4f:85:1b:3a:46:c6:fb:ea:94:2e:7c:45: 3f:df:66:0a:0d:eb:90:c8:c4:2a:5a:35:ba:24:10:f7:c8:04: b6:f4:c2:41:ab:1b:b4:1b:02:be:29:db:5e:13:72:ff:6c:9c: e6:d8:fe:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwG/b+UdsoJrEHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExZTk3MzQtMGE3Zi00OGU2LTg3ZDMtY2E3ZDgzN2Y0 ZTUwMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk ZWExM2VmMTItMzkzZS00MDRhLWE3OWQtMWFlZTU5MzQ5MmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAB13J7iNJMRSiKwX6aAzKacLyd3iUT9ZBAT VjlGN64safotMWXcbpmp2Heftuw28aCg8Dh6C/jGdmCBSg070AACXLghLQs3gH0N 83YSF98SO/1t3tisNB1bK1CsQg0mpjgAElQdkULoFmc7hGtHVQJmQes0qXpwrFfv OpDW8/gqd7oc4MdTe1sDykg0gOQ3xi0BcjSHHw99VWMgOG5Q0h93hB+okD4JiNQ5 HqcI+yfjws01KfB0kWjL9ku8Sxq/5KYVxwAUeob4FaJasnzuYSPs7ZYQZdv0QVu5 +9rJLYAKWhNjTmqjAL4aqdmT3FHDFJn820BE9RkjrMj2JvOI+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqw36Uqcmvsezj1G8z8p+uTTme9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFl OTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3ZjRlNTAvMDMzNTYwOGYtYTljZC0z Mzk2LTkwZjMtNjExNjRhODNmNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmExZTk3MzQtMGE3Zi00OGU2LTg3 ZDMtY2E3ZDgzN2Y0ZTUwLzJhMWU5NzM0LTBhN2YtNDhlNi04N2QzLWNhN2Q4Mzdm NGU1MC5jcmwwHwYDVR0jBBgwFoAU2ZfG3YFV+RX1BGNFOdNqUSwXdMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdk ODM3ZjRlNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYx8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFg/aFSFjC8RH7m2AByIL8VuIPco9uJYMdJywpcOgWc1E1asjYWJIpQi 5pMcgaxJT89ceobomPrGgKlXkuWcVCUe2Rifyc/IPZ0Fq0fZf+8g/Yqx6lbv6EAP 2pj44sqKHBA/2d4DYNvVyxHMNGlNSLyqJA48nX+q8qSO3gcUMHfdS8cQmWFBkUCJ HKUsDAKJDYZPL3zE3PwTrOKZOnW6yC8o/llazj/qaOAbOSqErveVySFG6o+Lbjia 3X8sd213KRx7iSeaB2codE5DKU+FGzpGxvvqlC58RT/fZgoN65DIxCpaNbokEPfI BLb0wkGrG7QbAr4p214Tcv9snObY/qo= -----END CERTIFICATE-----Generated at Thu Aug 7 20:18:57 2025 by rpki-client