$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa File: 539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa (raw, json) Hash identifier: u6lwJdW7z5lUPnwq8OlTWQxv8/vE/PvscmxJTfFbAww= Subject key identifier: 3C:5E:2F:45:E9:DC:DC:E3:54:4E:C8:0A:ED:CD:02:2B:9D:67:76:7F Certificate issuer: /CN=7e014cdd-4a76-4eef-86f7-6b6a836e1dbf Certificate serial: 010D0C9F4328584A612B100555C14CCDD0600B40 Authority key identifier: F8:18:1F:C9:C8:20:2D:78:59:D4:B0:EF:4C:4B:A5:8D:C7:DC:93:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 22941 IP address blocks: 168.245.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:10:05:55:c1:4c:cd:d0:60:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e014cdd-4a76-4eef-86f7-6b6a836e1dbf Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=037fc855-0f66-4a2e-82af-8d275b19374c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ae:9c:73:2c:4b:4f:e0:c2:ca:df:bf:02:49: 46:46:9a:8a:f7:d6:6b:97:9e:eb:7f:12:fe:91:5f: d2:a8:92:03:90:21:e0:05:a2:fd:37:ee:1d:8f:8d: f0:6a:60:0a:03:12:c6:9d:ba:9b:e9:f2:c6:71:0e: a5:10:72:d0:df:75:cc:a2:f4:5a:ba:a5:6e:db:75: ce:0d:0d:37:60:2b:98:34:63:59:56:81:0a:8f:93: 7c:86:cf:62:87:e5:63:d6:b2:0c:99:87:c5:34:af: 72:fb:31:34:d0:fa:4d:55:a1:e9:e1:9f:66:a8:f2: 5a:d9:e3:0a:a2:0d:22:d1:e3:ec:10:4e:f5:3b:45: b1:49:75:c7:0e:82:26:7a:0b:47:27:b7:d4:38:c9: bd:4a:57:0b:59:76:e8:fe:5f:9e:a4:30:06:8a:d1: 34:8a:5c:e7:6e:64:6a:f2:da:77:fd:4f:1b:1f:43: 5c:6f:6f:02:64:19:da:94:b4:65:1b:2c:86:d4:59: 8b:91:75:10:a7:09:b3:f8:cb:d9:22:5c:fe:f1:95: a4:83:65:50:06:a7:05:23:76:eb:7c:64:71:71:fa: e8:60:a9:61:6b:da:b0:17:95:92:ed:63:c1:20:00: b1:45:66:a1:51:b5:95:53:ae:f0:a6:59:06:90:93: 31:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5E:2F:45:E9:DC:DC:E3:54:4E:C8:0A:ED:CD:02:2B:9D:67:76:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.crl X509v3 Authority Key Identifier: keyid:F8:18:1F:C9:C8:20:2D:78:59:D4:B0:EF:4C:4B:A5:8D:C7:DC:93:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer sbgp-ipAddrBlock: critical IPv4: 168.245.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:9e:f3:ab:86:4f:a0:e4:75:c8:57:a3:46:37:bd:5b:b9:b8: 0a:97:01:90:9a:2e:c6:95:f0:43:23:78:36:eb:f8:be:2e:b0: 9b:97:6c:5e:87:1b:08:f0:8b:3d:ab:fd:13:3c:1d:ba:47:d5: 28:06:60:9a:70:83:b0:4a:19:ef:23:fa:98:8c:dd:f2:0c:97: 29:7b:fd:f6:eb:3d:bc:6c:d8:8d:60:4e:b4:f9:51:05:60:b7: 35:1e:ab:a5:6d:84:26:b8:56:bf:91:f2:39:2b:b5:c7:cb:f7: 52:79:39:b7:13:99:1e:0a:e8:c8:e9:5d:c4:24:36:35:80:d8: 69:be:b5:8c:25:a5:9f:2c:7e:d6:09:78:58:06:1b:62:dc:d6: b5:29:12:35:9e:8b:0a:10:c1:aa:30:08:24:e0:fd:ce:b1:a2: de:d0:b0:78:fa:77:e3:f9:4f:67:8c:bb:17:84:2a:81:d1:00: 56:37:72:63:77:6c:9b:33:7e:92:21:1f:84:48:eb:ce:5f:af: 09:5d:cb:ad:3a:32:bd:b0:e1:55:62:ef:38:99:86:41:bb:c0: 2a:8e:c4:0f:2b:45:20:cc:5d:cb:55:63:46:e1:90:04:68:75: ec:42:35:71:95:58:dc:9c:48:ad:08:87:ae:95:dc:9a:2e:84: 6f:28:2b:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxAFVcFMzdBgC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2UwMTRjZGQtNGE3Ni00ZWVmLTg2ZjctNmI2YTgzNmUx ZGJmMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk MDM3ZmM4NTUtMGY2Ni00YTJlLTgyYWYtOGQyNzViMTkzNzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp66ccyxLT+DCyt+/AklGRpqK99Zrl57rfxL+ kV/SqJIDkCHgBaL9N+4dj43wamAKAxLGnbqb6fLGcQ6lEHLQ33XMovRauqVu23XO DQ03YCuYNGNZVoEKj5N8hs9ih+Vj1rIMmYfFNK9y+zE00PpNVaHp4Z9mqPJa2eMK og0i0ePsEE71O0WxSXXHDoImegtHJ7fUOMm9SlcLWXbo/l+epDAGitE0ilznbmRq 8tp3/U8bH0Ncb28CZBnalLRlGyyG1FmLkXUQpwmz+MvZIlz+8ZWkg2VQBqcFI3br fGRxcfroYKlha9qwF5WS7WPBIACxRWahUbWVU67wplkGkJMxyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxeL0Xp3NzjVE7ICu3NAiudZ3Z/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTAx NGNkZC00YTc2LTRlZWYtODZmNy02YjZhODM2ZTFkYmYvNTM5YjVlZTUtN2RkMi0z Yjk4LWI3OWItZThhZGU4MzI1MmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2UwMTRjZGQtNGE3Ni00ZWVmLTg2 ZjctNmI2YTgzNmUxZGJmLzdlMDE0Y2RkLTRhNzYtNGVlZi04NmY3LTZiNmE4MzZl MWRiZi5jcmwwHwYDVR0jBBgwFoAU+BgfycggLXhZ1LDvTEuljcfck+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTAxNGNkZC00YTc2LTRlZWYtODZmNy02YjZh ODM2ZTFkYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPWMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCe86uGT6DkdchXo0Y3vVu5uAqXAZCaLsaV8EMjeDbr+L4usJuXbF6H Gwjwiz2r/RM8HbpH1SgGYJpwg7BKGe8j+piM3fIMlyl7/fbrPbxs2I1gTrT5UQVg tzUeq6VthCa4Vr+R8jkrtcfL91J5ObcTmR4K6MjpXcQkNjWA2Gm+tYwlpZ8sftYJ eFgGG2Lc1rUpEjWeiwoQwaowCCTg/c6xot7QsHj6d+P5T2eMuxeEKoHRAFY3cmN3 bJszfpIhH4RI685frwldy606Mr2w4VVi7ziZhkG7wCqOxA8rRSDMXctVY0bhkARo dexCNXGVWNycSK0Ih66V3JouhG8oKzc= -----END CERTIFICATE-----Generated at Thu Aug 7 13:03:09 2025 by rpki-client