$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa File: 599a3cef-130f-3ac0-802b-3ae5797ea70e.roa (raw, json) Hash identifier: WFX3xxpChaz+b2WR1e2mp2PD4W+dSYk+cHrVEz1YFio= Subject key identifier: DC:ED:36:20:DA:DF:2B:52:B4:A0:9D:3B:01:83:2C:D2:07:98:CF:F8 Certificate issuer: /CN=c88386bc-096d-46b5-8278-7abb79f23665 Certificate serial: 010D0C9F4328584A103542C6D5375ADD2C622F40 Authority key identifier: 7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 7311 IP address blocks: 161.129.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:42:c6:d5:37:5a:dd:2c:62:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c88386bc-096d-46b5-8278-7abb79f23665 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=9ef0d4fc-9e7c-40af-8d53-61378667b6ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:63:77:92:ef:31:9c:c7:7a:13:7d:09:5c:cc: c7:dc:38:24:6b:0b:42:11:c1:01:f0:2a:fc:c4:fc: 26:e8:91:93:6c:58:22:1d:c4:c7:52:74:b0:64:33: 9f:97:c9:66:95:ba:40:1d:b5:fd:e4:b1:1a:c1:8a: 4c:60:ab:55:d4:00:66:25:64:58:98:93:54:36:db: a1:bf:73:c9:9b:f2:02:38:13:bf:ce:2c:1a:f2:9f: a7:5a:85:2c:ea:2f:26:e4:86:2c:d0:fc:02:7a:c1: df:27:18:56:41:ef:f0:26:73:cc:f1:7f:e8:02:26: ec:f1:2e:2e:89:1e:da:17:6a:53:d3:57:ec:b1:4a: e6:44:db:8e:86:03:07:49:eb:d2:17:50:c8:c2:88: fa:ad:fe:04:91:bc:0a:2a:b3:de:4f:76:ce:e6:6c: 91:5c:ae:f4:6f:92:88:b8:fb:25:58:e5:4d:c2:83: 00:ec:b3:ec:1e:27:0b:dc:b2:ef:98:05:cc:0c:b4: bb:e8:1a:5d:ad:31:bd:19:08:e3:80:5e:13:d0:8a: 41:85:03:41:df:4e:a8:c0:64:e8:86:53:36:56:f6: 46:7c:93:25:2c:2b:59:8f:e4:6d:02:30:6a:62:0e: 54:13:bc:40:ed:52:0c:b6:7a:d7:de:7c:7f:f3:66: 13:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:ED:36:20:DA:DF:2B:52:B4:A0:9D:3B:01:83:2C:D2:07:98:CF:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl X509v3 Authority Key Identifier: keyid:7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer sbgp-ipAddrBlock: critical IPv4: 161.129.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:51:25:06:e1:8e:64:a7:53:2e:a7:2b:d4:9e:d0:b0:4e:74: 43:97:50:2c:7a:1e:3e:89:30:fb:71:88:8b:1d:34:52:14:2f: 92:0e:7c:4f:98:0a:f9:56:8a:f8:ad:88:30:f2:92:b1:4b:05: 0f:78:61:58:ba:74:27:45:41:cd:60:ab:a5:e0:4e:44:7e:08: 95:f0:44:32:b5:ff:79:d1:dc:e9:49:db:a4:f1:51:97:0d:35: da:b5:35:d7:59:f2:4c:fa:1a:9b:81:b6:da:9d:42:cc:8a:1e: 69:3e:07:ac:e9:d3:36:ea:83:90:2a:d4:b8:51:cb:a7:25:c4: 53:12:43:2c:5b:18:eb:da:66:53:4d:01:c2:58:dd:b5:12:b7: f6:ca:a2:00:39:dd:d9:2f:a7:74:85:de:47:ba:23:e6:9c:a2: a2:70:7a:1c:cf:93:5c:bd:52:44:00:eb:5b:22:20:ad:42:3e: f3:ac:38:cf:a8:1d:4a:8c:90:ea:ce:cd:bc:b9:d0:ed:ea:8e: 19:2c:50:fb:19:10:6f:8a:97:21:fe:ac:4d:12:df:ce:ed:9f: 52:0c:5b:53:f9:a0:b8:69:ef:ff:dc:00:ba:02:9a:76:b7:bb: bc:5b:73:95:63:8f:66:b9:f8:55:db:05:ca:49:83:84:e9:75: f8:29:6d:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNULG1Tda3SxiL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg4Mzg2YmMtMDk2ZC00NmI1LTgyNzgtN2FiYjc5ZjIz NjY1MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk OWVmMGQ0ZmMtOWU3Yy00MGFmLThkNTMtNjEzNzg2NjdiNmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmN3ku8xnMd6E30JXMzH3DgkawtCEcEB8Cr8 xPwm6JGTbFgiHcTHUnSwZDOfl8lmlbpAHbX95LEawYpMYKtV1ABmJWRYmJNUNtuh v3PJm/ICOBO/ziwa8p+nWoUs6i8m5IYs0PwCesHfJxhWQe/wJnPM8X/oAibs8S4u iR7aF2pT01fssUrmRNuOhgMHSevSF1DIwoj6rf4EkbwKKrPeT3bO5myRXK70b5KI uPslWOVNwoMA7LPsHicL3LLvmAXMDLS76BpdrTG9GQjjgF4T0IpBhQNB306owGTo hlM2VvZGfJMlLCtZj+RtAjBqYg5UE7xA7VIMtnrX3nx/82YTKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNztNiDa3ytStKCdOwGDLNIHmM/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODgz ODZiYy0wOTZkLTQ2YjUtODI3OC03YWJiNzlmMjM2NjUvNTk5YTNjZWYtMTMwZi0z YWMwLTgwMmItM2FlNTc5N2VhNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg4Mzg2YmMtMDk2ZC00NmI1LTgy NzgtN2FiYjc5ZjIzNjY1L2M4ODM4NmJjLTA5NmQtNDZiNS04Mjc4LTdhYmI3OWYy MzY2NS5jcmwwHwYDVR0jBBgwFoAUfT94qtmh7sRu2CSfg9KMaVMJ0jowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODgzODZiYy0wOTZkLTQ2YjUtODI3OC03YWJi NzlmMjM2NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYG6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENRJQbhjmSnUy6nK9Se0LBOdEOXUCx6Hj6JMPtxiIsdNFIUL5IOfE+Y CvlWivitiDDykrFLBQ94YVi6dCdFQc1gq6XgTkR+CJXwRDK1/3nR3OlJ26TxUZcN Ndq1NddZ8kz6GpuBttqdQsyKHmk+B6zp0zbqg5Aq1LhRy6clxFMSQyxbGOvaZlNN AcJY3bUSt/bKogA53dkvp3SF3ke6I+acoqJwehzPk1y9UkQA61siIK1CPvOsOM+o HUqMkOrOzby50O3qjhksUPsZEG+KlyH+rE0S387tn1IMW1P5oLhp7//cALoCmna3 u7xbc5Vjj2a5+FXbBcpJg4Tpdfgpbfc= -----END CERTIFICATE-----Generated at Mon Jun 16 16:36:01 2025 by rpki-client