$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/d38b303a-920e-3f94-8e2a-efd3d1740358.roa File: d38b303a-920e-3f94-8e2a-efd3d1740358.roa (raw, json) Hash identifier: xHR8wPlXgEWcEJq/Ze4pfxxo+heOMc5/oePx28XyCp4= Subject key identifier: CC:45:AB:D7:29:1B:DA:A3:1E:85:4F:7E:A3:A6:D5:3F:00:84:A8:DE Certificate issuer: /CN=17e4ef75-3d46-4caf-8049-ad96976a0262 Certificate serial: 010D0C9F4328584A146565DFAB4A36ED46712FB0 Authority key identifier: 32:C4:FB:81:42:25:F1:FC:F9:36:0D:0A:80:E1:39:98:2F:BF:F1:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/d38b303a-920e-3f94-8e2a-efd3d1740358.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 400062 IP address blocks: 165.140.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/17e4ef75-3d46-4caf-8049-ad96976a0262.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/17e4ef75-3d46-4caf-8049-ad96976a0262.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:65:df:ab:4a:36:ed:46:71:2f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17e4ef75-3d46-4caf-8049-ad96976a0262 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=58775295-fb49-4839-b8a7-c9e259f5d6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ee:3b:37:d0:c8:46:86:96:2e:fe:aa:84:07: 50:77:f3:08:e6:93:5a:49:44:bd:f9:41:aa:0e:1f: 2c:09:ef:54:c6:d0:b0:56:88:0d:e6:c9:2b:d3:e0: 6c:fe:d4:bf:50:90:21:c4:61:ef:d7:02:f1:5e:ce: 4f:62:24:c9:c7:19:1f:74:71:a7:c6:91:9e:fd:db: ae:a7:cd:75:3c:d3:91:aa:97:47:69:28:0e:80:81: 09:11:ef:3e:87:10:d0:2e:bb:bf:3e:ba:1e:c6:a6: 7f:d3:29:65:46:53:f8:ba:e9:bf:6a:79:97:7f:c5: 25:51:2a:3b:d2:c7:0c:5c:81:89:aa:ff:9d:20:ad: 59:e2:8d:7e:25:9c:e1:29:bd:14:d0:77:08:1f:7c: f8:06:ed:77:29:77:6d:89:82:15:73:d5:c7:31:a4: a5:a0:17:8e:5e:0a:c8:1f:a1:21:5f:c6:ce:3a:95: d2:f3:04:0e:da:7e:57:85:25:59:b5:c9:98:4c:5b: 3a:ec:05:d7:e4:ec:48:bd:fa:1b:da:ad:8a:f0:73: 1c:6c:ce:8e:26:97:05:e8:aa:e1:1f:bc:90:1d:d8: 00:9c:02:80:4d:3f:7b:f2:a4:a6:9c:4c:9e:b8:ec: 5e:d1:b2:27:31:8e:63:90:ef:5a:19:19:87:7a:1e: f4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:45:AB:D7:29:1B:DA:A3:1E:85:4F:7E:A3:A6:D5:3F:00:84:A8:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/d38b303a-920e-3f94-8e2a-efd3d1740358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/17e4ef75-3d46-4caf-8049-ad96976a0262.crl X509v3 Authority Key Identifier: keyid:32:C4:FB:81:42:25:F1:FC:F9:36:0D:0A:80:E1:39:98:2F:BF:F1:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262.cer sbgp-ipAddrBlock: critical IPv4: 165.140.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:11:e5:a9:59:9e:6d:4c:c7:5c:98:d4:e8:55:41:65:86:9a: 80:2f:4d:19:84:48:1f:70:84:1f:45:b3:9d:44:4e:c2:60:48: bc:f4:47:c5:bb:af:09:3c:76:be:55:38:aa:d6:c5:cb:d5:16: e9:38:8c:1b:69:cc:64:ae:76:b1:30:bf:6e:c8:07:b6:17:84: 7a:91:b1:cc:33:01:6a:a3:cc:19:64:ff:04:3f:d6:c1:44:97: 2d:d4:62:70:c9:bf:08:2e:eb:8b:46:b5:b0:bf:14:51:82:1b: 14:76:82:9f:85:73:86:38:29:81:be:82:f7:1c:1f:89:6c:26: d0:5f:b0:1d:4e:16:59:f2:99:29:59:15:f6:46:8e:7e:b8:cc: 92:8c:5a:6f:6b:00:f9:d4:cd:b9:9c:4e:8e:a0:35:9a:e3:61: 1c:c9:2c:13:08:53:de:8c:39:59:8b:be:15:cf:9d:48:79:0a: 1b:98:d6:c4:eb:96:36:cb:69:53:b6:c6:60:bc:ce:f9:15:8f: 3d:1f:fd:86:80:55:65:0d:83:44:90:70:17:55:2e:36:38:ad: 42:30:3d:e3:38:6d:23:a7:e5:7a:96:1b:8c:c0:ca:d1:68:49: 48:b0:3e:51:4f:79:2d:7b:dd:3e:c2:ab:b9:85:1e:0b:33:55: 45:44:4a:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZWXfq0o27UZxL7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdlNGVmNzUtM2Q0Ni00Y2FmLTgwNDktYWQ5Njk3NmEw MjYyMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk NTg3NzUyOTUtZmI0OS00ODM5LWI4YTctYzllMjU5ZjVkNmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu47N9DIRoaWLv6qhAdQd/MI5pNaSUS9+UGq Dh8sCe9UxtCwVogN5skr0+Bs/tS/UJAhxGHv1wLxXs5PYiTJxxkfdHGnxpGe/duu p811PNORqpdHaSgOgIEJEe8+hxDQLru/ProexqZ/0yllRlP4uum/anmXf8UlUSo7 0scMXIGJqv+dIK1Z4o1+JZzhKb0U0HcIH3z4Bu13KXdtiYIVc9XHMaSloBeOXgrI H6EhX8bOOpXS8wQO2n5XhSVZtcmYTFs67AXX5OxIvfob2q2K8HMcbM6OJpcF6Krh H7yQHdgAnAKATT978qSmnEyeuOxe0bInMY5jkO9aGRmHeh70rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxFq9cpG9qjHoVPfqOm1T8AhKjeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xN2U0 ZWY3NS0zZDQ2LTRjYWYtODA0OS1hZDk2OTc2YTAyNjIvZDM4YjMwM2EtOTIwZS0z Zjk0LThlMmEtZWZkM2QxNzQwMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTdlNGVmNzUtM2Q0Ni00Y2FmLTgw NDktYWQ5Njk3NmEwMjYyLzE3ZTRlZjc1LTNkNDYtNGNhZi04MDQ5LWFkOTY5NzZh MDI2Mi5jcmwwHwYDVR0jBBgwFoAUMsT7gUIl8fz5Ng0KgOE5mC+/8WUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xN2U0ZWY3NS0zZDQ2LTRjYWYtODA0OS1hZDk2 OTc2YTAyNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgR5alZnm1Mx1yY1OhVQWWGmoAvTRmESB9whB9Fs51ETsJgSLz0R8W7 rwk8dr5VOKrWxcvVFuk4jBtpzGSudrEwv27IB7YXhHqRscwzAWqjzBlk/wQ/1sFE ly3UYnDJvwgu64tGtbC/FFGCGxR2gp+Fc4Y4KYG+gvccH4lsJtBfsB1OFlnymSlZ FfZGjn64zJKMWm9rAPnUzbmcTo6gNZrjYRzJLBMIU96MOVmLvhXPnUh5ChuY1sTr ljbLaVO2xmC8zvkVjz0f/YaAVWUNg0SQcBdVLjY4rUIwPeM4bSOn5XqWG4zAytFo SUiwPlFPeS173T7Cq7mFHgszVUVESpc= -----END CERTIFICATE-----Generated at Sun Jun 15 17:42:42 2025 by rpki-client