$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/194a2536-f5c7-30fa-a3f2-891677b761c0.roa File: 194a2536-f5c7-30fa-a3f2-891677b761c0.roa (raw, json) Hash identifier: FAuAIss8HDYbqjIn6H/ul/1ye27j6P24H4OfQwW4F+c= Subject key identifier: 9E:7C:E2:C2:C8:E8:31:B2:A1:24:9F:73:09:9A:43:21:55:9F:9A:78 Certificate issuer: /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Certificate serial: 010D0C9F4328584A1B6010091457A11D6D7CF480 Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/194a2536-f5c7-30fa-a3f2-891677b761c0.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 401015 IP address blocks: 140.221.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:10:09:14:57:a1:1d:6d:7c:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=fdc96405-823a-4b43-a833-acf45cb5876f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:17:ee:cf:1a:71:ce:8c:24:e3:01:3f:43: 41:ef:cf:64:49:7b:e9:81:ac:25:a8:c7:94:7f:63: 0d:e3:6d:30:a2:a3:e2:a7:26:0e:a6:3b:30:65:9d: 89:6f:d8:81:af:53:e2:0a:37:7a:60:5f:9a:0a:07: 26:70:3e:d3:63:93:db:d8:76:74:42:95:3f:67:04: c2:11:01:91:d5:7d:ec:f5:e2:b6:80:2d:8c:8d:04: 9a:8a:e8:32:9e:e6:d0:f3:fc:2b:e8:d0:69:33:ed: 9a:3e:2c:5a:38:46:f0:75:d1:ca:10:70:ac:ce:7b: 7d:89:7a:e8:ba:dd:01:d9:9b:98:50:d6:27:94:e6: a9:73:e8:86:01:29:af:80:76:90:e0:d3:c9:ca:21: d6:58:bc:49:13:f5:b2:82:5a:80:af:44:15:16:01: b3:b6:cf:eb:66:9c:6b:20:12:1f:ab:b8:51:59:4d: c7:f4:a6:2c:d9:80:d6:35:df:f0:fa:4b:2b:a0:10: 2a:12:68:67:a2:47:6f:33:ef:01:15:29:7e:35:f0: cf:a3:d1:f8:c9:5f:8e:ce:8d:e5:8c:52:0a:23:df: 9c:5b:5f:70:56:c0:27:3a:94:77:db:0a:53:68:24: ea:25:8a:f3:ed:b1:ed:5a:c4:72:f1:03:08:12:67: 65:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7C:E2:C2:C8:E8:31:B2:A1:24:9F:73:09:9A:43:21:55:9F:9A:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/194a2536-f5c7-30fa-a3f2-891677b761c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl X509v3 Authority Key Identifier: keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer sbgp-ipAddrBlock: critical IPv4: 140.221.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:3c:9f:e2:e1:8a:a7:40:0e:54:92:72:02:44:6d:7b:50:35: 19:e8:45:c7:5b:d1:ad:17:75:c3:8e:59:fa:21:fc:43:08:c1: 4c:85:58:2c:d4:c8:83:63:10:0f:4b:18:79:91:81:18:36:45: 85:8d:54:39:92:6a:15:e7:66:da:2d:7f:01:bc:18:de:43:6c: 02:55:6a:81:15:a8:87:f2:3f:a9:2a:22:6b:d6:8f:45:e4:56: 2f:20:7b:bf:f8:97:6a:05:84:5d:bd:73:6a:cc:c9:73:8a:f6: 8c:c2:8d:4b:75:a0:b4:ad:2f:16:ed:ec:39:cc:f6:a6:56:f8: 2e:f4:b9:41:40:b5:54:ea:b6:ba:c4:91:c9:5a:1b:e9:a0:18: fb:f0:7c:a9:73:b8:a9:00:61:cb:7c:e4:30:21:f0:1e:59:64: 2c:a2:39:9e:e9:5c:39:44:b9:e8:33:6e:ba:c3:2e:53:90:77: 92:26:ca:c7:34:2b:f8:e5:77:e2:25:13:98:57:18:3d:54:cc: bb:7f:93:71:18:5b:d9:2f:dd:69:21:57:c5:55:6c:37:cc:f2: ef:06:5c:4d:a4:89:53:fb:92:0b:32:ea:4a:69:fa:12:0c:02: bb:f9:ad:19:e4:33:65:92:00:39:79:b8:c5:40:00:b3:74:f0: ee:a8:54:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYBAJFFehHW189IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2ZWItMmRhOWU4NDY1 ZmY1MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk ZmRjOTY0MDUtODIzYS00YjQzLWE4MzMtYWNmNDVjYjU4NzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuoX7s8acc6MJOMBP0NB789kSXvpgawlqMeU f2MN420woqPipyYOpjswZZ2Jb9iBr1PiCjd6YF+aCgcmcD7TY5Pb2HZ0QpU/ZwTC EQGR1X3s9eK2gC2MjQSaiugynubQ8/wr6NBpM+2aPixaOEbwddHKEHCsznt9iXro ut0B2ZuYUNYnlOapc+iGASmvgHaQ4NPJyiHWWLxJE/WyglqAr0QVFgGzts/rZpxr IBIfq7hRWU3H9KYs2YDWNd/w+ksroBAqEmhnokdvM+8BFSl+NfDPo9H4yV+Ozo3l jFIKI9+cW19wVsAnOpR32wpTaCTqJYrz7bHtWsRy8QMIEmdlcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ584sLI6DGyoSSfcwmaQyFVn5p4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQz ZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5ZTg0NjVmZjUvMTk0YTI1MzYtZjVjNy0z MGZhLWEzZjItODkxNjc3Yjc2MWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2 ZWItMmRhOWU4NDY1ZmY1LzBlNDNkNjkzLTM5N2YtNGY5MC05NmViLTJkYTllODQ2 NWZmNS5jcmwwHwYDVR0jBBgwFoAUN04o9CXpjNBwif9JO2tz/WIVviYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQzZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5 ZTg0NjVmZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjN2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU8n+LhiqdADlSScgJEbXtQNRnoRcdb0a0XdcOOWfoh/EMIwUyFWCzU yINjEA9LGHmRgRg2RYWNVDmSahXnZtotfwG8GN5DbAJVaoEVqIfyP6kqImvWj0Xk Vi8ge7/4l2oFhF29c2rMyXOK9ozCjUt1oLStLxbt7DnM9qZW+C70uUFAtVTqtrrE kclaG+mgGPvwfKlzuKkAYct85DAh8B5ZZCyiOZ7pXDlEuegzbrrDLlOQd5Imysc0 K/jld+IlE5hXGD1UzLt/k3EYW9kv3WkhV8VVbDfM8u8GXE2kiVP7kgsy6kpp+hIM Arv5rRnkM2WSADl5uMVAALN08O6oVGE= -----END CERTIFICATE-----Generated at Sun Jun 15 12:05:35 2025 by rpki-client