$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/719f2e39-7f67-3af3-a559-8d3da5b5061c.roa File: 719f2e39-7f67-3af3-a559-8d3da5b5061c.roa (raw, json) Hash identifier: jQ06TlvUUUlbXCKQhWfjJKpIxdc+LJxffPghgJvxpxU= Subject key identifier: CA:86:45:95:8C:A9:D6:14:80:8F:D1:D1:1A:4D:90:F2:13:64:FA:80 Certificate issuer: /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Certificate serial: 010D0C9F4328584A8840AC89EF40179BF64B4280 Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/719f2e39-7f67-3af3-a559-8d3da5b5061c.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 683 IP address blocks: 146.137.0.0/16 maxlen: 16 146.137.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:ac:89:ef:40:17:9b:f6:4b:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=a01fef1b-7498-4786-b212-0b918195745e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:20:fb:e7:b7:3a:99:5f:9d:87:49:76:94:bd: fb:4f:46:34:b4:96:14:83:e9:fa:f6:b0:59:5c:8f: 74:16:41:24:d7:67:ee:1e:0f:be:e5:c5:2f:3c:ee: 1f:33:e8:5b:1e:e9:3d:04:65:fc:c9:89:36:b6:1d: 2b:37:1a:e1:50:0e:33:41:e0:59:0f:aa:ce:c7:f1: 49:1f:bc:04:80:2b:53:75:c1:be:ab:ed:3c:5c:ac: fc:73:c7:87:5b:f9:db:1b:4c:a0:48:68:79:a0:14: 3f:60:36:45:a4:aa:12:d6:dc:3c:4f:31:25:61:87: 92:61:55:3f:2a:da:93:22:fb:32:00:38:d9:40:10: 04:ab:47:18:84:6c:7a:f3:8d:c5:eb:1d:e8:20:d4: 43:35:2c:7a:cc:c8:79:5c:b7:11:84:fb:77:ae:76: 1e:a4:28:a6:40:04:d9:42:3c:dc:62:4c:9d:4a:1f: 10:77:69:3c:b5:b7:24:eb:53:a9:64:85:97:c1:5e: 67:ac:5c:02:aa:0a:0c:30:25:63:01:dc:22:a3:83: 16:97:44:7d:71:0e:53:0a:e6:89:42:e7:19:d8:92: 99:ca:fd:d3:0c:ee:48:21:ae:a7:3f:0a:95:64:39: f1:b9:77:e3:ec:39:cf:2d:31:c4:9b:be:15:3e:a2: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:86:45:95:8C:A9:D6:14:80:8F:D1:D1:1A:4D:90:F2:13:64:FA:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/719f2e39-7f67-3af3-a559-8d3da5b5061c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl X509v3 Authority Key Identifier: keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer sbgp-ipAddrBlock: critical IPv4: 146.137.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:6d:83:8c:b4:d6:dc:4a:20:19:03:25:fc:b4:d9:07:79:c7: 8f:b6:d0:a8:d2:90:67:cd:c5:31:d4:5f:67:d8:e7:47:a0:79: be:a9:1e:07:4e:2c:38:1c:df:42:9c:1a:52:93:81:0a:2b:8e: 25:f1:56:51:bf:cb:cc:33:1a:d2:22:d2:0f:33:a3:2a:90:f2: 7f:3a:1a:3f:78:fa:e2:49:ae:11:96:d6:b8:a4:56:c2:1b:31: 4a:92:74:d6:08:94:56:d8:51:da:ed:15:86:66:73:fd:da:f7: e9:4d:c3:3f:8a:32:d1:f2:ee:24:1b:64:19:13:9f:9f:fb:33: c1:bd:c9:cd:2e:87:a6:f3:d8:26:c3:26:06:20:c4:3d:8b:6d: f7:49:9f:b0:18:f3:99:da:90:62:af:9a:84:bb:28:8f:99:bc: 2c:5c:22:ab:39:b2:cc:97:1b:fe:ea:37:49:81:9d:d6:fd:27: 74:b7:6b:a4:58:15:b8:d1:48:d5:a5:f1:0c:bc:37:53:30:d3: e9:e8:c5:b5:81:73:ea:1b:52:08:8f:82:41:0d:14:22:d1:06: 75:9e:b9:d2:99:b2:69:8e:7e:22:93:c3:19:ee:75:7d:52:e9: 80:1e:96:4c:5d:ba:47:40:7c:26:5b:f4:c5:3d:5a:f6:09:7f: 66:e7:31:87 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqIQKyJ70AXm/ZLQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2ZWItMmRhOWU4NDY1 ZmY1MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk YTAxZmVmMWItNzQ5OC00Nzg2LWIyMTItMGI5MTgxOTU3NDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCD757c6mV+dh0l2lL37T0Y0tJYUg+n69rBZ XI90FkEk12fuHg++5cUvPO4fM+hbHuk9BGX8yYk2th0rNxrhUA4zQeBZD6rOx/FJ H7wEgCtTdcG+q+08XKz8c8eHW/nbG0ygSGh5oBQ/YDZFpKoS1tw8TzElYYeSYVU/ KtqTIvsyADjZQBAEq0cYhGx6843F6x3oINRDNSx6zMh5XLcRhPt3rnYepCimQATZ QjzcYkydSh8Qd2k8tbck61OpZIWXwV5nrFwCqgoMMCVjAdwio4MWl0R9cQ5TCuaJ QucZ2JKZyv3TDO5IIa6nPwqVZDnxuXfj7DnPLTHEm74VPqIRWwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMqGRZWMqdYUgI/R0RpNkPITZPqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQz ZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5ZTg0NjVmZjUvNzE5ZjJlMzktN2Y2Ny0z YWYzLWE1NTktOGQzZGE1YjUwNjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2 ZWItMmRhOWU4NDY1ZmY1LzBlNDNkNjkzLTM5N2YtNGY5MC05NmViLTJkYTllODQ2 NWZmNS5jcmwwHwYDVR0jBBgwFoAUN04o9CXpjNBwif9JO2tz/WIVviYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQzZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5 ZTg0NjVmZjUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkokwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATm2DjLTW3EogGQMl/LTZB3nHj7bQqNKQZ83FMdRfZ9jnR6B5vqkeB04s OBzfQpwaUpOBCiuOJfFWUb/LzDMa0iLSDzOjKpDyfzoaP3j64kmuEZbWuKRWwhsx SpJ01giUVthR2u0VhmZz/dr36U3DP4oy0fLuJBtkGROfn/szwb3JzS6HpvPYJsMm BiDEPYtt90mfsBjzmdqQYq+ahLsoj5m8LFwiqzmyzJcb/uo3SYGd1v0ndLdrpFgV uNFI1aXxDLw3UzDT6ejFtYFz6htSCI+CQQ0UItEGdZ650pmyaY5+IpPDGe51fVLp gB6WTF26R0B8Jlv0xT1a9gl/Zucxhw== -----END CERTIFICATE-----Generated at Mon Aug 4 14:07:24 2025 by rpki-client