$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/20e20db7-456d-36f3-9e2a-cc28d8158aa3.roa File: 20e20db7-456d-36f3-9e2a-cc28d8158aa3.roa (raw, json) Hash identifier: ToP+l8wwhJ/aPgpq8N2Vd6/C6L0z6GP87Q0TuJLZqic= Subject key identifier: 99:38:F8:60:11:EB:08:05:FE:5B:BD:3E:FD:E5:9C:33:5D:76:E0:79 Certificate issuer: /CN=605ef18e-eb43-492e-a589-20f12375c0ce Certificate serial: 010D0C9F4328584A225AC1873D8C3407F7B90DA0 Authority key identifier: E1:35:66:D1:EB:AB:AF:F9:00:4E:D5:E8:19:12:3D:95:42:12:5E:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/20e20db7-456d-36f3-9e2a-cc28d8158aa3.roa Signing time: Mon 09 Jun 2025 13:01:01 +0000 ROA not before: Mon 09 Jun 2025 13:01:01 +0000 ROA not after: Sun 07 Sep 2025 13:01:01 +0000 asID: 40785 IP address blocks: 163.165.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/605ef18e-eb43-492e-a589-20f12375c0ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/605ef18e-eb43-492e-a589-20f12375c0ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:5a:c1:87:3d:8c:34:07:f7:b9:0d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605ef18e-eb43-492e-a589-20f12375c0ce Validity Not Before: Jun 9 13:01:01 2025 GMT Not After : Sep 7 13:01:01 2025 GMT Subject: CN=a3cf6ddd-da62-47cb-9b7b-c41751e66d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:79:2e:53:38:8c:65:f4:44:ff:31:0f:77:11: 28:92:74:6a:c5:f4:ff:7b:c8:34:dc:0e:1f:84:b6: be:69:63:94:0a:84:d3:a3:14:03:f3:a3:22:d8:b9: d9:08:03:fb:39:d6:ba:31:f3:bf:7b:75:56:e7:8f: 5c:e9:61:49:c7:0f:20:56:72:24:69:73:8d:73:2b: 2d:83:06:4f:84:c6:41:d4:f6:dd:ac:88:f2:b7:a7: 4b:28:12:8b:6a:f1:cd:b4:a3:70:f7:be:24:d6:9f: 3a:b2:0d:6a:d1:8a:82:85:5d:d3:2e:80:89:97:7e: c9:86:db:fb:cc:3d:ff:e8:ec:be:49:62:7b:0c:3f: 65:0f:b0:d9:d2:2c:c0:bf:0b:02:7f:c2:97:7e:1c: 79:1d:8d:6b:f1:93:db:89:42:af:91:45:4e:d5:f8: 13:c1:cf:b1:07:77:1a:05:d8:39:fc:11:53:8e:30: db:b7:83:84:5d:ad:f8:f8:06:97:ba:b9:ea:3e:d2: 2b:70:6b:bc:04:ce:d3:a3:88:bf:3e:36:e8:9f:91: 6e:16:51:77:45:6f:70:4b:cd:a1:6a:63:8e:1c:fe: 92:02:bb:85:95:dd:18:b8:92:c0:18:87:ee:e8:47: 9a:6b:6c:5f:29:6d:2a:58:b2:78:42:99:1a:aa:e0: f0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:38:F8:60:11:EB:08:05:FE:5B:BD:3E:FD:E5:9C:33:5D:76:E0:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/20e20db7-456d-36f3-9e2a-cc28d8158aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/605ef18e-eb43-492e-a589-20f12375c0ce.crl X509v3 Authority Key Identifier: keyid:E1:35:66:D1:EB:AB:AF:F9:00:4E:D5:E8:19:12:3D:95:42:12:5E:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce.cer sbgp-ipAddrBlock: critical IPv4: 163.165.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:51:97:f9:06:5e:20:ce:dd:f1:29:fb:07:fa:58:93:89:8f: 2a:cd:4c:2d:9c:c9:25:b5:b7:a9:82:40:8f:9e:2e:6f:bd:ff: a7:4c:85:9e:76:39:0c:92:d6:e0:b9:4d:57:5d:61:9e:ee:f9: 22:3d:10:40:c8:56:76:a2:40:59:17:55:f5:da:ac:ed:d7:ac: 7d:47:82:46:23:4f:d8:b3:f9:86:dd:33:48:09:ec:5d:28:bd: 13:f0:25:4b:9f:ce:3a:14:9d:0b:7f:27:88:d8:98:07:6f:aa: 1a:6e:a3:1c:61:7c:b1:c7:39:49:80:33:78:2a:7c:fe:98:21: fc:79:a2:fa:95:d7:65:1d:6b:43:69:74:25:5d:dc:49:12:da: 5e:50:2e:2a:2c:3f:5d:c7:5a:bb:6c:2d:7b:fd:fd:46:15:ff: ba:78:82:fc:1e:b1:09:e8:c0:18:85:22:91:2b:89:ac:15:9f: 25:3c:e1:43:a0:98:cd:51:46:b8:ed:0e:c4:a2:49:3e:33:06: bd:75:46:4e:76:14:e5:3f:86:b4:2d:c0:34:5a:0b:cb:56:ea: 4c:c1:69:4d:6e:47:3b:5c:b0:ef:2d:03:0c:ab:d9:77:a8:c9: 6a:65:4b:b4:09:e0:d4:da:69:9f:9f:38:e6:67:ca:41:f2:de: 24:7a:62:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoiWsGHPYw0B/e5DaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA1ZWYxOGUtZWI0My00OTJlLWE1ODktMjBmMTIzNzVj MGNlMB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk YTNjZjZkZGQtZGE2Mi00N2NiLTliN2ItYzQxNzUxZTY2ZDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nkuUziMZfRE/zEPdxEoknRqxfT/e8g03A4f hLa+aWOUCoTToxQD86Mi2LnZCAP7Oda6MfO/e3VW549c6WFJxw8gVnIkaXONcyst gwZPhMZB1PbdrIjyt6dLKBKLavHNtKNw974k1p86sg1q0YqChV3TLoCJl37Jhtv7 zD3/6Oy+SWJ7DD9lD7DZ0izAvwsCf8KXfhx5HY1r8ZPbiUKvkUVO1fgTwc+xB3ca Bdg5/BFTjjDbt4OEXa34+AaXurnqPtIrcGu8BM7To4i/Pjbon5FuFlF3RW9wS82h amOOHP6SAruFld0YuJLAGIfu6Eeaa2xfKW0qWLJ4QpkaquDw6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJk4+GAR6wgF/lu9Pv3lnDNdduB5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82MDVl ZjE4ZS1lYjQzLTQ5MmUtYTU4OS0yMGYxMjM3NWMwY2UvMjBlMjBkYjctNDU2ZC0z NmYzLTllMmEtY2MyOGQ4MTU4YWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjA1ZWYxOGUtZWI0My00OTJlLWE1 ODktMjBmMTIzNzVjMGNlLzYwNWVmMThlLWViNDMtNDkyZS1hNTg5LTIwZjEyMzc1 YzBjZS5jcmwwHwYDVR0jBBgwFoAU4TVm0eurr/kATtXoGRI9lUISXkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82MDVlZjE4ZS1lYjQzLTQ5MmUtYTU4OS0yMGYx MjM3NWMwY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo6W9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJRl/kGXiDO3fEp+wf6WJOJjyrNTC2cySW1t6mCQI+eLm+9/6dMhZ52 OQyS1uC5TVddYZ7u+SI9EEDIVnaiQFkXVfXarO3XrH1HgkYjT9iz+YbdM0gJ7F0o vRPwJUufzjoUnQt/J4jYmAdvqhpuoxxhfLHHOUmAM3gqfP6YIfx5ovqV12Uda0Np dCVd3EkS2l5QLiosP13HWrtsLXv9/UYV/7p4gvwesQnowBiFIpEriawVnyU84UOg mM1RRrjtDsSiST4zBr11Rk52FOU/hrQtwDRaC8tW6kzBaU1uRztcsO8tAwyr2Xeo yWplS7QJ4NTaaZ+fOOZnykHy3iR6Yko= -----END CERTIFICATE-----Generated at Mon Jun 16 05:15:47 2025 by rpki-client