$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/c993d273-204c-3af8-95dc-bc8d56df4008.roa File: c993d273-204c-3af8-95dc-bc8d56df4008.roa (raw, json) Hash identifier: Q72CK7pT6IRAOOVgNLDmzkyQBYQUIOr/xhl6eLNrj1o= Subject key identifier: 71:C1:05:08:B5:E5:E9:B0:48:F2:EC:D5:C7:F1:F6:06:07:7A:E0:A2 Certificate issuer: /CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d Certificate serial: 010D0C9F4328584ABD4B9E576DD3F4B896D68000 Authority key identifier: C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/c993d273-204c-3af8-95dc-bc8d56df4008.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 395347 IP address blocks: 138.43.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:9e:57:6d:d3:f4:b8:96:d6:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=eb5607da-fe22-49b7-8ff4-0eebbc65db52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:89:c7:1a:09:fd:f4:e2:84:dc:db:cf:e7:4b: 17:bb:4e:a6:0a:61:da:cc:25:f8:cf:37:d0:8b:78: 0d:51:22:cf:75:47:3b:55:95:4f:14:07:04:ad:0c: ca:cc:6d:dd:ec:93:f3:9b:74:b5:3e:35:18:31:2d: 25:0a:d0:6d:85:90:47:2a:8b:b5:15:ef:ff:34:7d: 6c:6b:af:c6:0d:ca:b3:1f:ac:b1:07:ff:89:65:ea: 5d:b3:15:62:54:cf:ab:6d:98:29:cf:67:35:69:74: 67:26:d4:b5:da:a6:92:c4:82:6e:9b:47:7a:3f:33: dd:96:c6:ac:e6:d0:81:3f:5f:88:6c:3e:15:6b:e6: 20:d8:6d:c8:e1:bf:99:ed:b4:bc:7e:c6:1d:af:7c: fc:16:3a:3c:0e:2b:e8:24:ab:ff:4c:c1:48:52:09: 8d:1d:17:d5:e1:fe:5f:7c:b3:7a:02:3e:86:66:39: 50:e3:3f:e7:b6:52:7a:97:bc:a7:ff:2b:12:a0:d5: f4:e2:b2:dd:af:c9:d0:45:2f:a7:c8:a9:d8:05:42: a5:d7:42:1e:8f:2e:e4:73:b5:77:86:f1:0f:0d:a2: df:5e:95:70:f6:d0:c0:34:16:89:80:21:22:90:16: 20:27:37:66:f3:23:2b:0c:e7:7a:2b:e2:27:17:2e: 85:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C1:05:08:B5:E5:E9:B0:48:F2:EC:D5:C7:F1:F6:06:07:7A:E0:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/c993d273-204c-3af8-95dc-bc8d56df4008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl X509v3 Authority Key Identifier: keyid:C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer sbgp-ipAddrBlock: critical IPv4: 138.43.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:8d:da:61:ce:ef:89:fa:6b:75:d4:d1:16:08:7a:b7:fd:74: 5f:9b:df:88:c3:f0:1f:c8:11:91:14:7e:17:d5:62:b8:ac:7b: 7e:32:40:fe:9e:ec:01:bc:b8:44:c0:61:3a:e8:fa:6d:05:cf: 18:54:a9:8c:34:4b:ab:ca:62:75:fd:c7:f9:08:03:ec:0e:7b: 6c:eb:74:ba:79:ed:81:2a:8c:b4:75:5a:ca:2a:b6:8a:0b:58: 80:cd:54:09:cc:77:e3:e8:89:30:60:5c:2f:57:62:8e:41:99: 9d:28:ab:1f:cb:7e:55:7e:76:2a:3d:90:5e:7f:69:b6:93:f3: a3:2a:aa:6a:52:ab:58:0f:3f:78:9e:d0:b1:b7:a8:56:c8:8e: 1a:eb:ab:77:9f:3c:de:7f:51:16:0f:29:13:6e:0a:0e:dc:84: 8b:e5:3c:05:79:e5:04:50:4d:0b:7f:ea:56:cd:94:78:9e:c2: 15:97:20:0c:7b:a9:aa:6a:e3:f8:0f:98:35:b3:de:5d:b0:ad: 37:51:69:45:2f:ad:8b:a8:1d:4e:33:3d:37:39:77:70:12:3a: 1e:1a:45:5b:2b:46:34:35:b5:83:51:3b:7c:ea:49:a4:03:8f: 87:0d:49:01:00:8b:b0:10:39:11:11:f9:54:b5:98:49:ab:f9: 06:3b:a0:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S55XbdP0uJbWgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdjODA1ZDUtNThhNC00NTNlLWIxNmUtYzY3N2NjYjZi NDZkMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZWI1NjA3ZGEtZmUyMi00OWI3LThmZjQtMGVlYmJjNjVkYjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YnHGgn99OKE3NvP50sXu06mCmHazCX4zzfQ i3gNUSLPdUc7VZVPFAcErQzKzG3d7JPzm3S1PjUYMS0lCtBthZBHKou1Fe//NH1s a6/GDcqzH6yxB/+JZepdsxViVM+rbZgpz2c1aXRnJtS12qaSxIJum0d6PzPdlsas 5tCBP1+IbD4Va+Yg2G3I4b+Z7bS8fsYdr3z8Fjo8DivoJKv/TMFIUgmNHRfV4f5f fLN6Aj6GZjlQ4z/ntlJ6l7yn/ysSoNX04rLdr8nQRS+nyKnYBUKl10Iejy7kc7V3 hvEPDaLfXpVw9tDANBaJgCEikBYgJzdm8yMrDOd6K+InFy6FmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHBBQi15emwSPLs1cfx9gYHeuCiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iN2M4 MDVkNS01OGE0LTQ1M2UtYjE2ZS1jNjc3Y2NiNmI0NmQvYzk5M2QyNzMtMjA0Yy0z YWY4LTk1ZGMtYmM4ZDU2ZGY0MDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjdjODA1ZDUtNThhNC00NTNlLWIx NmUtYzY3N2NjYjZiNDZkL2I3YzgwNWQ1LTU4YTQtNDUzZS1iMTZlLWM2NzdjY2I2 YjQ2ZC5jcmwwHwYDVR0jBBgwFoAUwQai+A2zt5NMcjsfcCq0j0hSr9AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iN2M4MDVkNS01OGE0LTQ1M2UtYjE2ZS1jNjc3 Y2NiNmI0NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiivwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2N2mHO74n6a3XU0RYIerf9dF+b34jD8B/IEZEUfhfVYrise34yQP6e 7AG8uETAYTro+m0FzxhUqYw0S6vKYnX9x/kIA+wOe2zrdLp57YEqjLR1WsoqtooL WIDNVAnMd+PoiTBgXC9XYo5BmZ0oqx/LflV+dio9kF5/abaT86MqqmpSq1gPP3ie 0LG3qFbIjhrrq3efPN5/URYPKRNuCg7chIvlPAV55QRQTQt/6lbNlHiewhWXIAx7 qapq4/gPmDWz3l2wrTdRaUUvrYuoHU4zPTc5d3ASOh4aRVsrRjQ1tYNRO3zqSaQD j4cNSQEAi7AQORER+VS1mEmr+QY7oGs= -----END CERTIFICATE-----Generated at Thu Aug 7 14:46:15 2025 by rpki-client