$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/138a75c4-c512-3da3-9a83-d1c2d2e7a216.roa File: 138a75c4-c512-3da3-9a83-d1c2d2e7a216.roa (raw, json) Hash identifier: vvGTecX+SdqD2PZSK6VdmUtGpD+05LMw2GfWGgxKb1w= Subject key identifier: 14:62:20:BE:22:EE:3A:15:B6:15:39:3E:95:18:88:C9:FC:D1:6D:8B Certificate issuer: /CN=04bd1965-5757-479c-b2af-44967b5e0539 Certificate serial: 010D0C9F4328584A77808A4214C8734993B0FDE0 Authority key identifier: B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/138a75c4-c512-3da3-9a83-d1c2d2e7a216.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 400671 IP address blocks: 206.168.193.0/24 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:8a:42:14:c8:73:49:93:b0:fd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04bd1965-5757-479c-b2af-44967b5e0539 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=d9a177a5-b103-4538-90b1-fdee1da5af8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a3:cd:01:5a:cc:a4:f8:52:04:97:c4:e9:97: a0:a2:dc:e7:e8:eb:19:9e:4f:aa:af:6e:5d:14:13: 49:09:d7:09:da:79:d1:8d:95:b7:30:c9:31:60:b0: e1:36:2c:9a:de:39:bb:5d:8e:c0:83:f9:b1:e0:0f: fb:fd:94:c7:45:3b:5e:b4:4b:17:c7:a6:58:31:28: 14:cb:4f:15:6e:94:ba:0d:c6:c4:c6:ef:67:e5:20: d7:89:ce:57:05:78:91:cf:d2:19:c4:a3:f6:2b:11: 71:b2:48:39:e9:98:08:49:c3:0e:f5:80:e7:94:e8: f7:ae:2f:bb:90:2f:5f:58:c8:2f:e7:ad:2e:73:09: a5:88:06:b2:da:20:d2:b7:b0:06:a8:76:39:78:a2: a7:fb:74:16:ec:99:7b:25:08:a4:5f:3e:57:36:9e: d2:12:a2:55:de:64:52:f2:9d:77:44:18:e6:a3:ad: cb:01:b4:59:9d:29:3e:5f:87:e0:27:d8:00:f4:bb: cf:d1:e4:aa:5b:76:15:61:2d:fa:fd:08:f6:77:a3: 1b:aa:f4:ee:bb:94:ea:47:5e:a7:91:df:07:e3:66: 22:2d:cc:d7:e9:d2:db:c1:46:5e:64:44:a1:aa:4a: 6e:2c:b1:ec:e1:21:18:6e:14:bb:b2:21:50:18:de: 41:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:62:20:BE:22:EE:3A:15:B6:15:39:3E:95:18:88:C9:FC:D1:6D:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/138a75c4-c512-3da3-9a83-d1c2d2e7a216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.crl X509v3 Authority Key Identifier: keyid:B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer sbgp-ipAddrBlock: critical IPv4: 206.168.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:9f:04:55:d4:75:6f:aa:4f:e6:8f:5e:26:4f:a1:7f:1f:36: 1f:5a:0a:e6:ee:54:b5:2c:b9:76:13:ac:98:10:e9:cf:5b:d4: a7:25:57:ed:dc:26:2d:07:c7:34:36:7b:2a:a7:77:e3:20:e9: 8f:b1:fb:21:60:0d:94:9b:af:20:28:8c:8f:23:72:05:5c:88: 3b:a9:79:fa:e5:a4:46:2f:8a:26:53:9e:13:c5:49:5f:4b:38: bb:c5:b5:de:5f:a7:59:53:2c:dd:f6:30:c2:df:28:92:74:f1: 7d:30:7a:d2:90:05:81:2a:17:ed:81:9a:85:67:e6:e9:2c:89: 54:dd:8e:62:7e:76:2c:c7:21:5f:26:41:da:01:25:26:cc:d1: 0f:f9:1d:61:29:c2:9d:e9:e1:a4:98:ba:9a:82:0c:6c:75:c3: 56:83:3e:04:18:ef:ab:14:f5:1d:dc:3b:55:82:43:92:97:2c: a6:e8:1d:68:a7:2e:de:ef:c0:4b:d2:97:52:ed:71:70:7e:1c: 13:68:ed:c7:18:40:66:1a:67:a9:aa:62:58:ec:bf:cf:21:5d: 11:9f:be:5d:84:c1:7f:28:a6:65:b4:9e:a2:f0:b0:21:2b:ec: 8f:ca:10:35:cb:2c:4f:bc:e0:81:c1:94:09:33:0b:c3:32:8c: b1:f4:97:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIpCFMhzSZOw/eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRiZDE5NjUtNTc1Ny00NzljLWIyYWYtNDQ5NjdiNWUw NTM5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk ZDlhMTc3YTUtYjEwMy00NTM4LTkwYjEtZmRlZTFkYTVhZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaPNAVrMpPhSBJfE6Zegotzn6OsZnk+qr25d FBNJCdcJ2nnRjZW3MMkxYLDhNiya3jm7XY7Ag/mx4A/7/ZTHRTtetEsXx6ZYMSgU y08VbpS6DcbExu9n5SDXic5XBXiRz9IZxKP2KxFxskg56ZgIScMO9YDnlOj3ri+7 kC9fWMgv560ucwmliAay2iDSt7AGqHY5eKKn+3QW7Jl7JQikXz5XNp7SEqJV3mRS 8p13RBjmo63LAbRZnSk+X4fgJ9gA9LvP0eSqW3YVYS36/Qj2d6MbqvTuu5TqR16n kd8H42YiLczX6dLbwUZeZEShqkpuLLHs4SEYbhS7siFQGN5BmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRiIL4i7joVthU5PpUYiMn80W2LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wNGJk MTk2NS01NzU3LTQ3OWMtYjJhZi00NDk2N2I1ZTA1MzkvMTM4YTc1YzQtYzUxMi0z ZGEzLTlhODMtZDFjMmQyZTdhMjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDRiZDE5NjUtNTc1Ny00NzljLWIy YWYtNDQ5NjdiNWUwNTM5LzA0YmQxOTY1LTU3NTctNDc5Yy1iMmFmLTQ0OTY3YjVl MDUzOS5jcmwwHwYDVR0jBBgwFoAUtXgtVXqgUargFWS7QBUIjTRU/5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wNGJkMTk2NS01NzU3LTQ3OWMtYjJhZi00NDk2 N2I1ZTA1MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqjBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6fBFXUdW+qT+aPXiZPoX8fNh9aCubuVLUsuXYTrJgQ6c9b1KclV+3c Ji0HxzQ2eyqnd+Mg6Y+x+yFgDZSbryAojI8jcgVciDupefrlpEYviiZTnhPFSV9L OLvFtd5fp1lTLN32MMLfKJJ08X0wetKQBYEqF+2BmoVn5uksiVTdjmJ+dizHIV8m QdoBJSbM0Q/5HWEpwp3p4aSYupqCDGx1w1aDPgQY76sU9R3cO1WCQ5KXLKboHWin Lt7vwEvSl1LtcXB+HBNo7ccYQGYaZ6mqYljsv88hXRGfvl2EwX8opmW0nqLwsCEr 7I/KEDXLLE+84IHBlAkzC8MyjLH0l3U= -----END CERTIFICATE-----Generated at Thu Jul 10 10:47:20 2025 by rpki-client