$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa File: 720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa (raw, json) Hash identifier: 8YYNOOFoo1vv9aK4TwD9Ocahagn3d28o4vbPfGscYb8= Subject key identifier: 30:28:8D:95:41:E6:0B:30:8C:0E:CA:61:2E:3E:CF:9D:2F:00:29:8D Certificate issuer: /CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Certificate serial: 010D0C9F43285849446938ED937844AD842C9180 Authority key identifier: AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 833 IP address blocks: 165.140.200.0/24 maxlen: 24 165.140.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:38:ed:93:78:44:ad:84:2c:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=0e3e0195-737e-4ea0-881d-89b23d716b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:04:be:38:38:5c:5b:4a:d3:4e:18:4b:60:09: 00:4e:e1:d7:a8:24:c2:c7:05:34:76:84:c4:a1:ac: 5d:48:5f:2c:fe:15:8b:37:6d:d7:bc:b2:3c:65:58: 39:52:90:01:a6:58:0e:32:d1:fb:19:a4:ef:9c:24: 3b:39:f1:2f:6b:67:8d:39:55:65:54:cc:70:6e:ba: 55:b9:f3:52:d5:37:da:74:04:0d:86:49:88:b6:49: bb:a2:f4:a8:4a:82:01:78:1e:67:cf:bd:cf:8d:91: 02:d4:d7:27:e3:88:e9:cb:44:56:21:7b:1a:fc:dd: 61:54:73:23:77:e2:18:d9:0a:6f:ad:a3:fb:c5:10: e6:7a:ab:e2:ba:16:27:b4:2c:16:31:5d:0c:4a:fd: e8:a6:d9:ae:4b:ff:97:91:92:c0:99:c1:67:24:f1: 7b:f9:a1:63:24:18:e9:80:e1:e1:17:02:80:9b:b2: 5f:b8:8a:c4:2c:73:fc:f5:60:e5:ac:bf:e3:9b:f4: 32:45:22:d7:17:be:c9:82:8f:ef:ab:b7:64:29:b3: 73:16:83:45:3b:ba:c5:98:9a:07:65:bc:f4:22:f7: b7:87:28:e1:74:92:27:ed:52:81:96:1f:2b:bf:e7: 65:b0:65:ef:64:8c:67:ee:52:d5:3b:2e:41:a3:67: b2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:28:8D:95:41:E6:0B:30:8C:0E:CA:61:2E:3E:CF:9D:2F:00:29:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl X509v3 Authority Key Identifier: keyid:AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer sbgp-ipAddrBlock: critical IPv4: 165.140.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:0d:48:5f:b6:db:3f:01:0a:88:9e:a4:84:b0:31:19:aa:e6: 4a:8d:04:45:a9:a1:da:07:2f:5e:23:e6:7c:22:36:51:ef:d1: 92:6d:ba:c8:9e:5c:f9:d2:7f:28:1a:63:34:39:e0:7b:be:95: ec:81:03:02:c0:b2:4a:23:e8:ff:8d:b4:79:89:e8:fe:72:99: 6e:37:68:8c:01:2f:5c:9b:5b:4c:13:23:9d:77:67:23:b7:77: 4e:c5:d1:d2:7e:c6:9e:7b:34:38:04:96:da:80:e0:fa:eb:fd: 2d:74:e8:dc:a2:8c:b9:e9:17:4e:14:b5:36:a1:b3:73:78:30: c6:51:0b:ae:b1:7d:4b:d5:ae:d0:2b:cd:6f:2e:ab:c2:d2:67: 41:6a:e1:f9:ad:56:08:77:51:cb:4a:18:be:b8:72:e7:10:f6: 9b:b4:b9:3d:6c:3c:91:d7:94:c9:d6:e0:b3:3c:7d:67:4e:e8: 26:54:65:60:3f:f3:22:7b:67:69:6b:b2:a1:e5:38:e3:ed:c3: 4d:f2:40:94:9b:94:31:3e:c0:f3:6c:30:8b:43:51:4a:88:f3: fc:3e:fc:df:a0:47:45:16:90:29:e0:02:e6:23:8f:b8:f6:b7: 5c:ab:aa:a3:b2:32:77:3b:2f:64:52:f5:4f:46:96:38:94:1c: 9c:d3:f6:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTjtk3hErYQskYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjExOGViNGEtZGYxNi00Y2U1LWFkZjEtYWRhYWVhMTI4 YzUwMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MGUzZTAxOTUtNzM3ZS00ZWEwLTg4MWQtODliMjNkNzE2YjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwS+ODhcW0rTThhLYAkATuHXqCTCxwU0doTE oaxdSF8s/hWLN23XvLI8ZVg5UpABplgOMtH7GaTvnCQ7OfEva2eNOVVlVMxwbrpV ufNS1TfadAQNhkmItkm7ovSoSoIBeB5nz73PjZEC1Ncn44jpy0RWIXsa/N1hVHMj d+IY2QpvraP7xRDmeqviuhYntCwWMV0MSv3optmuS/+XkZLAmcFnJPF7+aFjJBjp gOHhFwKAm7JfuIrELHP89WDlrL/jm/QyRSLXF77Jgo/vq7dkKbNzFoNFO7rFmJoH Zbz0Ive3hyjhdJIn7VKBlh8rv+dlsGXvZIxn7lLVOy5Bo2ey7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAojZVB5gswjA7KYS4+z50vACmNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4 ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFhZWExMjhjNTAvNzIwZDNlOWMtZTgwYi0z OTg5LWE5ZDctNGIzNWYxZDEwMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjExOGViNGEtZGYxNi00Y2U1LWFk ZjEtYWRhYWVhMTI4YzUwL2IxMThlYjRhLWRmMTYtNGNlNS1hZGYxLWFkYWFlYTEy OGM1MC5jcmwwHwYDVR0jBBgwFoAUr6JYQ6l/axWnraxW2DHKWIf9Dc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFh ZWExMjhjNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpYzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgNSF+22z8BCoiepISwMRmq5kqNBEWpodoHL14j5nwiNlHv0ZJtusie XPnSfygaYzQ54Hu+leyBAwLAskoj6P+NtHmJ6P5ymW43aIwBL1ybW0wTI513ZyO3 d07F0dJ+xp57NDgEltqA4Prr/S106NyijLnpF04UtTahs3N4MMZRC66xfUvVrtAr zW8uq8LSZ0Fq4fmtVgh3UctKGL64cucQ9pu0uT1sPJHXlMnW4LM8fWdO6CZUZWA/ 8yJ7Z2lrsqHlOOPtw03yQJSblDE+wPNsMItDUUqI8/w+/N+gR0UWkCngAuYjj7j2 t1yrqqOyMnc7L2RS9U9GljiUHJzT9mI= -----END CERTIFICATE-----Generated at Mon Jun 9 14:26:27 2025 by rpki-client