$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1b6c62e1-eb55-361a-9aef-1a8a2d91a599.roa File: 1b6c62e1-eb55-361a-9aef-1a8a2d91a599.roa (raw, json) Hash identifier: hkmqi3NqF6iFobHKrhvITWcLkuTnnCme7DXfAa5AxVI= Subject key identifier: ED:19:A8:4D:64:6C:7F:3C:F9:D6:46:2B:8B:66:DB:EF:31:30:EA:0F Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584A1F902190AC6B56303CA69880 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1b6c62e1-eb55-361a-9aef-1a8a2d91a599.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 399275 IP address blocks: 165.140.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:21:90:ac:6b:56:30:3c:a6:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=bb97e8f0-ebf9-4d81-8645-de79bde7ae46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:0d:ea:fd:35:d6:55:dc:02:75:94:f3:bd: 97:b8:a0:8f:f8:dd:58:a3:0b:b7:10:60:cd:67:f4: 87:cc:2b:ca:1e:9e:c3:8e:e2:c0:ff:5e:3a:dc:5a: ee:5c:60:e9:c9:e4:27:0b:9d:73:55:28:89:44:6c: cb:f8:96:23:45:eb:d6:e0:46:25:25:ad:c8:52:a2: 56:b0:0c:9e:9a:93:d2:a4:f4:ef:d4:b5:ff:6a:e6: e0:c3:83:cf:b0:0a:58:4f:e4:62:9d:a6:8b:b9:9f: 89:da:57:c9:a0:da:80:55:f1:7d:fc:0c:f8:11:88: 09:2d:92:fd:a1:8f:b5:df:f1:43:c8:88:06:0d:68: f3:d2:69:de:59:51:b4:55:0b:cc:de:bd:ce:24:f1: 20:4b:83:ba:7b:94:d2:7f:5e:86:c6:3d:48:d9:7e: 46:8d:14:94:87:fd:82:7c:46:71:16:08:b7:ea:7b: a8:b1:47:35:4c:8e:58:70:90:05:c4:01:8c:5f:1e: ec:a7:5f:e5:bf:14:b6:5f:c2:95:f0:95:c5:36:69: af:2a:67:19:37:bf:42:00:43:30:34:e0:f7:ff:5b: 00:16:fd:ed:35:26:47:bc:a1:17:87:4a:4e:eb:1b: fb:b8:84:eb:95:c1:d9:72:4c:72:11:7d:da:57:d4: 3e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:19:A8:4D:64:6C:7F:3C:F9:D6:46:2B:8B:66:DB:EF:31:30:EA:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1b6c62e1-eb55-361a-9aef-1a8a2d91a599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 165.140.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:03:5c:81:00:ad:15:4f:42:89:d5:20:5a:f5:41:b2:8c:31: 33:fd:9b:ad:c8:c1:0e:16:27:6e:0d:47:5e:f0:15:f0:a9:2e: 08:ca:6c:1e:2b:1f:f4:b4:f3:24:de:f3:cf:a5:6b:ce:35:4c: 82:b6:59:10:3c:ec:99:7b:97:3c:82:91:1b:39:58:75:e1:75: 7a:d4:9f:ae:27:95:0e:41:cf:b9:cd:6f:cf:b7:82:ea:d7:3b: ec:29:45:69:6c:1c:f1:82:85:01:0a:3a:22:e1:f5:c8:43:16: 94:a7:e4:d8:5a:61:74:1d:bd:a6:5c:82:79:e4:2b:d6:f1:68: b5:41:ac:fb:91:f6:35:bd:6e:b9:39:61:d2:09:29:f0:83:19: ef:d8:ea:ef:a1:7d:fe:1b:51:be:ff:77:99:32:c4:1e:03:78: 54:52:10:27:b8:56:ea:15:36:d5:8c:66:da:71:f4:1c:64:28: a2:cf:16:37:92:e5:59:16:32:47:eb:ef:51:73:2b:26:3a:b6: 6a:0b:f9:d7:59:7f:1c:38:27:17:41:8e:07:9e:ed:2f:33:13: 70:21:07:ba:f4:63:24:a3:2b:29:ac:fa:0f:5f:cc:00:72:3e: e5:9f:d2:da:67:e9:6a:7b:d2:e1:c2:e9:d7:14:55:3e:4c:46: a5:ef:77:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkCGQrGtWMDymmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk YmI5N2U4ZjAtZWJmOS00ZDgxLTg2NDUtZGU3OWJkZTdhZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwikN6v011lXcAnWU872XuKCP+N1Yowu3EGDN Z/SHzCvKHp7DjuLA/1463FruXGDpyeQnC51zVSiJRGzL+JYjRevW4EYlJa3IUqJW sAyempPSpPTv1LX/aubgw4PPsApYT+RinaaLuZ+J2lfJoNqAVfF9/Az4EYgJLZL9 oY+13/FDyIgGDWjz0mneWVG0VQvM3r3OJPEgS4O6e5TSf16Gxj1I2X5GjRSUh/2C fEZxFgi36nuosUc1TI5YcJAFxAGMXx7sp1/lvxS2X8KV8JXFNmmvKmcZN79CAEMw NOD3/1sAFv3tNSZHvKEXh0pO6xv7uITrlcHZckxyEX3aV9Q+8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0ZqE1kbH88+dZGK4tm2+8xMOoPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvMWI2YzYyZTEtZWI1NS0z NjFhLTlhZWYtMWE4YTJkOTFhNTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYx2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIDXIEArRVPQonVIFr1QbKMMTP9m63IwQ4WJ24NR17wFfCpLgjKbB4r H/S08yTe88+la841TIK2WRA87Jl7lzyCkRs5WHXhdXrUn64nlQ5Bz7nNb8+3gurX O+wpRWlsHPGChQEKOiLh9chDFpSn5NhaYXQdvaZcgnnkK9bxaLVBrPuR9jW9brk5 YdIJKfCDGe/Y6u+hff4bUb7/d5kyxB4DeFRSECe4VuoVNtWMZtpx9BxkKKLPFjeS 5VkWMkfr71FzKyY6tmoL+ddZfxw4JxdBjgee7S8zE3AhB7r0YySjKyms+g9fzABy PuWf0tpn6Wp70uHC6dcUVT5MRqXvdxU= -----END CERTIFICATE-----Generated at Wed Jun 11 20:09:46 2025 by rpki-client