$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/065f485a-2efe-31d5-8788-a9a1e337735d.roa File: 065f485a-2efe-31d5-8788-a9a1e337735d.roa (raw, json) Hash identifier: C1NlzB0pmmSgVnDoTGNzk4/zHc080y0HqNxRSqHM2zE= Subject key identifier: 90:DC:72:C0:4E:11:02:5F:AD:29:DF:4E:E7:E2:26:DE:09:75:A6:AF Certificate issuer: /CN=ff45396e-5aed-48af-b337-95d4dc567afb Certificate serial: 010D0C9F4328584A66C06D7057BB9C60F9444C80 Authority key identifier: 6D:DA:18:FE:0C:52:9B:FC:40:09:7E:3F:D7:75:88:E5:A1:FD:5C:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/065f485a-2efe-31d5-8788-a9a1e337735d.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 6377 IP address blocks: 158.165.0.0/16 maxlen: 16 192.135.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:6d:70:57:bb:9c:60:f9:44:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff45396e-5aed-48af-b337-95d4dc567afb Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=90a94748-5ca2-44aa-ba5c-c322c5e22301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5d:69:2c:22:65:09:8e:b2:c8:5f:71:c3:c4: fd:71:6c:e4:73:03:6f:af:67:9e:b7:72:5d:2f:01: 7e:ef:3f:53:2c:09:51:0a:f5:da:3c:89:23:c4:27: c9:71:89:5e:e3:ab:c4:48:3d:ed:d0:43:64:04:d1: 0c:ae:e9:b5:8e:6e:9b:3d:1b:94:3c:36:03:bb:be: 26:a3:46:72:f8:dd:52:c4:cc:39:93:35:70:d3:0e: e3:69:95:9f:c7:b1:a9:7f:64:67:d9:4d:7d:9b:3e: 16:2e:f1:6a:5b:de:5f:84:00:30:0e:1f:a4:01:98: d9:ea:ce:3c:35:c1:61:25:4c:b9:88:97:db:c3:68: 51:85:8d:61:48:7d:86:d4:e5:f5:ef:e3:c6:a4:62: 7d:87:df:a1:7c:9e:df:8b:ea:c7:15:27:b5:04:2f: 22:83:e0:d0:d9:fb:3b:27:98:68:eb:6c:df:5e:e0: a1:fb:c6:b1:46:be:bf:e2:de:99:d9:36:e6:75:60: 87:63:d9:3d:8e:2a:04:21:67:8d:d3:4e:ee:60:0f: 1a:2c:6f:c5:6e:62:ff:43:60:58:ff:12:73:8a:2f: 5c:e5:3a:0a:c0:cb:e6:5a:0a:64:37:85:90:5d:d2: 9a:c0:99:36:9c:76:8a:32:94:e7:e8:91:c9:06:82: a1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DC:72:C0:4E:11:02:5F:AD:29:DF:4E:E7:E2:26:DE:09:75:A6:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/065f485a-2efe-31d5-8788-a9a1e337735d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.crl X509v3 Authority Key Identifier: keyid:6D:DA:18:FE:0C:52:9B:FC:40:09:7E:3F:D7:75:88:E5:A1:FD:5C:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb.cer sbgp-ipAddrBlock: critical IPv4: 158.165.0.0/16 192.135.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:22:84:6e:be:45:25:79:71:6f:2a:c2:4c:ad:47:1a:9e:56: 81:54:4c:29:6f:61:4f:fb:fb:2f:98:1c:8c:95:e1:e2:1b:03: c1:4e:f7:d6:fd:f3:f7:cf:9f:c1:13:1a:2a:2f:c8:9f:a2:b0: 34:5b:b2:cc:93:33:29:f4:31:4c:bb:bf:3a:b0:31:72:4f:02: 78:79:cb:f9:bc:6b:46:f0:2f:11:dc:96:18:44:3f:b1:81:70: 19:fe:a2:82:3e:e2:3e:21:ed:84:1c:da:77:d8:71:1a:ba:81: d0:a3:ff:67:93:01:f4:62:08:1c:3e:2d:45:49:d2:6b:4a:46: 4d:e0:53:3c:dd:15:58:39:a3:47:e3:86:8e:a6:26:b6:01:b4: 5e:02:cb:e5:aa:0f:e6:bb:13:31:1f:0f:59:5f:ca:ef:ce:ce: 53:b9:ff:18:c2:88:07:a1:99:85:dc:e1:ad:d6:22:d0:a1:01: 3f:5e:6b:e6:39:1b:18:73:34:cc:df:da:66:89:6e:bd:f2:9c: 89:da:64:66:3f:3d:1f:e1:52:95:98:4e:5c:a9:52:6e:42:b2: c5:0a:6b:3f:a7:38:04:f5:4b:cc:48:14:39:3c:c2:06:08:44: f6:56:b7:9d:ef:29:a9:73:07:85:88:a6:ec:92:f7:3c:5a:b4: 07:0d:8c:8f -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEpmwG1wV7ucYPlETIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY0NTM5NmUtNWFlZC00OGFmLWIzMzctOTVkNGRjNTY3 YWZiMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk OTBhOTQ3NDgtNWNhMi00NGFhLWJhNWMtYzMyMmM1ZTIyMzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol1pLCJlCY6yyF9xw8T9cWzkcwNvr2eet3Jd LwF+7z9TLAlRCvXaPIkjxCfJcYle46vESD3t0ENkBNEMrum1jm6bPRuUPDYDu74m o0Zy+N1SxMw5kzVw0w7jaZWfx7Gpf2Rn2U19mz4WLvFqW95fhAAwDh+kAZjZ6s48 NcFhJUy5iJfbw2hRhY1hSH2G1OX17+PGpGJ9h9+hfJ7fi+rHFSe1BC8ig+DQ2fs7 J5ho62zfXuCh+8axRr6/4t6Z2TbmdWCHY9k9jioEIWeN007uYA8aLG/FbmL/Q2BY /xJzii9c5ToKwMvmWgpkN4WQXdKawJk2nHaKMpTn6JHJBoKhlQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFJDccsBOEQJfrSnfTufiJt4JdaavMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZjQ1 Mzk2ZS01YWVkLTQ4YWYtYjMzNy05NWQ0ZGM1NjdhZmIvMDY1ZjQ4NWEtMmVmZS0z MWQ1LTg3ODgtYTlhMWUzMzc3MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmY0NTM5NmUtNWFlZC00OGFmLWIz MzctOTVkNGRjNTY3YWZiL2ZmNDUzOTZlLTVhZWQtNDhhZi1iMzM3LTk1ZDRkYzU2 N2FmYi5jcmwwHwYDVR0jBBgwFoAUbdoY/gxSm/xACX4/13WI5aH9XLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZjQ1Mzk2ZS01YWVkLTQ4YWYtYjMzNy05NWQ0 ZGM1NjdhZmIuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAnqUDBADA h7cwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEABiKEbr5FJXlxbyrCTK1HGp5WgVRMKW9hT/v7L5gcjJXh4hsD wU731v3z98+fwRMaKi/In6KwNFuyzJMzKfQxTLu/OrAxck8CeHnL+bxrRvAvEdyW GEQ/sYFwGf6igj7iPiHthBzad9hxGrqB0KP/Z5MB9GIIHD4tRUnSa0pGTeBTPN0V WDmjR+OGjqYmtgG0XgLL5aoP5rsTMR8PWV/K787OU7n/GMKIB6GZhdzhrdYi0KEB P15r5jkbGHM0zN/aZoluvfKcidpkZj89H+FSlZhOXKlSbkKyxQprP6c4BPVLzEgU OTzCBghE9la3ne8pqXMHhYim7JL3PFq0Bw2Mjw== -----END CERTIFICATE-----Generated at Sat Jul 5 16:04:47 2025 by rpki-client