$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/d0057656-9498-3ff4-a98a-a3e443f57ded.roa File: d0057656-9498-3ff4-a98a-a3e443f57ded.roa (raw, json) Hash identifier: iAVaWeCp/O52bhSwLO7XhmWGFN6DXhPSnebVQrsEwto= Subject key identifier: 85:46:D2:BA:B8:B0:3A:26:43:05:FF:1B:F8:75:23:23:32:1B:00:27 Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584A119AB0410E4D358BF174D380 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/d0057656-9498-3ff4-a98a-a3e443f57ded.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 8075 IP address blocks: 138.32.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:b0:41:0e:4d:35:8b:f1:74:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=5cb3eeef-fefa-4664-9dac-a365e127db73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b1:ea:64:96:ea:4b:cc:50:0c:3e:30:79:e4: 4c:d1:ca:ac:6b:49:f4:1d:8a:05:e0:76:d0:57:2d: b4:f5:00:c5:23:da:db:46:aa:db:e3:3a:cc:92:64: c9:b2:d7:4d:d6:fe:cb:fb:0c:d6:35:16:f4:6e:46: b3:d7:36:c9:68:4d:dc:73:a1:86:99:e8:03:a9:c8: 8e:ee:75:16:9f:6e:ea:34:ca:67:29:39:a5:2c:e1: 92:c2:cb:e1:4c:55:c3:e3:81:15:56:b1:17:5f:ce: f4:10:cb:24:68:c7:78:be:d5:b7:39:b4:96:e6:60: c3:d4:74:23:52:35:9d:60:c2:11:6c:37:b6:f4:91: be:0e:9d:5a:29:53:24:ed:72:0d:3b:67:29:18:36: 69:cb:7f:72:92:9c:bc:a8:82:6c:4f:1b:3e:72:32: 74:f5:8b:ce:03:55:52:1d:6f:f6:71:64:c0:33:ee: 6f:f0:90:f7:db:57:35:01:63:cc:ea:9b:04:61:b0: 17:25:c0:e9:2e:b5:e1:35:cb:66:9b:5b:7e:aa:8a: 83:ae:54:bb:c8:cf:ad:cb:ac:27:7c:5a:e5:2a:a0: ed:f8:a6:b9:8c:8f:0e:e3:58:21:a7:99:f6:bf:e1: 32:ff:f1:98:df:2d:60:55:69:c4:45:d5:88:06:5a: 98:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:46:D2:BA:B8:B0:3A:26:43:05:FF:1B:F8:75:23:23:32:1B:00:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/d0057656-9498-3ff4-a98a-a3e443f57ded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:c8:51:9b:37:c5:c1:b3:cc:ef:fa:11:51:88:77:4f:f7:7c: 4a:ec:89:bf:af:b6:c1:54:2b:a6:38:01:6b:be:47:55:d3:d4: 3b:bd:1a:41:b2:7d:de:1a:43:d1:e8:e9:31:ba:a7:c2:ac:ef: 1e:a3:f8:41:79:49:6f:33:d5:62:1d:29:c8:97:bb:66:9d:dc: b0:19:5c:96:1c:74:10:ed:43:f6:57:19:ff:7b:e9:a2:27:c9: 0e:0d:fc:50:23:74:a0:e4:1c:05:1b:41:14:fb:b5:0b:24:72: 9a:df:ac:02:15:6e:22:73:aa:a2:ae:24:ee:e9:77:09:1c:60: 33:70:ce:38:ca:34:6e:fc:fd:82:b5:1d:e4:a0:d0:2b:c9:c3: 13:71:1a:ff:39:dd:1c:85:80:ed:d4:1b:66:9a:14:b7:91:87: 9e:7f:d1:d9:a9:e7:f0:40:29:aa:ca:89:ef:35:a1:62:ce:12: 95:8c:a6:e9:a6:f4:01:ef:da:90:fd:b9:80:2d:1b:c4:14:0b: 3b:22:58:13:f2:fa:52:af:74:d0:ee:8c:ef:d5:47:fa:d3:2f: 57:a3:19:bf:ac:1a:03:ce:2d:d2:99:70:eb:b2:76:4f:34:6b: cc:b0:4b:8b:9d:cb:5c:87:e6:f7:84:e5:7c:85:31:21:d1:b1: a8:84:8a:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmrBBDk01i/F004AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk NWNiM2VlZWYtZmVmYS00NjY0LTlkYWMtYTM2NWUxMjdkYjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbHqZJbqS8xQDD4weeRM0cqsa0n0HYoF4HbQ Vy209QDFI9rbRqrb4zrMkmTJstdN1v7L+wzWNRb0bkaz1zbJaE3cc6GGmegDqciO 7nUWn27qNMpnKTmlLOGSwsvhTFXD44EVVrEXX870EMskaMd4vtW3ObSW5mDD1HQj UjWdYMIRbDe29JG+Dp1aKVMk7XINO2cpGDZpy39ykpy8qIJsTxs+cjJ09YvOA1VS HW/2cWTAM+5v8JD321c1AWPM6psEYbAXJcDpLrXhNctmm1t+qoqDrlS7yM+ty6wn fFrlKqDt+Ka5jI8O41ghp5n2v+Ey//GY3y1gVWnERdWIBlqYTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVG0rq4sDomQwX/G/h1IyMyGwAnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvZDAwNTc2NTYtOTQ5OC0z ZmY0LWE5OGEtYTNlNDQzZjU3ZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiiBvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfIUZs3xcGzzO/6EVGId0/3fErsib+vtsFUK6Y4AWu+R1XT1Du9GkGy fd4aQ9Ho6TG6p8Ks7x6j+EF5SW8z1WIdKciXu2ad3LAZXJYcdBDtQ/ZXGf976aIn yQ4N/FAjdKDkHAUbQRT7tQskcprfrAIVbiJzqqKuJO7pdwkcYDNwzjjKNG78/YK1 HeSg0CvJwxNxGv853RyFgO3UG2aaFLeRh55/0dmp5/BAKarKie81oWLOEpWMpumm 9AHv2pD9uYAtG8QUCzsiWBPy+lKvdNDujO/VR/rTL1ejGb+sGgPOLdKZcOuydk80 a8ywS4udy1yH5veE5XyFMSHRsaiEitk= -----END CERTIFICATE-----Generated at Wed Jun 4 21:49:35 2025 by rpki-client