$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa File: 458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa (raw, json) Hash identifier: mTJ+/0A4HQi2KFndNYYOipFRl8Qgrq+qGMKN9C7YMLo= Subject key identifier: B7:0F:4F:DB:87:CF:65:12:23:E4:8A:0D:A9:0C:19:5A:68:20:0E:37 Certificate issuer: /CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175 Certificate serial: 010D0C9F4328584A2955654CA2D4D0A95AEE2180 Authority key identifier: D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 23122 IP address blocks: 138.247.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:65:4c:a2:d4:d0:a9:5a:ee:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175 Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=7026a19f-d087-4846-a796-b2f2f32bc50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:74:05:61:e6:b7:e1:b6:2d:db:a2:dd:a3: a4:54:aa:98:1b:6e:be:ea:83:63:bc:89:cb:ad:76: 18:ab:ba:e1:1a:c7:19:33:a1:95:c8:c1:5a:58:63: 9c:aa:75:88:20:a4:cf:ae:9a:80:7c:dd:f5:22:25: 49:a7:2e:69:6b:c7:a8:9d:82:4d:f5:b1:2c:33:f3: 52:55:3f:06:d5:b9:95:da:fa:94:c8:a8:b8:7d:d5: 6f:93:cc:b8:14:aa:4c:20:a7:d7:f8:9a:1f:e7:00: 25:e8:44:ca:d7:89:0c:8c:94:2d:2d:70:fa:ac:79: 06:d1:04:bd:64:15:8d:49:36:f8:73:95:d4:1f:4d: f0:fa:11:b6:6c:e4:92:bb:92:a6:5d:e0:92:90:ed: 2f:4e:45:c8:c6:c4:92:54:69:2e:a7:52:5a:cd:5c: a4:f5:3c:e0:1b:23:62:8d:aa:5d:67:ed:4d:36:b3: 68:55:fb:a2:11:b0:1b:4e:c1:a3:75:7e:0b:3b:db: 19:d8:6c:ab:b7:da:8c:ce:2f:91:03:e7:d3:c8:9f: 3f:ea:8e:10:46:f5:f5:35:74:9c:94:aa:e6:64:0e: 72:5c:d7:0c:2a:6a:51:a7:0b:47:ca:24:ac:fd:d5: 94:a6:68:aa:01:9d:69:30:3b:ba:0e:4d:ef:32:af: 31:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0F:4F:DB:87:CF:65:12:23:E4:8A:0D:A9:0C:19:5A:68:20:0E:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl X509v3 Authority Key Identifier: keyid:D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer sbgp-ipAddrBlock: critical IPv4: 138.247.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f3:4d:bd:6a:c8:08:6e:66:c9:4b:60:fd:cb:cb:76:0b:6f: 58:5e:93:28:5c:e2:8b:af:4b:9d:bf:cb:4f:f5:9e:a7:cd:a4: c6:9c:4d:ef:2b:6a:9a:cb:be:cf:eb:69:25:6d:0b:18:72:7f: 65:39:be:7a:b1:7c:1c:23:69:32:cb:d6:a1:02:d1:61:1f:91: b1:a6:5d:14:1c:48:ff:5d:de:eb:9d:75:e1:a1:a9:5a:1b:6c: 49:16:97:89:b5:f0:65:75:f4:45:5c:2e:3f:1a:f6:44:28:4f: 09:b5:61:e0:80:52:91:c0:af:6c:2d:07:87:63:ef:f8:44:90: 4e:d2:02:a5:28:40:20:13:2a:30:fc:13:8d:4c:df:05:58:d1: 7a:f3:99:33:81:12:00:0f:ed:67:ba:90:14:a4:22:65:60:0a: f0:9a:24:f8:72:d5:a4:2a:b0:36:1c:c8:e4:12:03:23:66:72: 0c:7e:7a:1d:30:48:33:12:8e:89:ac:a6:f3:70:f2:b0:d3:ad: 12:bb:10:c9:a1:b2:c8:23:e6:5e:60:2b:7c:d5:1a:73:83:c9: 76:05:0e:d6:1b:1c:e3:6a:bb:fa:ea:4f:b1:50:27:a4:ce:ea: 7e:71:54:8b:43:8d:60:fd:1e:c2:1d:78:40:87:49:b2:99:cc: 4b:62:43:e9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEopVWVMotTQqVruIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVhMTA2YjEtZGY1ZS00ZmI0LWJkNjUtNTE2N2ZmNmRj MTc1MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk NzAyNmExOWYtZDA4Ny00ODQ2LWE3OTYtYjJmMmYzMmJjNTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCJ0BWHmt+G2Ldui3aOkVKqYG26+6oNjvInL rXYYq7rhGscZM6GVyMFaWGOcqnWIIKTPrpqAfN31IiVJpy5pa8eonYJN9bEsM/NS VT8G1bmV2vqUyKi4fdVvk8y4FKpMIKfX+Jof5wAl6ETK14kMjJQtLXD6rHkG0QS9 ZBWNSTb4c5XUH03w+hG2bOSSu5KmXeCSkO0vTkXIxsSSVGkup1JazVyk9TzgGyNi japdZ+1NNrNoVfuiEbAbTsGjdX4LO9sZ2Gyrt9qMzi+RA+fTyJ8/6o4QRvX1NXSc lKrmZA5yXNcMKmpRpwtHyiSs/dWUpmiqAZ1pMDu6Dk3vMq8xqwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLcPT9uHz2USI+SKDakMGVpoIA43MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZWEx MDZiMS1kZjVlLTRmYjQtYmQ2NS01MTY3ZmY2ZGMxNzUvNDU4YTMwOTktYzFlMi0z ZmRmLWI0MjAtODBjOGZkNWM1MzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGVhMTA2YjEtZGY1ZS00ZmI0LWJk NjUtNTE2N2ZmNmRjMTc1LzhlYTEwNmIxLWRmNWUtNGZiNC1iZDY1LTUxNjdmZjZk YzE3NS5jcmwwHwYDVR0jBBgwFoAU1RjeFxV9nrrwXtYbIK19zaOYRQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZWExMDZiMS1kZjVlLTRmYjQtYmQ2NS01MTY3 ZmY2ZGMxNzUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAivcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAiPNNvWrICG5myUtg/cvLdgtvWF6TKFzii69Lnb/LT/Wep82kxpxN7ytq msu+z+tpJW0LGHJ/ZTm+erF8HCNpMsvWoQLRYR+RsaZdFBxI/13e65114aGpWhts SRaXibXwZXX0RVwuPxr2RChPCbVh4IBSkcCvbC0Hh2Pv+ESQTtICpShAIBMqMPwT jUzfBVjRevOZM4ESAA/tZ7qQFKQiZWAK8Jok+HLVpCqwNhzI5BIDI2ZyDH56HTBI MxKOiaym83DysNOtErsQyaGyyCPmXmArfNUac4PJdgUO1hsc42q7+upPsVAnpM7q fnFUi0ONYP0ewh14QIdJspnMS2JD6Q== -----END CERTIFICATE-----Generated at Tue Jul 1 15:58:22 2025 by rpki-client