$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/d38b303a-920e-3f94-8e2a-efd3d1740358.roa File: d38b303a-920e-3f94-8e2a-efd3d1740358.roa (raw, json) Hash identifier: yRrnKgezXHzEdQnyT0Ty5hn4zMjGhlGrqPdGXs0hvHo= Subject key identifier: D8:4C:C0:7E:AE:B2:24:B9:6A:34:74:E5:A7:4E:1F:B4:4E:B5:79:AA Certificate issuer: /CN=17e4ef75-3d46-4caf-8049-ad96976a0262 Certificate serial: 010D0C9F4328584AF52136AC971AE568AD747080 Authority key identifier: 32:C4:FB:81:42:25:F1:FC:F9:36:0D:0A:80:E1:39:98:2F:BF:F1:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/d38b303a-920e-3f94-8e2a-efd3d1740358.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 400062 IP address blocks: 165.140.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/17e4ef75-3d46-4caf-8049-ad96976a0262.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/17e4ef75-3d46-4caf-8049-ad96976a0262.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:36:ac:97:1a:e5:68:ad:74:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17e4ef75-3d46-4caf-8049-ad96976a0262 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=d019ca24-63ab-466e-8897-5fc883d06977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f3:a4:c7:c5:d2:93:7f:3d:39:70:6d:fd:74: 67:cd:c2:7c:bb:be:79:fd:74:91:29:6b:12:97:d3: a3:29:b7:09:91:23:dc:a1:9d:c4:39:a5:8d:a9:f1: 3f:09:2e:92:f0:9c:34:2c:7c:3a:4d:20:1a:9a:2a: db:69:2d:79:c4:61:d6:f1:86:75:44:5c:09:9d:7e: b2:6e:37:75:c4:c0:5d:b9:d0:be:9c:cb:94:08:1c: 8e:c4:58:e8:65:a5:ab:7c:7e:f6:e7:87:f1:06:36: ef:41:26:8f:cb:80:b1:6d:ab:da:c8:bb:71:f3:14: a5:34:5f:1b:d1:ab:50:64:3b:ec:80:9b:b6:85:37: 89:7b:81:cb:e4:f0:64:65:22:5e:d7:49:96:7c:c6: 22:82:1f:ea:92:93:b2:c3:9f:6d:47:dc:87:d3:ad: 99:ca:74:42:58:84:b9:39:0c:9e:10:c8:eb:99:c8: 6e:9d:6b:52:1a:00:f0:7c:99:be:8f:a3:c9:52:d6: 8a:0c:b7:76:38:88:f0:bd:64:92:cf:96:b4:a2:1f: aa:d7:d6:9f:1e:f4:d3:98:5e:88:50:6d:ae:04:c7: e8:a9:52:e3:79:77:ac:92:13:b0:5e:a1:4b:95:6f: f1:ff:eb:b8:9b:f2:ff:d4:19:ec:1e:b4:59:d6:18: f4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4C:C0:7E:AE:B2:24:B9:6A:34:74:E5:A7:4E:1F:B4:4E:B5:79:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/d38b303a-920e-3f94-8e2a-efd3d1740358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/17e4ef75-3d46-4caf-8049-ad96976a0262.crl X509v3 Authority Key Identifier: keyid:32:C4:FB:81:42:25:F1:FC:F9:36:0D:0A:80:E1:39:98:2F:BF:F1:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262.cer sbgp-ipAddrBlock: critical IPv4: 165.140.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:76:ca:56:ac:fe:87:8f:f2:36:3b:c6:a6:48:d9:48:b4:c4: 46:a5:4e:3c:21:b9:8e:4d:cb:8e:fe:7a:d4:fc:45:7c:18:92: d9:38:fa:fd:2a:48:92:df:3f:fc:8e:50:b9:eb:78:6c:12:b6: 80:fa:c5:58:71:3a:d1:e7:de:c9:25:77:d6:d5:c2:f2:8b:32: f3:58:e2:69:e9:ef:ff:52:fb:fc:92:aa:46:14:aa:ce:27:48: 48:35:70:04:3e:04:90:b8:32:aa:e6:c9:09:85:50:85:40:6c: 64:60:6b:de:35:38:82:09:97:b9:96:9a:4d:17:1f:a9:08:52: 5e:93:4e:35:9d:30:72:41:c3:d6:a8:8f:19:83:02:bb:b9:17: 8b:ce:97:fc:df:19:ae:0f:3b:bb:14:ef:bf:33:5c:a0:9b:da: 2c:af:de:3c:5e:c1:e7:b1:85:70:2e:81:b1:94:06:5a:87:68: fa:ae:9b:a8:74:99:82:a3:38:d1:6e:83:ad:03:bd:71:1b:49: 7b:ce:1e:6c:dc:23:2b:6b:de:19:c7:43:13:fb:be:ba:05:e8: 3d:ff:14:0e:b3:4a:1b:81:57:62:a8:40:15:af:c7:58:dc:22: d2:d2:83:57:db:0a:01:79:22:8a:ae:cb:2e:a3:3a:18:ca:50: c5:bd:5e:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ITaslxrlaK10cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdlNGVmNzUtM2Q0Ni00Y2FmLTgwNDktYWQ5Njk3NmEw MjYyMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDAxOWNhMjQtNjNhYi00NjZlLTg4OTctNWZjODgzZDA2OTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/Okx8XSk389OXBt/XRnzcJ8u755/XSRKWsS l9OjKbcJkSPcoZ3EOaWNqfE/CS6S8Jw0LHw6TSAamirbaS15xGHW8YZ1RFwJnX6y bjd1xMBdudC+nMuUCByOxFjoZaWrfH7254fxBjbvQSaPy4CxbavayLtx8xSlNF8b 0atQZDvsgJu2hTeJe4HL5PBkZSJe10mWfMYigh/qkpOyw59tR9yH062ZynRCWIS5 OQyeEMjrmchunWtSGgDwfJm+j6PJUtaKDLd2OIjwvWSSz5a0oh+q19afHvTTmF6I UG2uBMfoqVLjeXeskhOwXqFLlW/x/+u4m/L/1BnsHrRZ1hj0NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhMwH6usiS5ajR05adOH7ROtXmqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xN2U0 ZWY3NS0zZDQ2LTRjYWYtODA0OS1hZDk2OTc2YTAyNjIvZDM4YjMwM2EtOTIwZS0z Zjk0LThlMmEtZWZkM2QxNzQwMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTdlNGVmNzUtM2Q0Ni00Y2FmLTgw NDktYWQ5Njk3NmEwMjYyLzE3ZTRlZjc1LTNkNDYtNGNhZi04MDQ5LWFkOTY5NzZh MDI2Mi5jcmwwHwYDVR0jBBgwFoAUMsT7gUIl8fz5Ng0KgOE5mC+/8WUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xN2U0ZWY3NS0zZDQ2LTRjYWYtODA0OS1hZDk2 OTc2YTAyNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAER2ylas/oeP8jY7xqZI2Ui0xEalTjwhuY5Ny47+etT8RXwYktk4+v0q SJLfP/yOULnreGwStoD6xVhxOtHn3skld9bVwvKLMvNY4mnp7/9S+/ySqkYUqs4n SEg1cAQ+BJC4MqrmyQmFUIVAbGRga941OIIJl7mWmk0XH6kIUl6TTjWdMHJBw9ao jxmDAru5F4vOl/zfGa4PO7sU778zXKCb2iyv3jxeweexhXAugbGUBlqHaPqum6h0 mYKjONFug60DvXEbSXvOHmzcIytr3hnHQxP7vroF6D3/FA6zShuBV2KoQBWvx1jc ItLSg1fbCgF5Ioquyy6jOhjKUMW9XrI= -----END CERTIFICATE-----Generated at Sun Aug 24 03:18:51 2025 by rpki-client