$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e01c1f4a-b4a3-3636-a0d0-2c65c74ac94c.roa File: e01c1f4a-b4a3-3636-a0d0-2c65c74ac94c.roa (raw, json) Hash identifier: BWuLJ/7febBzgkJVmqqdgUqBddnuzM3sCxJoOjSbZqY= Subject key identifier: 73:E6:E2:E5:97:AD:4E:BC:B0:88:4D:67:86:BF:AE:D5:F9:D8:3D:9D Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A1B600183E81F75321A73F440 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e01c1f4a-b4a3-3636-a0d0-2c65c74ac94c.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 7018 IP address blocks: 138.229.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:01:83:e8:1f:75:32:1a:73:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=43dd529c-4378-4def-948e-df81338f3212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9f:cf:43:a5:ff:2e:e7:2f:ef:98:db:c0:27: f8:62:db:2d:dc:b2:a1:44:ec:d7:49:ce:56:99:2f: 9f:89:f5:06:71:81:0c:14:da:4a:2a:5c:ff:52:7e: b0:45:32:7e:68:b9:2a:3a:72:0d:fb:cc:8a:0e:35: e1:d6:23:c7:28:ba:b1:8f:c6:b5:8e:74:71:b9:60: 23:cb:ef:6c:fb:e6:82:00:7e:c1:3a:e8:24:c2:35: 57:58:40:03:12:70:ee:7c:85:5d:d9:79:96:46:12: 2c:6e:65:4b:bc:f3:b7:19:20:80:f2:84:e7:d6:2d: 5e:5f:ed:a7:68:62:00:7f:15:6d:90:fa:94:55:9d: e2:1d:de:9d:c7:d1:c6:6e:91:24:94:a2:2b:4e:fb: a3:98:38:80:e5:01:83:6b:95:61:ce:22:8f:bc:69: 5c:57:20:74:f1:c0:4a:83:4b:fb:af:be:7a:5a:81: ad:b9:7f:05:69:c7:14:9c:b4:dc:ac:4d:b1:f1:df: b6:e1:00:78:f1:30:c6:2f:92:5f:44:dd:0f:2c:cd: 91:06:1f:02:b1:8e:d2:80:f9:55:2a:39:55:9b:64: ed:66:cb:c9:f8:9c:8a:23:42:ab:b2:60:5b:d6:07: 38:f6:9f:22:4c:f2:39:a9:a6:ef:21:7f:52:e6:e6: 19:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E6:E2:E5:97:AD:4E:BC:B0:88:4D:67:86:BF:AE:D5:F9:D8:3D:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e01c1f4a-b4a3-3636-a0d0-2c65c74ac94c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 138.229.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a5:37:4c:e4:8c:25:20:22:1d:01:24:ed:5e:52:e7:d0:85: 13:93:f6:73:e3:56:82:c9:e4:b9:6b:1d:d2:e4:8e:e3:f6:30: 3b:de:8f:bf:e2:22:03:e2:8f:fb:9f:ae:98:af:c3:5f:4e:30: 00:5c:ba:15:d4:21:98:40:37:a1:fe:41:71:ec:e0:39:7f:78: a5:18:65:a2:3a:8e:91:87:32:1d:18:0f:02:a9:2e:d7:4d:34: 38:d6:c0:c6:e3:bc:98:af:de:f0:86:b3:56:98:0f:7d:50:98: 95:fe:89:4d:55:65:57:40:fb:93:30:ad:36:31:24:2d:ec:2f: 7e:00:74:06:d9:c5:7a:77:51:73:75:1e:7b:e2:da:53:2f:38: 9a:70:d1:31:a6:2a:10:35:2a:f8:c1:66:8e:c0:cb:2f:a3:1c: 84:4c:80:15:37:be:3b:5a:ba:9f:24:1c:72:3a:17:bc:2b:45: 7f:16:aa:4b:7b:e4:7b:aa:de:4e:a9:a0:7e:b9:09:4d:1e:3b: 10:93:28:2e:4a:35:a2:c0:c9:10:8a:4a:b4:25:33:d1:72:d1: 4b:66:c2:5e:fa:84:98:a5:72:e8:36:4f:f0:2d:35:f8:76:c8: 8d:8f:02:d5:19:32:51:ab:42:08:80:54:b7:4c:49:84:15:99: 1e:f4:06:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYAGD6B91Mhpz9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk NDNkZDUyOWMtNDM3OC00ZGVmLTk0OGUtZGY4MTMzOGYzMjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp/PQ6X/Lucv75jbwCf4Ytst3LKhROzXSc5W mS+fifUGcYEMFNpKKlz/Un6wRTJ+aLkqOnIN+8yKDjXh1iPHKLqxj8a1jnRxuWAj y+9s++aCAH7BOugkwjVXWEADEnDufIVd2XmWRhIsbmVLvPO3GSCA8oTn1i1eX+2n aGIAfxVtkPqUVZ3iHd6dx9HGbpEklKIrTvujmDiA5QGDa5VhziKPvGlcVyB08cBK g0v7r756WoGtuX8FaccUnLTcrE2x8d+24QB48TDGL5JfRN0PLM2RBh8CsY7SgPlV KjlVm2TtZsvJ+JyKI0KrsmBb1gc49p8iTPI5qabvIX9S5uYZmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPm4uWXrU68sIhNZ4a/rtX52D2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZTAxYzFmNGEtYjRhMy0z NjM2LWEwZDAtMmM2NWM3NGFjOTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqlN0zkjCUgIh0BJO1eUufQhROT9nPjVoLJ5LlrHdLkjuP2MDvej7/i IgPij/ufrpivw19OMABcuhXUIZhAN6H+QXHs4Dl/eKUYZaI6jpGHMh0YDwKpLtdN NDjWwMbjvJiv3vCGs1aYD31QmJX+iU1VZVdA+5MwrTYxJC3sL34AdAbZxXp3UXN1 Hnvi2lMvOJpw0TGmKhA1KvjBZo7Ayy+jHIRMgBU3vjtaup8kHHI6F7wrRX8Wqkt7 5Huq3k6poH65CU0eOxCTKC5KNaLAyRCKSrQlM9Fy0Utmwl76hJilcug2T/AtNfh2 yI2PAtUZMlGrQgiAVLdMSYQVmR70Bl8= -----END CERTIFICATE-----Generated at Tue Jul 1 16:44:14 2025 by rpki-client