$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa File: 5b65963c-d23f-31a3-b848-4132887683b8.roa (raw, json) Hash identifier: XHuYKmojyQxZ6LuvJlIiRikwyyNJ2C9QwFa3M66sDpk= Subject key identifier: B1:DE:A1:95:63:B5:22:87:16:F8:FD:2A:EF:EC:BF:29:DA:F1:63:FD Certificate issuer: /CN=c966e577-4964-41bf-aced-835168bef4f1 Certificate serial: 010D0C9F43285849E4EFB9A9FDDDC41A63B01F00 Authority key identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 395400 IP address blocks: 168.123.0.0/16 maxlen: 17 192.149.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:b9:a9:fd:dd:c4:1a:63:b0:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c966e577-4964-41bf-aced-835168bef4f1 Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=334082df-ed9d-493c-905c-16ed2f5d6cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d0:bb:46:86:85:86:50:95:82:49:39:31:4a: 03:a3:11:db:e1:3f:f9:4b:7f:ce:af:f9:46:b1:44: 64:fb:9e:c3:83:e9:97:9c:f8:71:52:ac:0f:9f:ff: 2d:25:65:ca:2d:d7:6c:4c:50:54:5c:3d:0d:5b:c8: a6:e8:cf:e2:29:77:97:a5:d6:24:22:7a:c4:3f:85: af:a6:9a:e3:56:5c:aa:2d:60:a0:25:7b:ec:84:9e: 47:c8:df:d8:36:c5:a2:cc:37:b9:f3:65:ab:63:5f: e9:10:57:a3:94:b1:4f:1e:1a:2d:ee:c8:a6:74:a3: db:fa:da:1f:1a:cf:16:74:a7:8f:ba:a8:f4:3a:c3: 08:36:8f:91:1c:7d:f3:b6:fb:75:2b:5f:77:56:0e: e0:68:6b:ab:07:04:a7:94:f6:a0:9e:0d:51:ca:b5: d3:fd:80:99:a5:7e:6d:e5:21:73:7f:3f:d9:07:c8: 24:fd:7e:67:a3:ca:db:01:67:68:ac:7b:9b:3f:34: 02:ce:f1:cd:a2:c7:a5:45:21:62:fb:76:f4:47:84: 87:d7:a7:3e:cf:6d:86:88:4b:47:7d:90:37:a3:fb: 69:e7:16:e1:a7:7a:39:96:8d:0f:86:18:f8:3d:3b: 06:cb:81:09:e2:38:10:54:1e:67:b9:0a:ec:6e:47: fe:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DE:A1:95:63:B5:22:87:16:F8:FD:2A:EF:EC:BF:29:DA:F1:63:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl X509v3 Authority Key Identifier: keyid:2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer sbgp-ipAddrBlock: critical IPv4: 168.123.0.0/16 192.149.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:0f:5f:4e:55:b0:9d:97:29:70:09:55:96:15:17:43:86:87: 35:63:ae:71:82:96:c6:e1:25:23:83:67:a2:b2:58:09:4c:cd: 3b:79:2c:c8:ad:e3:47:d2:2c:fa:f8:2a:fd:36:a0:ba:b0:f7: dd:e9:3d:2f:a3:02:c1:a4:c5:f4:10:0d:62:ef:ad:1f:f8:9d: c8:f7:70:f4:ac:07:8e:17:67:ea:a7:c6:06:f5:e6:24:c1:62: ec:14:09:37:c0:4b:15:0f:01:a1:b1:ac:fe:1b:56:e2:01:ee: 64:c1:5b:12:b4:d0:c5:6d:4f:9d:6e:93:ac:72:fc:2b:ab:c9: 91:9e:a4:ce:06:c2:c8:98:83:8f:b4:e1:47:a6:b5:c4:49:bd: 3b:35:44:af:14:d6:95:43:ff:c6:3a:6f:71:29:84:30:c4:55: 3d:6c:e9:7e:e7:14:8a:37:f5:59:aa:fd:b9:08:f6:b4:a3:43: 98:b6:07:f0:69:d1:bd:ed:e1:ee:ca:6c:cd:0a:c6:8e:05:aa: 69:58:24:92:f6:57:c7:0b:12:16:c5:28:72:ad:1f:53:04:92: 1f:d0:2e:48:fd:41:21:e7:20:13:3e:aa:ff:06:c2:49:c9:63: 96:2e:d7:7b:ed:a7:4b:bf:60:4e:d8:6e:db:aa:07:32:59:70: 8c:2a:ad:ab -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEnk77mp/d3EGmOwHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk2NmU1NzctNDk2NC00MWJmLWFjZWQtODM1MTY4YmVm NGYxMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk MzM0MDgyZGYtZWQ5ZC00OTNjLTkwNWMtMTZlZDJmNWQ2Y2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNC7RoaFhlCVgkk5MUoDoxHb4T/5S3/Or/lG sURk+57Dg+mXnPhxUqwPn/8tJWXKLddsTFBUXD0NW8im6M/iKXeXpdYkInrEP4Wv pprjVlyqLWCgJXvshJ5HyN/YNsWizDe582WrY1/pEFejlLFPHhot7simdKPb+tof Gs8WdKePuqj0OsMINo+RHH3ztvt1K193Vg7gaGurBwSnlPagng1RyrXT/YCZpX5t 5SFzfz/ZB8gk/X5no8rbAWdorHubPzQCzvHNoselRSFi+3b0R4SH16c+z22GiEtH fZA3o/tp5xbhp3o5lo0Phhj4PTsGy4EJ4jgQVB5nuQrsbkf+5wIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFLHeoZVjtSKHFvj9Ku/svyna8WP9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2 ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUxNjhiZWY0ZjEvNWI2NTk2M2MtZDIzZi0z MWEzLWI4NDgtNDEzMjg4NzY4M2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzk2NmU1NzctNDk2NC00MWJmLWFj ZWQtODM1MTY4YmVmNGYxL2M5NjZlNTc3LTQ5NjQtNDFiZi1hY2VkLTgzNTE2OGJl ZjRmMS5jcmwwHwYDVR0jBBgwFoAULQ3aREnxHebf8ZdH9KV9jx6KcV0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUx NjhiZWY0ZjEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAqHsDBADA lcowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAjA9fTlWwnZcpcAlVlhUXQ4aHNWOucYKWxuElI4NnorJYCUzN O3ksyK3jR9Is+vgq/TagurD33ek9L6MCwaTF9BANYu+tH/idyPdw9KwHjhdn6qfG BvXmJMFi7BQJN8BLFQ8BobGs/htW4gHuZMFbErTQxW1PnW6TrHL8K6vJkZ6kzgbC yJiDj7ThR6a1xEm9OzVErxTWlUP/xjpvcSmEMMRVPWzpfucUijf1War9uQj2tKND mLYH8GnRve3h7spszQrGjgWqaVgkkvZXxwsSFsUocq0fUwSSH9AuSP1BIecgEz6q /wbCScljli7Xe+2nS79gTthu26oHMllwjCqtqw== -----END CERTIFICATE-----Generated at Tue Jul 1 15:41:37 2025 by rpki-client