$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/8f05e2d7-c724-30d1-8222-b8d4dca649bc.roa File: 8f05e2d7-c724-30d1-8222-b8d4dca649bc.roa (raw, json) Hash identifier: ZXAt+2DsMyGhtc+1wc06rWvLzVIYR6FQZRBwj2Wq/34= Subject key identifier: AE:F9:65:F8:3A:4E:32:8F:12:0B:F6:46:E6:C8:B3:06:E9:16:4A:55 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584A3A1587F68D912D22B25531C0 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/8f05e2d7-c724-30d1-8222-b8d4dca649bc.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 399275 IP address blocks: 165.140.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:87:f6:8d:91:2d:22:b2:55:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=74417d1f-1946-42f7-8040-34e8bfeac87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7f:cd:34:8d:67:c3:ab:96:24:2d:13:dd:c4: f3:32:e6:a0:df:5c:31:da:9a:8b:48:e0:55:6e:45: a6:6c:22:52:c2:8b:2e:b8:62:28:7a:b3:7c:e8:fb: a5:18:be:2d:cf:5c:9a:4f:c5:77:0b:e3:b5:53:f4: bb:60:d9:23:7c:6b:48:e1:5d:a4:f6:01:3e:63:9a: da:4c:69:ed:ef:7d:4c:1c:df:b1:4d:be:89:8b:c0: af:a3:9a:d1:7e:15:30:a0:d5:40:30:d7:a2:ac:83: 92:dc:ea:b2:e5:8e:e0:55:6c:cd:91:ec:af:a4:96: a3:43:ac:75:55:f4:f4:b7:3f:ed:72:99:a8:e6:b4: b8:c8:46:36:a7:0f:7d:c2:d5:ff:40:c6:aa:64:42: f6:38:e1:84:1b:a2:24:b1:94:47:da:a6:53:e8:3c: 80:55:bd:1f:df:da:2f:17:e0:e4:88:7e:b5:53:28: d3:28:94:d9:6a:c3:7c:96:d1:59:db:c0:e6:1d:d8: 34:00:8a:ba:8e:93:69:16:c1:de:36:a7:97:ef:96: 44:20:aa:21:b3:e3:0d:e5:3d:59:d3:82:48:d8:23: 54:a0:6a:de:c6:f3:a6:11:14:3c:d7:78:5e:6a:09: e4:91:74:46:56:18:5a:85:54:b4:25:f0:f6:fa:4b: a9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F9:65:F8:3A:4E:32:8F:12:0B:F6:46:E6:C8:B3:06:E9:16:4A:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/8f05e2d7-c724-30d1-8222-b8d4dca649bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 165.140.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:44:32:25:7e:28:9c:77:8d:86:20:89:5b:ff:d5:a0:d4:31: de:f2:85:80:f4:75:57:20:61:66:a5:c5:57:31:40:64:06:89: de:d7:12:24:4c:7a:28:d5:c7:8c:b7:fb:da:53:ad:bb:24:57: 2e:0f:5f:08:65:73:7f:96:1b:00:18:fc:54:db:e2:c3:f9:7b: 89:c4:ba:9b:7e:ba:50:10:c4:37:60:6a:dc:7e:5a:2e:0f:15: 92:2d:73:ab:44:9c:76:45:e0:53:08:1f:0d:5e:f6:89:98:f4: d4:2b:d6:a8:47:96:13:45:06:8e:1f:db:c0:9f:d3:95:3b:80: 87:ce:a2:53:e2:df:19:e3:e3:66:7c:0d:43:79:b4:a8:1d:62: a1:f1:3f:e8:b5:d5:db:a5:0e:63:53:02:ac:b6:91:5e:9d:f5: b9:80:02:dd:a6:9e:4b:7d:51:14:ee:d1:05:fa:1f:17:47:1f: 44:62:d1:13:e3:e9:d5:8b:04:3e:9e:97:73:1e:86:60:7a:a8: 09:54:f3:90:db:2a:1a:44:9c:d1:cf:cb:27:03:de:63:f7:3e: a0:5d:ab:70:e6:0d:29:c9:24:49:82:dc:e5:6b:66:83:41:10: d4:5e:16:5f:dc:9e:01:64:44:d4:7a:b7:5b:5f:dc:50:22:d5: 79:dc:d3:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FYf2jZEtIrJVMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk NzQ0MTdkMWYtMTk0Ni00MmY3LTgwNDAtMzRlOGJmZWFjODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH/NNI1nw6uWJC0T3cTzMuag31wx2pqLSOBV bkWmbCJSwosuuGIoerN86PulGL4tz1yaT8V3C+O1U/S7YNkjfGtI4V2k9gE+Y5ra TGnt731MHN+xTb6Ji8Cvo5rRfhUwoNVAMNeirIOS3Oqy5Y7gVWzNkeyvpJajQ6x1 VfT0tz/tcpmo5rS4yEY2pw99wtX/QMaqZEL2OOGEG6IksZRH2qZT6DyAVb0f39ov F+DkiH61UyjTKJTZasN8ltFZ28DmHdg0AIq6jpNpFsHeNqeX75ZEIKohs+MN5T1Z 04JI2CNUoGrexvOmERQ813heagnkkXRGVhhahVS0JfD2+kupXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK75Zfg6TjKPEgv2RubIswbpFkpVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvOGYwNWUyZDctYzcyNC0z MGQxLTgyMjItYjhkNGRjYTY0OWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYx1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZEMiV+KJx3jYYgiVv/1aDUMd7yhYD0dVcgYWalxVcxQGQGid7XEiRM eijVx4y3+9pTrbskVy4PXwhlc3+WGwAY/FTb4sP5e4nEupt+ulAQxDdgatx+Wi4P FZItc6tEnHZF4FMIHw1e9omY9NQr1qhHlhNFBo4f28Cf05U7gIfOolPi3xnj42Z8 DUN5tKgdYqHxP+i11dulDmNTAqy2kV6d9bmAAt2mnkt9URTu0QX6HxdHH0Ri0RPj 6dWLBD6el3MehmB6qAlU85DbKhpEnNHPyycD3mP3PqBdq3DmDSnJJEmC3OVrZoNB ENReFl/cngFkRNR6t1tf3FAi1Xnc0w4= -----END CERTIFICATE-----Generated at Mon Jun 30 01:29:34 2025 by rpki-client