$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/b6e521a0-95ca-30cb-82ed-032fa6c59ee3.roa File: b6e521a0-95ca-30cb-82ed-032fa6c59ee3.roa (raw, json) Hash identifier: NMUACHx0fYrafgrkGkJGMnHQpmxta8KLWm8plHi2Mk8= Subject key identifier: 90:88:66:C0:00:80:D0:EA:BD:9D:99:F9:1F:A8:27:65:D2:AB:40:7D Certificate issuer: /CN=91625b8e-8d13-496f-b542-d170ffd5f3fa Certificate serial: 010D0C9F4328584A600FB602AA099C9548BDF580 Authority key identifier: 95:FB:5D:E7:EF:B4:C2:B8:11:C6:9D:03:8B:30:45:BC:DE:09:10:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/b6e521a0-95ca-30cb-82ed-032fa6c59ee3.roa Signing time: Tue 01 Jul 2025 15:30:01 +0000 ROA not before: Tue 01 Jul 2025 15:30:01 +0000 ROA not after: Mon 29 Sep 2025 15:30:01 +0000 asID: 5065 IP address blocks: 165.140.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:0f:b6:02:aa:09:9c:95:48:bd:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91625b8e-8d13-496f-b542-d170ffd5f3fa Validity Not Before: Jul 1 15:30:01 2025 GMT Not After : Sep 29 15:30:01 2025 GMT Subject: CN=0aa4e11f-aa19-4fb1-8b7b-fe307d18ec6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:a5:93:32:a1:dd:06:04:ea:fe:51:03:dd: 43:fe:81:35:10:21:c0:1f:ba:90:3c:83:65:f6:71: 66:5b:83:7d:19:2a:ac:f8:87:54:39:25:51:af:b3: bd:02:ef:44:f3:0f:56:9e:fa:69:f7:8b:4d:dc:1c: 2a:60:f1:2d:b1:d2:c2:ab:bf:69:96:a2:d6:33:79: e2:e4:96:59:06:06:13:0e:12:4c:58:b6:d6:25:9c: 40:2d:38:c1:e9:28:00:fa:c4:e5:41:8b:c5:7d:46: 8e:3f:5a:6a:9a:55:42:31:97:58:d2:17:6b:84:f4: 73:06:f8:69:ef:6f:ac:6e:05:fb:2a:8f:c7:82:8d: d0:05:40:74:e7:92:7c:93:29:a0:29:6b:d7:0d:f0: ca:83:aa:06:43:d1:5e:7f:55:9c:d9:59:e2:31:cd: 0f:51:2e:54:bb:70:55:29:2f:29:2a:b0:0f:23:d8: 52:09:27:52:a2:88:6d:a0:e9:22:f7:a9:6d:14:d8: f5:ed:d6:f4:02:0d:41:71:80:52:96:cc:16:4b:92: d5:89:b6:6b:e6:62:c5:ca:3d:ba:dd:9f:60:8a:c2: bc:33:3f:f5:4b:b8:8a:94:11:44:5e:8d:c1:56:52: 0b:22:a8:76:80:1b:48:19:88:79:e3:23:25:2b:12: c4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:88:66:C0:00:80:D0:EA:BD:9D:99:F9:1F:A8:27:65:D2:AB:40:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/b6e521a0-95ca-30cb-82ed-032fa6c59ee3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.crl X509v3 Authority Key Identifier: keyid:95:FB:5D:E7:EF:B4:C2:B8:11:C6:9D:03:8B:30:45:BC:DE:09:10:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer sbgp-ipAddrBlock: critical IPv4: 165.140.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:68:0d:23:fa:84:93:15:3b:32:62:10:44:25:1b:c9:84:eb: d4:83:7a:34:c3:5c:79:2d:91:2a:6f:70:8e:e7:88:79:ab:fc: f6:37:c6:91:5e:c1:7b:d8:07:69:46:94:ee:9e:26:18:96:b3: cb:9f:fc:83:95:9b:f8:55:8c:a8:3b:94:b3:f9:19:99:60:6c: ca:58:e9:d6:2f:a5:c5:72:fb:3a:40:40:d9:66:2e:b6:8a:8a: 1d:f2:0f:c1:86:89:99:1f:15:e4:34:72:f3:e5:1e:25:72:dd: 02:b9:62:ab:72:21:c5:be:4a:45:eb:27:be:fb:bb:9a:0b:3f: 0c:f2:c8:84:31:06:00:71:37:30:ee:96:e5:68:d3:d6:34:84: 9a:ea:1e:6b:7c:a9:df:84:0c:87:fa:b6:79:e3:23:8c:6f:3b: 7c:17:9e:8d:dc:d8:a6:62:f5:80:34:22:4f:0b:f0:39:34:81: 71:85:79:ce:c8:57:57:8f:8d:83:74:f0:4f:9c:eb:c4:46:fd: 5c:83:5e:ac:68:cc:50:9c:18:1e:87:15:cb:08:34:fc:21:7c: 81:0e:78:ce:c4:90:cf:fc:32:9c:1f:a5:47:48:37:6b:16:44: a8:89:45:33:98:99:00:b7:74:0a:c3:e8:93:bd:b0:db:f9:1c: 07:6c:be:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpgD7YCqgmclUi99YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE2MjViOGUtOGQxMy00OTZmLWI1NDItZDE3MGZmZDVm M2ZhMB4XDTI1MDcwMTE1MzAwMVoXDTI1MDkyOTE1MzAwMVowLzEtMCsGA1UEAxMk MGFhNGUxMWYtYWExOS00ZmIxLThiN2ItZmUzMDdkMThlYzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKilkzKh3QYE6v5RA91D/oE1ECHAH7qQPINl 9nFmW4N9GSqs+IdUOSVRr7O9Au9E8w9Wnvpp94tN3BwqYPEtsdLCq79plqLWM3ni 5JZZBgYTDhJMWLbWJZxALTjB6SgA+sTlQYvFfUaOP1pqmlVCMZdY0hdrhPRzBvhp 72+sbgX7Ko/Hgo3QBUB055J8kymgKWvXDfDKg6oGQ9Fef1Wc2VniMc0PUS5Uu3BV KS8pKrAPI9hSCSdSoohtoOki96ltFNj17db0Ag1BcYBSlswWS5LVibZr5mLFyj26 3Z9gisK8Mz/1S7iKlBFEXo3BVlILIqh2gBtIGYh54yMlKxLEaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCIZsAAgNDqvZ2Z+R+oJ2XSq0B9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85MTYy NWI4ZS04ZDEzLTQ5NmYtYjU0Mi1kMTcwZmZkNWYzZmEvYjZlNTIxYTAtOTVjYS0z MGNiLTgyZWQtMDMyZmE2YzU5ZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTE2MjViOGUtOGQxMy00OTZmLWI1 NDItZDE3MGZmZDVmM2ZhLzkxNjI1YjhlLThkMTMtNDk2Zi1iNTQyLWQxNzBmZmQ1 ZjNmYS5jcmwwHwYDVR0jBBgwFoAUlftd5++0wrgRxp0DizBFvN4JEKswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy85MTYyNWI4ZS04ZDEzLTQ5NmYtYjU0Mi1kMTcw ZmZkNWYzZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYzBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZoDSP6hJMVOzJiEEQlG8mE69SDejTDXHktkSpvcI7niHmr/PY3xpFe wXvYB2lGlO6eJhiWs8uf/IOVm/hVjKg7lLP5GZlgbMpY6dYvpcVy+zpAQNlmLraK ih3yD8GGiZkfFeQ0cvPlHiVy3QK5YqtyIcW+SkXrJ777u5oLPwzyyIQxBgBxNzDu luVo09Y0hJrqHmt8qd+EDIf6tnnjI4xvO3wXno3c2KZi9YA0Ik8L8Dk0gXGFec7I V1ePjYN08E+c68RG/VyDXqxozFCcGB6HFcsINPwhfIEOeM7EkM/8MpwfpUdIN2sW RKiJRTOYmQC3dArD6JO9sNv5HAdsvlE= -----END CERTIFICATE-----Generated at Thu Jul 3 23:18:03 2025 by rpki-client