$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/0921fd38-7f09-3761-bb31-ec250eef6f0d.roa File: 0921fd38-7f09-3761-bb31-ec250eef6f0d.roa (raw, json) Hash identifier: 8Y7oo32ucmKiHqi+cBc8pY50fU/B2l5HswQmW3F94H8= Subject key identifier: AC:85:33:A2:33:78:CA:A2:84:CE:14:97:D0:8F:46:0C:AF:7D:D3:76 Certificate issuer: /CN=2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8 Certificate serial: 010D0C9F4328584A11FDF6D126F78E3792DD1300 Authority key identifier: 1A:DB:5B:87:D8:5E:F0:10:8D:94:FC:D7:A4:32:DB:2A:41:88:05:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/0921fd38-7f09-3761-bb31-ec250eef6f0d.roa Signing time: Tue 03 Jun 2025 16:21:13 +0000 ROA not before: Tue 03 Jun 2025 16:21:13 +0000 ROA not after: Mon 01 Sep 2025 16:21:13 +0000 asID: 393873 IP address blocks: 192.138.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:fd:f6:d1:26:f7:8e:37:92:dd:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8 Validity Not Before: Jun 3 16:21:13 2025 GMT Not After : Sep 1 16:21:13 2025 GMT Subject: CN=1e21da44-7d85-45ab-bcbf-918d47c78d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:e0:60:85:fe:3c:ce:54:1f:2b:6b:28:29: 5a:d0:1c:49:d9:1d:24:c1:25:95:fb:74:f6:49:1c: 12:1b:53:8e:90:ce:af:f1:9d:a2:eb:54:d3:2e:df: 48:87:a0:67:bf:03:79:06:40:bb:b4:8c:67:ad:92: 71:e6:36:da:3e:42:59:51:92:d3:9f:9c:17:94:3e: ab:94:3b:28:b7:89:24:8d:8e:bc:86:2a:78:a6:fb: 05:ec:15:a3:aa:60:96:e0:c0:cd:61:93:b2:ce:fe: 10:20:a2:7c:fb:68:5e:fd:4e:4a:52:7a:b9:0b:49: 3c:94:ff:aa:08:14:36:8a:4d:18:ec:ea:70:96:73: d9:1a:0b:5c:a2:7e:4b:e2:c8:ee:34:31:0d:a2:12: 32:24:6f:7f:fb:b9:95:13:c1:1f:35:bb:56:b0:a3: 71:c7:2c:63:86:55:4e:76:1d:44:f8:42:00:58:fc: 58:c2:36:8b:72:92:5a:06:79:81:7c:b6:f7:81:6a: 14:c2:a2:b4:ba:4c:8e:12:4e:2b:03:1e:07:20:00: fb:f1:cf:d1:ee:73:1a:5e:e5:4b:6a:ce:15:bf:05: 40:61:f9:60:12:e6:8b:5d:0a:e0:11:b6:85:61:db: 9a:8f:7a:43:e8:ec:69:4a:62:58:34:39:8c:c7:9c: ee:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:85:33:A2:33:78:CA:A2:84:CE:14:97:D0:8F:46:0C:AF:7D:D3:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/0921fd38-7f09-3761-bb31-ec250eef6f0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.crl X509v3 Authority Key Identifier: keyid:1A:DB:5B:87:D8:5E:F0:10:8D:94:FC:D7:A4:32:DB:2A:41:88:05:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c6efa33-5ca2-4b35-8f63-29ef2ff3abf8.cer sbgp-ipAddrBlock: critical IPv4: 192.138.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:27:ff:e3:0d:ef:e7:45:a9:88:6e:73:1a:3e:9d:1b:06:ac: 79:3f:f9:a3:c8:c7:dd:a7:ad:74:ea:fb:ac:f2:7a:30:35:fd: 6e:4e:e3:fd:68:75:a7:41:97:4d:06:f4:9d:97:85:a4:ad:55: 5c:6a:e2:d8:a1:dd:f6:cd:db:29:1e:7e:22:8a:b5:bb:89:24: 0d:6b:15:c3:e6:69:18:d9:1d:d5:fe:4b:c7:f9:d5:a8:66:96: e4:f1:33:ec:d8:a3:d7:80:15:84:c0:47:71:92:76:59:d0:e0: cc:83:fc:ca:ba:42:bc:ca:61:8d:36:9b:d3:b3:c0:17:36:ea: 0e:6f:ce:d2:f9:8e:31:e2:4e:9d:a1:b9:22:6d:62:0f:ea:5c: 62:60:4f:f1:64:4d:53:3e:de:bc:2e:fb:4a:2e:54:79:75:d6: 29:7f:3c:6d:84:60:6f:0c:81:6c:16:7b:1a:8c:b1:55:00:47: ed:c6:4d:0c:b3:cf:17:46:e6:01:65:0d:32:6a:16:c2:e7:67: ca:c6:85:9c:30:d6:cf:79:1b:44:1a:a3:b9:a4:49:39:8e:0c: 56:df:6e:58:0b:46:1c:f8:b5:83:8b:63:8e:fa:c6:a9:69:e8: af:00:52:d0:40:89:4e:93:84:17:9c:40:27:21:64:eb:e1:3c: 31:a2:76:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoR/fbRJveON5LdEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmM2ZWZhMzMtNWNhMi00YjM1LThmNjMtMjllZjJmZjNh YmY4MB4XDTI1MDYwMzE2MjExM1oXDTI1MDkwMTE2MjExM1owLzEtMCsGA1UEAxMk MWUyMWRhNDQtN2Q4NS00NWFiLWJjYmYtOTE4ZDQ3Yzc4ZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF/gYIX+PM5UHytrKCla0BxJ2R0kwSWV+3T2 SRwSG1OOkM6v8Z2i61TTLt9Ih6BnvwN5BkC7tIxnrZJx5jbaPkJZUZLTn5wXlD6r lDsot4kkjY68hip4pvsF7BWjqmCW4MDNYZOyzv4QIKJ8+2he/U5KUnq5C0k8lP+q CBQ2ik0Y7OpwlnPZGgtcon5L4sjuNDENohIyJG9/+7mVE8EfNbtWsKNxxyxjhlVO dh1E+EIAWPxYwjaLcpJaBnmBfLb3gWoUwqK0ukyOEk4rAx4HIAD78c/R7nMaXuVL as4VvwVAYflgEuaLXQrgEbaFYduaj3pD6OxpSmJYNDmMx5zu8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyFM6IzeMqihM4Ul9CPRgyvfdN2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYzZl ZmEzMy01Y2EyLTRiMzUtOGY2My0yOWVmMmZmM2FiZjgvMDkyMWZkMzgtN2YwOS0z NzYxLWJiMzEtZWMyNTBlZWY2ZjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmM2ZWZhMzMtNWNhMi00YjM1LThm NjMtMjllZjJmZjNhYmY4LzJjNmVmYTMzLTVjYTItNGIzNS04ZjYzLTI5ZWYyZmYz YWJmOC5jcmwwHwYDVR0jBBgwFoAUGttbh9he8BCNlPzXpDLbKkGIBSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYzZlZmEzMy01Y2EyLTRiMzUtOGY2My0yOWVm MmZmM2FiZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgn/+MN7+dFqYhucxo+nRsGrHk/+aPIx92nrXTq+6zyejA1/W5O4/1o dadBl00G9J2XhaStVVxq4tih3fbN2ykefiKKtbuJJA1rFcPmaRjZHdX+S8f51ahm luTxM+zYo9eAFYTAR3GSdlnQ4MyD/Mq6QrzKYY02m9OzwBc26g5vztL5jjHiTp2h uSJtYg/qXGJgT/FkTVM+3rwu+0ouVHl11il/PG2EYG8MgWwWexqMsVUAR+3GTQyz zxdG5gFlDTJqFsLnZ8rGhZww1s95G0Qao7mkSTmODFbfblgLRhz4tYOLY476xqlp 6K8AUtBAiU6ThBecQCchZOvhPDGidqE= -----END CERTIFICATE-----Generated at Tue Jun 17 16:21:25 2025 by rpki-client