$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fd1a8a6e-1567-3516-a6d6-884c0b6f5448.roa File: fd1a8a6e-1567-3516-a6d6-884c0b6f5448.roa (raw, json) Hash identifier: dNpH0cchmPOGd4MN50oUfMKwsYIgHUzdrnQD94+C5js= Subject key identifier: 4B:5E:67:EB:A5:00:D9:C0:84:5A:A4:7D:B2:6E:BC:1F:90:7A:A6:36 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC0164FBD1E17BBB91ABD3420 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fd1a8a6e-1567-3516-a6d6-884c0b6f5448.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 192.119.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:4f:bd:1e:17:bb:b9:1a:bd:34:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=c03be48f-8086-401c-9d5f-4c288ed42e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:cc:0c:67:8f:73:d6:e3:e8:cc:92:ca:97: f5:90:ce:41:95:70:e5:5e:79:e5:56:96:42:5b:cf: a4:4f:3f:1b:a2:cc:37:e9:71:9b:2e:21:5c:b5:b0: 73:29:bb:fc:04:fc:93:5d:b2:4a:9a:93:9f:2c:79: 52:77:b0:91:ff:16:36:51:ea:61:45:dd:c4:4e:00: ca:06:26:22:48:f5:0a:4c:ae:0d:a4:fe:08:c6:9f: cb:d7:43:33:ef:5c:01:b1:1c:b3:21:ad:54:ff:a0: b3:6f:8d:bb:98:be:4e:ae:7e:2b:5a:89:51:b6:31: 18:0c:ea:57:93:8d:fa:a6:56:d7:df:9c:07:ee:e3: d1:6e:49:3b:e7:cf:fb:d0:ca:f0:21:22:db:0b:d4: b2:11:96:22:a1:6c:66:a1:4d:31:16:81:d8:13:84: 48:96:72:69:63:b3:6d:9f:a0:f3:29:c9:b0:9f:fe: 55:ac:4d:19:ba:3b:3f:c1:78:5f:70:9a:92:f9:4f: 95:d8:74:c3:81:93:f8:31:91:c9:1d:40:c0:48:ac: 39:15:4c:8d:cf:0f:2b:1b:7d:cd:9d:4f:46:a0:78: 68:84:3f:9d:54:2d:da:c8:13:d7:58:0b:c5:9a:53: aa:39:2a:1e:b4:ae:d7:c9:79:ad:0d:6c:5a:12:40: e6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5E:67:EB:A5:00:D9:C0:84:5A:A4:7D:B2:6E:BC:1F:90:7A:A6:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fd1a8a6e-1567-3516-a6d6-884c0b6f5448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:cf:84:f4:c9:f3:8e:36:04:cb:f1:d1:5e:53:8b:30:ea:fb: 11:1a:ef:92:a4:82:02:2e:6b:90:73:d0:a2:73:2b:b5:52:cb: 92:60:b6:58:4d:5c:7b:4a:3c:d1:e4:94:ba:29:9e:a4:cd:07: 02:d2:75:17:99:7e:97:43:69:ca:6c:38:b8:da:d6:f6:37:85: 71:73:69:41:a8:ee:12:02:f6:bd:a3:28:e7:2f:d5:4d:76:3c: cd:bd:d6:4c:28:19:3d:f9:a1:09:5a:c4:0d:b4:db:ce:10:12: 57:7d:1d:ce:5f:4b:45:f5:6f:a0:37:19:a5:6b:75:e3:49:3c: df:29:3e:f5:44:80:11:f0:c6:36:69:76:58:83:71:0c:ac:63: a0:91:1f:4c:1d:f3:2c:22:09:93:85:2d:df:a2:f7:45:03:27: 3e:69:f5:5f:52:0e:09:34:48:da:60:fe:17:ae:2c:b0:5e:d0: 01:13:27:5a:a6:43:3f:f2:13:22:6f:7f:1b:a6:9d:27:5b:6c: d9:95:c5:8a:44:c6:e1:e7:76:05:50:37:35:f8:98:8e:4e:54: 18:1e:ca:52:fc:14:dd:ed:39:7a:35:4d:3f:cf:c0:48:6f:a7: 7f:41:51:e0:53:c5:34:c2:56:0f:da:48:c8:dc:66:38:f2:48: b9:2f:bc:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFk+9Hhe7uRq9NCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YzAzYmU0OGYtODA4Ni00MDFjLTlkNWYtNGMyODhlZDQyZTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBvMDGePc9bj6MySypf1kM5BlXDlXnnlVpZC W8+kTz8bosw36XGbLiFctbBzKbv8BPyTXbJKmpOfLHlSd7CR/xY2UephRd3ETgDK BiYiSPUKTK4NpP4Ixp/L10Mz71wBsRyzIa1U/6Czb427mL5Orn4rWolRtjEYDOpX k436plbX35wH7uPRbkk758/70MrwISLbC9SyEZYioWxmoU0xFoHYE4RIlnJpY7Nt n6DzKcmwn/5VrE0Zujs/wXhfcJqS+U+V2HTDgZP4MZHJHUDASKw5FUyNzw8rG33N nU9GoHhohD+dVC3ayBPXWAvFmlOqOSoetK7XyXmtDWxaEkDmswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEteZ+ulANnAhFqkfbJuvB+QeqY2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZmQxYThhNmUtMTU2Ny0z NTE2LWE2ZDYtODg0YzBiNmY1NDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTPhPTJ8442BMvx0V5TizDq+xEa75KkggIua5Bz0KJzK7VSy5JgtlhN XHtKPNHklLopnqTNBwLSdReZfpdDacpsOLja1vY3hXFzaUGo7hIC9r2jKOcv1U12 PM291kwoGT35oQlaxA20284QEld9Hc5fS0X1b6A3GaVrdeNJPN8pPvVEgBHwxjZp dliDcQysY6CRH0wd8ywiCZOFLd+i90UDJz5p9V9SDgk0SNpg/heuLLBe0AETJ1qm Qz/yEyJvfxumnSdbbNmVxYpExuHndgVQNzX4mI5OVBgeylL8FN3tOXo1TT/PwEhv p39BUeBTxTTCVg/aSMjcZjjySLkvvFc= -----END CERTIFICATE-----Generated at Thu Aug 7 00:32:38 2025 by rpki-client