$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/2590afa5-22aa-3adc-92a6-2dc4e6df1ce2.roa File: 2590afa5-22aa-3adc-92a6-2dc4e6df1ce2.roa (raw, json) Hash identifier: ETK1Y4QivnN+nDj1c41+6EjdSzRwP+WY7dhg6AHqhCY= Subject key identifier: 07:34:6B:43:29:7B:2B:5E:2A:B3:04:A5:BC:6C:65:A3:1E:4E:B2:A7 Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584A5FC5E7931ACEC04970A1CF80 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/2590afa5-22aa-3adc-92a6-2dc4e6df1ce2.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 14618 IP address blocks: 192.161.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e7:93:1a:ce:c0:49:70:a1:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=5d4fd409-80b7-4707-b1f4-4e3a34f8a825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1d:1b:0a:01:c5:2e:9a:32:1c:3e:3a:df:4d: 44:bc:e1:99:ef:79:a6:5c:b6:79:c7:30:65:3f:d2: 4f:ec:a1:b1:79:90:7b:30:f3:4c:70:c1:61:8c:d4: bd:48:c2:cd:65:cf:86:b4:2c:e8:38:70:29:a1:f8: 20:37:3b:4a:b6:55:bc:21:dc:41:15:25:be:2e:d8: e8:87:8e:66:5e:7b:60:53:ba:e8:aa:ca:9b:78:1d: dc:49:c7:78:1b:d5:31:e5:e4:ae:e7:b1:43:e1:ad: 48:e3:f3:43:d8:42:d8:95:0d:df:00:47:fd:32:dd: 88:0f:62:cf:2b:d8:05:68:52:19:f8:73:ed:8d:26: e9:b1:6f:d7:39:5a:7b:c1:c9:ef:a7:07:c6:2b:80: 3c:b8:9f:d9:fa:00:1f:ff:7d:30:a1:43:94:ed:6e: c4:bf:09:0b:2c:8c:a3:d7:a3:ac:cf:27:cc:f9:32: 67:0b:34:da:95:20:6d:31:9c:6e:1c:b0:79:ab:e9: 72:dd:59:ac:1b:5b:8a:37:39:fc:cc:8e:d4:37:a3: ff:2e:19:91:c7:4a:de:fe:c7:14:75:fa:53:02:b0: 2e:d5:de:f9:b7:b0:82:a0:99:01:76:6c:62:17:e4: 4d:63:74:fa:76:40:47:7c:c5:cb:bc:bd:52:00:60: 2c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:34:6B:43:29:7B:2B:5E:2A:B3:04:A5:BC:6C:65:A3:1E:4E:B2:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/2590afa5-22aa-3adc-92a6-2dc4e6df1ce2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 192.161.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:33:61:07:62:38:d7:5b:c2:50:0d:82:e5:8a:91:99:4a:b8: 84:71:9c:4b:97:d6:1a:42:32:2e:c5:1f:2f:f9:57:b5:a4:32: 04:5b:8a:e0:a9:fc:87:42:5e:b4:70:ef:b0:0d:82:c4:b2:62: 9c:de:d2:82:1a:ad:88:0a:8f:1b:32:bd:69:a6:32:89:8b:7f: 37:90:ac:b1:20:f7:8d:23:6c:a6:a3:aa:9f:93:9d:4d:33:b7: a6:41:b5:27:35:23:eb:48:f7:37:35:f7:bc:12:ca:da:46:a2: 43:45:af:99:c8:3c:92:ea:e9:7c:06:11:de:d1:8f:90:d7:7e: cd:bc:88:d9:90:93:d5:1a:7f:1a:89:43:e8:7a:4a:94:23:43: 69:1b:03:c8:be:a3:7f:22:f5:ba:2e:da:b6:8f:83:b2:b8:f9: 43:f4:36:10:55:22:8a:bf:e0:71:0a:34:08:68:c4:6a:97:a5: 60:53:f4:63:2e:5c:ea:7c:97:74:d6:57:45:04:91:c2:80:37: d0:5b:0a:57:18:d3:95:93:a4:08:4c:5d:41:74:4d:7b:a1:c9: 55:61:7a:9f:f8:f6:f8:fd:bc:30:e5:e0:df:d6:ba:73:4d:d1: 72:af:d9:a7:7c:bc:8f:2a:ca:21:d0:39:a5:d9:0a:1b:e8:c5: f9:83:06:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxeeTGs7ASXChz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk NWQ0ZmQ0MDktODBiNy00NzA3LWIxZjQtNGUzYTM0ZjhhODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB0bCgHFLpoyHD46301EvOGZ73mmXLZ5xzBl P9JP7KGxeZB7MPNMcMFhjNS9SMLNZc+GtCzoOHApofggNztKtlW8IdxBFSW+Ltjo h45mXntgU7roqsqbeB3cScd4G9Ux5eSu57FD4a1I4/ND2ELYlQ3fAEf9Mt2ID2LP K9gFaFIZ+HPtjSbpsW/XOVp7wcnvpwfGK4A8uJ/Z+gAf/30woUOU7W7EvwkLLIyj 16OszyfM+TJnCzTalSBtMZxuHLB5q+ly3VmsG1uKNzn8zI7UN6P/LhmRx0re/scU dfpTArAu1d75t7CCoJkBdmxiF+RNY3T6dkBHfMXLvL1SAGAs4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAc0a0MpeyteKrMEpbxsZaMeTrKnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvMjU5MGFmYTUtMjJhYS0z YWRjLTkyYTYtMmRjNGU2ZGYxY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADozYQdiONdbwlANguWKkZlKuIRxnEuX1hpCMi7FHy/5V7WkMgRbiuCp /IdCXrRw77ANgsSyYpze0oIarYgKjxsyvWmmMomLfzeQrLEg940jbKajqp+TnU0z t6ZBtSc1I+tI9zc197wSytpGokNFr5nIPJLq6XwGEd7Rj5DXfs28iNmQk9UafxqJ Q+h6SpQjQ2kbA8i+o38i9bou2raPg7K4+UP0NhBVIoq/4HEKNAhoxGqXpWBT9GMu XOp8l3TWV0UEkcKAN9BbClcY05WTpAhMXUF0TXuhyVVhep/49vj9vDDl4N/WunNN 0XKv2ad8vI8qyiHQOaXZChvoxfmDBuQ= -----END CERTIFICATE-----Generated at Mon Aug 4 16:14:06 2025 by rpki-client