$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/f8aa35bb-cf9d-34a9-8c94-31f612698d12.roa File: f8aa35bb-cf9d-34a9-8c94-31f612698d12.roa (raw, json) Hash identifier: Z2N5YC53MdyKi/K6KWwcymXUM322dCs6djhZNZ55dIU= Subject key identifier: B0:A1:11:96:46:0A:08:2B:91:27:82:91:2E:DA:B1:FD:1E:C6:24:CD Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584AA160D5DCF14A71C52C78C800 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/f8aa35bb-cf9d-34a9-8c94-31f612698d12.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 16509 IP address blocks: 192.161.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:d5:dc:f1:4a:71:c5:2c:78:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=9fbd0f45-d06b-4725-a80a-c26f30ea68a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e0:a6:06:e1:7f:09:a2:c5:5d:11:65:c1:7d: 77:d5:b4:f6:ca:0a:8e:b5:bb:7d:19:8b:32:f4:5f: 16:b8:d0:7a:69:09:2c:02:9a:b1:c8:8c:48:da:ab: 17:5a:53:2e:29:31:b2:5e:fd:3d:9c:63:2d:24:55: 5f:33:62:bc:32:cb:7c:cb:55:b3:0f:82:6f:65:ac: ef:5d:6e:b8:07:aa:95:3f:33:c5:56:5f:6e:27:fd: 83:ee:c4:04:f5:10:94:61:13:b8:22:5a:a9:a8:9e: 1b:79:0d:a0:7f:2f:55:30:87:7d:62:95:1c:24:1f: 31:1f:44:a0:3d:6e:6f:08:79:07:c2:b6:b0:c9:5c: 02:7f:0a:50:33:d7:76:cc:15:98:2a:ef:48:da:91: 11:f1:0d:f8:f1:80:58:b8:84:42:60:cf:94:49:91: fd:d1:fa:cc:d2:d7:af:01:ca:93:a2:d7:f9:97:2c: fd:01:2b:31:31:e0:4f:10:00:e1:37:73:bf:a0:b6: 08:d4:13:6a:38:02:2b:74:24:df:60:98:18:06:b5: 24:df:5e:1f:c5:a4:dd:90:db:8d:1e:00:d8:09:31: a4:0c:9a:e3:25:a7:32:54:d9:d9:cd:94:23:25:b6: 92:cf:98:81:c6:d1:9e:78:fc:1b:b0:0d:c0:b9:ca: 71:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A1:11:96:46:0A:08:2B:91:27:82:91:2E:DA:B1:FD:1E:C6:24:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/f8aa35bb-cf9d-34a9-8c94-31f612698d12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 192.161.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c0:26:80:95:54:49:36:d2:7e:ca:05:e2:71:86:4b:48:cb: 20:e3:0c:ed:00:83:66:b9:c5:55:f4:b1:69:7a:34:b5:8c:2e: 85:a8:b4:f3:b6:3d:c2:de:a3:41:87:c1:9b:d8:a3:dd:fc:8e: 24:40:99:b3:d4:d8:8d:aa:27:17:df:92:31:c9:74:b6:e6:3b: 05:38:05:40:22:b7:11:ef:40:b8:e4:2c:c2:a5:3c:d4:8e:b5: 43:0c:0e:36:03:82:56:51:78:19:a4:35:1b:a2:6d:de:32:2f: cf:5d:9e:a1:a0:91:45:f2:98:0c:08:73:0c:3e:04:1d:26:d7: 12:c9:b5:54:bf:bc:b1:a9:21:05:ff:18:05:39:0c:02:02:bd: 40:14:c5:9b:e9:fe:b6:b5:5b:00:6f:cf:ca:6a:8e:20:8a:ad: 6c:05:dd:d3:25:55:1f:a9:8d:e6:0e:c1:48:93:39:28:2f:f0: 02:05:14:2a:77:fc:3d:4b:52:a3:c9:34:00:66:35:b8:c5:f3: ce:e4:ec:e3:f8:d5:88:fe:81:97:6f:56:5e:db:a7:45:e3:a1: 03:59:bd:82:68:57:43:83:4e:d2:49:58:02:0e:b5:4a:4a:80: 0c:fc:ff:f8:8e:22:8d:05:03:69:af:37:5a:b9:97:bc:e8:09: ea:ea:cc:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYNXc8UpxxSx4yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk OWZiZDBmNDUtZDA2Yi00NzI1LWE4MGEtYzI2ZjMwZWE2OGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeCmBuF/CaLFXRFlwX131bT2ygqOtbt9GYsy 9F8WuNB6aQksApqxyIxI2qsXWlMuKTGyXv09nGMtJFVfM2K8Mst8y1WzD4JvZazv XW64B6qVPzPFVl9uJ/2D7sQE9RCUYRO4IlqpqJ4beQ2gfy9VMId9YpUcJB8xH0Sg PW5vCHkHwrawyVwCfwpQM9d2zBWYKu9I2pER8Q348YBYuIRCYM+USZH90frM0tev AcqTotf5lyz9ASsxMeBPEADhN3O/oLYI1BNqOAIrdCTfYJgYBrUk314fxaTdkNuN HgDYCTGkDJrjJacyVNnZzZQjJbaSz5iBxtGeePwbsA3Aucpx0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLChEZZGCggrkSeCkS7asf0exiTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvZjhhYTM1YmItY2Y5ZC0z NGE5LThjOTQtMzFmNjEyNjk4ZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKGWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDAJoCVVEk20n7KBeJxhktIyyDjDO0Ag2a5xVX0sWl6NLWMLoWotPO2 PcLeo0GHwZvYo938jiRAmbPU2I2qJxffkjHJdLbmOwU4BUAitxHvQLjkLMKlPNSO tUMMDjYDglZReBmkNRuibd4yL89dnqGgkUXymAwIcww+BB0m1xLJtVS/vLGpIQX/ GAU5DAICvUAUxZvp/ra1WwBvz8pqjiCKrWwF3dMlVR+pjeYOwUiTOSgv8AIFFCp3 /D1LUqPJNABmNbjF887k7OP41Yj+gZdvVl7bp0XjoQNZvYJoV0ODTtJJWAIOtUpK gAz8//iOIo0FA2mvN1q5l7zoCerqzMk= -----END CERTIFICATE-----Generated at Wed Aug 6 11:15:46 2025 by rpki-client