$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/33c0f0c7-189d-3673-9471-4ef912728a13.roa File: 33c0f0c7-189d-3673-9471-4ef912728a13.roa (raw, json) Hash identifier: n/4ILsEfj2lH05MZgB7oNjdKdfoLSt0fqkllk9P34A0= Subject key identifier: 9F:90:ED:91:DD:54:6E:8E:FA:FD:D2:DF:DC:D8:68:41:90:21:26:6D Certificate issuer: /CN=41b3b885-79da-40ed-ab0b-ce4a30f770db Certificate serial: 010D0C9F4328584A9D30FDA3B15C269081D58640 Authority key identifier: D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/33c0f0c7-189d-3673-9471-4ef912728a13.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 29888 IP address blocks: 192.136.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:fd:a3:b1:5c:26:90:81:d5:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b3b885-79da-40ed-ab0b-ce4a30f770db Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=4005ce29-609a-4991-be2f-9bcc096bb952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:28:92:7f:44:b0:36:a7:a0:27:83:2f:43:f7: d7:96:fc:fa:2b:f0:d1:43:1a:43:7b:18:5c:31:f5: a0:cd:0f:a6:7d:4c:5f:1a:06:09:58:54:8b:7c:77: bc:cf:7a:28:ed:2b:3b:1f:d9:08:e5:39:2c:05:31: 6d:6f:a3:4f:19:09:2f:58:5e:16:11:44:b9:21:0c: 0e:65:bd:8c:9e:bf:8e:f2:b9:61:71:a9:d9:a8:51: f6:7b:ef:c9:3d:26:20:92:fc:36:88:2f:89:d8:a1: 46:bb:de:d2:83:26:41:39:67:93:33:07:92:73:fa: 6c:21:90:be:b2:00:b1:d3:52:05:cf:e8:8d:c6:88: 57:0c:ed:0c:68:79:1c:30:db:53:fe:79:bb:a1:1f: 1a:10:23:94:21:81:4b:af:6f:1b:b8:bc:28:f0:ed: 8e:7b:f2:48:0b:b7:b8:b4:0b:2e:80:1f:0b:2c:e4: 20:f5:ec:e7:f7:17:0b:f7:ba:8d:3c:7e:b7:9a:00: 86:ac:08:d2:78:12:92:58:da:7e:5e:82:da:81:97: b6:27:67:98:e9:04:e7:2e:ed:95:46:fe:0e:79:f7: 46:71:1b:2e:4f:4c:78:f5:38:ca:87:e9:1e:b5:f8: 3a:bb:43:8f:e9:20:4e:9f:53:51:fc:88:3e:6a:d4: 25:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:90:ED:91:DD:54:6E:8E:FA:FD:D2:DF:DC:D8:68:41:90:21:26:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/33c0f0c7-189d-3673-9471-4ef912728a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl X509v3 Authority Key Identifier: keyid:D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer sbgp-ipAddrBlock: critical IPv4: 192.136.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:38:a3:b1:28:07:8b:b3:64:67:ea:70:0b:2e:30:26:38:43: 8b:a5:e9:c4:b0:92:92:46:57:87:b8:97:8d:52:40:92:e4:ca: e6:9d:8e:ec:07:5b:74:1e:27:a0:ca:03:ed:5c:f5:79:ba:24: fd:b5:05:03:58:03:a8:d6:5e:77:e4:38:c9:da:57:c8:e1:76: 02:b9:bd:08:4b:6d:7d:e2:2f:17:b1:bd:f8:5e:75:2e:39:b7: 56:c2:fb:7f:9f:ac:1d:26:34:50:14:61:94:b2:22:17:94:85: 76:a2:c1:8f:36:24:4f:4c:71:5f:4a:ed:fe:9c:8f:55:fe:a1: c1:a0:94:7e:ef:df:36:e6:04:15:6b:36:c2:bd:3b:49:00:45: e8:9b:22:8a:ac:b5:a8:ad:f3:6a:6d:b8:c3:f1:61:2f:00:ee: 12:4b:57:a9:d5:b2:d7:82:b4:a7:92:c1:06:de:c1:56:20:f8: 86:1f:17:2d:f2:ab:b5:85:70:f6:de:d0:85:b4:8a:26:2a:d9: 33:a2:66:e3:2a:17:da:16:b0:5b:a4:57:d7:8d:bd:56:55:30: 1f:45:d1:cf:a5:6c:e9:fd:a0:50:62:7f:fe:8c:ab:10:06:c0: c0:3d:ae:76:b3:ea:72:b7:37:59:e3:b0:ad:dd:79:d1:40:e3: c3:22:54:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMP2jsVwmkIHVhkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFiM2I4ODUtNzlkYS00MGVkLWFiMGItY2U0YTMwZjc3 MGRiMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NDAwNWNlMjktNjA5YS00OTkxLWJlMmYtOWJjYzA5NmJiOTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyiSf0SwNqegJ4MvQ/fXlvz6K/DRQxpDexhc MfWgzQ+mfUxfGgYJWFSLfHe8z3oo7Ss7H9kI5TksBTFtb6NPGQkvWF4WEUS5IQwO Zb2Mnr+O8rlhcanZqFH2e+/JPSYgkvw2iC+J2KFGu97SgyZBOWeTMweSc/psIZC+ sgCx01IFz+iNxohXDO0MaHkcMNtT/nm7oR8aECOUIYFLr28buLwo8O2Oe/JIC7e4 tAsugB8LLOQg9ezn9xcL97qNPH63mgCGrAjSeBKSWNp+XoLagZe2J2eY6QTnLu2V Rv4OefdGcRsuT0x49TjKh+ketfg6u0OP6SBOn1NR/Ig+atQlTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+Q7ZHdVG6O+v3S39zYaEGQISZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIz Yjg4NS03OWRhLTQwZWQtYWIwYi1jZTRhMzBmNzcwZGIvMzNjMGYwYzctMTg5ZC0z NjczLTk0NzEtNGVmOTEyNzI4YTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDFiM2I4ODUtNzlkYS00MGVkLWFi MGItY2U0YTMwZjc3MGRiLzQxYjNiODg1LTc5ZGEtNDBlZC1hYjBiLWNlNGEzMGY3 NzBkYi5jcmwwHwYDVR0jBBgwFoAU0IYoSmXaLSFCYScW7q5E9ynm2/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIzYjg4NS03OWRhLTQwZWQtYWIwYi1jZTRh MzBmNzcwZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwIiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI4o7EoB4uzZGfqcAsuMCY4Q4ul6cSwkpJGV4e4l41SQJLkyuadjuwH W3QeJ6DKA+1c9Xm6JP21BQNYA6jWXnfkOMnaV8jhdgK5vQhLbX3iLxexvfhedS45 t1bC+3+frB0mNFAUYZSyIheUhXaiwY82JE9McV9K7f6cj1X+ocGglH7v3zbmBBVr NsK9O0kAReibIoqstait82ptuMPxYS8A7hJLV6nVsteCtKeSwQbewVYg+IYfFy3y q7WFcPbe0IW0iiYq2TOiZuMqF9oWsFukV9eNvVZVMB9F0c+lbOn9oFBif/6MqxAG wMA9rnaz6nK3N1njsK3dedFA48MiVB8= -----END CERTIFICATE-----Generated at Fri Aug 8 10:13:49 2025 by rpki-client