$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/8a2e6bbb-e211-3ae0-bbc0-3420243b3358.roa File: 8a2e6bbb-e211-3ae0-bbc0-3420243b3358.roa (raw, json) Hash identifier: XhBQ3335yanI+IPklSmhua3uZz48Ds6ius6jikHWbr4= Subject key identifier: ED:B6:C8:14:0E:FB:67:0C:BC:3F:01:46:B4:56:C6:41:73:8E:C1:F8 Certificate issuer: /CN=590468a2-be81-410c-b887-a35157322fb1 Certificate serial: 010D0C9F4328584ABD4B95BF96609DAB206F8280 Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/8a2e6bbb-e211-3ae0-bbc0-3420243b3358.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 393891 IP address blocks: 192.103.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:95:bf:96:60:9d:ab:20:6f:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590468a2-be81-410c-b887-a35157322fb1 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=a15305f1-4600-4ec9-adf7-f0e6c6cfc95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:13:fd:1e:6e:37:f3:4d:76:e6:8b:7c:93: 64:43:ff:5f:ce:39:c5:e5:b1:5d:47:ba:d4:8b:32: 3a:92:7d:4c:94:ff:20:5d:ac:41:19:f0:22:a9:dc: 9b:78:11:76:8c:e0:6e:5a:46:f6:36:4a:ac:11:df: a2:5f:a6:ca:27:14:a9:d6:72:ea:59:71:42:aa:00: b5:1e:a2:0c:8b:ea:dc:02:8c:ab:ff:e4:4c:23:0c: 19:c8:a6:46:92:3a:0f:76:02:51:78:c6:9a:f7:41: 4e:08:71:30:b6:84:d7:83:99:08:78:25:a7:78:d7: 36:ec:0d:76:d1:75:19:f1:70:5d:5e:e2:81:fa:64: 91:06:0e:b9:1b:4b:1e:bf:bc:60:3f:a4:b6:ae:93: 6d:bb:45:bf:8e:c0:db:68:fe:37:13:99:cf:91:5b: 7b:db:36:1e:42:22:5e:d2:a3:ca:f3:fe:ac:18:5b: ec:10:02:29:1a:c3:5a:72:78:91:02:39:e1:da:08: 29:58:3e:0b:38:b9:8d:9b:69:93:6e:30:f3:43:bd: aa:01:f7:2d:39:e3:ec:fc:5e:d3:ba:4b:cd:f8:72: 49:79:ca:84:af:e3:55:e0:09:1e:f7:5c:62:c6:7f: 00:67:23:67:17:b0:38:41:0c:bc:08:ed:0f:b2:dd: 2f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B6:C8:14:0E:FB:67:0C:BC:3F:01:46:B4:56:C6:41:73:8E:C1:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/8a2e6bbb-e211-3ae0-bbc0-3420243b3358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl X509v3 Authority Key Identifier: keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer sbgp-ipAddrBlock: critical IPv4: 192.103.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ff:c6:70:ab:60:bf:26:11:63:51:af:6f:af:1a:87:af:67: 27:56:5c:f8:2b:61:07:ba:13:04:4b:10:09:c9:28:4e:1a:66: 65:a2:02:9b:c3:25:11:ac:66:51:f0:51:f5:74:3e:68:5f:f9: 20:c7:bd:66:ce:7f:7b:69:0a:13:25:5e:b8:4c:cf:1a:10:2e: b5:e9:dd:aa:85:ee:4c:78:1f:4d:5e:68:5d:bc:56:e0:c3:34: 12:87:c2:22:5e:c8:fb:84:04:af:20:6d:c9:31:ea:f1:a1:f2: cc:7f:59:b2:a8:0d:52:20:b2:95:d9:7b:70:97:35:e6:13:45: 0d:75:6a:f2:a2:40:00:fc:f5:f9:35:66:6c:67:41:1f:c3:94: 79:73:ae:f8:d7:d7:1d:21:53:13:77:a4:cd:5f:65:29:27:f2: 15:c7:03:b0:f2:48:3d:37:bd:49:19:18:4b:fd:62:90:2c:d9: 24:2f:d1:5f:bf:3c:df:98:42:46:7e:16:17:d6:30:8a:71:e4: 7e:6c:e1:ae:a0:08:1e:e5:09:d3:0c:11:bf:f9:76:53:06:19: cf:f6:41:f1:14:25:64:42:7a:16:1e:f1:88:a3:e5:fd:e6:cd: da:b4:8e:8a:46:3b:da:04:7a:89:67:57:92:0e:57:f0:75:02: 32:90:11:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5W/lmCdqyBvgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwNDY4YTItYmU4MS00MTBjLWI4ODctYTM1MTU3MzIy ZmIxMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk YTE1MzA1ZjEtNDYwMC00ZWM5LWFkZjctZjBlNmM2Y2ZjOTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbcT/R5uN/NNduaLfJNkQ/9fzjnF5bFdR7rU izI6kn1MlP8gXaxBGfAiqdybeBF2jOBuWkb2NkqsEd+iX6bKJxSp1nLqWXFCqgC1 HqIMi+rcAoyr/+RMIwwZyKZGkjoPdgJReMaa90FOCHEwtoTXg5kIeCWneNc27A12 0XUZ8XBdXuKB+mSRBg65G0sev7xgP6S2rpNtu0W/jsDbaP43E5nPkVt72zYeQiJe 0qPK8/6sGFvsEAIpGsNacniRAjnh2ggpWD4LOLmNm2mTbjDzQ72qAfctOePs/F7T ukvN+HJJecqEr+NV4Ake91xixn8AZyNnF7A4QQy8CO0Pst0v8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO22yBQO+2cMvD8BRrRWxkFzjsH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0 NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUxNTczMjJmYjEvOGEyZTZiYmItZTIxMS0z YWUwLWJiYzAtMzQyMDI0M2IzMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwNDY4YTItYmU4MS00MTBjLWI4 ODctYTM1MTU3MzIyZmIxLzU5MDQ2OGEyLWJlODEtNDEwYy1iODg3LWEzNTE1NzMy MmZiMS5jcmwwHwYDVR0jBBgwFoAUz9+cv10n/WlBCOCkwLzC2qnoDokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUx NTczMjJmYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb/xnCrYL8mEWNRr2+vGoevZydWXPgrYQe6EwRLEAnJKE4aZmWiApvD JRGsZlHwUfV0Pmhf+SDHvWbOf3tpChMlXrhMzxoQLrXp3aqF7kx4H01eaF28VuDD NBKHwiJeyPuEBK8gbckx6vGh8sx/WbKoDVIgspXZe3CXNeYTRQ11avKiQAD89fk1 ZmxnQR/DlHlzrvjX1x0hUxN3pM1fZSkn8hXHA7DySD03vUkZGEv9YpAs2SQv0V+/ PN+YQkZ+FhfWMIpx5H5s4a6gCB7lCdMMEb/5dlMGGc/2QfEUJWRCehYe8Yij5f3m zdq0jopGO9oEeolnV5IOV/B1AjKQEdc= -----END CERTIFICATE-----Generated at Sun Aug 10 10:46:31 2025 by rpki-client