$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a67122b-f82b-30d8-88f5-fd44110664d3.roa File: 0a67122b-f82b-30d8-88f5-fd44110664d3.roa (raw, json) Hash identifier: OUQo4qEswM5B8txhquOl3jdr8gv1NgZnmafmvCHSu4o= Subject key identifier: BC:36:B7:39:C7:59:20:CB:12:13:35:E1:83:B1:28:30:60:2E:23:88 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849D758A9F24F3D063E87882E40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a67122b-f82b-30d8-88f5-fd44110664d3.roa Signing time: Tue 13 May 2025 16:11:16 +0000 ROA not before: Tue 13 May 2025 16:11:16 +0000 ROA not after: Mon 11 Aug 2025 16:11:16 +0000 asID: 0 IP address blocks: 192.82.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:58:a9:f2:4f:3d:06:3e:87:88:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 13 16:11:16 2025 GMT Not After : Aug 11 16:11:16 2025 GMT Subject: CN=3a5923f8-6c4d-4939-a0dc-6f894de7b25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:30:4d:2e:d7:7e:1b:a2:82:53:cb:47:76: d2:06:3a:e2:74:3d:e3:ea:cb:a1:70:db:48:b7:f4: 39:5b:a2:18:c8:54:17:9b:13:be:1c:7c:28:9f:87: 69:7d:7a:26:14:e0:4e:86:39:33:c7:48:af:b8:98: a7:f1:5b:dc:b6:a7:52:bb:d8:22:8f:b3:09:57:e1: 50:3d:77:8a:b8:86:e3:1b:ed:82:07:cd:a3:12:69: c0:35:a7:81:46:cd:19:5d:39:1e:6f:cd:91:0f:a1: 72:df:85:30:61:0d:54:fc:96:2f:49:60:77:5c:64: 57:d2:e4:2d:38:ff:d9:be:b9:f5:bf:86:7e:46:93: 6f:b4:4a:ec:23:07:48:2a:d7:44:d4:0b:aa:9c:0b: 1a:b1:4b:81:3f:7f:56:6a:bf:60:0e:0b:c0:c2:c1: c0:08:c6:37:64:e8:f5:da:33:1d:a6:b2:44:a4:b6: 62:aa:d2:9d:36:aa:eb:f0:3a:df:4b:83:06:8a:0e: 3a:3c:a4:d0:66:7d:94:4a:36:0b:23:6a:71:75:e5: ea:24:6d:e7:25:81:c7:0e:c4:e3:95:a5:3e:e9:05: 2c:1d:12:03:87:da:28:2c:c7:22:7a:73:c2:b9:f6: e7:ee:92:80:75:95:49:56:d4:7f:78:aa:c6:c7:d1: a1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:36:B7:39:C7:59:20:CB:12:13:35:E1:83:B1:28:30:60:2E:23:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a67122b-f82b-30d8-88f5-fd44110664d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.82.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:65:ab:32:b3:cb:49:05:df:b2:8b:10:e2:49:3e:0b:d6:b1: de:48:6c:07:43:15:7c:84:9d:a9:70:0f:4a:70:0e:c2:3e:a8: f1:f2:af:99:aa:07:86:24:e2:9f:01:8b:c6:01:23:d8:65:eb: 20:a9:78:f6:81:0c:3f:1c:e0:5e:fa:75:36:bb:92:c5:d5:6e: 5d:d9:1a:bd:97:32:b2:70:0d:5c:6a:61:9b:f0:29:bc:a2:27: 20:28:a6:49:2b:ac:08:ef:38:9f:a1:56:96:78:2a:3d:e2:5d: 47:0d:bf:13:e9:49:48:ab:df:7b:a4:08:4f:48:f4:86:20:25: ac:61:2f:93:db:ce:aa:16:f0:c6:95:83:01:df:a0:8d:fa:51: e5:93:4d:a6:29:fe:c6:08:1f:9f:67:ad:e0:52:cd:d5:a2:07: d7:0d:a7:ba:03:cb:3e:54:fc:89:1f:8c:89:53:b9:92:7a:dd: 92:01:e9:6b:4d:7d:42:e7:54:1f:24:c3:a6:07:b9:ca:88:e7: 49:71:45:cc:15:6f:88:ee:8b:5b:f9:1f:2d:8d:63:ca:c0:1d: e3:fa:8a:a0:a4:cc:56:71:33:8b:c9:75:1b:3e:da:a3:78:1b: 08:60:2f:72:0b:0f:d4:43:e2:35:f6:17:19:0c:de:e5:1a:3a: 47:ba:0b:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnXWKnyTz0GPoeILkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxMzE2MTExNloXDTI1MDgxMTE2MTExNlowLzEtMCsGA1UEAxMk M2E1OTIzZjgtNmM0ZC00OTM5LWEwZGMtNmY4OTRkZTdiMjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryswTS7XfhuiglPLR3bSBjridD3j6suhcNtI t/Q5W6IYyFQXmxO+HHwon4dpfXomFOBOhjkzx0ivuJin8VvctqdSu9gij7MJV+FQ PXeKuIbjG+2CB82jEmnANaeBRs0ZXTkeb82RD6Fy34UwYQ1U/JYvSWB3XGRX0uQt OP/Zvrn1v4Z+RpNvtErsIwdIKtdE1AuqnAsasUuBP39War9gDgvAwsHACMY3ZOj1 2jMdprJEpLZiqtKdNqrr8DrfS4MGig46PKTQZn2USjYLI2pxdeXqJG3nJYHHDsTj laU+6QUsHRIDh9ooLMcienPCufbn7pKAdZVJVtR/eKrGx9GhGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLw2tznHWSDLEhM14YOxKDBgLiOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGE2NzEyMmItZjgyYi0z MGQ4LTg4ZjUtZmQ0NDExMDY2NGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhlqzKzy0kF37KLEOJJPgvWsd5IbAdDFXyEnalwD0pwDsI+qPHyr5mq B4Yk4p8Bi8YBI9hl6yCpePaBDD8c4F76dTa7ksXVbl3ZGr2XMrJwDVxqYZvwKbyi JyAopkkrrAjvOJ+hVpZ4Kj3iXUcNvxPpSUir33ukCE9I9IYgJaxhL5PbzqoW8MaV gwHfoI36UeWTTaYp/sYIH59nreBSzdWiB9cNp7oDyz5U/IkfjIlTuZJ63ZIB6WtN fULnVB8kw6YHucqI50lxRcwVb4jui1v5Hy2NY8rAHeP6iqCkzFZxM4vJdRs+2qN4 GwhgL3ILD9RD4jX2FxkM3uUaOke6Cw0= -----END CERTIFICATE-----Generated at Sun Jun 15 12:28:08 2025 by rpki-client