$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/87f5be57-4fb6-326f-a7a7-31888f0e6a87.roa File: 87f5be57-4fb6-326f-a7a7-31888f0e6a87.roa (raw, json) Hash identifier: Ri7mQGnJCtb7iHKAbxvsos4K/vUhVBfwjXABsbGAsZU= Subject key identifier: 75:C8:C3:06:DC:7E:99:08:AF:F1:64:83:38:2D:1A:78:14:B2:3C:6E Certificate issuer: /CN=324346b5-3875-43b0-bb0d-8052274567d4 Certificate serial: 010D0C9F4328584A03A548C5469CF4DA15323CA0 Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/87f5be57-4fb6-326f-a7a7-31888f0e6a87.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 55 IP address blocks: 192.84.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:48:c5:46:9c:f4:da:15:32:3c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=0b299d90-0bf8-41a4-b09e-ee4b2ca905b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b7:46:33:44:5a:ac:4d:6f:d6:3d:ca:df:9e: 3f:f6:e0:e9:b9:9a:86:5f:1d:b0:b5:d5:e2:fc:a5: b0:3f:4a:bf:68:ef:0e:00:02:b1:8d:8a:5b:d2:ac: 6d:ef:a5:99:bf:e6:2f:d7:48:56:fb:00:9a:78:3d: ca:d6:e1:4a:21:c1:6d:02:4e:a6:a7:da:1d:4e:f9: e9:3c:91:f1:4e:3c:58:3d:11:98:72:2d:db:05:e4: 6b:5b:db:49:b3:ff:53:62:56:9e:6d:6d:b6:7a:75: 97:c6:83:18:07:92:d5:5a:74:1c:e2:d1:17:5b:4d: d1:d4:cc:2c:9d:dc:2e:da:07:e9:ee:83:8e:dc:a4: 8d:48:6f:f1:47:10:da:a1:8b:07:01:86:61:df:95: 78:e3:22:74:5b:92:1e:1e:df:be:8a:6b:67:47:0b: c6:35:5d:62:ff:28:5c:25:43:ca:ff:b1:a1:05:37: 27:0a:31:66:9c:cf:78:9c:0d:a4:aa:6f:30:86:b7: 00:e8:3d:01:4d:bd:ba:14:36:99:1d:7a:76:35:37: f9:d3:cf:a0:29:d7:87:b0:48:2b:89:d9:4c:9a:db: 12:b8:d8:b8:b9:e2:44:2e:71:3e:af:65:49:3e:4f: 6e:9b:a4:34:74:28:8a:6c:56:3c:b8:b4:20:46:af: ff:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C8:C3:06:DC:7E:99:08:AF:F1:64:83:38:2D:1A:78:14:B2:3C:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/87f5be57-4fb6-326f-a7a7-31888f0e6a87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl X509v3 Authority Key Identifier: keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer sbgp-ipAddrBlock: critical IPv4: 192.84.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:02:b2:8d:a0:5d:5f:a8:92:5c:30:e1:02:01:c1:ce:06:ea: 32:fa:fe:b9:17:25:b2:cd:c6:ba:5e:e2:3f:51:b3:ab:2d:c4: 1f:df:ff:13:ee:71:37:94:c2:1d:4b:46:5f:e6:aa:57:24:01: 96:f5:b9:40:27:e4:7e:7a:5d:4b:e6:0c:43:e9:bd:17:2c:1d: 4e:51:92:59:34:d1:ea:9b:eb:eb:e1:34:90:98:98:45:46:bc: 6a:33:22:47:bd:d0:87:b3:de:10:11:52:5f:78:db:5a:b8:f7: 9b:1d:68:24:f6:f8:b6:eb:81:e0:b3:df:b0:fe:80:5f:17:38: ee:86:e5:70:cf:43:49:8d:0a:d7:ae:41:9f:0f:4a:12:05:a7: 04:1f:02:19:9d:0d:ce:e2:6c:1c:46:8b:c9:33:50:da:01:bc: a0:69:cb:fd:f0:4a:0d:15:17:1c:d6:48:05:39:64:8c:63:82: 77:89:2d:e5:99:b9:4f:3a:ac:97:7f:cf:39:5f:0e:b5:21:a6: ba:99:d5:2a:48:64:e8:3d:5b:3c:0c:39:8c:b8:2d:f9:14:d2: 93:38:4e:ed:36:31:a4:06:59:67:9b:a9:5d:4e:0e:fb:6b:6e: 19:f9:fd:db:8c:89:6e:9a:f9:2e:22:17:32:b5:39:bc:0d:d3: 50:f2:59:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUjFRpz02hUyPKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0MzQ2YjUtMzg3NS00M2IwLWJiMGQtODA1MjI3NDU2 N2Q0MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MGIyOTlkOTAtMGJmOC00MWE0LWIwOWUtZWU0YjJjYTkwNWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LdGM0RarE1v1j3K354/9uDpuZqGXx2wtdXi /KWwP0q/aO8OAAKxjYpb0qxt76WZv+Yv10hW+wCaeD3K1uFKIcFtAk6mp9odTvnp PJHxTjxYPRGYci3bBeRrW9tJs/9TYlaebW22enWXxoMYB5LVWnQc4tEXW03R1Mws ndwu2gfp7oOO3KSNSG/xRxDaoYsHAYZh35V44yJ0W5IeHt++imtnRwvGNV1i/yhc JUPK/7GhBTcnCjFmnM94nA2kqm8whrcA6D0BTb26FDaZHXp2NTf508+gKdeHsEgr idlMmtsSuNi4ueJELnE+r2VJPk9um6Q0dCiKbFY8uLQgRq//wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXIwwbcfpkIr/FkgzgtGngUsjxuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQz NDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0NTY3ZDQvODdmNWJlNTctNGZiNi0z MjZmLWE3YTctMzE4ODhmMGU2YTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0MzQ2YjUtMzg3NS00M2IwLWJi MGQtODA1MjI3NDU2N2Q0LzMyNDM0NmI1LTM4NzUtNDNiMC1iYjBkLTgwNTIyNzQ1 NjdkNC5jcmwwHwYDVR0jBBgwFoAUSik0xZJmeenp4Av+f7bw6Cl2XiQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUy Mjc0NTY3ZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoCso2gXV+oklww4QIBwc4G6jL6/rkXJbLNxrpe4j9Rs6stxB/f/xPu cTeUwh1LRl/mqlckAZb1uUAn5H56XUvmDEPpvRcsHU5Rklk00eqb6+vhNJCYmEVG vGozIke90Iez3hARUl9421q495sdaCT2+LbrgeCz37D+gF8XOO6G5XDPQ0mNCteu QZ8PShIFpwQfAhmdDc7ibBxGi8kzUNoBvKBpy/3wSg0VFxzWSAU5ZIxjgneJLeWZ uU86rJd/zzlfDrUhprqZ1SpIZOg9WzwMOYy4LfkU0pM4Tu02MaQGWWebqV1ODvtr bhn5/duMiW6a+S4iFzK1ObwN01DyWQg= -----END CERTIFICATE-----Generated at Tue Jun 17 16:35:52 2025 by rpki-client