$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/8c1b3f62-2643-3f32-8572-fc3d23a752a9.roa File: 8c1b3f62-2643-3f32-8572-fc3d23a752a9.roa (raw, json) Hash identifier: /xB0ekQ/SP5rZX/tog4YB2UIkeGvXx9jC2RvqO4NWB8= Subject key identifier: 0A:46:8D:04:C9:3F:BE:5E:E2:EE:E0:56:87:92:C7:01:FB:83:88:8B Certificate issuer: /CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd Certificate serial: 010D0C9F4328584A612B0E0F5FF4FB226D65EF00 Authority key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/8c1b3f62-2643-3f32-8572-fc3d23a752a9.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 15164 IP address blocks: 192.160.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:0e:0f:5f:f4:fb:22:6d:65:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=2d4776e0-93a0-4c51-8dd8-89086f44f9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f7:84:e5:3a:9c:ee:9a:b7:a8:38:bf:0b:92: 04:a8:ca:8a:8b:84:15:13:86:56:25:d9:53:3b:4d: 24:81:1a:64:67:90:3c:fc:3f:42:e8:01:83:2c:84: 13:39:d6:66:93:2f:62:48:9e:5f:8b:be:24:84:11: 5e:81:a3:bb:99:3a:5a:f2:59:50:ad:8c:3d:44:dc: 73:71:6b:2f:26:3c:a6:1d:dc:ce:fe:41:1d:fd:7e: b8:da:57:50:22:54:a7:3a:7a:3b:b1:35:19:50:21: 3d:4c:ef:49:86:1a:0c:2e:a1:9c:d5:f4:6f:ef:10: e2:68:5c:a1:9b:4d:fd:2e:5f:27:ae:0c:19:4a:ba: 3a:79:6e:f2:9a:05:ba:6e:ea:31:15:18:5c:3a:7d: ea:64:24:27:fd:b2:63:02:0f:42:48:ae:73:06:04: db:50:ce:19:c8:51:a2:41:e1:9a:fa:1d:15:d4:25: 01:0e:40:77:91:a4:b2:4a:6f:61:30:33:3d:90:bd: 49:f9:24:e5:4d:54:54:77:e6:9a:3b:fe:86:38:e3: 4a:5f:24:98:26:61:c4:0f:ef:f9:3e:f1:f6:99:b1: d3:35:66:a2:07:7b:cf:7d:15:c2:18:c7:14:11:cb: d8:73:e2:ec:b7:b9:50:54:0f:d7:ea:f7:9d:a6:f0: c7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:46:8D:04:C9:3F:BE:5E:E2:EE:E0:56:87:92:C7:01:FB:83:88:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/8c1b3f62-2643-3f32-8572-fc3d23a752a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl X509v3 Authority Key Identifier: keyid:C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer sbgp-ipAddrBlock: critical IPv4: 192.160.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:af:fc:57:5f:f4:88:fe:2a:90:b0:1c:f4:c2:7d:2e:b6:57: 10:b3:98:46:85:ad:14:46:0f:8f:f8:b7:43:5a:ab:b3:f2:c8: b1:f3:41:5d:b9:f6:a8:cb:b4:6b:c6:98:a0:b9:e5:98:4b:d6: 05:d9:b4:4a:c6:bd:8e:46:94:58:39:90:06:19:70:24:90:68: 55:b9:c0:4b:9f:d4:1d:42:23:f7:25:d3:ba:f2:f3:04:69:1e: 0e:21:0d:c0:b9:63:bb:4d:9d:e9:25:90:9c:f6:ad:58:cb:54: 9e:ed:01:b5:a5:23:06:bb:bf:96:de:d8:24:90:4f:bf:ef:90: 23:09:30:39:7f:d3:1c:11:ea:1d:75:8d:ba:26:ff:37:15:87: 73:a7:cb:fb:19:bb:2a:c1:89:7a:9e:1f:d1:18:4c:fa:2b:f3: 3b:d0:96:44:12:81:8e:7e:96:67:e4:71:0c:7d:a5:24:40:31: 99:c3:66:68:1b:30:78:aa:a9:33:2d:64:c0:3a:f9:d5:83:4c: d1:88:f7:9e:2b:c6:0f:61:ea:c5:61:22:f8:a0:88:8f:b9:3f: 32:66:fc:b1:9c:4d:83:24:37:eb:a3:71:11:c5:ff:1f:4d:c9: 71:01:9f:30:90:ae:e0:5c:ee:b5:55:45:45:f9:f2:e8:14:e3: a9:64:f8:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKw4PX/T7Im1l7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmVlN2I2N2UtNWU0Zi00YTA1LWE1OWUtOWU4MjBjODk4 ZmNkMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk MmQ0Nzc2ZTAtOTNhMC00YzUxLThkZDgtODkwODZmNDRmOWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/eE5Tqc7pq3qDi/C5IEqMqKi4QVE4ZWJdlT O00kgRpkZ5A8/D9C6AGDLIQTOdZmky9iSJ5fi74khBFegaO7mTpa8llQrYw9RNxz cWsvJjymHdzO/kEd/X642ldQIlSnOno7sTUZUCE9TO9JhhoMLqGc1fRv7xDiaFyh m039Ll8nrgwZSro6eW7ymgW6buoxFRhcOn3qZCQn/bJjAg9CSK5zBgTbUM4ZyFGi QeGa+h0V1CUBDkB3kaSySm9hMDM9kL1J+STlTVRUd+aaO/6GOONKXySYJmHED+/5 PvH2mbHTNWaiB3vPfRXCGMcUEcvYc+Lst7lQVA/X6vedpvDH1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApGjQTJP75e4u7gVoeSxwH7g4iLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3 YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgyMGM4OThmY2QvOGMxYjNmNjItMjY0My0z ZjMyLTg1NzItZmMzZDIzYTc1MmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmVlN2I2N2UtNWU0Zi00YTA1LWE1 OWUtOWU4MjBjODk4ZmNkL2ZlZTdiNjdlLTVlNGYtNGEwNS1hNTllLTllODIwYzg5 OGZjZC5jcmwwHwYDVR0jBBgwFoAUyUCeXczprJIdAfK0l1qNJ/cvAbIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgy MGM4OThmY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSv/Fdf9Ij+KpCwHPTCfS62VxCzmEaFrRRGD4/4t0Naq7PyyLHzQV25 9qjLtGvGmKC55ZhL1gXZtErGvY5GlFg5kAYZcCSQaFW5wEuf1B1CI/cl07ry8wRp Hg4hDcC5Y7tNneklkJz2rVjLVJ7tAbWlIwa7v5be2CSQT7/vkCMJMDl/0xwR6h11 jbom/zcVh3Ony/sZuyrBiXqeH9EYTPor8zvQlkQSgY5+lmfkcQx9pSRAMZnDZmgb MHiqqTMtZMA6+dWDTNGI954rxg9h6sVhIvigiI+5PzJm/LGcTYMkN+ujcRHF/x9N yXEBnzCQruBc7rVVRUX58ugU46lk+N8= -----END CERTIFICATE-----Generated at Wed Aug 6 00:53:02 2025 by rpki-client