$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/4ad3c5e0-590a-381a-b8b3-8fa63d8f6217.roa File: 4ad3c5e0-590a-381a-b8b3-8fa63d8f6217.roa (raw, json) Hash identifier: O9wAjXN4F7YoY/Fdyi6ZtHXaQHvJvHy8AzbN2j4x5Uw= Subject key identifier: D5:9D:6C:85:5D:C1:BE:FE:2B:73:A2:E3:4F:06:F4:22:E7:91:24:AB Certificate issuer: /CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af Certificate serial: 010D0C9F4328584A86DB76AF99C847FFECCC1F06 Authority key identifier: B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/4ad3c5e0-590a-381a-b8b3-8fa63d8f6217.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 31782 IP address blocks: 192.219.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:76:af:99:c8:47:ff:ec:cc:1f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=aa16b5cc-cf20-46ef-97b5-0b98419e3906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8d:3b:0f:8e:8b:4a:6b:52:ce:44:f4:f1:97: 26:8e:38:e7:02:69:b6:67:da:50:a3:88:71:ee:ba: 3e:f4:5a:0c:00:25:37:0a:4a:6b:6a:f7:1c:eb:4f: ba:e5:06:59:40:c3:ea:61:e2:31:1d:6c:5c:51:9f: 69:e9:29:83:28:fc:9a:0a:43:f1:5e:da:97:5b:af: 1d:a0:ef:d7:16:b8:04:1c:ba:42:f5:42:5b:22:d4: a4:1f:8e:3f:13:bc:8b:b0:13:e3:77:ea:20:42:bc: 7f:d0:07:ef:8a:4f:77:58:2f:c8:50:59:3f:9a:0e: 2f:91:af:c3:d4:3b:57:9b:27:2f:a2:b3:6e:b2:05: e5:1b:15:26:d6:18:dc:ce:01:72:ac:57:f5:cd:ad: bf:9e:10:ef:47:0d:a9:e3:89:2f:63:f2:8b:c4:94: bb:80:0e:fe:db:ce:d5:b3:33:1e:e7:34:3c:92:40: d8:1c:5b:ce:84:d5:64:fc:3f:bb:d0:39:bc:bc:80: 4c:10:9b:b7:4e:7b:7a:dc:a4:2c:19:8e:72:b2:e5: f1:de:5d:cd:7e:a1:4f:aa:f7:be:72:08:7e:cb:13: 0b:ef:56:29:fc:e0:7d:78:19:fc:c8:9b:dc:0d:95: 4b:57:82:13:e5:16:ea:cc:b4:53:8b:97:13:77:8c: 30:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9D:6C:85:5D:C1:BE:FE:2B:73:A2:E3:4F:06:F4:22:E7:91:24:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/4ad3c5e0-590a-381a-b8b3-8fa63d8f6217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.crl X509v3 Authority Key Identifier: keyid:B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer sbgp-ipAddrBlock: critical IPv4: 192.219.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:97:c9:78:d6:34:de:4c:28:0f:99:84:30:79:07:a3:bb:f4: 4e:bf:d7:c9:27:ba:67:31:9b:3a:24:46:f8:5c:81:a4:d6:06: 34:45:95:f5:83:22:97:fb:2b:b0:31:63:31:46:c0:b1:cc:db: 26:a8:3c:93:de:11:3f:92:2b:c7:88:45:25:48:27:22:03:4d: 32:64:cb:89:04:ba:67:aa:2f:70:a6:07:9b:e0:7f:c5:19:7c: 5d:01:fd:89:f6:f9:05:1c:f0:ce:3d:ed:9f:6f:ea:71:bd:17: cc:1a:63:59:97:c3:71:87:05:e1:13:fa:47:c9:2d:c3:a5:01: 08:18:0e:e6:19:00:84:ec:22:61:eb:19:2e:cb:eb:bf:37:9a: 43:23:4c:17:a2:de:8a:d2:bd:de:1b:1c:f4:2c:2b:11:a1:a0: 9b:e3:3b:ec:fd:d8:ea:e3:3e:1b:4e:01:c6:87:b8:ea:77:f1: ae:1a:0f:ec:06:18:fd:dc:cc:2f:68:ec:61:04:4f:a0:1f:29: 7f:dc:73:ce:33:b1:ce:44:8b:24:ad:c0:f0:c3:1c:5e:ae:c5: 47:f6:84:b5:10:9d:d2:c4:b5:c0:08:aa:4e:ab:8e:e9:74:e1: aa:de:3b:9a:ef:a0:c4:22:06:d8:29:0e:9b:8f:53:80:50:d7: 08:8b:07:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG23avmchH/+zMHwYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MxNGVmN2MtMTI4OS00N2VkLTgxNDQtYzdiM2ZlYWNm NWFmMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YWExNmI1Y2MtY2YyMC00NmVmLTk3YjUtMGI5ODQxOWUzOTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi407D46LSmtSzkT08ZcmjjjnAmm2Z9pQo4hx 7ro+9FoMACU3Ckpravcc60+65QZZQMPqYeIxHWxcUZ9p6SmDKPyaCkPxXtqXW68d oO/XFrgEHLpC9UJbItSkH44/E7yLsBPjd+ogQrx/0Afvik93WC/IUFk/mg4vka/D 1DtXmycvorNusgXlGxUm1hjczgFyrFf1za2/nhDvRw2p44kvY/KLxJS7gA7+287V szMe5zQ8kkDYHFvOhNVk/D+70Dm8vIBMEJu3Tnt63KQsGY5ysuXx3l3NfqFPqve+ cgh+yxML71Yp/OB9eBn8yJvcDZVLV4IT5RbqzLRTi5cTd4wwMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWdbIVdwb7+K3Oi408G9CLnkSSrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83YzE0 ZWY3Yy0xMjg5LTQ3ZWQtODE0NC1jN2IzZmVhY2Y1YWYvNGFkM2M1ZTAtNTkwYS0z ODFhLWI4YjMtOGZhNjNkOGY2MjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2MxNGVmN2MtMTI4OS00N2VkLTgx NDQtYzdiM2ZlYWNmNWFmLzdjMTRlZjdjLTEyODktNDdlZC04MTQ0LWM3YjNmZWFj ZjVhZi5jcmwwHwYDVR0jBBgwFoAUsN8Y7XkJwz2LZ31Fr9aB9mU8KxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83YzE0ZWY3Yy0xMjg5LTQ3ZWQtODE0NC1jN2Iz ZmVhY2Y1YWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2XyXjWNN5MKA+ZhDB5B6O79E6/18knumcxmzokRvhcgaTWBjRFlfWD Ipf7K7AxYzFGwLHM2yaoPJPeET+SK8eIRSVIJyIDTTJky4kEumeqL3CmB5vgf8UZ fF0B/Yn2+QUc8M497Z9v6nG9F8waY1mXw3GHBeET+kfJLcOlAQgYDuYZAITsImHr GS7L6783mkMjTBei3orSvd4bHPQsKxGhoJvjO+z92OrjPhtOAcaHuOp38a4aD+wG GP3czC9o7GEET6AfKX/cc84zsc5EiyStwPDDHF6uxUf2hLUQndLEtcAIqk6rjul0 4areO5rvoMQiBtgpDpuPU4BQ1wiLB9U= -----END CERTIFICATE-----Generated at Wed Aug 6 12:34:33 2025 by rpki-client