$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/b51ec417-f848-3dcb-9fd9-9674c9833110.roa File: b51ec417-f848-3dcb-9fd9-9674c9833110.roa (raw, json) Hash identifier: HAJiIP8rvoE/lAOBQhuYk529I4LJbxe9HnK5a+jF0D0= Subject key identifier: AD:B9:26:DF:D3:B5:AA:33:40:3A:96:71:34:18:7B:B1:96:5D:D1:73 Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Certificate serial: 010D0C9F4328584A682605CD34F5CB44FCC33900 Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/b51ec417-f848-3dcb-9fd9-9674c9833110.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 395567 IP address blocks: 192.111.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:05:cd:34:f5:cb:44:fc:c3:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=5791e315-e78a-4aaa-9e6f-00315efff226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:67:1c:79:9f:44:dc:d4:d6:2a:c3:61:53:92: ef:dc:d4:6f:69:5a:e8:c3:b4:08:92:9e:1a:50:e8: 89:71:92:fe:d5:15:9b:84:bc:b3:3e:a0:c3:3a:75: f9:02:f1:b7:85:16:6d:99:67:1a:52:64:a2:ea:ef: 90:60:01:d4:f3:ad:cc:3c:64:99:82:27:c4:54:f6: d3:7a:51:a9:5d:ae:e2:f9:d4:ca:63:5e:a9:f3:02: d2:a6:2b:12:35:55:a5:33:a6:79:91:ee:b8:94:97: f9:cd:61:c8:c9:bf:b0:d3:0d:0a:c8:3c:ae:e7:9d: 9b:d2:0c:d4:11:09:f8:df:5a:16:b8:95:ac:a3:5f: e1:0d:c3:38:e7:fb:ce:8b:c1:21:38:21:34:d6:97: c6:97:55:0c:3d:5d:e0:4f:a9:4a:d4:10:37:5e:bd: 43:f5:92:8e:42:6e:b8:8f:30:97:f6:e3:4f:0c:72: b8:af:c0:c8:76:d9:ab:68:c0:aa:b8:df:d9:93:4c: 5d:99:7e:55:22:09:22:66:fd:e9:f5:3c:6c:ab:4a: 0d:08:a5:47:e1:db:c5:5d:f7:e0:ae:69:30:06:e7: d1:c2:0c:70:f7:fa:6f:3a:50:99:4f:d3:50:fc:c2: 2e:c9:76:9f:a6:69:12:23:9d:82:3e:23:c6:95:de: 5b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B9:26:DF:D3:B5:AA:33:40:3A:96:71:34:18:7B:B1:96:5D:D1:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/b51ec417-f848-3dcb-9fd9-9674c9833110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl X509v3 Authority Key Identifier: keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer sbgp-ipAddrBlock: critical IPv4: 192.111.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:d8:3b:46:37:6b:48:29:c3:5b:48:de:89:ce:e1:a3:0c:dc: 26:cf:45:bc:b6:fc:72:46:a6:f1:b4:91:3b:41:c9:e5:53:27: 6f:83:e5:c3:c1:01:3c:93:23:80:f8:12:96:23:1f:d7:18:8e: d8:f8:9e:3d:90:d2:a4:10:08:50:db:2a:1a:49:5b:8d:87:46: 34:56:1c:09:0e:d1:10:e3:cb:74:82:c0:f5:17:1b:b1:7d:61: 75:0f:73:b7:e3:80:38:a6:11:31:97:f8:89:3a:bb:4f:68:24: 0a:37:a2:0e:fb:ab:31:80:f5:b2:8e:06:ed:56:f7:8a:51:4e: 6e:a6:f9:63:d4:db:42:34:fb:12:31:66:2b:7e:a1:b0:05:d8: fb:c3:b1:e8:cb:69:a3:1f:67:2e:a8:50:e7:27:e3:e4:b2:20: 38:af:c8:f5:11:d5:2b:d9:08:6a:4b:5a:f5:66:1b:86:c9:2e: 01:19:dc:5a:54:5c:cc:2d:33:8e:fe:fe:07:a9:b5:49:e1:23: 27:f5:9f:3e:19:9e:e5:0e:b7:27:ce:32:6a:a8:5d:7c:f1:f8: 7b:22:1a:00:e3:3f:03:20:ea:c6:fa:ce:cd:cb:c2:5e:72:d8: 00:de:12:ef:9b:66:f2:25:9f:c2:35:94:71:38:71:36:8c:65: 6b:7e:a6:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgXNNPXLRPzDOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3 Y2IzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NTc5MWUzMTUtZTc4YS00YWFhLTllNmYtMDAzMTVlZmZmMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmcceZ9E3NTWKsNhU5Lv3NRvaVrow7QIkp4a UOiJcZL+1RWbhLyzPqDDOnX5AvG3hRZtmWcaUmSi6u+QYAHU863MPGSZgifEVPbT elGpXa7i+dTKY16p8wLSpisSNVWlM6Z5ke64lJf5zWHIyb+w0w0KyDyu552b0gzU EQn431oWuJWso1/hDcM45/vOi8EhOCE01pfGl1UMPV3gT6lK1BA3Xr1D9ZKOQm64 jzCX9uNPDHK4r8DIdtmraMCquN/Zk0xdmX5VIgkiZv3p9Txsq0oNCKVH4dvFXffg rmkwBufRwgxw9/pvOlCZT9NQ/MIuyXafpmkSI52CPiPGld5bGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK25Jt/TtaozQDqWcTQYe7GWXdFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3 YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvYjUxZWM0MTctZjg0OC0z ZGNiLTlmZDktOTY3NGM5ODMzMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2 MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwG8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLYO0Y3a0gpw1tI3onO4aMM3CbPRby2/HJGpvG0kTtByeVTJ2+D5cPB ATyTI4D4EpYjH9cYjtj4nj2Q0qQQCFDbKhpJW42HRjRWHAkO0RDjy3SCwPUXG7F9 YXUPc7fjgDimETGX+Ik6u09oJAo3og77qzGA9bKOBu1W94pRTm6m+WPU20I0+xIx Zit+obAF2PvDsejLaaMfZy6oUOcn4+SyIDivyPUR1SvZCGpLWvVmG4bJLgEZ3FpU XMwtM47+/geptUnhIyf1nz4ZnuUOtyfOMmqoXXzx+HsiGgDjPwMg6sb6zs3Lwl5y 2ADeEu+bZvIln8I1lHE4cTaMZWt+pg8= -----END CERTIFICATE-----Generated at Thu Aug 7 12:51:07 2025 by rpki-client