$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e5bf948d-3374-4f00-a644-72f834e81382/e7715a5f-8678-3eba-a4d7-5c726e7cd137.roa File: e7715a5f-8678-3eba-a4d7-5c726e7cd137.roa (raw, json) Hash identifier: CvrcvvFONOHH5LAVRip1lFF1U8RHfTOOm+n6PNFqg40= Subject key identifier: FF:BD:0D:60:E9:94:13:8C:1B:6F:56:54:18:B3:D9:02:AB:D9:63:9E Certificate issuer: /CN=e5bf948d-3374-4f00-a644-72f834e81382 Certificate serial: 010D0C9F4328584A7E7B5D1A542ADB91800B9FA0 Authority key identifier: A0:CE:F9:97:AD:25:A3:1F:82:94:A2:BC:21:A8:13:E4:50:72:9A:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e5bf948d-3374-4f00-a644-72f834e81382.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e5bf948d-3374-4f00-a644-72f834e81382/e7715a5f-8678-3eba-a4d7-5c726e7cd137.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 192.195.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e5bf948d-3374-4f00-a644-72f834e81382/e5bf948d-3374-4f00-a644-72f834e81382.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e5bf948d-3374-4f00-a644-72f834e81382/e5bf948d-3374-4f00-a644-72f834e81382.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e5bf948d-3374-4f00-a644-72f834e81382.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:5d:1a:54:2a:db:91:80:0b:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5bf948d-3374-4f00-a644-72f834e81382 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=b01a3c17-8306-4bde-a1bc-445d3b6b2e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:35:f7:b4:24:59:a0:93:f1:89:57:4a:67:ec: 4e:67:4f:5c:21:61:0a:12:ed:8f:86:13:68:99:60: f8:02:30:c4:e5:2f:50:87:97:91:1f:0e:d4:71:54: 34:79:cf:2d:c7:10:51:4f:7b:24:23:ec:83:e5:64: b0:c9:be:25:29:31:bc:5d:53:1a:05:2b:1c:69:f7: cd:85:c7:2f:bb:93:65:a4:08:81:69:35:34:39:e9: b9:dd:1f:75:44:29:01:c5:b8:b5:d8:eb:43:66:d3: e0:45:a1:bd:a3:ae:bd:d5:19:cd:db:8f:68:fd:7a: 7c:34:e6:ad:28:1f:47:9a:c7:1e:74:cf:2e:57:94: fa:42:10:6a:9d:c7:09:c7:c5:45:2c:d6:04:e9:89: e5:fd:ff:a2:2a:e7:30:a9:58:0a:6f:e6:46:90:6b: de:0c:b7:7c:70:3a:bb:d4:ac:2a:39:ec:ad:a1:b6: 4e:11:1a:9f:74:88:d9:79:e5:1b:13:80:92:6e:cd: bb:e2:8b:17:c4:7e:59:5c:3c:9b:5f:58:77:89:44: a9:44:1a:30:fe:e2:3e:af:ee:b8:0d:1f:15:76:6d: 78:93:2d:2d:93:0c:32:8a:35:6b:65:9e:e6:50:36: 74:f5:a8:78:10:a5:3a:a5:e1:75:60:06:2c:33:fe: 84:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BD:0D:60:E9:94:13:8C:1B:6F:56:54:18:B3:D9:02:AB:D9:63:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e5bf948d-3374-4f00-a644-72f834e81382/e7715a5f-8678-3eba-a4d7-5c726e7cd137.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e5bf948d-3374-4f00-a644-72f834e81382/e5bf948d-3374-4f00-a644-72f834e81382.crl X509v3 Authority Key Identifier: keyid:A0:CE:F9:97:AD:25:A3:1F:82:94:A2:BC:21:A8:13:E4:50:72:9A:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e5bf948d-3374-4f00-a644-72f834e81382.cer sbgp-ipAddrBlock: critical IPv4: 192.195.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:29:99:57:eb:c3:a2:31:4f:6d:01:5f:3e:3f:94:63:97:27: ad:44:8d:1d:70:70:e3:cb:33:05:97:80:08:47:bd:6a:2c:f1: 90:9f:bf:fb:53:21:c8:89:6e:fd:be:31:8f:6c:f2:79:ca:67: 78:17:6b:d7:51:2a:a2:38:f7:c0:26:fd:d0:8d:a3:c4:56:f5: 95:92:92:8e:13:6d:bf:35:41:a3:74:f0:d4:a5:ce:22:2e:07: 7c:d6:ff:88:d0:2c:fa:de:b9:8f:be:39:ac:20:a5:c0:00:73: c2:bb:07:96:e5:37:7b:8a:fe:b4:f8:bc:d1:ad:d6:6c:fa:91: 9a:57:ae:63:2b:00:17:d9:1e:81:e1:42:49:20:e2:36:98:bf: 9b:b7:6b:79:c8:0c:19:60:2d:23:d5:cd:cd:71:0c:7e:2d:27: 18:6f:e5:b6:38:f2:ac:68:4d:f2:59:45:99:3e:22:b9:f5:59: 32:1b:de:6e:25:77:f1:a3:0a:26:00:f5:fa:74:ba:d9:40:f5: d9:6e:f1:31:3e:61:68:06:ba:10:23:31:d3:69:1d:99:37:7e: 4e:e8:fb:97:b0:9c:82:0f:cb:76:ad:43:0d:69:46:3b:99:5e: 69:bc:00:b1:55:27:8c:8d:28:28:c3:4d:7b:1b:84:11:14:04: 35:44:1b:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e10aVCrbkYALn6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTViZjk0OGQtMzM3NC00ZjAwLWE2NDQtNzJmODM0ZTgx MzgyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk YjAxYTNjMTctODMwNi00YmRlLWExYmMtNDQ1ZDNiNmIyZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTX3tCRZoJPxiVdKZ+xOZ09cIWEKEu2PhhNo mWD4AjDE5S9Qh5eRHw7UcVQ0ec8txxBRT3skI+yD5WSwyb4lKTG8XVMaBSscaffN hccvu5NlpAiBaTU0Oem53R91RCkBxbi12OtDZtPgRaG9o6691RnN249o/Xp8NOat KB9HmscedM8uV5T6QhBqnccJx8VFLNYE6Ynl/f+iKucwqVgKb+ZGkGveDLd8cDq7 1KwqOeytobZOERqfdIjZeeUbE4CSbs274osXxH5ZXDybX1h3iUSpRBow/uI+r+64 DR8Vdm14ky0tkwwyijVrZZ7mUDZ09ah4EKU6peF1YAYsM/6EkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+9DWDplBOMG29WVBiz2QKr2WOeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lNWJm OTQ4ZC0zMzc0LTRmMDAtYTY0NC03MmY4MzRlODEzODIvZTc3MTVhNWYtODY3OC0z ZWJhLWE0ZDctNWM3MjZlN2NkMTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTViZjk0OGQtMzM3NC00ZjAwLWE2 NDQtNzJmODM0ZTgxMzgyL2U1YmY5NDhkLTMzNzQtNGYwMC1hNjQ0LTcyZjgzNGU4 MTM4Mi5jcmwwHwYDVR0jBBgwFoAUoM75l60lox+ClKK8IagT5FBymtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lNWJmOTQ4ZC0zMzc0LTRmMDAtYTY0NC03MmY4 MzRlODEzODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMP7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMpmVfrw6IxT20BXz4/lGOXJ61EjR1wcOPLMwWXgAhHvWos8ZCfv/tT IciJbv2+MY9s8nnKZ3gXa9dRKqI498Am/dCNo8RW9ZWSko4Tbb81QaN08NSlziIu B3zW/4jQLPreuY++OawgpcAAc8K7B5blN3uK/rT4vNGt1mz6kZpXrmMrABfZHoHh Qkkg4jaYv5u3a3nIDBlgLSPVzc1xDH4tJxhv5bY48qxoTfJZRZk+Irn1WTIb3m4l d/GjCiYA9fp0utlA9dlu8TE+YWgGuhAjMdNpHZk3fk7o+5ewnIIPy3atQw1pRjuZ Xmm8ALFVJ4yNKCjDTXsbhBEUBDVEGy0= -----END CERTIFICATE-----Generated at Wed Aug 6 05:12:32 2025 by rpki-client