$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/df2cee95-de7a-3927-bd16-cfe30335ff40.roa File: df2cee95-de7a-3927-bd16-cfe30335ff40.roa (raw, json) Hash identifier: fVEuI+0yLeCcdjYu1DClhJ0bMyPN/fKp5v0hfAsRMDE= Subject key identifier: D4:34:93:D5:2B:17:D4:12:57:1B:BF:E7:66:44:C0:96:CF:A2:09:10 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A363FF72CE061A96650C4EE40 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/df2cee95-de7a-3927-bd16-cfe30335ff40.roa Signing time: Mon 16 Jun 2025 16:03:18 +0000 ROA not before: Mon 16 Jun 2025 16:03:18 +0000 ROA not after: Sun 14 Sep 2025 16:03:18 +0000 asID: 81 IP address blocks: 192.154.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:3f:f7:2c:e0:61:a9:66:50:c4:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Jun 16 16:03:18 2025 GMT Not After : Sep 14 16:03:18 2025 GMT Subject: CN=895d37ed-9e0c-4c30-90c3-5fcb435f6f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bb:a5:f8:66:21:9e:db:e5:56:08:bb:34:fa: 57:67:79:09:94:a5:c5:58:45:54:b7:04:b6:a6:21: 39:31:3f:1a:08:ae:8c:1c:26:ea:7b:ce:42:29:fe: 3a:49:3d:6e:0a:e8:49:9b:a3:33:30:79:cb:52:2f: 82:97:aa:55:60:b2:bf:ea:54:90:e9:b1:ef:c5:14: 72:7e:4b:e5:c5:69:07:8f:25:ea:ff:d1:b5:aa:83: cb:bc:f0:a1:c2:e7:61:7d:53:fd:b1:b3:15:78:98: af:33:0c:37:23:fb:95:07:aa:6b:88:ed:c6:c5:cc: 6d:10:78:08:bc:f6:85:e0:8b:bb:16:2e:fc:40:bb: 4d:bb:bf:64:b6:c9:73:df:04:d7:b7:ba:de:01:a4: 16:49:cc:b6:ef:25:80:5c:cb:f8:5c:b7:3e:e1:38: aa:2e:bc:4c:28:67:be:31:89:ec:4d:bc:2b:4a:a3: 05:3e:e4:9a:c1:01:d5:a6:d9:89:e3:d4:e1:30:b5: b1:fc:38:5d:e6:ac:f9:4f:52:d3:5e:50:74:d5:4c: bc:b2:84:39:b1:fc:ed:f1:ce:d9:7c:ce:45:c4:32: a7:b3:a4:d1:dc:f8:fe:f7:aa:5e:2d:e3:a2:e8:32: e4:7c:42:c6:9f:8b:85:f3:87:f4:1b:f3:0c:1e:e4: ab:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:34:93:D5:2B:17:D4:12:57:1B:BF:E7:66:44:C0:96:CF:A2:09:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/df2cee95-de7a-3927-bd16-cfe30335ff40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 192.154.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:29:c7:9a:c2:c7:ba:37:c4:15:61:35:06:ca:4e:4f:49:6b: 76:67:38:d3:16:f2:7f:fa:c2:55:21:7e:1a:74:ec:25:91:22: c3:e6:48:20:d0:e6:c8:56:e9:f7:04:d9:47:87:87:11:c0:6a: a2:1f:32:e7:2e:13:7f:2e:b4:75:04:34:7a:2c:fc:65:ca:95: 3c:2a:27:ca:d3:b8:d1:5b:91:cf:50:f6:0d:cc:41:05:78:08: ae:b7:21:55:e1:c9:6e:97:b8:36:01:5f:f3:6b:3c:e2:67:bc: 3b:0b:16:2c:4a:19:64:24:21:1d:d8:f0:8b:96:05:53:52:45: 14:99:a2:76:67:f6:25:c4:f3:3d:02:ba:f1:a2:3b:96:97:53: 60:3a:56:15:4a:2b:dc:b8:c6:02:9e:26:b3:61:2b:03:dc:24: 0e:1d:d6:85:90:ff:9c:51:1e:22:9a:cf:21:2e:5f:86:61:fb: c7:a5:a4:4c:cc:d3:c3:34:71:41:83:53:fb:c0:5b:46:69:e8: a7:7a:95:f0:f9:1b:60:bd:4f:02:c0:0f:4c:fb:49:b3:09:db: e3:79:47:e0:a6:e7:be:d1:82:ce:58:ba:42:43:d7:18:b7:dc: 78:4c:61:80:4c:57:5d:24:57:f4:e8:a5:a4:75:f9:42:9c:f2: d4:cf:54:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo2P/cs4GGpZlDE7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDYxNjE2MDMxOFoXDTI1MDkxNDE2MDMxOFowLzEtMCsGA1UEAxMk ODk1ZDM3ZWQtOWUwYy00YzMwLTkwYzMtNWZjYjQzNWY2ZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLul+GYhntvlVgi7NPpXZ3kJlKXFWEVUtwS2 piE5MT8aCK6MHCbqe85CKf46ST1uCuhJm6MzMHnLUi+Cl6pVYLK/6lSQ6bHvxRRy fkvlxWkHjyXq/9G1qoPLvPChwudhfVP9sbMVeJivMww3I/uVB6priO3GxcxtEHgI vPaF4Iu7Fi78QLtNu79ktslz3wTXt7reAaQWScy27yWAXMv4XLc+4TiqLrxMKGe+ MYnsTbwrSqMFPuSawQHVptmJ49ThMLWx/Dhd5qz5T1LTXlB01Uy8soQ5sfzt8c7Z fM5FxDKns6TR3Pj+96peLeOi6DLkfELGn4uF84f0G/MMHuSrKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQ0k9UrF9QSVxu/52ZEwJbPogkQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZGYyY2VlOTUtZGU3YS0z OTI3LWJkMTYtY2ZlMzAzMzVmZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIApx5rCx7o3xBVhNQbKTk9Ja3ZnONMW8n/6wlUhfhp07CWRIsPmSCDQ 5shW6fcE2UeHhxHAaqIfMucuE38utHUENHos/GXKlTwqJ8rTuNFbkc9Q9g3MQQV4 CK63IVXhyW6XuDYBX/NrPOJnvDsLFixKGWQkIR3Y8IuWBVNSRRSZonZn9iXE8z0C uvGiO5aXU2A6VhVKK9y4xgKeJrNhKwPcJA4d1oWQ/5xRHiKazyEuX4Zh+8elpEzM 08M0cUGDU/vAW0Zp6Kd6lfD5G2C9TwLAD0z7SbMJ2+N5R+Cm577Rgs5YukJD1xi3 3HhMYYBMV10kV/TopaR1+UKc8tTPVEs= -----END CERTIFICATE-----Generated at Tue Jun 17 18:00:00 2025 by rpki-client