$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa File: 9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa (raw, json) Hash identifier: qCNJrHxzc5pvfzLyYMU6nP+Wfp+ML1BtCcloFxRDiww= Subject key identifier: FF:75:FB:FA:77:82:2C:B2:0A:F8:38:03:CF:3F:DF:F1:8E:B5:99:B2 Certificate issuer: /CN=052fe149-2c89-4322-a901-3a7f35c17350 Certificate serial: 010D0C9F4328584A7BB0B5F1BC5643CA48C5C780 Authority key identifier: 50:20:97:10:96:AD:7B:A9:07:D8:8D:4A:9C:90:3A:6E:F0:43:B9:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 3477 IP address blocks: 192.111.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:b5:f1:bc:56:43:ca:48:c5:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=052fe149-2c89-4322-a901-3a7f35c17350 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=94b6cbd9-1fe8-4188-a8aa-d468360f9dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:28:ad:40:9b:c7:ed:b1:2c:16:c6:e3:a3:61: 27:27:b0:af:d3:bb:80:86:16:19:d1:35:8d:50:6a: 53:02:5d:79:e7:2a:af:a5:63:b6:51:7c:a2:12:6b: 29:80:41:69:86:54:4f:50:ed:26:22:f1:d6:3f:23: 59:26:68:51:56:7a:7e:77:34:d5:f3:18:ba:0a:05: 37:57:b1:38:3f:85:06:e7:45:cd:56:05:da:d0:29: 78:b7:cf:9d:80:b2:c8:0c:15:ce:14:96:d9:d8:24: a4:c5:8c:eb:e7:d1:5d:76:fd:90:b1:ea:64:dd:f5: d2:5f:ab:95:28:8b:e9:73:7b:12:45:17:18:da:20: 3d:bf:f1:bf:04:9a:81:dc:d3:e2:71:a9:95:ac:bf: 65:a8:9b:e3:93:46:11:e0:64:08:b4:d2:10:fc:cb: 42:10:19:c6:e6:f4:4b:d0:bb:8c:89:2d:aa:91:1e: a8:0b:d7:58:eb:c8:a5:8f:70:a9:88:4c:03:40:5a: 71:64:34:61:d5:3e:ff:6a:18:2c:86:be:27:2d:8b: d4:c8:ff:de:e3:ba:92:69:4e:13:e8:69:cb:a0:91: ed:2f:c6:ca:8e:c8:ac:10:95:1b:e3:23:19:a7:15: bf:04:47:f0:2f:33:87:b3:1c:ba:37:a5:27:dd:a2: bf:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:75:FB:FA:77:82:2C:B2:0A:F8:38:03:CF:3F:DF:F1:8E:B5:99:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.crl X509v3 Authority Key Identifier: keyid:50:20:97:10:96:AD:7B:A9:07:D8:8D:4A:9C:90:3A:6E:F0:43:B9:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer sbgp-ipAddrBlock: critical IPv4: 192.111.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:12:00:dc:e1:2f:45:b0:5c:49:0d:64:64:a9:98:2b:9a:43: 76:ae:b2:6b:9b:b3:62:03:d9:b5:90:7d:e7:ff:dd:17:3f:7e: 3f:7a:9e:5a:08:5e:42:92:d4:ac:28:30:e7:bf:f3:d3:f1:07: b3:3d:ea:24:57:91:32:dc:71:32:66:dc:80:63:8e:d0:0a:e7: 3f:9b:3d:57:d0:e2:19:a7:24:ac:23:72:f3:04:30:a5:b8:29: e1:20:3e:36:a8:cf:09:ec:6e:ff:95:3d:5e:e0:45:17:15:02: 21:06:73:8a:28:99:ed:e6:06:3f:88:40:9e:d8:12:0b:18:97: 5b:34:3d:c2:92:ac:88:da:10:db:d5:56:19:01:8f:63:cd:80: 12:78:79:aa:ad:04:a9:ce:8a:14:f1:79:f9:d2:a0:d4:8b:48: df:36:21:c8:21:11:de:5d:09:4d:bb:b6:58:fa:18:3a:c6:94: a2:da:f6:7f:bc:bb:ca:cb:c3:5b:29:5c:98:9b:d8:76:92:42: 36:c4:fb:09:56:84:9b:f6:1c:1f:84:d4:f3:5f:40:6d:28:fd: 30:20:39:6b:a1:49:3e:63:57:f0:f1:32:1f:f9:a9:d6:68:81: 58:3b:85:4a:79:e8:6d:6d:69:57:d4:0f:06:3f:8f:ed:e0:68: 0d:8b:69:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sLXxvFZDykjFx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUyZmUxNDktMmM4OS00MzIyLWE5MDEtM2E3ZjM1YzE3 MzUwMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk OTRiNmNiZDktMWZlOC00MTg4LWE4YWEtZDQ2ODM2MGY5ZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCitQJvH7bEsFsbjo2EnJ7Cv07uAhhYZ0TWN UGpTAl155yqvpWO2UXyiEmspgEFphlRPUO0mIvHWPyNZJmhRVnp+dzTV8xi6CgU3 V7E4P4UG50XNVgXa0Cl4t8+dgLLIDBXOFJbZ2CSkxYzr59Fddv2Qsepk3fXSX6uV KIvpc3sSRRcY2iA9v/G/BJqB3NPicamVrL9lqJvjk0YR4GQItNIQ/MtCEBnG5vRL 0LuMiS2qkR6oC9dY68ilj3CpiEwDQFpxZDRh1T7/ahgshr4nLYvUyP/e47qSaU4T 6GnLoJHtL8bKjsisEJUb4yMZpxW/BEfwLzOHsxy6N6Un3aK/rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP91+/p3giyyCvg4A88/3/GOtZmyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wNTJm ZTE0OS0yYzg5LTQzMjItYTkwMS0zYTdmMzVjMTczNTAvOWNkNTU4MGYtNTg1Ny0z N2RlLWIzYzgtMzUzZDBlOWViOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDUyZmUxNDktMmM4OS00MzIyLWE5 MDEtM2E3ZjM1YzE3MzUwLzA1MmZlMTQ5LTJjODktNDMyMi1hOTAxLTNhN2YzNWMx NzM1MC5jcmwwHwYDVR0jBBgwFoAUUCCXEJate6kH2I1KnJA6bvBDuVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wNTJmZTE0OS0yYzg5LTQzMjItYTkwMS0zYTdm MzVjMTczNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG97MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQSANzhL0WwXEkNZGSpmCuaQ3ausmubs2ID2bWQfef/3Rc/fj96nloI XkKS1KwoMOe/89PxB7M96iRXkTLccTJm3IBjjtAK5z+bPVfQ4hmnJKwjcvMEMKW4 KeEgPjaozwnsbv+VPV7gRRcVAiEGc4oome3mBj+IQJ7YEgsYl1s0PcKSrIjaENvV VhkBj2PNgBJ4eaqtBKnOihTxefnSoNSLSN82IcghEd5dCU27tlj6GDrGlKLa9n+8 u8rLw1spXJib2HaSQjbE+wlWhJv2HB+E1PNfQG0o/TAgOWuhST5jV/DxMh/5qdZo gVg7hUp56G1taVfUDwY/j+3gaA2Lab8= -----END CERTIFICATE-----Generated at Wed Aug 6 07:52:46 2025 by rpki-client