$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa File: bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa (raw, json) Hash identifier: zXr1AgUpaDS2VFyaiRy6rN+qauV9j6qVRVR5Q34CyvE= Subject key identifier: D9:F3:FE:E0:D1:50:B6:FA:02:7E:5C:06:1B:BE:FE:A0:6C:FC:3D:6D Certificate issuer: /CN=433ef7a7-1e53-4401-9dec-0da336641458 Certificate serial: 010D0C9F4328584AB220D376807BF8D74714F880 Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 26677 IP address blocks: 192.197.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:d3:76:80:7b:f8:d7:47:14:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=bb42f43f-79b3-4b68-b191-8373593cb68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c2:72:55:f7:42:ae:1f:51:b8:e0:36:e5:b4: 71:51:1c:2a:fd:6a:97:2d:a0:71:fd:c1:4a:19:fa: 4a:4b:bd:f3:24:9c:5f:42:9f:e2:45:d0:f4:a8:29: 65:d4:b0:2a:fe:f3:94:78:95:05:5b:78:f4:16:47: 90:75:98:c7:13:3d:5e:f6:25:7b:c4:17:35:44:13: a3:6f:11:a3:49:b3:ab:9a:e2:cf:41:04:3c:7a:d5: e7:51:44:d4:3f:91:63:45:f3:eb:1f:aa:eb:5a:86: 3f:aa:7f:1b:3a:3a:7f:c6:59:5f:9f:56:24:28:7f: 42:f5:60:2e:01:99:fb:30:11:96:c9:36:8b:a2:7b: 33:66:9b:71:a9:12:40:a3:7d:4d:9b:4b:c2:43:e9: b7:53:23:4c:a0:f2:f5:59:bc:16:ca:8e:a0:47:eb: c0:3e:46:a8:9c:f1:a8:77:3b:4e:18:7a:bf:b9:a5: e1:ac:84:30:d9:75:d4:bb:cd:70:1e:c4:84:32:7b: 2c:09:00:d6:a8:4f:c1:d4:7c:d2:2e:d5:e6:69:80: 0d:62:b3:29:fc:42:03:1d:79:82:4e:f0:4f:6f:af: 3d:c4:25:88:5a:84:83:6f:6b:dc:e7:e1:d5:c2:5b: 86:5b:d6:0d:80:42:ad:52:8d:b5:e4:2c:1f:e2:dc: bf:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F3:FE:E0:D1:50:B6:FA:02:7E:5C:06:1B:BE:FE:A0:6C:FC:3D:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl X509v3 Authority Key Identifier: keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer sbgp-ipAddrBlock: critical IPv4: 192.197.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a6:db:d3:ff:52:52:ce:74:ba:dd:4f:d2:cb:67:a6:f8:d8: 07:7a:1f:73:8b:d2:17:bf:e6:0d:0f:92:e3:24:dd:54:9a:c0: 66:e5:48:80:6d:db:4b:b9:c7:d1:85:21:c3:78:38:db:20:09: fb:d7:59:be:8d:ae:84:e7:5e:80:4b:2d:7e:75:39:8d:2c:98: 81:b4:45:4e:e3:31:98:58:bf:19:b6:9b:e1:b4:df:11:d1:51: 2d:2a:43:46:b2:98:22:9a:d7:69:00:6c:b7:ea:b4:a8:46:80: 37:1a:ca:99:d5:5b:d9:8d:9b:58:ab:ce:3b:7c:43:d5:e8:1b: 23:12:d1:af:b7:ee:14:6d:53:8a:f1:15:c3:99:18:b1:34:76: a5:8c:64:30:a0:23:84:96:b1:2b:0a:f0:ef:08:f8:0e:a0:7a: 0b:54:a3:ed:7e:1f:07:bb:06:36:11:9d:73:44:5c:e2:bf:b0: 03:8c:62:47:d3:b3:79:d3:6e:12:3d:85:48:3d:02:27:a6:09: c8:19:15:d0:0b:ff:95:9b:98:14:0d:be:b4:a4:ac:91:97:7b: 24:1b:b1:75:47:e5:c1:62:94:01:45:b8:3e:c8:6d:3e:fb:3d: b1:a4:d1:ae:ca:54:e4:62:c8:11:39:bc:bf:8b:02:d4:3a:c5: 1a:47:10:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyINN2gHv410cU+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMzZWY3YTctMWU1My00NDAxLTlkZWMtMGRhMzM2NjQx NDU4MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YmI0MmY0M2YtNzliMy00YjY4LWIxOTEtODM3MzU5M2NiNjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcJyVfdCrh9RuOA25bRxURwq/WqXLaBx/cFK GfpKS73zJJxfQp/iRdD0qCll1LAq/vOUeJUFW3j0FkeQdZjHEz1e9iV7xBc1RBOj bxGjSbOrmuLPQQQ8etXnUUTUP5FjRfPrH6rrWoY/qn8bOjp/xllfn1YkKH9C9WAu AZn7MBGWyTaLonszZptxqRJAo31Nm0vCQ+m3UyNMoPL1WbwWyo6gR+vAPkaonPGo dztOGHq/uaXhrIQw2XXUu81wHsSEMnssCQDWqE/B1HzSLtXmaYANYrMp/EIDHXmC TvBPb689xCWIWoSDb2vc5+HVwluGW9YNgEKtUo215Cwf4ty/WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnz/uDRULb6An5cBhu+/qBs/D1tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MzNl ZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEzMzY2NDE0NTgvYmMyYTA2ZWQtNzVkOS0z OTliLWE4OTctYzNlM2Y2Zjg5NjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDMzZWY3YTctMWU1My00NDAxLTlk ZWMtMGRhMzM2NjQxNDU4LzQzM2VmN2E3LTFlNTMtNDQwMS05ZGVjLTBkYTMzNjY0 MTQ1OC5jcmwwHwYDVR0jBBgwFoAUFTCIyvk9B4N8aQIO08npMxuWMBgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80MzNlZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEz MzY2NDE0NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMU8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGim29P/UlLOdLrdT9LLZ6b42Ad6H3OL0he/5g0PkuMk3VSawGblSIBt 20u5x9GFIcN4ONsgCfvXWb6NroTnXoBLLX51OY0smIG0RU7jMZhYvxm2m+G03xHR US0qQ0aymCKa12kAbLfqtKhGgDcaypnVW9mNm1irzjt8Q9XoGyMS0a+37hRtU4rx FcOZGLE0dqWMZDCgI4SWsSsK8O8I+A6gegtUo+1+Hwe7BjYRnXNEXOK/sAOMYkfT s3nTbhI9hUg9AiemCcgZFdAL/5WbmBQNvrSkrJGXeyQbsXVH5cFilAFFuD7IbT77 PbGk0a7KVORiyBE5vL+LAtQ6xRpHEAI= -----END CERTIFICATE-----Generated at Tue Aug 5 16:47:06 2025 by rpki-client