$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/a082d65c-6976-35d6-be33-792a4918c345.roa File: a082d65c-6976-35d6-be33-792a4918c345.roa (raw, json) Hash identifier: Mek9IDzS1ZaYo+meqB109hwrWnJIZ3to+HAYCprJk9w= Subject key identifier: 13:78:C4:13:52:7C:16:9C:68:06:63:97:76:DF:8F:4C:9F:98:CB:09 Certificate issuer: /CN=b3987a02-9eb3-4f88-8e9a-2ba550c3443b Certificate serial: 010D0C9F4328584A225AC8B2CC521A72826B3020 Authority key identifier: 40:5B:36:0F:E0:F0:2C:0B:07:E0:17:4B:4F:A4:66:7A:2F:2F:C4:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/a082d65c-6976-35d6-be33-792a4918c345.roa Signing time: Mon 09 Jun 2025 13:01:01 +0000 ROA not before: Mon 09 Jun 2025 13:01:01 +0000 ROA not after: Sun 07 Sep 2025 13:01:01 +0000 asID: 394438 IP address blocks: 192.163.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:5a:c8:b2:cc:52:1a:72:82:6b:30:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3987a02-9eb3-4f88-8e9a-2ba550c3443b Validity Not Before: Jun 9 13:01:01 2025 GMT Not After : Sep 7 13:01:01 2025 GMT Subject: CN=04903148-275f-40fb-a9ca-5a1a80205b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2a:9d:ac:b0:d0:b7:89:7c:9b:e0:06:83:de: c6:d7:bf:72:9c:84:cf:f1:c0:47:6d:4f:28:2c:51: cf:b2:c0:24:c0:58:f1:86:67:6a:10:d2:f4:bf:7c: e7:5b:53:fb:59:d6:11:aa:73:fd:5b:d1:cd:f5:fe: 45:d0:cb:d2:43:3a:1e:16:e5:79:3f:da:c2:54:c2: e2:29:fa:94:0f:bb:78:66:d1:24:8a:56:79:a0:52: 5c:1e:d3:f3:0b:a0:68:74:e2:27:95:e9:dd:8e:3a: 61:4d:97:ed:73:46:7b:2f:85:18:25:7b:8f:b4:07: 99:7d:ec:47:13:c5:bd:5d:ff:65:13:40:26:ec:26: 67:1c:62:e6:bd:eb:d9:5b:5c:c4:c0:76:88:91:9b: ec:02:c5:0c:7c:3f:34:6c:2f:a7:26:a1:f9:14:f8: 9d:a9:0a:38:1a:01:6a:a4:a7:53:81:b8:78:58:6e: 9f:1e:b5:f9:1a:3d:88:54:fb:08:5b:75:3b:da:57: f5:b9:b1:6b:56:32:41:43:af:af:04:4c:51:05:0f: 89:42:52:36:81:66:c8:c3:c1:84:81:af:ab:17:5f: ae:28:02:70:71:91:81:3d:01:73:d9:84:c4:34:b5: ef:c7:92:ed:0c:b8:54:f9:54:d2:06:99:a2:20:d7: bb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:78:C4:13:52:7C:16:9C:68:06:63:97:76:DF:8F:4C:9F:98:CB:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/a082d65c-6976-35d6-be33-792a4918c345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.crl X509v3 Authority Key Identifier: keyid:40:5B:36:0F:E0:F0:2C:0B:07:E0:17:4B:4F:A4:66:7A:2F:2F:C4:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer sbgp-ipAddrBlock: critical IPv4: 192.163.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:9a:72:84:57:86:43:18:ba:65:23:13:f9:96:db:9e:79:e6: 37:c3:72:72:34:8a:68:cc:87:b0:e4:46:74:28:6e:6d:46:39: e0:8f:0a:42:f4:7a:6a:96:9c:b8:83:b1:e6:d2:45:99:69:c4: 38:99:16:a7:e0:74:ec:04:ab:d4:9d:58:ad:fe:52:cb:7e:61: 4f:04:fe:e4:17:92:94:b5:7a:00:8e:ee:5d:d5:ff:db:77:64: a6:d3:e4:ea:90:31:50:8a:62:9a:b4:64:9b:b5:da:94:54:0e: 56:f2:48:75:01:c7:2c:17:98:11:e6:06:d8:c6:d6:82:3c:d5: 46:56:46:10:57:d0:1c:33:07:50:a9:4d:c5:3a:5f:ff:a8:5c: 91:27:6a:9f:69:0f:a8:13:19:c2:66:7a:8b:88:4a:59:f4:6f: 81:78:2c:c1:bb:87:63:56:89:e5:8e:6f:e8:be:08:a3:8c:10: ad:46:cb:ac:cb:7f:cd:7e:4c:50:9a:6f:c4:10:85:b0:fc:01: f8:98:7d:40:23:32:a8:20:11:0f:af:b3:61:64:46:95:54:b9: 5f:eb:12:58:64:fd:2f:84:b2:6d:13:f6:a3:63:85:1e:11:a6: b0:6c:c1:b8:cf:4f:a7:2c:56:7b:fd:5c:48:eb:6c:9d:03:b4: ba:6c:a9:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoiWsiyzFIacoJrMCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM5ODdhMDItOWViMy00Zjg4LThlOWEtMmJhNTUwYzM0 NDNiMB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk MDQ5MDMxNDgtMjc1Zi00MGZiLWE5Y2EtNWExYTgwMjA1YjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iqdrLDQt4l8m+AGg97G179ynITP8cBHbU8o LFHPssAkwFjxhmdqENL0v3znW1P7WdYRqnP9W9HN9f5F0MvSQzoeFuV5P9rCVMLi KfqUD7t4ZtEkilZ5oFJcHtPzC6BodOInlendjjphTZftc0Z7L4UYJXuPtAeZfexH E8W9Xf9lE0Am7CZnHGLmvevZW1zEwHaIkZvsAsUMfD80bC+nJqH5FPidqQo4GgFq pKdTgbh4WG6fHrX5Gj2IVPsIW3U72lf1ubFrVjJBQ6+vBExRBQ+JQlI2gWbIw8GE ga+rF1+uKAJwcZGBPQFz2YTENLXvx5LtDLhU+VTSBpmiINe75QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBN4xBNSfBacaAZjl3bfj0yfmMsJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iMzk4 N2EwMi05ZWIzLTRmODgtOGU5YS0yYmE1NTBjMzQ0M2IvYTA4MmQ2NWMtNjk3Ni0z NWQ2LWJlMzMtNzkyYTQ5MThjMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjM5ODdhMDItOWViMy00Zjg4LThl OWEtMmJhNTUwYzM0NDNiL2IzOTg3YTAyLTllYjMtNGY4OC04ZTlhLTJiYTU1MGMz NDQzYi5jcmwwHwYDVR0jBBgwFoAUQFs2D+DwLAsH4BdLT6Rmei8vxBkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iMzk4N2EwMi05ZWIzLTRmODgtOGU5YS0yYmE1 NTBjMzQ0M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6acoRXhkMYumUjE/mW25555jfDcnI0imjMh7DkRnQobm1GOeCPCkL0 emqWnLiDsebSRZlpxDiZFqfgdOwEq9SdWK3+Ust+YU8E/uQXkpS1egCO7l3V/9t3 ZKbT5OqQMVCKYpq0ZJu12pRUDlbySHUBxywXmBHmBtjG1oI81UZWRhBX0BwzB1Cp TcU6X/+oXJEnap9pD6gTGcJmeouISln0b4F4LMG7h2NWieWOb+i+CKOMEK1Gy6zL f81+TFCab8QQhbD8AfiYfUAjMqggEQ+vs2FkRpVUuV/rElhk/S+Esm0T9qNjhR4R prBswbjPT6csVnv9XEjrbJ0DtLpsqQk= -----END CERTIFICATE-----Generated at Sun Jun 15 16:04:31 2025 by rpki-client