$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/25438931-47eb-3745-8de8-a5736ce96be0.roa File: 25438931-47eb-3745-8de8-a5736ce96be0.roa (raw, json) Hash identifier: GX54J+nJTisldjVR93Kn88oQ8YXiZ4ViOSkDHftptC0= Subject key identifier: A8:9D:E8:82:CE:16:D9:CF:BB:27:14:90:79:B3:54:2E:CD:EC:DF:62 Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Certificate serial: 010D0C9F4328584AADF112E966AE588103D59C80 Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/25438931-47eb-3745-8de8-a5736ce96be0.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 30148 IP address blocks: 192.88.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:12:e9:66:ae:58:81:03:d5:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=e1fd80d7-59d8-42e7-b6d1-b38b15bd22c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c9:50:3f:06:d7:ac:b3:52:c5:39:d3:c8:fd: 37:62:51:b9:f7:30:fd:1d:e8:b5:87:96:7e:8d:d1: b6:b9:ba:b2:7c:6d:45:18:70:68:a0:c4:52:7e:93: 6c:9b:81:b6:bc:ec:8e:2b:53:6b:b9:ee:2c:f4:44: 2a:7c:ac:24:d8:f9:d3:f7:10:f8:23:bf:e7:f2:60: b9:7e:1e:60:6b:8e:fb:0b:3c:c6:bd:e0:95:0e:f4: f4:ad:cd:9e:27:e8:a4:87:99:ef:f2:e1:7f:22:c1: d5:26:bd:3f:6e:3d:0e:2e:61:09:9c:13:02:0e:13: 05:3b:a3:f4:70:fa:94:ca:12:9f:7a:2f:f9:ba:0e: ae:a6:3b:df:43:34:10:45:d8:c7:0a:6b:58:8c:ee: ab:54:f5:fd:9b:69:15:48:67:31:c3:3d:89:bd:13: ba:97:7f:a6:31:0e:5a:b2:4d:77:b0:c6:97:9f:61: 95:90:85:2f:a3:91:c9:eb:a2:e6:dd:4a:45:18:c3: a8:b6:0f:bf:10:7f:bd:23:20:b7:68:6d:dd:80:8f: f0:8f:75:32:6e:3d:e3:fa:07:cf:a1:f9:77:66:a0: d3:01:3d:52:dc:a1:84:e7:62:f1:8b:16:29:26:ca: 80:08:79:b0:f1:32:02:30:ad:26:2b:52:3f:49:ea: 1a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9D:E8:82:CE:16:D9:CF:BB:27:14:90:79:B3:54:2E:CD:EC:DF:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/25438931-47eb-3745-8de8-a5736ce96be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl X509v3 Authority Key Identifier: keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer sbgp-ipAddrBlock: critical IPv4: 192.88.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:94:dd:70:e2:f5:15:94:97:55:e3:c7:df:68:50:05:6f:4c: 5e:87:c8:13:09:7c:15:fe:9b:12:95:20:ec:55:e7:30:ff:fa: 6a:56:f4:4c:19:87:fb:69:83:db:91:40:a7:e7:0a:a0:bb:0f: 5f:4f:ae:a6:9a:93:6b:8d:10:ae:db:8a:55:df:81:d2:c7:87: 9d:a0:24:57:c2:84:92:ed:f9:ea:84:e6:0e:a8:db:bf:ac:70: 5f:7b:85:ba:72:bf:be:99:03:bc:24:aa:e0:6b:ad:f2:fe:c2: 15:ef:6e:45:5d:89:23:b3:b1:2a:fc:68:6a:1a:13:50:fa:5c: b3:e8:df:e5:a9:37:2b:78:c0:62:b6:77:f0:79:7f:be:2e:35: 76:9d:fd:14:22:9c:3e:53:94:5c:1d:56:9f:f0:c5:b4:3d:f4: 82:27:18:4d:ec:04:71:a7:bf:fb:21:f2:0a:34:53:1f:2a:f9: 8a:67:db:a1:47:5f:84:5f:32:1d:eb:dd:dd:d8:bd:53:4d:8b: 43:82:ad:9d:01:3d:dd:e8:61:72:42:8f:27:a0:26:4d:c5:4e: 85:4c:6b:ef:a1:1f:44:ad:2c:dd:ce:ae:29:3b:06:dc:cf:be: 07:8d:13:a3:09:70:89:de:a8:e2:c4:5b:ad:02:a1:95:9f:bd: 5b:0f:89:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8RLpZq5YgQPVnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1OTg5ZTQtZGFlMC00YTA2LTgzYTEtMGNlNzEwNDQy N2EwMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZTFmZDgwZDctNTlkOC00MmU3LWI2ZDEtYjM4YjE1YmQyMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArslQPwbXrLNSxTnTyP03YlG59zD9Hei1h5Z+ jdG2ubqyfG1FGHBooMRSfpNsm4G2vOyOK1Nrue4s9EQqfKwk2PnT9xD4I7/n8mC5 fh5ga477CzzGveCVDvT0rc2eJ+ikh5nv8uF/IsHVJr0/bj0OLmEJnBMCDhMFO6P0 cPqUyhKfei/5ug6upjvfQzQQRdjHCmtYjO6rVPX9m2kVSGcxwz2JvRO6l3+mMQ5a sk13sMaXn2GVkIUvo5HJ66Lm3UpFGMOotg+/EH+9IyC3aG3dgI/wj3Uybj3j+gfP ofl3ZqDTAT1S3KGE52LxixYpJsqACHmw8TICMK0mK1I/SeoaawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKid6ILOFtnPuycUkHmzVC7N7N9iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5 ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3MTA0NDI3YTAvMjU0Mzg5MzEtNDdlYi0z NzQ1LThkZTgtYTU3MzZjZTk2YmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzg1OTg5ZTQtZGFlMC00YTA2LTgz YTEtMGNlNzEwNDQyN2EwL2M4NTk4OWU0LWRhZTAtNGEwNi04M2ExLTBjZTcxMDQ0 MjdhMC5jcmwwHwYDVR0jBBgwFoAUmTHFPg8NlLOYQPQPd1wZThW+8iEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3 MTA0NDI3YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFiGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANuU3XDi9RWUl1Xjx99oUAVvTF6HyBMJfBX+mxKVIOxV5zD/+mpW9EwZ h/tpg9uRQKfnCqC7D19Prqaak2uNEK7bilXfgdLHh52gJFfChJLt+eqE5g6o27+s cF97hbpyv76ZA7wkquBrrfL+whXvbkVdiSOzsSr8aGoaE1D6XLPo3+WpNyt4wGK2 d/B5f74uNXad/RQinD5TlFwdVp/wxbQ99IInGE3sBHGnv/sh8go0Ux8q+Ypn26FH X4RfMh3r3d3YvVNNi0OCrZ0BPd3oYXJCjyegJk3FToVMa++hH0StLN3Orik7BtzP vgeNE6MJcIneqOLEW60CoZWfvVsPiQs= -----END CERTIFICATE-----Generated at Thu Aug 7 05:02:48 2025 by rpki-client