$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa File: 2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa (raw, json) Hash identifier: FI0re0lN6iuyoWGLlGsJa9Wm6fmgVs2gjQere+5vj+o= Subject key identifier: 38:99:64:57:C5:9D:87:F8:35:E1:0C:1D:85:22:99:20:C6:79:27:BB Certificate issuer: /CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc Certificate serial: 010D0C9F4328584AADF106AB870429FFE863AA00 Authority key identifier: 9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 192.58.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:06:ab:87:04:29:ff:e8:63:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=e1f88eb5-da39-4595-aad7-7712cef47e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a7:ef:c4:9c:d0:66:5f:1f:3c:62:cf:3e:66: 47:dd:51:0a:45:0d:d9:0b:50:44:f7:4f:91:91:30: 4b:53:7b:1c:aa:e0:f7:35:4b:6f:09:02:7c:f8:dc: b2:85:95:38:76:84:bf:e1:76:b0:0d:e4:57:17:1a: dd:0d:37:fe:22:8b:50:9d:ba:8d:f1:97:7d:3d:c6: 2c:c0:58:2c:91:ad:82:f8:dd:bb:e8:59:d3:e6:d2: 1e:ac:3d:ee:93:42:6d:61:f8:bf:72:66:c8:c5:35: 83:47:97:4e:a9:75:be:5d:43:d4:cf:d5:c3:51:55: 2b:75:39:59:b0:7e:77:2f:c8:b3:ca:1e:e5:89:4b: f1:d3:49:6d:ce:c6:19:01:ed:45:f5:52:3c:85:f1: 5f:4d:5c:25:cb:df:e6:ef:b8:c3:4c:84:ee:38:83: e5:de:30:98:3b:35:0f:ba:cd:95:6d:cf:f3:a3:ea: 80:f4:e0:ea:9a:1a:de:68:44:56:8c:ab:1b:f4:09: d4:96:66:3a:bd:af:59:83:0f:53:09:90:e0:33:5f: 3c:b2:0a:43:da:91:99:e5:f5:77:ef:b2:7d:68:2b: 76:c2:8c:55:ea:f7:69:fb:5e:81:dc:4b:b7:ef:84: fa:2b:0c:34:be:ed:5e:8e:98:6c:11:96:bc:99:38: b6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:99:64:57:C5:9D:87:F8:35:E1:0C:1D:85:22:99:20:C6:79:27:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.crl X509v3 Authority Key Identifier: keyid:9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer sbgp-ipAddrBlock: critical IPv4: 192.58.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:40:70:93:6a:fd:b1:d8:8e:32:9b:20:b2:12:77:52:27:8b: 10:27:ae:71:57:bb:24:74:b8:e4:5d:e2:69:a5:27:b2:2e:f9: 6f:ca:86:6a:0f:73:43:90:54:2e:3d:74:af:c1:4f:62:8a:20: 51:56:4b:9f:7d:c5:02:9d:6f:8d:4e:c8:ae:51:d0:0a:ea:11: 08:c2:98:bb:cb:03:d9:a1:fb:c0:13:ed:be:9f:43:e0:8c:e8: aa:cd:9a:be:e3:a0:49:23:2a:14:56:1f:d6:50:dc:09:c7:4e: 0f:41:47:41:2a:b7:2e:e3:f3:bd:7d:4c:a3:5e:b9:0b:7c:92: 6a:e8:4f:9a:73:98:87:f7:e2:d0:de:64:bc:8f:bf:9f:b4:08: d4:9f:a5:01:87:d3:80:9e:1c:97:32:88:18:01:55:57:b6:03: c8:15:39:ba:34:44:1b:86:7c:f6:de:f5:40:9f:dc:8a:42:a1: 45:52:8c:c3:4b:8f:a7:d2:bd:b2:8e:44:f5:16:7e:1d:9f:53: 92:6a:ec:a1:a7:94:4c:d1:79:a1:a1:25:e6:8f:5a:5a:d8:65: 2d:e5:52:14:a5:18:71:bf:8d:ac:8d:9b:a0:36:db:3d:a1:7b: 3d:07:2c:4d:cb:e5:0e:46:e8:47:06:a9:0a:8c:b7:b7:6c:b7: 29:e0:45:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QarhwQp/+hjqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmNjgwOWYtMGI0NS00N2Q1LWI3Y2MtN2Y4OTJkZGRh MGRjMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZTFmODhlYjUtZGEzOS00NTk1LWFhZDctNzcxMmNlZjQ3ZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1afvxJzQZl8fPGLPPmZH3VEKRQ3ZC1BE90+R kTBLU3scquD3NUtvCQJ8+NyyhZU4doS/4XawDeRXFxrdDTf+IotQnbqN8Zd9PcYs wFgska2C+N276FnT5tIerD3uk0JtYfi/cmbIxTWDR5dOqXW+XUPUz9XDUVUrdTlZ sH53L8izyh7liUvx00ltzsYZAe1F9VI8hfFfTVwly9/m77jDTITuOIPl3jCYOzUP us2Vbc/zo+qA9ODqmhreaERWjKsb9AnUlmY6va9Zgw9TCZDgM188sgpD2pGZ5fV3 77J9aCt2woxV6vdp+16B3Eu374T6Kww0vu1ejphsEZa8mTi2vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiZZFfFnYf4NeEMHYUimSDGeSe7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYmY2 ODA5Zi0wYjQ1LTQ3ZDUtYjdjYy03Zjg5MmRkZGEwZGMvMmFlNDBjOTUtNGNjNS0z M2E1LThhYTMtMDU0YzkyMGQ1YjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2JmNjgwOWYtMGI0NS00N2Q1LWI3 Y2MtN2Y4OTJkZGRhMGRjL2NiZjY4MDlmLTBiNDUtNDdkNS1iN2NjLTdmODkyZGRk YTBkYy5jcmwwHwYDVR0jBBgwFoAUmwap4jKSLvGtTIQEPijY3xF1DZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYmY2ODA5Zi0wYjQ1LTQ3ZDUtYjdjYy03Zjg5 MmRkZGEwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpAcJNq/bHYjjKbILISd1InixAnrnFXuyR0uORd4mmlJ7Iu+W/KhmoP c0OQVC49dK/BT2KKIFFWS599xQKdb41OyK5R0ArqEQjCmLvLA9mh+8AT7b6fQ+CM 6KrNmr7joEkjKhRWH9ZQ3AnHTg9BR0Eqty7j8719TKNeuQt8kmroT5pzmIf34tDe ZLyPv5+0CNSfpQGH04CeHJcyiBgBVVe2A8gVObo0RBuGfPbe9UCf3IpCoUVSjMNL j6fSvbKORPUWfh2fU5Jq7KGnlEzReaGhJeaPWlrYZS3lUhSlGHG/jayNm6A22z2h ez0HLE3L5Q5G6EcGqQqMt7dstyngRcA= -----END CERTIFICATE-----Generated at Mon Aug 4 15:35:21 2025 by rpki-client