$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa File: 2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa (raw, json) Hash identifier: XwCW1Ap7+LG3VTWQNBTCmep3pQct0pIQVADKYFzCZkE= Subject key identifier: FC:E8:DD:B7:4B:32:B0:77:C6:69:CF:98:A7:61:04:4C:8F:B0:C9:09 Certificate issuer: /CN=8e5312d0-770c-4d40-8042-53d0eadc436b Certificate serial: 010D0C9F4328584A8575FEDF6B1244A87B255780 Authority key identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 21976 IP address blocks: 192.135.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:fe:df:6b:12:44:a8:7b:25:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5312d0-770c-4d40-8042-53d0eadc436b Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=7721bf9b-8695-4333-aaaa-473df19ceccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:39:f8:c7:2d:3e:e8:20:0b:dd:91:ad:ce:f1: 31:a2:92:50:93:83:63:14:d4:16:87:89:71:7c:94: 72:23:e1:7a:a4:d3:36:5d:86:6b:da:a0:14:3c:25: b1:d8:23:2f:a5:63:fe:c3:5c:0c:e1:ce:af:b2:6a: cf:6e:c0:a4:51:e1:b9:2a:bb:12:14:ac:be:1e:39: 6d:f6:31:0c:8a:fe:57:96:d5:fd:28:db:64:99:3a: 51:73:3a:74:c4:f5:b9:f2:22:e5:dd:65:3e:1b:85: f0:dc:a7:18:84:ca:82:0c:07:f8:dc:1b:14:7c:65: d2:0a:0d:65:62:ed:55:2f:e9:62:56:ff:f4:4d:58: ae:5f:44:3f:4a:df:41:36:53:c1:72:91:e1:f0:44: 5f:18:c9:e5:b3:76:af:41:1f:ff:6e:9c:2c:4b:4e: 1e:24:ff:44:6e:d3:e3:c3:a1:f5:17:4d:20:6e:44: da:a2:21:92:b5:e5:8f:7d:55:ab:fd:f4:a8:e5:71: 2f:30:ef:f6:9c:3a:ca:c1:dc:01:33:0e:40:af:1f: c1:c7:fa:3b:9b:a3:e9:76:08:53:8b:cc:41:00:cb: 6a:2e:51:eb:22:5a:7c:d5:9f:9e:b6:46:58:7b:42: 16:fd:bd:e1:c9:b0:5e:7b:c6:3b:73:2b:62:49:8c: 4e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E8:DD:B7:4B:32:B0:77:C6:69:CF:98:A7:61:04:4C:8F:B0:C9:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl X509v3 Authority Key Identifier: keyid:3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer sbgp-ipAddrBlock: critical IPv4: 192.135.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:52:26:37:ac:77:bd:f6:fc:66:4c:4b:59:52:18:ad:47:b4: 98:01:2b:04:f9:c5:f5:2b:a9:53:7c:ac:db:0d:b4:cd:9e:15: ac:23:37:a6:51:88:d8:d0:7d:41:8a:70:9d:2c:88:85:42:6a: ea:cf:ac:93:f9:55:29:2a:33:c6:6f:31:ad:24:00:ed:47:63: 93:bc:74:bf:78:42:fa:05:71:4e:d3:05:07:42:bf:9e:39:38: df:27:c8:13:09:e6:73:3f:7a:83:a8:e3:4e:3b:c3:22:0e:2e: 72:20:d8:98:6f:c0:ba:51:30:c4:92:b1:2f:1a:1c:71:4c:1e: bd:3c:a9:7c:28:b1:99:b0:57:e6:79:49:bc:ce:f9:5f:b3:05: 05:53:f8:67:4d:6f:4e:53:46:45:b9:be:e0:c2:32:3a:3a:28: ea:85:98:ec:02:0e:c6:77:00:f5:9a:a7:a0:70:3c:99:1e:ae: d3:7e:5c:0b:f5:6e:bb:39:8d:e9:99:a8:73:28:28:2b:5a:6d: 3f:8d:a1:2b:f8:30:88:80:fc:2a:68:83:f4:84:56:24:55:b8: 5d:cc:13:70:af:73:33:36:c9:10:54:c0:7b:53:53:23:e8:e2: 1e:b7:37:58:ec:aa:ad:46:02:b3:fe:2b:0f:6a:2d:17:70:2e: f3:2a:aa:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdf7faxJEqHslV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MzEyZDAtNzcwYy00ZDQwLTgwNDItNTNkMGVhZGM0 MzZiMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk NzcyMWJmOWItODY5NS00MzMzLWFhYWEtNDczZGYxOWNlY2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDn4xy0+6CAL3ZGtzvExopJQk4NjFNQWh4lx fJRyI+F6pNM2XYZr2qAUPCWx2CMvpWP+w1wM4c6vsmrPbsCkUeG5KrsSFKy+Hjlt 9jEMiv5XltX9KNtkmTpRczp0xPW58iLl3WU+G4Xw3KcYhMqCDAf43BsUfGXSCg1l Yu1VL+liVv/0TViuX0Q/St9BNlPBcpHh8ERfGMnls3avQR//bpwsS04eJP9EbtPj w6H1F00gbkTaoiGSteWPfVWr/fSo5XEvMO/2nDrKwdwBMw5Arx/Bx/o7m6PpdghT i8xBAMtqLlHrIlp81Z+etkZYe0IW/b3hybBee8Y7cytiSYxOMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzo3bdLMrB3xmnPmKdhBEyPsMkJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUz MTJkMC03NzBjLTRkNDAtODA0Mi01M2QwZWFkYzQzNmIvMmRkYmJmMzItZGU4Yy0z YWViLTkzZDgtODBlYmZkMTU2MDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU1MzEyZDAtNzcwYy00ZDQwLTgw NDItNTNkMGVhZGM0MzZiLzhlNTMxMmQwLTc3MGMtNGQ0MC04MDQyLTUzZDBlYWRj NDM2Yi5jcmwwHwYDVR0jBBgwFoAUP3aJvQwX92PDUxjSibUKRzfWiQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUzMTJkMC03NzBjLTRkNDAtODA0Mi01M2Qw ZWFkYzQzNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIfRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpSJjesd732/GZMS1lSGK1HtJgBKwT5xfUrqVN8rNsNtM2eFawjN6ZR iNjQfUGKcJ0siIVCaurPrJP5VSkqM8ZvMa0kAO1HY5O8dL94QvoFcU7TBQdCv545 ON8nyBMJ5nM/eoOo4047wyIOLnIg2JhvwLpRMMSSsS8aHHFMHr08qXwosZmwV+Z5 SbzO+V+zBQVT+GdNb05TRkW5vuDCMjo6KOqFmOwCDsZ3APWap6BwPJkertN+XAv1 brs5jemZqHMoKCtabT+NoSv4MIiA/Cpog/SEViRVuF3ME3CvczM2yRBUwHtTUyPo 4h63N1jsqq1GArP+Kw9qLRdwLvMqqo0= -----END CERTIFICATE-----Generated at Mon Aug 4 22:23:56 2025 by rpki-client