$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa File: 59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa (raw, json) Hash identifier: bLNLTRQxyEVXmAZObYVA0kklV/uJLO4J+TwTuZ0iOeI= Subject key identifier: 73:57:7E:09:60:A5:F3:5D:D8:DE:A6:99:9A:EA:17:F8:48:97:5E:FB Certificate issuer: /CN=8e5312d0-770c-4d40-8042-53d0eadc436b Certificate serial: 010D0C9F4328584A8575FED1DD828A51A7182580 Authority key identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 21976 IP address blocks: 192.150.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:fe:d1:dd:82:8a:51:a7:18:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5312d0-770c-4d40-8042-53d0eadc436b Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=4a758d3e-cc3c-43af-8a6a-575392eee962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:12:e3:b4:64:30:09:5c:40:5c:e9:5f:2a:6f: 3b:10:11:d4:7e:ed:dd:81:f4:c2:ae:b2:59:07:78: 4c:18:91:63:d6:7e:23:a7:8e:a7:16:e1:cb:82:1f: a1:b7:fe:cf:46:98:44:cd:4f:a2:bd:d7:dd:ca:43: 37:dd:fd:7c:b6:e7:15:7e:56:ad:da:89:93:8a:17: 6f:cd:35:5b:49:8e:49:af:86:a3:0f:0d:20:07:f5: ab:b0:da:bd:37:bc:0b:13:54:9a:f0:c0:ee:0b:7e: 17:18:15:34:b2:04:03:7d:b0:e8:53:25:02:05:f2: b2:2a:67:04:9a:76:47:1f:86:e8:92:87:e1:f1:e6: 2f:2f:18:b8:79:7f:95:00:21:5d:63:55:05:15:66: 58:b8:29:b3:00:a4:91:76:0a:38:7c:34:b2:3c:47: 4d:f3:4e:46:9b:0d:c0:d0:ad:a4:50:ec:ae:de:d3: 60:50:7c:26:44:c6:f8:d9:6d:f1:03:49:b6:3b:d7: 00:d5:1e:85:64:29:27:e4:25:dc:b0:d2:33:6a:43: 8d:9e:82:8a:85:cb:8d:b9:3e:13:2d:82:3f:d9:75: 8b:d5:d1:8d:7b:8a:46:5c:11:8f:87:66:01:7b:20: 81:a1:f7:49:55:f5:4f:70:d6:0a:0a:cf:1c:aa:75: 77:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:57:7E:09:60:A5:F3:5D:D8:DE:A6:99:9A:EA:17:F8:48:97:5E:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl X509v3 Authority Key Identifier: keyid:3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer sbgp-ipAddrBlock: critical IPv4: 192.150.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:5c:06:b8:ed:4e:6a:aa:fb:34:f6:18:7e:e2:ce:f2:56:d9: 40:9f:88:50:9b:39:29:1f:7f:a8:4c:c5:69:1f:c3:a9:7a:07: 24:7e:03:99:54:aa:b8:44:1d:2c:ab:95:20:7f:95:4b:2c:c4: 58:10:c9:4f:c3:db:a0:58:ef:39:3e:38:cc:b7:6b:2d:ff:82: 7c:db:57:e2:e3:42:1c:07:1a:d4:fa:d2:96:d7:d0:aa:20:ab: ca:d2:8a:e0:7f:00:db:2d:1b:70:ef:80:0d:9c:01:57:93:70: 2d:f4:43:53:f1:90:51:3b:d6:89:2a:30:20:df:2a:81:bd:6a: cb:20:e9:4e:8d:86:44:d9:57:84:de:30:61:ba:a6:df:83:b2: 39:94:29:15:66:c1:41:0a:52:01:f4:51:fc:c5:4f:36:18:53: 5e:24:3f:68:e4:bd:5c:12:30:89:3f:2a:21:a7:a0:fa:09:6b: d5:35:2f:c7:86:9a:59:cb:97:79:10:54:1d:62:07:38:cd:6d: 53:0d:a6:56:bd:e3:6c:79:0f:5c:d6:f4:d2:87:4a:3e:e0:fe: 7d:00:c8:fe:f5:64:f5:bf:75:5e:3f:39:d4:c1:cc:6c:40:f8: ca:86:13:5d:94:82:dd:1d:26:ed:cd:cb:c7:f8:49:48:39:a4: 05:e9:27:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdf7R3YKKUacYJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MzEyZDAtNzcwYy00ZDQwLTgwNDItNTNkMGVhZGM0 MzZiMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk NGE3NThkM2UtY2MzYy00M2FmLThhNmEtNTc1MzkyZWVlOTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRLjtGQwCVxAXOlfKm87EBHUfu3dgfTCrrJZ B3hMGJFj1n4jp46nFuHLgh+ht/7PRphEzU+ivdfdykM33f18tucVflat2omTihdv zTVbSY5Jr4ajDw0gB/WrsNq9N7wLE1Sa8MDuC34XGBU0sgQDfbDoUyUCBfKyKmcE mnZHH4bokofh8eYvLxi4eX+VACFdY1UFFWZYuCmzAKSRdgo4fDSyPEdN805Gmw3A 0K2kUOyu3tNgUHwmRMb42W3xA0m2O9cA1R6FZCkn5CXcsNIzakONnoKKhcuNuT4T LYI/2XWL1dGNe4pGXBGPh2YBeyCBofdJVfVPcNYKCs8cqnV3bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNXfglgpfNd2N6mmZrqF/hIl177MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUz MTJkMC03NzBjLTRkNDAtODA0Mi01M2QwZWFkYzQzNmIvNTlkZWIzYmUtNGNjOC0z ZmNkLTkxZWQtZTg1MDNjOGIzMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU1MzEyZDAtNzcwYy00ZDQwLTgw NDItNTNkMGVhZGM0MzZiLzhlNTMxMmQwLTc3MGMtNGQ0MC04MDQyLTUzZDBlYWRj NDM2Yi5jcmwwHwYDVR0jBBgwFoAUP3aJvQwX92PDUxjSibUKRzfWiQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUzMTJkMC03NzBjLTRkNDAtODA0Mi01M2Qw ZWFkYzQzNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZcBrjtTmqq+zT2GH7izvJW2UCfiFCbOSkff6hMxWkfw6l6ByR+A5lU qrhEHSyrlSB/lUssxFgQyU/D26BY7zk+OMy3ay3/gnzbV+LjQhwHGtT60pbX0Kog q8rSiuB/ANstG3DvgA2cAVeTcC30Q1PxkFE71okqMCDfKoG9assg6U6NhkTZV4Te MGG6pt+DsjmUKRVmwUEKUgH0UfzFTzYYU14kP2jkvVwSMIk/KiGnoPoJa9U1L8eG mlnLl3kQVB1iBzjNbVMNpla942x5D1zW9NKHSj7g/n0AyP71ZPW/dV4/OdTBzGxA +MqGE12Ugt0dJu3Ny8f4SUg5pAXpJ/M= -----END CERTIFICATE-----Generated at Wed Aug 6 05:21:33 2025 by rpki-client