$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/db977bdb-7775-35b2-83b4-688332a81542.roa File: db977bdb-7775-35b2-83b4-688332a81542.roa (raw, json) Hash identifier: Da4y6BnvVSYR/YJViZXUPLD6Yr1TCbUr6aZU4907XKI= Subject key identifier: 9F:69:78:A9:E5:6F:E7:BD:53:43:F7:BC:B7:5A:21:50:1C:9C:E4:AE Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F43285849DAB6791723CF862A74180A60 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/db977bdb-7775-35b2-83b4-688332a81542.roa Signing time: Wed 14 May 2025 21:07:42 +0000 ROA not before: Wed 14 May 2025 21:07:42 +0000 ROA not after: Tue 12 Aug 2025 21:07:42 +0000 asID: 29 IP address blocks: 192.31.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:da:b6:79:17:23:cf:86:2a:74:18:0a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: May 14 21:07:42 2025 GMT Not After : Aug 12 21:07:42 2025 GMT Subject: CN=b2324bbf-8ee8-4554-8776-ce80f076d50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4b:78:49:35:97:b2:66:04:e3:23:5d:74:a4: 9b:ef:33:aa:72:e4:85:42:3c:f6:5f:79:2c:65:b2: 2c:94:1b:a4:74:82:d6:91:fb:15:41:f4:53:27:a5: a1:71:d3:f9:7e:b0:e4:0f:7f:7b:91:94:9d:94:58: 71:ce:3d:c1:18:65:9b:c8:b7:31:92:80:ac:a2:1f: f6:73:33:08:6e:72:b6:f4:e4:2a:60:7e:cd:5c:98: cb:90:92:0c:30:56:01:d7:3c:4a:3d:f2:8a:5d:66: 95:6c:08:f8:e6:38:c6:b6:6f:1a:64:f8:e8:b5:86: f9:86:d7:4f:5b:17:e5:e5:99:8b:9e:39:f8:f2:ee: fe:2f:13:a9:85:51:71:ac:b5:41:6e:92:fb:97:47: 34:33:1a:65:a5:71:49:52:31:c8:d7:09:37:ac:53: 20:d9:f6:a7:a1:59:ad:0f:c2:62:cc:a5:27:43:d1: ab:d8:9c:86:e3:99:e6:67:02:4a:07:cf:08:d4:15: c7:2f:b1:71:f9:b7:34:fd:6f:b3:95:c6:a5:45:b2: 02:d7:7e:4d:3d:34:7b:11:7f:dc:ff:5e:b1:ce:ed: 31:30:e1:74:65:a5:2a:e1:95:77:26:36:85:c7:4f: 1e:9d:3b:a2:01:75:52:37:f5:6f:a4:bf:91:69:f1: 3f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:69:78:A9:E5:6F:E7:BD:53:43:F7:BC:B7:5A:21:50:1C:9C:E4:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/db977bdb-7775-35b2-83b4-688332a81542.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 192.31.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f0:c1:b8:15:56:38:01:4d:42:88:45:96:89:61:5e:70:6d: 73:36:d8:26:b3:3d:59:3a:e1:cd:d9:03:10:bd:27:c0:f2:cb: dd:aa:6c:9f:53:0c:54:7a:bb:ba:ad:c5:92:3a:c7:6e:2b:35: 2c:6b:2d:3d:9e:7c:64:9e:80:6b:97:33:f7:a2:30:e0:8c:c7: 14:b6:2c:7b:19:46:2e:a3:0e:98:a1:35:28:cb:c9:63:42:06: ae:14:78:45:54:fa:45:71:7e:87:c6:c6:46:47:12:0f:8b:67: 41:90:50:6c:85:c9:6a:71:42:c5:c9:f3:de:6c:9d:c9:39:e5: 55:7d:a3:32:e2:e3:c9:a9:23:c0:53:da:3a:a4:07:df:d0:6f: ba:84:b0:7e:99:6f:79:e7:da:5f:87:f2:79:8a:ec:d0:5c:db: 94:73:35:29:d0:f1:29:38:f3:f2:e0:02:1a:a1:7b:9e:97:0c: 75:92:ef:0a:68:89:77:a6:4b:60:1e:e4:4a:44:e3:60:3f:f4: c7:2c:09:f1:6f:2d:f8:be:e6:4a:c4:27:b9:04:15:c5:9d:35: 46:8e:c5:be:ec:69:fe:b3:a8:dd:9e:9f:72:4a:8e:5c:d4:56: 58:5b:98:34:1a:00:6b:1e:24:e2:46:5e:18:f6:b6:56:a5:20: 9f:94:43:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnatnkXI8+GKnQYCmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI1MDUxNDIxMDc0MloXDTI1MDgxMjIxMDc0MlowLzEtMCsGA1UEAxMk YjIzMjRiYmYtOGVlOC00NTU0LTg3NzYtY2U4MGYwNzZkNTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEt4STWXsmYE4yNddKSb7zOqcuSFQjz2X3ks ZbIslBukdILWkfsVQfRTJ6WhcdP5frDkD397kZSdlFhxzj3BGGWbyLcxkoCsoh/2 czMIbnK29OQqYH7NXJjLkJIMMFYB1zxKPfKKXWaVbAj45jjGtm8aZPjotYb5htdP Wxfl5ZmLnjn48u7+LxOphVFxrLVBbpL7l0c0MxplpXFJUjHI1wk3rFMg2fanoVmt D8JizKUnQ9Gr2JyG45nmZwJKB88I1BXHL7Fx+bc0/W+zlcalRbIC135NPTR7EX/c /16xzu0xMOF0ZaUq4ZV3JjaFx08enTuiAXVSN/VvpL+RafE/CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9peKnlb+e9U0P3vLdaIVAcnOSuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvZGI5NzdiZGItNzc3NS0z NWIyLTgzYjQtNjg4MzMyYTgxNTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzwwbgVVjgBTUKIRZaJYV5wbXM22CazPVk64c3ZAxC9J8Dyy92qbJ9T DFR6u7qtxZI6x24rNSxrLT2efGSegGuXM/eiMOCMxxS2LHsZRi6jDpihNSjLyWNC Bq4UeEVU+kVxfofGxkZHEg+LZ0GQUGyFyWpxQsXJ895snck55VV9ozLi48mpI8BT 2jqkB9/Qb7qEsH6Zb3nn2l+H8nmK7NBc25RzNSnQ8Sk48/LgAhqhe56XDHWS7wpo iXemS2Ae5EpE42A/9McsCfFvLfi+5krEJ7kEFcWdNUaOxb7saf6zqN2en3JKjlzU VlhbmDQaAGseJOJGXhj2tlalIJ+UQyk= -----END CERTIFICATE-----Generated at Sun Jun 15 18:01:34 2025 by rpki-client