$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b84e90f8-8554-3fc7-9087-d60abb1233ea.roa File: b84e90f8-8554-3fc7-9087-d60abb1233ea.roa (raw, json) Hash identifier: k9ISCW3CAbpuoHnv+3CUaIKlhF1FPNzhYePJolV6TU0= Subject key identifier: 07:38:E1:95:3E:5D:9A:46:99:15:33:1A:D5:08:42:98:E9:94:A0:27 Certificate issuer: /CN=b2dc77b3-a13a-405a-b7ad-181eab85160b Certificate serial: 010D0C9F4328584ABD4B84AB918044424BA01300 Authority key identifier: FF:76:CB:34:8C:31:D8:B4:5C:24:A1:55:09:55:32:75:64:15:2E:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b84e90f8-8554-3fc7-9087-d60abb1233ea.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 393922 IP address blocks: 192.139.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b2dc77b3-a13a-405a-b7ad-181eab85160b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b2dc77b3-a13a-405a-b7ad-181eab85160b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:84:ab:91:80:44:42:4b:a0:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2dc77b3-a13a-405a-b7ad-181eab85160b Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=68fabb35-6a9c-4eb8-bfe9-f0cf2ced8876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f9:fa:08:ab:e0:71:d9:df:b3:39:4a:e1:fd: 24:4c:40:40:5a:2e:86:cb:cd:cb:6a:66:ac:d7:22: 52:cc:a5:a5:a7:ec:b9:e6:ec:ea:89:78:cf:e0:f7: 17:7f:04:5d:42:a9:26:13:1e:f1:ea:d4:71:ae:33: 79:af:89:6f:3d:66:84:b7:8b:7f:35:f9:48:25:53: 00:4a:99:d7:2d:99:f8:6d:2d:69:b4:05:c0:69:95: ae:b5:64:da:d5:62:13:9f:aa:a1:b1:c9:1e:14:bb: e6:0b:ee:f5:75:62:e0:fc:6e:49:a0:f3:df:af:b1: 21:4e:ea:18:95:34:bc:7a:ae:96:86:63:91:f1:e2: 61:60:60:ce:fa:f1:91:a1:2e:44:0b:9d:dc:6c:d3: 9e:40:a9:2a:a9:97:84:e3:6f:00:f4:fd:28:a3:81: 60:51:d2:a9:06:41:d4:08:1f:0b:46:ac:26:05:ea: dc:47:32:1a:f6:a6:91:5e:2b:2c:90:a0:33:fd:f3: bd:a2:ea:cf:bd:f6:9d:98:78:14:04:1a:36:c5:d8: d0:66:31:9d:69:4d:a4:63:ce:66:d2:e7:1f:54:ad: d2:0c:1a:64:42:e0:b4:cd:9a:c8:26:da:95:6b:04: 84:db:a3:c9:76:21:11:09:91:b7:80:88:71:79:b4: 7b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:38:E1:95:3E:5D:9A:46:99:15:33:1A:D5:08:42:98:E9:94:A0:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b84e90f8-8554-3fc7-9087-d60abb1233ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b2dc77b3-a13a-405a-b7ad-181eab85160b.crl X509v3 Authority Key Identifier: keyid:FF:76:CB:34:8C:31:D8:B4:5C:24:A1:55:09:55:32:75:64:15:2E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b.cer sbgp-ipAddrBlock: critical IPv4: 192.139.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:2f:e5:aa:f2:8e:6d:d2:ab:d4:d2:4d:27:da:1a:65:ca:76: 91:38:ba:67:c7:a8:55:27:10:02:ea:bc:b8:7d:b6:cb:b6:91: 8a:ee:b4:24:6e:42:15:ed:73:c8:0f:21:59:aa:77:f8:e8:6e: d5:34:cf:85:30:79:1c:81:9b:a2:fe:be:7c:a6:b0:50:a4:2a: d1:e4:92:4c:8b:57:a4:ae:5d:ac:6d:f3:a6:b7:dd:da:04:31: 0c:62:a1:00:5a:40:03:4c:70:dc:29:5f:7c:2f:be:d3:3c:4a: 5a:6f:62:a4:de:9e:77:bc:e1:19:7c:e0:c8:82:b6:af:0a:ec: eb:11:45:14:20:22:d1:9c:70:e6:8e:67:29:3d:73:6b:2f:ee: 12:41:7a:f5:c5:d8:6c:49:42:38:fc:b1:35:76:ae:8a:4c:41: 8c:12:4e:82:91:66:18:6c:71:17:0d:cd:42:8f:b7:94:8b:bf: 87:24:3d:54:c9:27:2f:a1:2c:54:9e:9e:63:41:9a:71:64:71: 40:85:41:f3:04:9a:d5:fe:26:02:24:54:93:df:46:78:34:c4: 00:2e:5b:db:3f:b3:a7:2f:15:78:7a:13:92:b5:ce:c1:24:c5: 66:a3:7b:3d:04:15:c9:f8:81:09:5f:93:b2:ab:0e:c0:53:5f: 92:68:a0:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S4SrkYBEQkugEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJkYzc3YjMtYTEzYS00MDVhLWI3YWQtMTgxZWFiODUx NjBiMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk NjhmYWJiMzUtNmE5Yy00ZWI4LWJmZTktZjBjZjJjZWQ4ODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPn6CKvgcdnfszlK4f0kTEBAWi6Gy83Lamas 1yJSzKWlp+y55uzqiXjP4PcXfwRdQqkmEx7x6tRxrjN5r4lvPWaEt4t/NflIJVMA SpnXLZn4bS1ptAXAaZWutWTa1WITn6qhsckeFLvmC+71dWLg/G5JoPPfr7EhTuoY lTS8eq6WhmOR8eJhYGDO+vGRoS5EC53cbNOeQKkqqZeE428A9P0oo4FgUdKpBkHU CB8LRqwmBercRzIa9qaRXisskKAz/fO9ourPvfadmHgUBBo2xdjQZjGdaU2kY85m 0ucfVK3SDBpkQuC0zZrIJtqVawSE26PJdiERCZG3gIhxebR7NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAc44ZU+XZpGmRUzGtUIQpjplKAnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMmRj NzdiMy1hMTNhLTQwNWEtYjdhZC0xODFlYWI4NTE2MGIvYjg0ZTkwZjgtODU1NC0z ZmM3LTkwODctZDYwYWJiMTIzM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjJkYzc3YjMtYTEzYS00MDVhLWI3 YWQtMTgxZWFiODUxNjBiL2IyZGM3N2IzLWExM2EtNDA1YS1iN2FkLTE4MWVhYjg1 MTYwYi5jcmwwHwYDVR0jBBgwFoAU/3bLNIwx2LRcJKFVCVUydWQVLiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMmRjNzdiMy1hMTNhLTQwNWEtYjdhZC0xODFl YWI4NTE2MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIuEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEv5aryjm3Sq9TSTSfaGmXKdpE4umfHqFUnEALqvLh9tsu2kYrutCRu QhXtc8gPIVmqd/jobtU0z4UweRyBm6L+vnymsFCkKtHkkkyLV6SuXaxt86a33doE MQxioQBaQANMcNwpX3wvvtM8SlpvYqTenne84Rl84MiCtq8K7OsRRRQgItGccOaO Zyk9c2sv7hJBevXF2GxJQjj8sTV2ropMQYwSToKRZhhscRcNzUKPt5SLv4ckPVTJ Jy+hLFSenmNBmnFkcUCFQfMEmtX+JgIkVJPfRng0xAAuW9s/s6cvFXh6E5K1zsEk xWajez0EFcn4gQlfk7KrDsBTX5JooA4= -----END CERTIFICATE-----Generated at Wed Aug 6 07:45:02 2025 by rpki-client