$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/bbe2e43e-950f-32b7-9da7-d244a60303be.roa File: bbe2e43e-950f-32b7-9da7-d244a60303be.roa (raw, json) Hash identifier: 13Zr3NvBiMOVat1AlVg6zU5VpRiJrXRNk97kqK5LB3s= Subject key identifier: 82:61:6E:57:8A:AE:23:2D:FB:9B:5B:E5:B8:29:84:0C:AB:9F:88:C5 Certificate issuer: /CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2 Certificate serial: 010D0C9F43285849EA851BE7E02BCFFBE7377460 Authority key identifier: C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/bbe2e43e-950f-32b7-9da7-d244a60303be.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 7212 IP address blocks: 192.111.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:1b:e7:e0:2b:cf:fb:e7:37:74:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=6d9d2662-46c3-4e2d-9df4-5638bdae65af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:b0:08:64:64:49:9b:01:cf:a6:02:8a:51: d2:6e:a8:d6:5f:3b:ad:51:10:67:d7:c1:d6:ea:a2: f3:a8:c9:59:ad:6d:63:bc:93:e0:fe:98:69:17:d8: 1d:89:57:bd:a4:9e:5d:ad:7f:24:f2:06:dd:c8:89: e4:98:b5:9a:70:a1:fd:72:fa:d2:29:f3:e8:d9:73: 95:f6:b2:d4:d0:2e:48:30:9f:3b:ad:8f:c8:71:d8: 97:72:7b:2a:a2:c5:3b:21:2c:57:14:7b:fd:16:bf: 30:33:42:4a:b6:65:22:5b:37:ee:95:d2:42:36:82: a5:a4:79:9e:b3:0c:76:b1:e9:80:37:89:43:31:26: 8d:bf:9e:ca:eb:cb:09:4e:24:1d:cd:18:ca:50:d7: 3c:55:3f:d9:27:6e:7c:e5:e9:9a:db:cd:8f:14:0c: 24:dd:49:88:86:48:a9:39:47:87:d5:bc:d2:f8:1b: 8c:22:d7:fe:25:27:40:9c:f7:5a:80:40:8b:5d:38: e0:ac:fd:8b:1c:6b:d5:14:33:b4:c2:01:cd:e8:4b: 0c:c6:b8:6a:05:cd:d0:59:6d:3e:b0:dc:8f:ad:55: 0b:3d:a4:5b:98:2c:75:79:7f:5e:a8:7b:2b:aa:e2: 90:6d:38:4e:51:a4:f8:5e:4f:f4:71:b9:45:f5:97: 9c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:61:6E:57:8A:AE:23:2D:FB:9B:5B:E5:B8:29:84:0C:AB:9F:88:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/bbe2e43e-950f-32b7-9da7-d244a60303be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl X509v3 Authority Key Identifier: keyid:C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer sbgp-ipAddrBlock: critical IPv4: 192.111.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:d3:1d:33:6c:a9:a4:a0:2d:8c:48:9e:d4:e1:3b:12:2d:c5: f7:1b:c7:c7:27:42:aa:f2:f9:52:b3:0e:08:76:5f:8b:ff:e1: a0:bd:81:28:30:27:cf:52:8d:6f:09:d2:70:f1:e8:bc:9f:59: f6:d4:22:29:ce:66:dd:d4:af:84:ea:b7:c9:cb:0d:28:00:96: 98:f2:52:93:a7:72:c0:ea:6e:2c:4c:7c:ba:44:30:e6:5f:a4: ae:63:72:76:f4:5a:a2:02:d8:01:bd:65:3b:44:0a:8f:6e:b7: 92:d6:cd:46:e0:58:29:ec:5c:f3:40:0a:dd:2a:31:90:55:2d: ed:c6:ef:34:00:d3:82:7a:89:86:d6:ea:b1:c9:1f:3a:fc:8d: 84:2a:cd:24:71:4a:1c:29:4b:7f:d5:e4:ae:e1:c6:21:71:02: 87:d4:5e:eb:db:35:17:a5:55:78:4d:d3:38:a5:72:51:36:65: 07:b2:ba:49:1d:07:5b:5f:28:f0:83:23:1f:53:8d:0e:fd:eb: 37:14:f6:6b:01:82:62:00:a8:8e:24:6d:96:ed:d6:e2:a5:ed: 51:e7:25:dc:3c:18:f8:29:29:c6:76:1d:d5:d1:7f:5a:66:64: 30:cf:7e:8f:b4:ae:a2:59:99:27:06:73:46:ad:06:13:c8:3b: e4:d3:46:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhRvn4CvP++c3dGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFjMDA4OTQtNWUxNy00ZTE0LWI4ZWItYjdmYjM0OGFk MWMyMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk NmQ5ZDI2NjItNDZjMy00ZTJkLTlkZjQtNTYzOGJkYWU2NWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRewCGRkSZsBz6YCilHSbqjWXzutURBn18HW 6qLzqMlZrW1jvJPg/phpF9gdiVe9pJ5drX8k8gbdyInkmLWacKH9cvrSKfPo2XOV 9rLU0C5IMJ87rY/IcdiXcnsqosU7ISxXFHv9Fr8wM0JKtmUiWzfuldJCNoKlpHme swx2semAN4lDMSaNv57K68sJTiQdzRjKUNc8VT/ZJ2585ema282PFAwk3UmIhkip OUeH1bzS+BuMItf+JSdAnPdagECLXTjgrP2LHGvVFDO0wgHN6EsMxrhqBc3QWW0+ sNyPrVULPaRbmCx1eX9eqHsrquKQbThOUaT4Xk/0cblF9ZecgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJhbleKriMt+5tb5bgphAyrn4jFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYWMw MDg5NC01ZTE3LTRlMTQtYjhlYi1iN2ZiMzQ4YWQxYzIvYmJlMmU0M2UtOTUwZi0z MmI3LTlkYTctZDI0NGE2MDMwM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWFjMDA4OTQtNWUxNy00ZTE0LWI4 ZWItYjdmYjM0OGFkMWMyL2VhYzAwODk0LTVlMTctNGUxNC1iOGViLWI3ZmIzNDhh ZDFjMi5jcmwwHwYDVR0jBBgwFoAUwYzMbm96JB9XCrDBoqjJfPoxvcUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYWMwMDg5NC01ZTE3LTRlMTQtYjhlYi1iN2Zi MzQ4YWQxYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG9tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfTHTNsqaSgLYxIntThOxItxfcbx8cnQqry+VKzDgh2X4v/4aC9gSgw J89SjW8J0nDx6LyfWfbUIinOZt3Ur4Tqt8nLDSgAlpjyUpOncsDqbixMfLpEMOZf pK5jcnb0WqIC2AG9ZTtECo9ut5LWzUbgWCnsXPNACt0qMZBVLe3G7zQA04J6iYbW 6rHJHzr8jYQqzSRxShwpS3/V5K7hxiFxAofUXuvbNRelVXhN0zilclE2ZQeyukkd B1tfKPCDIx9TjQ796zcU9msBgmIAqI4kbZbt1uKl7VHnJdw8GPgpKcZ2HdXRf1pm ZDDPfo+0rqJZmScGc0atBhPIO+TTRiQ= -----END CERTIFICATE-----Generated at Mon Jun 16 00:45:23 2025 by rpki-client