$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f5092519-2865-3181-865a-15ca5db8ad22.roa File: f5092519-2865-3181-865a-15ca5db8ad22.roa (raw, json) Hash identifier: QrFgM6dBZkl/mPpqsFe/jPvCZnxki7cfkkiXw0eh64s= Subject key identifier: DD:D3:47:49:5B:4B:A8:86:FA:0C:75:68:EA:81:2E:B9:61:92:22:E7 Certificate issuer: /CN=f9a43c4d-99f1-46e7-9cc7-b8c6301aab21 Certificate serial: 010D0C9F4328584AC016286008092365AC720900 Authority key identifier: 2F:8A:16:E3:1B:FB:D2:3A:9E:45:F3:0F:41:4F:9A:D1:39:52:45:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f5092519-2865-3181-865a-15ca5db8ad22.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 14618 IP address blocks: 192.245.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:28:60:08:09:23:65:ac:72:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9a43c4d-99f1-46e7-9cc7-b8c6301aab21 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=41f6c56a-e56f-4e63-89e1-2192f62868f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:21:02:d9:b4:13:be:cf:92:10:34:10:af:fa: cd:a9:0f:40:9c:96:4f:28:ea:9c:ad:4c:21:81:c5: 26:36:dc:b9:d4:4d:b5:6b:bf:6b:e5:66:d2:9d:b1: e1:f3:ed:82:2d:a7:96:0b:7f:46:ac:70:44:fa:00: e6:e6:16:cc:2e:39:85:84:e6:18:4b:b3:e4:1c:79: 12:dd:3b:db:81:f8:f8:8e:bc:12:1c:57:4b:9f:c9: ef:ef:aa:d6:ab:98:fb:fa:e8:d6:1c:72:2a:bd:47: 4b:da:e4:d0:4f:be:a1:a5:ff:e4:83:7d:6d:49:c6: 91:7f:0a:0f:37:94:c4:76:37:5d:43:7c:78:c2:f9: 6c:57:76:96:87:7d:58:d7:2a:79:6c:ba:f9:ca:37: c1:a8:c0:30:96:3d:af:fd:df:01:bb:a1:27:6a:56: 87:87:90:bd:1a:09:8f:ce:fe:16:72:a3:f6:06:60: 0c:e9:b4:bb:c1:7d:58:c3:cd:1c:96:58:f6:ba:cd: 46:e1:c7:3d:e9:08:35:dc:7b:e5:00:d8:85:a4:84: d4:f6:41:98:a5:25:21:b6:36:f4:c2:15:5d:50:15: 19:a6:15:97:be:26:8f:1d:de:88:cf:8f:8e:0f:e4: ef:e2:da:9b:4f:e7:41:41:ef:c4:f4:07:7c:67:c1: 16:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D3:47:49:5B:4B:A8:86:FA:0C:75:68:EA:81:2E:B9:61:92:22:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f5092519-2865-3181-865a-15ca5db8ad22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.crl X509v3 Authority Key Identifier: keyid:2F:8A:16:E3:1B:FB:D2:3A:9E:45:F3:0F:41:4F:9A:D1:39:52:45:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.cer sbgp-ipAddrBlock: critical IPv4: 192.245.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:4f:2d:5d:a5:28:a5:df:54:44:60:94:3b:55:1a:46:22:f5: 55:32:32:c2:21:6e:78:15:d5:cd:bb:df:4d:3c:38:26:9f:92: e2:68:b2:50:26:66:79:5c:41:59:22:4a:93:78:1d:29:80:21: ac:85:6d:c3:fb:81:92:40:e8:92:d9:46:d9:4d:fd:aa:c0:ec: ee:94:38:7e:e7:b1:7d:d9:28:f4:b5:fe:83:5a:5e:40:99:db: f6:f1:04:2e:30:44:60:16:ae:12:b2:e7:bb:f1:5a:0f:c0:49: 0a:de:51:c3:fb:f6:49:3a:4e:f0:cf:76:2f:03:41:c5:80:7c: ab:f2:6b:3d:23:8e:d8:0b:fc:ba:81:6a:4e:11:ba:c7:42:a0: 48:98:7b:75:a3:62:d4:2c:a9:25:9d:55:61:32:b5:ed:3b:9c: 1b:6a:b1:70:c4:1d:62:ef:2a:6a:a2:6a:32:c1:76:bd:48:fd: 68:bf:02:ca:e7:c2:a6:68:1b:68:fa:f0:4c:b1:d2:a4:b2:ec: 98:15:76:c9:3e:12:b8:1e:3c:35:d8:4e:00:a6:22:da:12:48: 51:7c:e7:c0:82:5a:f6:53:68:1e:64:c7:00:7c:b5:41:25:4d: 0b:fb:40:86:ea:e0:c0:b3:cc:43:73:44:68:53:24:e9:f9:ed: a7:15:38:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFihgCAkjZaxyCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjlhNDNjNGQtOTlmMS00NmU3LTljYzctYjhjNjMwMWFh YjIxMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NDFmNmM1NmEtZTU2Zi00ZTYzLTg5ZTEtMjE5MmY2Mjg2OGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyEC2bQTvs+SEDQQr/rNqQ9AnJZPKOqcrUwh gcUmNty51E21a79r5WbSnbHh8+2CLaeWC39GrHBE+gDm5hbMLjmFhOYYS7PkHHkS 3Tvbgfj4jrwSHFdLn8nv76rWq5j7+ujWHHIqvUdL2uTQT76hpf/kg31tScaRfwoP N5TEdjddQ3x4wvlsV3aWh31Y1yp5bLr5yjfBqMAwlj2v/d8Bu6EnalaHh5C9GgmP zv4WcqP2BmAM6bS7wX1Yw80cllj2us1G4cc96Qg13HvlANiFpITU9kGYpSUhtjb0 whVdUBUZphWXviaPHd6Iz4+OD+Tv4tqbT+dBQe/E9Ad8Z8EWRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3TR0lbS6iG+gx1aOqBLrlhkiLnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mOWE0 M2M0ZC05OWYxLTQ2ZTctOWNjNy1iOGM2MzAxYWFiMjEvZjUwOTI1MTktMjg2NS0z MTgxLTg2NWEtMTVjYTVkYjhhZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjlhNDNjNGQtOTlmMS00NmU3LTlj YzctYjhjNjMwMWFhYjIxL2Y5YTQzYzRkLTk5ZjEtNDZlNy05Y2M3LWI4YzYzMDFh YWIyMS5jcmwwHwYDVR0jBBgwFoAUL4oW4xv70jqeRfMPQU+a0TlSRaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mOWE0M2M0ZC05OWYxLTQ2ZTctOWNjNy1iOGM2 MzAxYWFiMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPW6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMZPLV2lKKXfVERglDtVGkYi9VUyMsIhbngV1c273008OCafkuJoslAm ZnlcQVkiSpN4HSmAIayFbcP7gZJA6JLZRtlN/arA7O6UOH7nsX3ZKPS1/oNaXkCZ 2/bxBC4wRGAWrhKy57vxWg/ASQreUcP79kk6TvDPdi8DQcWAfKvyaz0jjtgL/LqB ak4RusdCoEiYe3WjYtQsqSWdVWEyte07nBtqsXDEHWLvKmqiajLBdr1I/Wi/Asrn wqZoG2j68Eyx0qSy7JgVdsk+ErgePDXYTgCmItoSSFF858CCWvZTaB5kxwB8tUEl TQv7QIbq4MCzzENzRGhTJOn57acVOMo= -----END CERTIFICATE-----Generated at Tue Aug 5 17:23:37 2025 by rpki-client