$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/3d492e08-a473-35f6-83a9-8895fc07259c.roa File: 3d492e08-a473-35f6-83a9-8895fc07259c.roa (raw, json) Hash identifier: gmAkD8V6eC8guWEtqten/v+nvq7ENhgBj+EDXb8eRsE= Subject key identifier: 46:5E:95:51:86:87:7B:4A:80:C0:E3:0D:3E:A0:70:ED:75:EE:D9:C4 Certificate issuer: /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Certificate serial: 010D0C9F4328584AA6F629A10EF242F934599B80 Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/3d492e08-a473-35f6-83a9-8895fc07259c.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 55178 IP address blocks: 192.230.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:29:a1:0e:f2:42:f9:34:59:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=9901e938-fb7a-45a4-89e0-9db9ae3b7ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:21:5c:50:6f:25:4c:1a:0c:f1:42:79:62:d6: 93:0b:65:13:88:dd:db:d6:ce:f5:ef:df:dc:a8:85: 7e:31:23:43:ff:f4:29:6a:5f:08:27:8c:53:0d:f0: ce:a4:11:77:9f:0d:a1:24:e5:55:93:71:23:10:a8: f5:4d:22:3f:0b:96:0d:71:aa:1f:7b:48:99:4f:08: c5:68:d3:7d:0f:19:96:c0:7b:c4:f8:8b:47:fc:57: bf:fb:50:56:0f:ef:40:e8:9e:0d:0a:4b:94:29:c2: 1f:48:1f:20:12:c5:84:ac:f0:69:f1:0d:ab:04:11: ce:5e:65:59:7e:db:14:dd:ed:69:7c:d2:cf:e4:10: f5:7a:22:38:d7:93:f9:cf:80:1f:eb:c1:1c:74:4d: 23:bb:d9:32:0c:71:1c:af:1c:93:84:b8:34:48:b7: 64:c8:e2:2a:20:97:c9:88:2f:9d:9b:42:ec:38:79: 3c:5e:14:19:25:9a:da:c6:d4:aa:fd:2d:07:c0:0f: 6b:a1:92:f9:4b:7b:bf:54:74:99:ab:cd:85:1a:c4: fb:ef:64:dd:22:17:b8:d1:47:ce:86:98:74:86:be: 83:19:12:53:1d:a9:f5:9e:c7:9f:95:58:06:e4:d6: a9:d5:b3:c8:3d:47:e3:bd:43:5d:e0:45:8f:a0:c5: bd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5E:95:51:86:87:7B:4A:80:C0:E3:0D:3E:A0:70:ED:75:EE:D9:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/3d492e08-a473-35f6-83a9-8895fc07259c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl X509v3 Authority Key Identifier: keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer sbgp-ipAddrBlock: critical IPv4: 192.230.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:13:de:50:6c:cd:03:59:59:3e:19:56:bb:06:05:a6:c4:d4: 5c:02:59:74:14:3e:83:25:97:ed:26:67:07:ff:d1:b7:e6:1c: 58:01:d6:04:60:c5:05:32:47:75:9e:a4:c1:06:cb:43:0e:4a: d3:f7:1e:59:b8:6e:e4:9d:cb:a1:ab:78:e3:cc:e3:22:19:cc: b7:3e:cb:dd:6b:73:40:9c:8e:4c:15:95:90:84:05:6b:40:14: e2:6d:f9:1f:44:3e:1c:a3:e9:48:63:9e:07:e4:71:85:d0:c2: ae:b6:28:7f:49:ce:c0:64:f0:46:b3:01:4e:53:33:9e:df:aa: 91:7a:58:2b:2a:9f:7a:ca:78:ad:7a:3d:c7:04:1a:28:0d:8d: 45:5c:75:64:dc:2d:0d:8d:2a:03:e0:dd:bc:71:36:3a:2f:ab: 28:37:9f:7a:8b:12:ea:bc:72:47:97:7b:8e:1d:6e:95:1c:b8: 29:2e:10:13:d2:95:77:4a:ad:e8:ac:96:da:26:97:b7:87:d3: f4:bb:02:5e:4a:6b:7e:ce:34:c8:e6:ea:c5:c2:6d:6c:23:37: 6f:39:53:fd:56:1f:49:1a:47:55:f8:1e:a3:d1:2e:00:2e:3c: d9:12:3a:60:f5:ef:64:3d:4e:7d:0a:f7:c8:a1:24:6d:9e:13: 63:c7:b4:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9imhDvJC+TRZm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2 MWE5MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk OTkwMWU5MzgtZmI3YS00NWE0LTg5ZTAtOWRiOWFlM2I3ZmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CFcUG8lTBoM8UJ5YtaTC2UTiN3b1s7179/c qIV+MSND//Qpal8IJ4xTDfDOpBF3nw2hJOVVk3EjEKj1TSI/C5YNcaofe0iZTwjF aNN9DxmWwHvE+ItH/Fe/+1BWD+9A6J4NCkuUKcIfSB8gEsWErPBp8Q2rBBHOXmVZ ftsU3e1pfNLP5BD1eiI415P5z4Af68EcdE0ju9kyDHEcrxyThLg0SLdkyOIqIJfJ iC+dm0LsOHk8XhQZJZraxtSq/S0HwA9roZL5S3u/VHSZq82FGsT772TdIhe40UfO hph0hr6DGRJTHan1nseflVgG5Nap1bPIPUfjvUNd4EWPoMW9ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZelVGGh3tKgMDjDT6gcO117tnEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvM2Q0OTJlMDgtYTQ3My0z NWY2LTgzYTktODg5NWZjMDcyNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2 OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0 OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOa9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoT3lBszQNZWT4ZVrsGBabE1FwCWXQUPoMll+0mZwf/0bfmHFgB1gRg xQUyR3WepMEGy0MOStP3Hlm4buSdy6GreOPM4yIZzLc+y91rc0CcjkwVlZCEBWtA FOJt+R9EPhyj6UhjngfkcYXQwq62KH9JzsBk8EazAU5TM57fqpF6WCsqn3rKeK16 PccEGigNjUVcdWTcLQ2NKgPg3bxxNjovqyg3n3qLEuq8ckeXe44dbpUcuCkuEBPS lXdKreisltoml7eH0/S7Al5Ka37ONMjm6sXCbWwjN285U/1WH0kaR1X4HqPRLgAu PNkSOmD172Q9Tn0K98ihJG2eE2PHtB8= -----END CERTIFICATE-----Generated at Wed Aug 6 09:41:27 2025 by rpki-client