$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/6966a942-6b1b-3e89-a9d0-01a52d5a331a.roa File: 6966a942-6b1b-3e89-a9d0-01a52d5a331a.roa (raw, json) Hash identifier: lh+O3HygoSJdP3NBILN4aAyzUVN0/IQkzye7GpMHGEk= Subject key identifier: C4:5A:BA:69:31:9F:26:BA:52:47:B7:E5:2B:94:9E:43:C5:5E:4C:1B Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F4328584A7D16009AB2AD7DABE7875340 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/6966a942-6b1b-3e89-a9d0-01a52d5a331a.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 0 IP address blocks: 192.124.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:16:00:9a:b2:ad:7d:ab:e7:87:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=85af1f00-b1a8-436f-a20f-7c4b66d41f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:41:3f:21:50:2d:ae:9f:13:3d:c8:78:7d:46: cd:74:84:f5:0c:c3:4d:c2:20:52:2b:8c:1c:42:1e: 86:bb:b1:8a:67:de:f8:5e:20:3d:6f:59:f1:0d:d0: 8f:8a:d1:f4:9f:50:5c:7a:e7:d7:9e:85:29:74:a5: 4a:14:58:9e:0b:53:1a:29:16:e3:22:52:2e:77:92: 6f:f7:30:4f:1b:b0:34:d6:e9:71:40:2d:fd:c2:ae: da:95:6d:3e:8b:b7:7c:30:79:06:dd:cc:81:99:5b: 76:64:5d:6a:e4:0b:c9:37:12:ec:5e:d9:0c:b0:37: d1:13:82:d7:91:9f:17:e1:a0:97:81:e2:48:ca:08: 95:4b:c1:78:d2:61:49:81:79:71:dd:3b:80:d1:f3: 17:df:03:81:7a:92:30:d2:36:84:0f:cd:53:c7:39: 06:53:25:38:76:3d:c8:24:bd:46:61:9a:87:04:65: 33:56:2f:9f:46:81:78:28:88:b3:75:d5:b6:a9:48: 67:89:d6:09:f7:41:e9:62:ba:8e:78:3d:6e:36:2b: d3:a4:da:65:dc:9a:eb:7a:87:db:a2:fb:9c:77:8d: a8:4e:ca:b7:a0:9c:40:d9:72:94:2d:dd:69:0b:f5: 3f:70:0a:08:62:65:a0:43:63:6c:19:72:56:cb:11: 79:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5A:BA:69:31:9F:26:BA:52:47:B7:E5:2B:94:9E:43:C5:5E:4C:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/6966a942-6b1b-3e89-a9d0-01a52d5a331a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 192.124.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:82:b1:1c:bb:a3:ee:cd:57:4b:56:07:46:4e:32:ad:b6:1b: bc:ab:b8:79:e8:d0:7c:a7:5f:0d:77:c3:b1:cf:82:53:17:dc: ea:7d:9e:f9:ed:52:90:f5:ea:12:fa:6e:e9:40:50:52:29:a1: 4b:c0:e6:ae:4c:6d:d9:fc:9a:89:05:5f:e0:c1:21:f9:83:4a: e4:ea:75:27:61:d8:15:45:27:6e:c4:c9:6d:cd:8c:95:af:12: 73:c3:f0:9e:b9:1a:34:a1:8f:1d:91:54:27:ef:fe:72:02:6d: e6:f6:5f:12:66:7d:09:b7:7a:c6:51:f1:84:2d:09:e2:bb:fc: 91:64:f6:f5:83:ae:36:0a:ec:d9:93:90:2d:d7:26:0a:44:1b: 9e:e8:bc:5f:83:d6:07:ec:75:e2:ad:3b:d8:6f:fb:43:eb:ae: cd:aa:df:e7:2c:5c:ec:01:30:d2:0d:2c:2f:46:11:d9:ab:f5: 23:0e:98:05:69:a8:b5:0e:ef:04:66:4c:1c:2b:3b:36:f1:40: 90:28:a6:05:cd:ab:0c:4a:00:6d:38:60:80:e4:e5:76:b0:26: ab:2e:0d:8c:6b:ef:4a:ff:7b:29:01:a1:75:4b:f3:8c:c3:8a: ec:0d:61:0e:d4:b0:02:69:61:c5:3d:6e:0f:47:56:d6:33:cc: 54:53:18:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FgCasq19q+eHU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk ODVhZjFmMDAtYjFhOC00MzZmLWEyMGYtN2M0YjY2ZDQxZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00E/IVAtrp8TPch4fUbNdIT1DMNNwiBSK4wc Qh6Gu7GKZ974XiA9b1nxDdCPitH0n1BceufXnoUpdKVKFFieC1MaKRbjIlIud5Jv 9zBPG7A01ulxQC39wq7alW0+i7d8MHkG3cyBmVt2ZF1q5AvJNxLsXtkMsDfRE4LX kZ8X4aCXgeJIygiVS8F40mFJgXlx3TuA0fMX3wOBepIw0jaED81TxzkGUyU4dj3I JL1GYZqHBGUzVi+fRoF4KIizddW2qUhnidYJ90HpYrqOeD1uNivTpNpl3Jrreofb ovucd42oTsq3oJxA2XKULd1pC/U/cAoIYmWgQ2NsGXJWyxF5fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRaumkxnya6Uke35SuUnkPFXkwbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvNjk2NmE5NDItNmIxYi0z ZTg5LWE5ZDAtMDFhNTJkNWEzMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwHw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmCsRy7o+7NV0tWB0ZOMq22G7yruHno0HynXw13w7HPglMX3Op9nvnt UpD16hL6bulAUFIpoUvA5q5Mbdn8mokFX+DBIfmDSuTqdSdh2BVFJ27EyW3NjJWv EnPD8J65GjShjx2RVCfv/nICbeb2XxJmfQm3esZR8YQtCeK7/JFk9vWDrjYK7NmT kC3XJgpEG57ovF+D1gfsdeKtO9hv+0Prrs2q3+csXOwBMNINLC9GEdmr9SMOmAVp qLUO7wRmTBwrOzbxQJAopgXNqwxKAG04YIDk5XawJqsuDYxr70r/eykBoXVL84zD iuwNYQ7UsAJpYcU9bg9HVtYzzFRTGDc= -----END CERTIFICATE-----Generated at Mon Aug 4 16:04:15 2025 by rpki-client