$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/bb536837-5070-3d5a-a0e5-e98a4b36ac9b.roa File: bb536837-5070-3d5a-a0e5-e98a4b36ac9b.roa (raw, json) Hash identifier: zEd+ef+Fb5ctFhmKfAB2Sd5vqAgu8xglpky9H1L9hHY= Subject key identifier: 34:76:58:B9:CC:A9:40:B0:B0:32:2F:B8:25:FD:D8:10:AE:5E:F9:6E Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F4328584AA160E21D84CCABE692AC6480 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/bb536837-5070-3d5a-a0e5-e98a4b36ac9b.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 293 IP address blocks: 192.124.52.0/24 maxlen: 24 192.124.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:e2:1d:84:cc:ab:e6:92:ac:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=ea57971a-d9be-4273-9cdd-20ccae8e996a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a4:bf:df:48:11:db:78:fc:8f:84:9f:d1:fc: cd:0b:29:45:a9:64:98:2d:70:38:70:7b:70:82:fe: 04:1e:15:f6:f2:8b:da:9b:85:b7:c8:8a:be:52:31: cd:9d:bc:81:bf:9b:e4:ed:f2:01:03:bc:e3:46:e5: 93:52:e0:6a:1a:9e:2f:12:96:91:30:8c:ef:99:65: d1:bf:20:b5:57:9a:aa:af:47:ef:51:a9:a5:5d:2b: 75:30:d5:e0:42:5d:50:54:15:e2:da:e3:f7:1b:a4: 5d:07:dd:27:ec:7c:aa:f6:c3:55:a4:a0:29:74:fd: 7a:9e:21:ad:d0:68:8c:1b:3f:23:76:e4:4d:b4:40: e2:b4:d3:45:1b:41:7e:2b:33:db:aa:18:2f:29:e8: 7f:3b:6c:ad:47:05:c7:82:f0:1c:3a:50:de:86:56: 6e:70:b3:d7:cf:2c:83:1e:ac:7e:d6:e0:66:c7:d5: 9e:6a:1c:21:7d:db:4c:4e:8f:b9:f2:b2:ea:50:ba: 4b:70:19:62:aa:9d:4c:55:a5:9c:09:f0:8f:c8:1d: 7d:cf:dd:b6:6d:35:68:34:1a:08:fa:dd:3d:4a:62: c1:4b:86:ff:6c:4d:1f:0a:a0:5b:c3:15:a9:67:70: 97:08:05:3c:64:94:d0:81:ac:28:39:df:70:26:57: 84:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:76:58:B9:CC:A9:40:B0:B0:32:2F:B8:25:FD:D8:10:AE:5E:F9:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/bb536837-5070-3d5a-a0e5-e98a4b36ac9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 192.124.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:25:fd:25:b9:23:d5:91:dc:29:98:7c:fd:29:69:94:04:52: d2:06:63:e2:33:b1:df:3a:09:f0:25:de:07:67:d1:17:67:6f: 0d:0b:1c:7e:24:9b:24:60:8a:e0:09:36:ed:ee:e5:f5:cb:e7: 6d:72:9c:94:73:33:0e:53:db:7e:b3:ac:09:ac:f5:97:ee:88: 15:c9:83:25:62:47:c2:2d:72:2f:55:b3:2c:f8:cf:65:e3:ac: 9a:3c:f9:3c:9f:79:bf:1a:61:a8:5f:94:29:43:0e:2e:9d:1e: 89:c0:d2:f6:03:b2:0f:1b:c8:a1:4b:88:d7:6e:1c:f1:e0:c0: ba:bd:29:3d:9b:9c:e9:b0:43:c6:5f:1b:5c:51:94:61:4d:bb: 55:fc:ae:7d:7f:40:03:97:22:eb:5b:e1:bf:54:87:23:11:70: 83:89:97:b2:34:2f:b4:91:30:81:b8:6a:0c:98:08:17:20:c5: 65:39:74:4e:28:e4:13:ef:24:53:66:9e:b8:da:d9:b5:13:4b: cc:34:41:22:4b:32:3a:5a:18:9c:c6:17:3b:e1:eb:68:79:c6: b5:ca:66:67:27:66:2c:15:eb:21:2f:a4:9e:b3:94:e2:81:7b: 6e:46:13:52:67:3a:e4:73:69:1e:1e:b7:0c:15:81:fd:d5:96: 85:36:a8:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYOIdhMyr5pKsZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ZWE1Nzk3MWEtZDliZS00MjczLTljZGQtMjBjY2FlOGU5OTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6S/30gR23j8j4Sf0fzNCylFqWSYLXA4cHtw gv4EHhX28ovam4W3yIq+UjHNnbyBv5vk7fIBA7zjRuWTUuBqGp4vEpaRMIzvmWXR vyC1V5qqr0fvUamlXSt1MNXgQl1QVBXi2uP3G6RdB90n7Hyq9sNVpKApdP16niGt 0GiMGz8jduRNtEDitNNFG0F+KzPbqhgvKeh/O2ytRwXHgvAcOlDehlZucLPXzyyD Hqx+1uBmx9WeahwhfdtMTo+58rLqULpLcBliqp1MVaWcCfCPyB19z922bTVoNBoI +t09SmLBS4b/bE0fCqBbwxWpZ3CXCAU8ZJTQgawoOd9wJleENwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDR2WLnMqUCwsDIvuCX92BCuXvluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvYmI1MzY4MzctNTA3MC0z ZDVhLWEwZTUtZTk4YTRiMzZhYzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwHw0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwl/SW5I9WR3CmYfP0paZQEUtIGY+Izsd86CfAl3gdn0Rdnbw0LHH4k myRgiuAJNu3u5fXL521ynJRzMw5T236zrAms9ZfuiBXJgyViR8Itci9Vsyz4z2Xj rJo8+Tyfeb8aYahflClDDi6dHonA0vYDsg8byKFLiNduHPHgwLq9KT2bnOmwQ8Zf G1xRlGFNu1X8rn1/QAOXIutb4b9UhyMRcIOJl7I0L7SRMIG4agyYCBcgxWU5dE4o 5BPvJFNmnrja2bUTS8w0QSJLMjpaGJzGFzvh62h5xrXKZmcnZiwV6yEvpJ6zlOKB e25GE1JnOuRzaR4etwwVgf3VloU2qKc= -----END CERTIFICATE-----Generated at Wed Aug 6 07:57:27 2025 by rpki-client