$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/cfe417cd-a5a8-38bb-8b4f-ad1e53fbb621.roa File: cfe417cd-a5a8-38bb-8b4f-ad1e53fbb621.roa (raw, json) Hash identifier: 17pj0uugur+XaP8XC3zoNG8XW/vm/eJH+Y4Ecgx67fk= Subject key identifier: B1:5C:9D:DF:C1:C6:05:79:64:BE:8F:34:C0:1F:3F:70:C5:AC:F1:70 Certificate issuer: /CN=d184e471-080a-4e54-bf94-60dd0c8beb48 Certificate serial: 010D0C9F4328584A979B7DC886BD90F73390B980 Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/cfe417cd-a5a8-38bb-8b4f-ad1e53fbb621.roa Signing time: Mon 21 Jul 2025 13:01:04 +0000 ROA not before: Mon 21 Jul 2025 13:01:04 +0000 ROA not after: Sun 19 Oct 2025 13:01:04 +0000 asID: 25928 IP address blocks: 192.68.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:97:9b:7d:c8:86:bd:90:f7:33:90:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48 Validity Not Before: Jul 21 13:01:04 2025 GMT Not After : Oct 19 13:01:04 2025 GMT Subject: CN=e27876e4-145d-4602-8dcf-01bb48dd0f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:db:ae:d7:b9:70:86:e4:5d:79:72:39:67: 26:15:1b:95:d2:cf:16:aa:58:9c:3d:d7:ac:28:71: b0:e2:ab:1b:72:45:54:f3:8b:4d:ab:e5:86:b3:69: 80:4b:70:33:21:cf:8c:cc:59:bc:e2:bf:de:69:c4: 5d:9b:2e:11:87:99:8b:6e:6e:ba:da:ab:52:ed:a4: 5e:03:ae:36:28:6a:21:94:2d:47:16:f7:1a:92:36: 0d:0e:ce:73:06:4e:25:28:ed:a4:36:82:7f:74:d4: 34:47:ca:4d:c1:6a:86:c5:c2:df:a0:88:6b:38:a9: 50:94:db:76:c9:0f:c6:04:5a:2a:3a:eb:a8:ae:e7: 20:d0:b3:07:20:19:21:43:d1:7d:08:54:33:cd:3d: 9b:16:9f:67:f0:4b:d0:f9:e0:1c:3e:af:98:7b:ff: 71:28:48:80:e0:a1:a0:4e:a7:32:76:41:57:2a:5d: 32:62:f9:30:ec:e3:39:a8:55:dc:b7:2d:10:68:58: a0:75:3b:9a:53:44:3e:cb:10:f4:36:bf:fa:bc:30: 57:00:0a:c4:90:64:2f:07:39:65:91:68:f4:ed:be: da:0f:74:20:37:76:99:bc:98:a5:b5:13:a5:66:1f: a5:4c:4c:c8:df:5d:cd:49:71:cd:73:42:81:04:de: 24:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5C:9D:DF:C1:C6:05:79:64:BE:8F:34:C0:1F:3F:70:C5:AC:F1:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/cfe417cd-a5a8-38bb-8b4f-ad1e53fbb621.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl X509v3 Authority Key Identifier: keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer sbgp-ipAddrBlock: critical IPv4: 192.68.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:9b:8d:2a:db:83:86:1b:6d:47:bd:8d:22:1e:e5:65:6b:fa: 0f:34:23:64:9e:af:fa:cb:58:d6:0f:8b:c2:fb:bd:41:5e:ce: 75:d9:0a:6d:65:7b:53:2c:95:41:94:fb:37:a9:a2:21:37:c7: be:14:54:a4:cf:75:0b:52:89:3d:a2:c6:b3:57:0a:41:2c:20: 8d:4a:57:4c:53:99:46:23:8a:39:82:b4:12:e0:d4:0d:12:e2: 26:78:e3:95:d3:25:b5:66:e4:57:cd:42:bd:3d:31:ca:9d:b8: 11:a6:70:aa:2c:d4:1a:00:a2:2d:ac:6e:0a:b2:09:37:c5:1f: 79:65:39:0d:03:62:60:39:9f:c4:33:bd:e3:bb:06:01:1f:3a: 5f:33:2e:b5:f2:d7:61:cb:64:61:d3:21:c1:ed:cd:55:b6:ce: c8:9b:34:e8:27:0e:1d:09:b2:37:96:6c:ae:74:90:10:c4:ef: 8a:5a:c7:77:90:95:a2:2f:d3:d0:ec:d2:d3:bb:d8:f1:14:6d: 6d:4a:54:fa:81:4c:e2:99:69:63:0c:0f:3e:c3:fe:ad:b6:6b: bf:d5:c4:18:0f:8b:6a:9b:30:62:64:10:be:c6:df:64:5d:81: f0:de:00:61:eb:38:9f:e5:f9:5c:23:e0:88:52:af:67:9f:b9: c6:cf:98:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqXm33Ihr2Q9zOQuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE4NGU0NzEtMDgwYS00ZTU0LWJmOTQtNjBkZDBjOGJl YjQ4MB4XDTI1MDcyMTEzMDEwNFoXDTI1MTAxOTEzMDEwNFowLzEtMCsGA1UEAxMk ZTI3ODc2ZTQtMTQ1ZC00NjAyLThkY2YtMDFiYjQ4ZGQwZjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLnbrte5cIbkXXlyOWcmFRuV0s8WqlicPdes KHGw4qsbckVU84tNq+WGs2mAS3AzIc+MzFm84r/eacRdmy4Rh5mLbm662qtS7aRe A642KGohlC1HFvcakjYNDs5zBk4lKO2kNoJ/dNQ0R8pNwWqGxcLfoIhrOKlQlNt2 yQ/GBFoqOuuorucg0LMHIBkhQ9F9CFQzzT2bFp9n8EvQ+eAcPq+Ye/9xKEiA4KGg TqcydkFXKl0yYvkw7OM5qFXcty0QaFigdTuaU0Q+yxD0Nr/6vDBXAArEkGQvBzll kWj07b7aD3QgN3aZvJiltROlZh+lTEzI313NSXHNc0KBBN4khQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFcnd/BxgV5ZL6PNMAfP3DFrPFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0 ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRkMGM4YmViNDgvY2ZlNDE3Y2QtYTVhOC0z OGJiLThiNGYtYWQxZTUzZmJiNjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDE4NGU0NzEtMDgwYS00ZTU0LWJm OTQtNjBkZDBjOGJlYjQ4L2QxODRlNDcxLTA4MGEtNGU1NC1iZjk0LTYwZGQwYzhi ZWI0OC5jcmwwHwYDVR0jBBgwFoAUgirGXwV3ltYS+ySG5nLGEqW2QVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRk MGM4YmViNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwET/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+bjSrbg4YbbUe9jSIe5WVr+g80I2Ser/rLWNYPi8L7vUFeznXZCm1l e1MslUGU+zepoiE3x74UVKTPdQtSiT2ixrNXCkEsII1KV0xTmUYjijmCtBLg1A0S 4iZ445XTJbVm5FfNQr09McqduBGmcKos1BoAoi2sbgqyCTfFH3llOQ0DYmA5n8Qz veO7BgEfOl8zLrXy12HLZGHTIcHtzVW2zsibNOgnDh0JsjeWbK50kBDE74pax3eQ laIv09Ds0tO72PEUbW1KVPqBTOKZaWMMDz7D/q22a7/VxBgPi2qbMGJkEL7G32Rd gfDeAGHrOJ/l+Vwj4IhSr2efucbPmF8= -----END CERTIFICATE-----Generated at Wed Aug 6 12:29:03 2025 by rpki-client