$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/df9fbe6f-515f-3477-80a6-5583acda8eff.roa File: df9fbe6f-515f-3477-80a6-5583acda8eff.roa (raw, json) Hash identifier: VNa1syEDJ54EGPalAd1LVLXv/jGAg5t1rJIiy2d3KSM= Subject key identifier: B5:18:85:9C:A9:42:75:C7:61:97:C7:1D:56:59:E1:48:81:82:B8:79 Certificate issuer: /CN=85ff82e4-cd37-45c6-b714-ab0a04927964 Certificate serial: 010D0C9F4328584A0FB25C4D6DCD4B10C8425D00 Authority key identifier: 5E:4B:BF:18:60:91:10:DF:CE:16:25:9B:8B:08:65:A9:1C:62:50:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/df9fbe6f-515f-3477-80a6-5583acda8eff.roa Signing time: Mon 02 Jun 2025 20:37:16 +0000 ROA not before: Mon 02 Jun 2025 20:37:16 +0000 ROA not after: Sun 31 Aug 2025 20:37:16 +0000 asID: 397942 IP address blocks: 192.103.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0f:b2:5c:4d:6d:cd:4b:10:c8:42:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85ff82e4-cd37-45c6-b714-ab0a04927964 Validity Not Before: Jun 2 20:37:16 2025 GMT Not After : Aug 31 20:37:16 2025 GMT Subject: CN=525cf34e-ac3f-4cd6-b42e-eeb2ec65b678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:74:e5:57:be:cf:cf:33:f8:a1:9f:ea:18:d0: 46:26:39:5d:ff:ca:bc:fe:57:3d:32:8b:a0:9f:cd: 23:77:5a:89:82:38:c4:55:6e:09:2c:ae:60:57:99: f6:9b:11:ec:45:8f:53:22:1c:53:e0:87:22:3a:11: 87:51:a0:bc:9f:d6:4a:1b:6d:d8:43:f9:33:6d:1b: 76:f3:ae:35:b8:8b:f9:78:9c:64:08:8d:71:af:22: 10:b4:6b:cc:63:1e:e1:03:01:c0:50:aa:31:b1:4d: 72:db:c7:d5:d8:0c:8a:48:e4:7f:15:3a:3f:87:a2: cb:32:6a:f8:0b:14:db:8f:74:9e:aa:3b:55:1c:0e: 75:ee:02:67:8f:ef:78:0b:d8:b3:9b:06:a7:87:e5: ed:22:a6:ae:40:14:f2:9a:2f:4e:ec:99:88:f7:dd: 63:ef:29:cf:5e:ff:46:55:f0:17:23:4a:3d:51:ee: 80:be:9d:7d:ef:90:42:67:93:af:cf:9e:1c:28:fc: 05:9a:58:2d:1d:3d:d0:c4:dc:36:03:ed:e5:46:58: 91:66:e0:f9:da:fd:ce:59:ea:bc:7a:34:6f:bc:0c: 5c:12:e9:88:c1:0e:ae:3e:6f:e4:68:78:47:f5:7a: 7e:9a:63:3e:6f:91:db:30:58:36:68:f5:b3:d5:d5: 19:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:18:85:9C:A9:42:75:C7:61:97:C7:1D:56:59:E1:48:81:82:B8:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/df9fbe6f-515f-3477-80a6-5583acda8eff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.crl X509v3 Authority Key Identifier: keyid:5E:4B:BF:18:60:91:10:DF:CE:16:25:9B:8B:08:65:A9:1C:62:50:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer sbgp-ipAddrBlock: critical IPv4: 192.103.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:63:eb:31:1c:94:5d:10:f9:a8:46:0e:65:f4:c7:5a:05:63: 60:c9:2e:46:81:18:3f:47:20:df:2d:a8:d8:7f:1e:7c:4a:49: d1:80:66:b2:f4:49:75:fb:46:54:4a:f0:00:cb:33:e0:6e:82: d9:2d:94:e2:f4:d1:de:44:df:2a:6d:c6:42:11:ab:ce:bd:f6: 83:5e:f8:a1:86:53:98:0c:c4:e7:02:33:c1:b4:b1:a9:b2:0a: e2:e5:2a:f7:16:3e:a3:39:c2:89:3d:43:1e:92:8a:16:73:1c: e5:5c:30:09:d5:90:81:0f:b1:32:f4:93:0a:e7:3b:ac:6a:2c: 7e:f3:1c:22:c3:66:ac:6a:99:e1:de:f3:1d:02:91:76:01:34: 53:8c:df:3e:69:6f:cd:43:78:81:93:6b:cb:37:84:22:e6:40: c6:14:e6:48:c8:c1:59:fc:b6:2c:ff:86:f0:ee:12:fa:db:e2: cc:64:e2:62:81:cd:0a:6b:09:0a:31:25:8e:70:3c:29:38:e3: 52:27:af:40:eb:12:57:65:e5:a5:83:6a:8f:af:95:5b:0d:0d: a9:2b:76:a3:7b:e7:0e:fa:11:e3:ac:19:2c:01:d5:5d:e6:71: 66:71:ef:df:e7:e8:f1:9e:a9:b3:96:5e:f0:64:0e:87:50:0d: 5d:34:97:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoPslxNbc1LEMhCXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVmZjgyZTQtY2QzNy00NWM2LWI3MTQtYWIwYTA0OTI3 OTY0MB4XDTI1MDYwMjIwMzcxNloXDTI1MDgzMTIwMzcxNlowLzEtMCsGA1UEAxMk NTI1Y2YzNGUtYWMzZi00Y2Q2LWI0MmUtZWViMmVjNjViNjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnTlV77PzzP4oZ/qGNBGJjld/8q8/lc9Moug n80jd1qJgjjEVW4JLK5gV5n2mxHsRY9TIhxT4IciOhGHUaC8n9ZKG23YQ/kzbRt2 8641uIv5eJxkCI1xryIQtGvMYx7hAwHAUKoxsU1y28fV2AyKSOR/FTo/h6LLMmr4 CxTbj3SeqjtVHA517gJnj+94C9izmwanh+XtIqauQBTymi9O7JmI991j7ynPXv9G VfAXI0o9Ue6Avp1975BCZ5Ovz54cKPwFmlgtHT3QxNw2A+3lRliRZuD52v3OWeq8 ejRvvAxcEumIwQ6uPm/kaHhH9Xp+mmM+b5HbMFg2aPWz1dUZRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUYhZypQnXHYZfHHVZZ4UiBgrh5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NWZm ODJlNC1jZDM3LTQ1YzYtYjcxNC1hYjBhMDQ5Mjc5NjQvZGY5ZmJlNmYtNTE1Zi0z NDc3LTgwYTYtNTU4M2FjZGE4ZWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODVmZjgyZTQtY2QzNy00NWM2LWI3 MTQtYWIwYTA0OTI3OTY0Lzg1ZmY4MmU0LWNkMzctNDVjNi1iNzE0LWFiMGEwNDky Nzk2NC5jcmwwHwYDVR0jBBgwFoAUXku/GGCREN/OFiWbiwhlqRxiUBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84NWZmODJlNC1jZDM3LTQ1YzYtYjcxNC1hYjBh MDQ5Mjc5NjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGeFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5j6zEclF0Q+ahGDmX0x1oFY2DJLkaBGD9HIN8tqNh/HnxKSdGAZrL0 SXX7RlRK8ADLM+BugtktlOL00d5E3yptxkIRq8699oNe+KGGU5gMxOcCM8G0samy CuLlKvcWPqM5wok9Qx6SihZzHOVcMAnVkIEPsTL0kwrnO6xqLH7zHCLDZqxqmeHe 8x0CkXYBNFOM3z5pb81DeIGTa8s3hCLmQMYU5kjIwVn8tiz/hvDuEvrb4sxk4mKB zQprCQoxJY5wPCk441Inr0DrEldl5aWDao+vlVsNDakrdqN75w76EeOsGSwB1V3m cWZx79/n6PGeqbOWXvBkDodQDV00l4I= -----END CERTIFICATE-----Generated at Tue Jun 17 01:35:38 2025 by rpki-client