$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/48993bc6-8e4b-30f9-a713-92e5e7a73fc6.roa File: 48993bc6-8e4b-30f9-a713-92e5e7a73fc6.roa (raw, json) Hash identifier: NNI80zwB3gRqys0Eh1UW+lXj+QVnP+uAZhM6YEPp9sQ= Subject key identifier: D7:EB:EC:37:53:C2:28:A3:10:59:C3:0A:23:CA:ED:CA:C2:22:FF:0A Certificate issuer: /CN=a9a32deb-314f-4a1f-98ec-1b63b8d31ad4 Certificate serial: 010D0C9F4328584A01156A9E1A0751BFCBD62340 Authority key identifier: 2E:5E:1D:EC:15:B5:F2:A8:92:06:96:04:A8:0E:83:CE:3D:7F:5A:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/48993bc6-8e4b-30f9-a713-92e5e7a73fc6.roa Signing time: Wed 28 May 2025 14:57:27 +0000 ROA not before: Wed 28 May 2025 14:57:27 +0000 ROA not after: Tue 26 Aug 2025 14:57:27 +0000 asID: 36228 IP address blocks: 192.43.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:01:15:6a:9e:1a:07:51:bf:cb:d6:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a32deb-314f-4a1f-98ec-1b63b8d31ad4 Validity Not Before: May 28 14:57:27 2025 GMT Not After : Aug 26 14:57:27 2025 GMT Subject: CN=fc50cf5e-ba74-48a0-8834-bb0d89bb2a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:21:71:2f:8c:b6:b0:72:af:58:75:d4:c1:06: 74:be:eb:d8:0f:c9:3f:d8:8a:44:f8:ef:62:28:76: 2d:36:87:f1:50:0e:93:c8:6b:5a:8c:0f:80:b1:b1: 5d:e0:56:8e:3b:f0:a5:93:0f:87:2a:be:8f:90:d9: ce:aa:1d:60:dd:06:6b:b0:7e:82:55:00:9a:32:38: 02:6c:66:64:d9:5d:5e:f5:51:48:25:c5:dd:6a:f4: c6:31:02:3e:3f:09:3f:df:d7:93:30:80:74:ed:95: ec:7e:47:25:18:bc:d0:6c:26:c8:d6:11:c3:ea:08: d2:ab:82:fe:82:60:e2:c6:4f:9c:30:aa:48:f6:3d: a7:a4:18:3a:93:89:0f:e5:2c:c9:f2:fd:7d:77:9a: 23:d6:45:5e:87:52:01:27:c4:d9:59:9b:27:c7:10: 58:e0:cc:01:56:4d:66:c1:97:60:c9:03:7e:c9:47: fb:67:37:28:3e:8c:a6:f1:4d:91:8d:ae:a0:14:e2: 07:48:8c:55:42:3f:af:38:23:a1:96:08:75:28:ee: 1b:dc:64:1c:9c:cd:ac:3e:c6:6e:19:33:3f:a2:e2: 94:c6:74:40:f9:2a:b2:09:71:9b:3f:ec:13:f1:66: 46:33:13:19:82:4d:7f:51:d9:63:51:c3:80:52:c8: be:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EB:EC:37:53:C2:28:A3:10:59:C3:0A:23:CA:ED:CA:C2:22:FF:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/48993bc6-8e4b-30f9-a713-92e5e7a73fc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.crl X509v3 Authority Key Identifier: keyid:2E:5E:1D:EC:15:B5:F2:A8:92:06:96:04:A8:0E:83:CE:3D:7F:5A:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.cer sbgp-ipAddrBlock: critical IPv4: 192.43.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:bc:be:a6:0d:43:68:06:27:c8:17:e1:ad:7b:04:5f:68:39: 38:da:7b:15:51:52:df:67:b9:f7:c8:77:29:bf:21:5e:52:9b: 19:e0:43:85:78:f7:f0:76:6e:7d:d5:1d:36:55:e2:83:d5:49: a4:11:f3:54:fc:bd:99:df:4c:2d:77:f6:a5:e2:ed:ba:fc:8b: b7:b9:03:15:ca:e9:f5:66:87:e3:fb:35:3a:6f:6b:ce:4e:95: 04:20:71:b2:ee:0a:f6:c0:bc:34:7b:1c:43:ba:e7:e0:5f:f9: 50:7b:76:10:8f:a4:81:42:2e:93:6e:64:6f:fb:ab:8d:e3:34: c4:3e:3b:80:ce:7f:26:ff:08:49:65:01:af:e6:93:36:7e:40: 14:3d:6e:b4:cb:05:61:8b:a1:d8:c7:18:67:7a:bd:89:4c:5f: 17:b3:9e:ac:09:72:24:81:fb:20:02:2e:6d:15:e1:4f:6a:b1: b8:94:dc:74:5d:cb:7b:02:a1:95:1a:e9:98:38:54:79:7a:02: 18:85:eb:ce:52:41:c7:8f:e9:60:5e:ac:59:47:7a:18:78:dc: 53:fb:0a:d3:07:eb:d7:05:2f:82:c8:af:d8:dd:26:55:a3:b9: 31:d2:64:26:a6:40:e9:c4:33:11:49:d0:f3:4b:7c:90:4b:14: 46:77:91:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoBFWqeGgdRv8vWI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlhMzJkZWItMzE0Zi00YTFmLTk4ZWMtMWI2M2I4ZDMx YWQ0MB4XDTI1MDUyODE0NTcyN1oXDTI1MDgyNjE0NTcyN1owLzEtMCsGA1UEAxMk ZmM1MGNmNWUtYmE3NC00OGEwLTg4MzQtYmIwZDg5YmIyYTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliFxL4y2sHKvWHXUwQZ0vuvYD8k/2IpE+O9i KHYtNofxUA6TyGtajA+AsbFd4FaOO/Clkw+HKr6PkNnOqh1g3QZrsH6CVQCaMjgC bGZk2V1e9VFIJcXdavTGMQI+Pwk/39eTMIB07ZXsfkclGLzQbCbI1hHD6gjSq4L+ gmDixk+cMKpI9j2npBg6k4kP5SzJ8v19d5oj1kVeh1IBJ8TZWZsnxxBY4MwBVk1m wZdgyQN+yUf7ZzcoPoym8U2Rja6gFOIHSIxVQj+vOCOhlgh1KO4b3GQcnM2sPsZu GTM/ouKUxnRA+SqyCXGbP+wT8WZGMxMZgk1/UdljUcOAUsi+YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfr7DdTwiijEFnDCiPK7crCIv8KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hOWEz MmRlYi0zMTRmLTRhMWYtOThlYy0xYjYzYjhkMzFhZDQvNDg5OTNiYzYtOGU0Yi0z MGY5LWE3MTMtOTJlNWU3YTczZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTlhMzJkZWItMzE0Zi00YTFmLTk4 ZWMtMWI2M2I4ZDMxYWQ0L2E5YTMyZGViLTMxNGYtNGExZi05OGVjLTFiNjNiOGQz MWFkNC5jcmwwHwYDVR0jBBgwFoAULl4d7BW18qiSBpYEqA6Dzj1/WhYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hOWEzMmRlYi0zMTRmLTRhMWYtOThlYy0xYjYz YjhkMzFhZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCuZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHG8vqYNQ2gGJ8gX4a17BF9oOTjaexVRUt9nuffIdym/IV5SmxngQ4V4 9/B2bn3VHTZV4oPVSaQR81T8vZnfTC139qXi7br8i7e5AxXK6fVmh+P7NTpva85O lQQgcbLuCvbAvDR7HEO65+Bf+VB7dhCPpIFCLpNuZG/7q43jNMQ+O4DOfyb/CEll Aa/mkzZ+QBQ9brTLBWGLodjHGGd6vYlMXxeznqwJciSB+yACLm0V4U9qsbiU3HRd y3sCoZUa6Zg4VHl6AhiF685SQceP6WBerFlHehh43FP7CtMH69cFL4LIr9jdJlWj uTHSZCamQOnEMxFJ0PNLfJBLFEZ3kb8= -----END CERTIFICATE-----Generated at Thu Jun 19 07:27:38 2025 by rpki-client