$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/c07d9477-bd5d-310a-b557-4b0b4a46506e.roa File: c07d9477-bd5d-310a-b557-4b0b4a46506e.roa (raw, json) Hash identifier: yiOtvQ2PZY6HulC6nSdeMW6kUdtg0T1oAn1mUSfL5Vg= Subject key identifier: 93:08:25:BE:45:CB:1A:EF:45:3D:3E:E9:BA:A9:79:91:02:8D:CA:44 Certificate issuer: /CN=219f6136-3599-4e41-920e-eccbe6592210 Certificate serial: 010D0C9F4328584A8DD5FABDF3668F498EA08200 Authority key identifier: CA:17:52:0D:8C:6C:0E:05:CA:71:2C:B1:E2:49:6D:FD:F0:71:44:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/c07d9477-bd5d-310a-b557-4b0b4a46506e.roa Signing time: Fri 18 Jul 2025 01:00:48 +0000 ROA not before: Fri 18 Jul 2025 01:00:48 +0000 ROA not after: Thu 16 Oct 2025 01:00:48 +0000 asID: 17001 IP address blocks: 192.139.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:d5:fa:bd:f3:66:8f:49:8e:a0:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219f6136-3599-4e41-920e-eccbe6592210 Validity Not Before: Jul 18 01:00:48 2025 GMT Not After : Oct 16 01:00:48 2025 GMT Subject: CN=65e38b4e-4184-48d9-b9d8-52539ce17965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a3:ff:c8:f2:36:86:4b:5e:5a:eb:9e:58:79: 61:2c:01:30:ae:de:0a:73:3e:bb:10:e5:b1:e6:a8: 32:49:a9:aa:ac:02:bb:f1:46:6d:9f:31:93:49:42: 12:b6:50:85:36:1e:05:a1:84:39:1b:66:38:81:22: da:ac:a0:da:75:ab:2e:dc:69:c4:a4:18:1b:a3:fb: 7a:59:b4:0a:6d:65:d3:cf:4f:8c:80:86:55:45:61: 35:0d:5e:cd:8b:07:6c:13:8d:25:55:23:84:9e:be: 50:93:97:f6:e7:2c:fe:66:57:bf:f4:79:b9:ff:09: 01:c2:48:79:1d:ab:f9:a5:33:f9:98:07:0b:59:15: ab:cd:9f:ab:a5:e3:f8:eb:97:51:c2:6f:84:ae:66: 60:64:4f:f2:10:21:f1:ac:bd:ee:34:88:d2:ff:25: fa:96:ea:8a:95:0f:3a:7b:b0:5d:5e:08:d8:bb:71: 6b:11:7e:cc:76:d6:20:a3:89:6f:29:d4:d3:aa:08: 1e:2f:67:5a:66:6a:9a:03:b1:c2:fb:f7:d2:51:09: 2a:ac:d1:fc:7e:1b:9f:20:ff:d0:fb:15:a7:87:a7: 91:4d:b8:5a:ac:45:fe:40:82:7c:08:0f:95:8d:c6: cc:98:56:4a:c2:7d:ce:cc:ef:f2:63:dc:eb:91:c7: 76:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:08:25:BE:45:CB:1A:EF:45:3D:3E:E9:BA:A9:79:91:02:8D:CA:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/c07d9477-bd5d-310a-b557-4b0b4a46506e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.crl X509v3 Authority Key Identifier: keyid:CA:17:52:0D:8C:6C:0E:05:CA:71:2C:B1:E2:49:6D:FD:F0:71:44:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer sbgp-ipAddrBlock: critical IPv4: 192.139.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:fb:1b:b6:b2:b8:33:2f:9d:cf:6f:d7:df:39:d1:65:77:f9: 54:ec:9d:59:2f:b5:12:f7:ed:24:3c:18:95:87:fc:3d:e4:6a: 8b:a6:05:61:e8:13:d9:09:4b:60:b3:c4:aa:1e:ff:10:75:2f: 89:ad:bb:0c:d3:57:e2:b7:22:33:53:cd:ed:7d:de:71:9a:28: 9e:ac:7b:8d:14:1d:95:27:ae:31:08:df:33:c7:c0:ed:e4:46: 29:b5:75:b9:a9:91:56:cd:0d:2b:5d:c6:71:09:34:64:bc:3c: 21:5f:86:36:dc:86:28:67:08:ce:06:e1:03:a3:b4:ff:94:65: 65:8d:10:f9:a4:94:e2:ed:7f:b0:5f:ae:b7:18:59:6e:ec:31: a8:aa:1d:9b:f1:a0:8d:4c:12:85:f3:0e:01:25:86:8a:3a:a4: 89:82:8b:90:a0:e3:dc:67:34:a9:0f:af:fb:53:1b:b2:a3:ac: cf:c3:f9:73:00:b6:07:35:a6:67:c8:04:dc:d3:3c:77:47:f2: ac:da:11:38:3c:62:91:55:9f:2a:cc:0c:74:03:3a:00:5a:ff: b5:89:72:10:47:ce:6b:d9:7d:64:ae:ba:47:f2:7c:0f:d2:c5: ae:19:04:95:26:6b:53:e0:89:96:35:e4:45:73:97:1b:f3:d0: 89:10:ca:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqN1fq982aPSY6gggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5ZjYxMzYtMzU5OS00ZTQxLTkyMGUtZWNjYmU2NTky MjEwMB4XDTI1MDcxODAxMDA0OFoXDTI1MTAxNjAxMDA0OFowLzEtMCsGA1UEAxMk NjVlMzhiNGUtNDE4NC00OGQ5LWI5ZDgtNTI1MzljZTE3OTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaP/yPI2hkteWuueWHlhLAEwrt4Kcz67EOWx 5qgySamqrAK78UZtnzGTSUIStlCFNh4FoYQ5G2Y4gSLarKDadasu3GnEpBgbo/t6 WbQKbWXTz0+MgIZVRWE1DV7NiwdsE40lVSOEnr5Qk5f25yz+Zle/9Hm5/wkBwkh5 Hav5pTP5mAcLWRWrzZ+rpeP465dRwm+ErmZgZE/yECHxrL3uNIjS/yX6luqKlQ86 e7BdXgjYu3FrEX7MdtYgo4lvKdTTqggeL2daZmqaA7HC+/fSUQkqrNH8fhufIP/Q +xWnh6eRTbharEX+QIJ8CA+VjcbMmFZKwn3OzO/yY9zrkcd23wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMIJb5FyxrvRT0+6bqpeZECjcpEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTlm NjEzNi0zNTk5LTRlNDEtOTIwZS1lY2NiZTY1OTIyMTAvYzA3ZDk0NzctYmQ1ZC0z MTBhLWI1NTctNGIwYjRhNDY1MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjE5ZjYxMzYtMzU5OS00ZTQxLTky MGUtZWNjYmU2NTkyMjEwLzIxOWY2MTM2LTM1OTktNGU0MS05MjBlLWVjY2JlNjU5 MjIxMC5jcmwwHwYDVR0jBBgwFoAUyhdSDYxsDgXKcSyx4klt/fBxRK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTlmNjEzNi0zNTk5LTRlNDEtOTIwZS1lY2Ni ZTY1OTIyMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwItyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABj7G7ayuDMvnc9v19850WV3+VTsnVkvtRL37SQ8GJWH/D3kaoumBWHo E9kJS2CzxKoe/xB1L4mtuwzTV+K3IjNTze193nGaKJ6se40UHZUnrjEI3zPHwO3k Rim1dbmpkVbNDStdxnEJNGS8PCFfhjbchihnCM4G4QOjtP+UZWWNEPmklOLtf7Bf rrcYWW7sMaiqHZvxoI1MEoXzDgElhoo6pImCi5Cg49xnNKkPr/tTG7KjrM/D+XMA tgc1pmfIBNzTPHdH8qzaETg8YpFVnyrMDHQDOgBa/7WJchBHzmvZfWSuukfyfA/S xa4ZBJUma1PgiZY15EVzlxvz0IkQypg= -----END CERTIFICATE-----Generated at Sat Aug 9 22:39:22 2025 by rpki-client