$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa File: 3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa (raw, json) Hash identifier: qo4LfjbzX7ARV8GUQpsaXQBSE2ErE6mbS1sUwH/9fTw= Subject key identifier: 6D:E9:BB:AC:60:3A:B5:C5:5A:86:43:84:D8:D1:C1:BE:B6:C8:31:37 Certificate issuer: /CN=53482e94-c66d-458c-842b-1143e3693e88 Certificate serial: 010D0C9F4328584A9E961AD535DA335085A8BEA0 Authority key identifier: 88:FC:3C:8E:C5:B2:BE:24:04:8E:5C:4F:14:21:39:3C:BB:51:99:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 54393 IP address blocks: 192.70.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/53482e94-c66d-458c-842b-1143e3693e88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/53482e94-c66d-458c-842b-1143e3693e88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:1a:d5:35:da:33:50:85:a8:be:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53482e94-c66d-458c-842b-1143e3693e88 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=94eb4ca1-2791-44c8-b48c-19a8fe7e10d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a4:b5:00:b0:e6:ca:cb:6e:ef:a3:8b:4a:88: d0:d4:6c:cd:3f:8b:08:58:6d:af:38:0b:d2:80:13: 0f:a2:73:33:31:3c:c4:51:50:7c:7f:f2:2f:93:88: 71:61:bc:5f:f1:ba:78:23:ce:fd:e8:7a:21:c7:3e: 02:46:01:24:c8:52:7f:5a:7d:ca:ea:a9:8e:22:d1: e5:ad:98:3a:8b:b7:bb:c1:84:e9:66:60:54:55:75: 17:4f:09:6c:5e:ac:91:dc:16:ff:8f:54:91:c9:ea: a4:2a:7a:95:48:19:d2:96:de:90:42:8b:10:dc:cd: ff:9a:c2:32:36:2b:21:ec:23:70:51:4e:8a:66:36: 71:c1:52:2c:77:6c:d7:7a:f1:54:89:db:18:9d:60: e7:bb:51:57:eb:47:42:eb:8b:a1:17:09:63:92:2a: 81:60:e0:11:db:78:db:ce:e6:94:7a:0e:48:d9:6b: 77:20:78:1c:d5:23:ad:7f:0b:24:ef:ac:46:70:09: 25:fe:aa:12:f8:a5:1d:38:0b:1c:b4:bd:07:2c:f2: 33:37:c8:9b:3f:bd:44:33:c5:1a:ce:b6:77:98:54: f2:11:36:39:f3:1a:0d:39:ec:fc:54:e7:8a:28:d0: d5:95:0c:fd:0f:e8:20:30:3f:f0:7b:f5:95:bf:24: e1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E9:BB:AC:60:3A:B5:C5:5A:86:43:84:D8:D1:C1:BE:B6:C8:31:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/53482e94-c66d-458c-842b-1143e3693e88.crl X509v3 Authority Key Identifier: keyid:88:FC:3C:8E:C5:B2:BE:24:04:8E:5C:4F:14:21:39:3C:BB:51:99:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88.cer sbgp-ipAddrBlock: critical IPv4: 192.70.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:bf:68:45:cd:84:21:31:f9:61:d1:ca:e5:fa:43:9d:e6:7f: eb:a6:da:01:03:53:6f:a9:dc:fd:12:c2:1a:ba:66:ae:ce:07: 00:bf:f8:85:2d:ef:42:a6:c7:0b:18:dc:1e:aa:fb:19:b6:7f: 8c:c9:a2:8b:b0:d4:05:84:a2:42:f2:7f:0a:30:38:10:54:a5: 66:cf:4b:b9:51:bb:3b:88:2c:91:4b:11:35:8f:02:85:bd:24: be:1d:cf:36:4a:55:db:a5:bb:5c:b2:b7:28:a5:cb:8d:74:8e: ba:da:51:ba:99:f5:09:ad:34:ed:f1:86:b1:8c:e2:93:6f:c5: 21:2f:98:0d:62:ad:24:86:86:77:85:f0:0e:fb:3a:d4:13:49: 65:9e:d4:c4:8e:ff:94:c7:1c:c6:46:17:7a:f7:dd:a2:c3:ce: d9:85:94:1f:46:63:86:fc:2d:a0:7b:fb:dd:47:da:e0:4b:e5: fc:4c:c5:47:f1:a0:f2:f0:58:dd:b5:5c:35:4b:42:dc:eb:6d: 16:8b:9c:1d:48:fc:1f:a7:87:ca:5f:0d:13:ed:37:4a:53:d1: eb:ec:b2:8a:a8:3f:87:57:9e:d5:44:8c:37:09:af:4c:6c:76: 9a:5a:82:d2:3f:c8:03:56:28:ae:7c:21:83:e9:ed:56:e4:4d: 3a:f3:4d:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelhrVNdozUIWovqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTM0ODJlOTQtYzY2ZC00NThjLTg0MmItMTE0M2UzNjkz ZTg4MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk OTRlYjRjYTEtMjc5MS00NGM4LWI0OGMtMTlhOGZlN2UxMGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqS1ALDmystu76OLSojQ1GzNP4sIWG2vOAvS gBMPonMzMTzEUVB8f/Ivk4hxYbxf8bp4I8796Hohxz4CRgEkyFJ/Wn3K6qmOItHl rZg6i7e7wYTpZmBUVXUXTwlsXqyR3Bb/j1SRyeqkKnqVSBnSlt6QQosQ3M3/msIy Nish7CNwUU6KZjZxwVIsd2zXevFUidsYnWDnu1FX60dC64uhFwljkiqBYOAR23jb zuaUeg5I2Wt3IHgc1SOtfwsk76xGcAkl/qoS+KUdOAsctL0HLPIzN8ibP71EM8Ua zrZ3mFTyETY58xoNOez8VOeKKNDVlQz9D+ggMD/we/WVvyTh/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3pu6xgOrXFWoZDhNjRwb62yDE3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MzQ4 MmU5NC1jNjZkLTQ1OGMtODQyYi0xMTQzZTM2OTNlODgvMzY2N2NlZDctOTYyYy0z ZjBlLTliNzctY2YxZWQxM2VlOTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTM0ODJlOTQtYzY2ZC00NThjLTg0 MmItMTE0M2UzNjkzZTg4LzUzNDgyZTk0LWM2NmQtNDU4Yy04NDJiLTExNDNlMzY5 M2U4OC5jcmwwHwYDVR0jBBgwFoAUiPw8jsWyviQEjlxPFCE5PLtRme8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81MzQ4MmU5NC1jNjZkLTQ1OGMtODQyYi0xMTQz ZTM2OTNlODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEbKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMa/aEXNhCEx+WHRyuX6Q53mf+um2gEDU2+p3P0Swhq6Zq7OBwC/+IUt 70KmxwsY3B6q+xm2f4zJoouw1AWEokLyfwowOBBUpWbPS7lRuzuILJFLETWPAoW9 JL4dzzZKVdulu1yytyily410jrraUbqZ9QmtNO3xhrGM4pNvxSEvmA1irSSGhneF 8A77OtQTSWWe1MSO/5THHMZGF3r33aLDztmFlB9GY4b8LaB7+91H2uBL5fxMxUfx oPLwWN21XDVLQtzrbRaLnB1I/B+nh8pfDRPtN0pT0evssoqoP4dXntVEjDcJr0xs dppagtI/yANWKK58IYPp7VbkTTrzTUk= -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:17 2025 by rpki-client