$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/b311200a-00b8-3108-9272-9ed9928e985a.roa File: b311200a-00b8-3108-9272-9ed9928e985a.roa (raw, json) Hash identifier: XD/tv3oc6yS/W346VdgObXdLajkJwoCpZpRftzJQEuI= Subject key identifier: 5B:62:10:57:E4:53:FB:71:F8:1B:C1:9E:82:2B:0D:54:AE:5F:D0:E5 Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Certificate serial: 010D0C9F4328584AB650F9C7E69D58914F6A1980 Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/b311200a-00b8-3108-9272-9ed9928e985a.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 14618 IP address blocks: 89.192.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f9:c7:e6:9d:58:91:4f:6a:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=638dd674-71a4-439a-a01e-511e405ace98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9e:1c:8c:64:c0:95:c9:8c:51:52:8a:9d:25: 1b:4f:09:ae:78:5f:71:82:55:d0:21:38:92:c1:49: ec:01:3e:86:74:2f:f1:26:f5:ae:0d:99:62:7f:39: 5b:d9:de:e4:5b:53:04:bb:42:38:eb:88:b0:36:36: 32:42:0a:f7:49:dd:da:8a:b9:67:2a:6f:1b:6a:59: 97:aa:49:e1:fa:21:4c:83:96:c8:5a:c2:f9:9e:b5: 82:d5:8a:b5:a2:6c:92:d5:33:83:5e:0e:72:7e:e5: 72:be:8f:ed:b8:35:52:89:a7:10:00:15:ba:07:22: 35:57:32:de:a4:02:80:4b:67:d4:7a:86:78:5f:ae: 11:4a:ff:c6:25:ba:8e:fe:65:af:e5:80:b7:61:29: 50:29:d8:0c:6c:bd:50:8a:a0:f3:f8:06:be:cc:4d: 52:76:c2:dd:fa:78:dd:1b:d4:60:6f:c2:cd:28:06: 34:c2:f0:4c:41:08:1c:be:de:62:75:5f:52:af:dc: ce:fc:24:27:9b:41:8f:8f:d8:a6:45:db:25:2e:80: e8:4b:ec:d4:71:8e:a3:74:1d:fb:33:3f:e3:9c:ca: 27:b4:7b:1f:21:f6:c4:6c:a9:6f:5c:d1:5e:de:b0: f6:37:f1:02:43:fd:36:7d:09:09:2c:20:1f:1c:98: 1b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:62:10:57:E4:53:FB:71:F8:1B:C1:9E:82:2B:0D:54:AE:5F:D0:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/b311200a-00b8-3108-9272-9ed9928e985a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl X509v3 Authority Key Identifier: keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer sbgp-ipAddrBlock: critical IPv4: 89.192.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:73:0b:11:25:f9:f8:f9:e9:c8:2f:03:99:ee:8c:6c:7f:c4: 12:da:b9:a8:6a:ad:ef:19:a4:ef:f9:4d:56:5c:74:f0:f9:55: cf:61:47:8a:e8:07:fe:3f:27:4b:2a:5d:03:15:a0:7b:1c:5b: c3:9f:08:a2:4d:3a:50:ca:7f:54:52:27:e6:85:e1:39:2a:64: 84:bd:04:89:de:6c:55:af:a4:a7:bf:cf:08:05:56:6a:c2:77: a3:30:11:a2:4b:08:fe:67:eb:7c:a1:da:60:59:8a:eb:15:c9: f8:42:f5:de:df:44:e0:76:ad:1a:5b:79:dc:9e:b9:a3:04:e8: 89:51:a1:a7:f0:84:16:30:dd:1b:d8:9f:ed:e9:21:4e:4a:5b: a2:63:78:69:11:c2:3b:b1:cf:7a:61:df:06:18:53:3b:1c:1c: 93:90:f1:a9:40:d8:30:33:42:8a:1c:1b:db:0b:73:23:0d:7a: 9c:36:9d:1c:c2:53:00:11:79:ba:01:61:86:8e:79:be:1b:e1: 23:2e:43:21:8b:14:14:ff:75:02:72:85:88:12:18:49:42:35: 45:e2:a9:ef:bc:eb:11:1a:f2:85:73:67:7d:8b:1c:87:6a:77: 23:ef:e5:52:07:97:8f:72:33:97:8b:72:fd:95:48:3c:05:29: 78:20:2c:c8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEq2UPnH5p1YkU9qGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz NWExMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk NjM4ZGQ2NzQtNzFhNC00MzlhLWEwMWUtNTExZTQwNWFjZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp4cjGTAlcmMUVKKnSUbTwmueF9xglXQITiS wUnsAT6GdC/xJvWuDZlifzlb2d7kW1MEu0I464iwNjYyQgr3Sd3airlnKm8balmX qknh+iFMg5bIWsL5nrWC1Yq1omyS1TODXg5yfuVyvo/tuDVSiacQABW6ByI1VzLe pAKAS2fUeoZ4X64RSv/GJbqO/mWv5YC3YSlQKdgMbL1QiqDz+Aa+zE1SdsLd+njd G9Rgb8LNKAY0wvBMQQgcvt5idV9Sr9zO/CQnm0GPj9imRdslLoDoS+zUcY6jdB37 Mz/jnMontHsfIfbEbKlvXNFe3rD2N/ECQ/02fQkJLCAfHJgbNQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFtiEFfkU/tx+BvBnoIrDVSuX9DlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvYjMxMTIwMGEtMDBiOC0z MTA4LTkyNzItOWVkOTkyOGU5ODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2 YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4 MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5 YjQyODM1YTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCWcAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAhHMLESX5+PnpyC8Dme6MbH/EEtq5qGqt7xmk7/lNVlx08PlVz2FHiugH /j8nSypdAxWgexxbw58Iok06UMp/VFIn5oXhOSpkhL0Eid5sVa+kp7/PCAVWasJ3 ozARoksI/mfrfKHaYFmK6xXJ+EL13t9E4HatGlt53J65owToiVGhp/CEFjDdG9if 7ekhTkpbomN4aRHCO7HPemHfBhhTOxwck5DxqUDYMDNCihwb2wtzIw16nDadHMJT ABF5ugFhho55vhvhIy5DIYsUFP91AnKFiBIYSUI1ReKp77zrERryhXNnfYsch2p3 I+/lUgeXj3Izl4ty/ZVIPAUpeCAsyA== -----END CERTIFICATE-----Generated at Wed Aug 6 00:47:07 2025 by rpki-client