$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/6f856a7a-d7b5-3c23-9f27-c8353e19cfa5.roa File: 6f856a7a-d7b5-3c23-9f27-c8353e19cfa5.roa (raw, json) Hash identifier: i9sWfFo/YdgvFsS3DkoNPpFtahGJ89Er6S2Ie7SkGg0= Subject key identifier: 7D:95:15:1C:C6:CB:46:DA:BC:CF:09:C5:9D:15:5B:FC:12:69:3B:C2 Certificate issuer: /CN=1d251b68-9cb8-49ab-91e3-66420fc719b5 Certificate serial: 010D0C9F4328584AADF10CA91B825D5DD0179880 Authority key identifier: 90:B0:03:FA:5A:A8:85:49:1A:BB:1E:8F:56:2A:9C:FB:67:F1:C8:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/6f856a7a-d7b5-3c23-9f27-c8353e19cfa5.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 192.146.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/1d251b68-9cb8-49ab-91e3-66420fc719b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/1d251b68-9cb8-49ab-91e3-66420fc719b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:0c:a9:1b:82:5d:5d:d0:17:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d251b68-9cb8-49ab-91e3-66420fc719b5 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=09b37ae3-aeae-4cf1-a87a-62977a9ca7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ac:31:62:42:5e:ce:99:fb:a7:b7:bf:98:f8: 1b:33:59:67:0f:ad:13:50:1c:02:66:43:49:7e:b0: d4:64:a5:c5:78:a8:fd:1f:27:46:35:b1:bc:2e:f3: 7d:3f:c7:b9:74:6a:52:4c:b9:e6:c3:c7:53:dc:ca: ef:6b:a9:1a:a8:53:ac:ab:9a:f0:55:18:37:c0:fe: be:db:ab:24:4f:82:32:da:33:03:47:93:26:90:63: 18:5a:57:98:ec:b7:8b:9a:43:62:14:7d:ca:b5:d9: f4:5b:8a:aa:9e:e4:f6:2a:58:e8:7d:90:7a:6c:92: a6:4a:01:1c:c9:ca:90:52:53:68:21:80:d9:75:e2: ee:3d:1e:78:a1:bf:ee:e5:74:ef:ad:d7:a5:f6:fe: 76:a2:1c:54:b3:12:ef:55:ed:52:0c:13:11:50:48: e9:b7:3c:11:87:e8:3b:a8:21:f5:53:9e:3a:6b:4f: 8d:3e:68:9f:32:22:2e:99:d8:e8:73:a0:0e:0c:63: 36:c9:1a:83:ff:70:da:e7:8f:84:ee:aa:f1:11:81: 73:32:5e:4e:bd:e2:5a:d4:92:72:22:a9:40:d4:2e: c2:e7:e2:e1:73:a6:90:9a:f7:af:de:4d:e1:dc:be: ad:2b:fb:b9:98:f7:81:40:15:b2:07:ea:12:3a:67: 67:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:95:15:1C:C6:CB:46:DA:BC:CF:09:C5:9D:15:5B:FC:12:69:3B:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/6f856a7a-d7b5-3c23-9f27-c8353e19cfa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/1d251b68-9cb8-49ab-91e3-66420fc719b5.crl X509v3 Authority Key Identifier: keyid:90:B0:03:FA:5A:A8:85:49:1A:BB:1E:8F:56:2A:9C:FB:67:F1:C8:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5.cer sbgp-ipAddrBlock: critical IPv4: 192.146.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f1:fa:9e:be:c0:f7:e8:f0:05:02:77:7c:14:74:c0:e4:75: fe:31:4d:c1:fe:0d:76:90:77:d0:29:62:37:3e:e0:7e:c3:5c: 69:65:05:f6:49:a0:6f:c9:b9:75:d4:e0:34:a6:24:c4:a9:05: de:d6:6e:96:21:f7:93:0c:dc:76:62:ec:0f:31:93:c1:00:10: 69:2c:09:d2:b8:c1:86:26:fb:ca:38:e9:74:fd:77:4a:39:91: cf:ed:29:d3:e6:76:9d:79:64:44:2d:c7:67:03:e2:98:d4:23: 3b:e3:d3:dc:67:8b:3a:e9:14:72:31:81:d6:f7:71:ea:70:ad: 60:80:7d:a6:26:61:f4:43:36:09:cd:7c:49:a7:02:04:e4:ef: 3f:05:49:72:25:21:1c:54:c1:02:a9:74:6d:68:a7:f9:4a:b6: 8b:a9:11:ef:59:4f:d9:b7:66:6b:24:52:9a:87:f4:39:97:23: e4:c7:98:b5:ee:a2:85:96:6b:0c:ee:5a:00:28:ad:3a:67:17: 83:ac:63:74:9e:04:b1:88:77:8c:b9:42:b7:30:49:9e:bf:b1: 99:89:67:a5:54:f7:f2:78:a3:c5:1a:f9:79:90:59:88:ae:75: fe:3c:84:da:a2:7e:9d:55:85:d3:df:41:c9:c7:33:07:7f:08: b9:0a:4e:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QypG4JdXdAXmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyNTFiNjgtOWNiOC00OWFiLTkxZTMtNjY0MjBmYzcx OWI1MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MDliMzdhZTMtYWVhZS00Y2YxLWE4N2EtNjI5NzdhOWNhN2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqwxYkJezpn7p7e/mPgbM1lnD60TUBwCZkNJ frDUZKXFeKj9HydGNbG8LvN9P8e5dGpSTLnmw8dT3Mrva6kaqFOsq5rwVRg3wP6+ 26skT4Iy2jMDR5MmkGMYWleY7LeLmkNiFH3Ktdn0W4qqnuT2KljofZB6bJKmSgEc ycqQUlNoIYDZdeLuPR54ob/u5XTvrdel9v52ohxUsxLvVe1SDBMRUEjptzwRh+g7 qCH1U546a0+NPmifMiIumdjoc6AODGM2yRqD/3Da54+E7qrxEYFzMl5OveJa1JJy IqlA1C7C5+Lhc6aQmvev3k3h3L6tK/u5mPeBQBWyB+oSOmdnPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2VFRzGy0bavM8JxZ0VW/wSaTvCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDI1 MWI2OC05Y2I4LTQ5YWItOTFlMy02NjQyMGZjNzE5YjUvNmY4NTZhN2EtZDdiNS0z YzIzLTlmMjctYzgzNTNlMTljZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQyNTFiNjgtOWNiOC00OWFiLTkx ZTMtNjY0MjBmYzcxOWI1LzFkMjUxYjY4LTljYjgtNDlhYi05MWUzLTY2NDIwZmM3 MTliNS5jcmwwHwYDVR0jBBgwFoAUkLAD+lqohUkaux6PViqc+2fxyKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDI1MWI2OC05Y2I4LTQ5YWItOTFlMy02NjQy MGZjNzE5YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJJ2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7x+p6+wPfo8AUCd3wUdMDkdf4xTcH+DXaQd9ApYjc+4H7DXGllBfZJ oG/JuXXU4DSmJMSpBd7WbpYh95MM3HZi7A8xk8EAEGksCdK4wYYm+8o46XT9d0o5 kc/tKdPmdp15ZEQtx2cD4pjUIzvj09xnizrpFHIxgdb3cepwrWCAfaYmYfRDNgnN fEmnAgTk7z8FSXIlIRxUwQKpdG1op/lKtoupEe9ZT9m3ZmskUpqH9DmXI+THmLXu ooWWawzuWgAorTpnF4OsY3SeBLGId4y5QrcwSZ6/sZmJZ6VU9/J4o8Ua+XmQWYiu df48hNqifp1VhdPfQcnHMwd/CLkKTlA= -----END CERTIFICATE-----Generated at Mon Aug 4 14:45:29 2025 by rpki-client