$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/617c09a2-b74a-348a-bb1b-065e2212399f.roa File: 617c09a2-b74a-348a-bb1b-065e2212399f.roa (raw, json) Hash identifier: L1Cla8/F69DFtPnE82066H2GUZFeDHayq8vK6+kz7Q0= Subject key identifier: 6F:09:2F:14:EF:75:96:16:70:F8:D2:D6:51:B0:57:47:65:9D:57:DD Certificate issuer: /CN=3fcccdf8-e770-4c4c-abd1-c8b63238594b Certificate serial: 010D0C9F4328584A18954230428C7994A4202980 Authority key identifier: 78:94:5F:4E:F8:F5:A3:42:58:B9:55:C3:C3:39:0E:17:70:D1:13:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/617c09a2-b74a-348a-bb1b-065e2212399f.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 395635 IP address blocks: 192.101.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:42:30:42:8c:79:94:a4:20:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fcccdf8-e770-4c4c-abd1-c8b63238594b Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=c75bd4cb-b60b-4b70-8f2c-1c0c5d431667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4b:5f:51:ab:c5:0e:6f:bf:14:47:15:cc:35: 30:b8:bf:9b:09:9a:50:ee:3d:35:fa:95:7c:d4:93: ce:0d:b4:2b:a3:a9:b5:0c:21:e4:17:a1:cb:d5:85: 41:e0:96:e7:cf:f7:19:fc:dd:4a:08:91:10:94:48: 1d:72:c7:fc:c0:b6:d6:84:a3:c8:77:ac:d7:31:2b: 7a:4e:f7:68:47:32:76:42:d6:95:c1:69:6a:99:bc: 40:bb:47:90:6e:31:79:73:c8:6b:3a:f3:73:63:36: c5:2f:5c:ad:0c:ab:e1:f8:54:aa:76:13:6d:49:36: fe:d6:8d:f2:fd:6b:1d:92:6d:e2:eb:ee:2a:f3:05: 45:d1:64:0f:ca:5e:85:a0:a2:e9:26:9e:87:ab:8c: 42:f5:2b:f1:f3:47:5c:5c:ca:eb:c1:3c:40:d5:24: 39:9b:55:7f:82:ff:d3:e7:d1:f7:58:f0:f6:97:eb: 7c:6f:e8:c0:8f:06:ee:98:68:96:8d:0b:f2:52:ce: 45:69:e8:81:89:5a:b2:58:ce:a8:cc:a3:f5:94:48: 93:42:ed:c3:56:57:11:c8:aa:9c:46:c3:33:f4:34: 9b:90:7d:c1:f9:77:d0:64:46:06:f6:fa:3d:20:e5: 70:c5:22:1c:8e:34:8f:6d:d3:21:34:fc:d3:9e:65: fa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:09:2F:14:EF:75:96:16:70:F8:D2:D6:51:B0:57:47:65:9D:57:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/617c09a2-b74a-348a-bb1b-065e2212399f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.crl X509v3 Authority Key Identifier: keyid:78:94:5F:4E:F8:F5:A3:42:58:B9:55:C3:C3:39:0E:17:70:D1:13:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer sbgp-ipAddrBlock: critical IPv4: 192.101.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:73:ab:df:a2:10:ec:a7:5f:de:cc:8b:03:7a:94:f7:f6:30: fb:e1:cd:e1:9d:6a:d2:1f:d3:2d:4e:e1:96:39:76:20:bc:a9: 2a:fc:45:a2:48:89:93:2c:40:7c:36:c2:d1:35:43:d6:68:02: d8:49:78:13:03:48:a0:23:d5:75:ba:0c:dc:2b:0d:a7:76:58: a9:af:1b:17:57:a0:20:d8:21:55:0a:7e:c1:cf:b6:c1:e5:0f: dd:5d:75:9f:be:a6:dd:f2:5a:85:75:78:84:ed:2f:2c:8c:59: 74:4d:8b:62:64:a8:40:6e:21:3b:93:2a:19:f8:16:cf:b1:1d: 43:55:6e:b8:dc:c4:81:42:ab:20:35:27:ff:49:a0:86:00:76: b9:df:9c:9b:91:e0:06:fd:76:52:37:5d:fb:29:54:0e:b2:2f: 63:fd:f1:3a:0c:89:63:57:d4:8e:42:86:88:d5:f5:8e:35:80: 28:cd:b9:72:47:11:f5:c3:c5:0e:a7:41:d7:34:8e:44:77:7a: 96:b1:1d:99:32:17:11:87:7e:3d:38:68:c8:3f:ee:d0:71:0f: d4:2e:8c:f0:b4:98:bc:48:93:2f:8f:4e:17:12:c4:34:fc:c4: 66:c8:a7:47:e1:21:b0:fe:f1:a4:90:1b:9c:f8:75:ec:ea:24: 4f:cc:94:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlUIwQox5lKQgKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZjY2NkZjgtZTc3MC00YzRjLWFiZDEtYzhiNjMyMzg1 OTRiMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk Yzc1YmQ0Y2ItYjYwYi00YjcwLThmMmMtMWMwYzVkNDMxNjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyktfUavFDm+/FEcVzDUwuL+bCZpQ7j01+pV8 1JPODbQro6m1DCHkF6HL1YVB4Jbnz/cZ/N1KCJEQlEgdcsf8wLbWhKPId6zXMSt6 TvdoRzJ2QtaVwWlqmbxAu0eQbjF5c8hrOvNzYzbFL1ytDKvh+FSqdhNtSTb+1o3y /Wsdkm3i6+4q8wVF0WQPyl6FoKLpJp6Hq4xC9Svx80dcXMrrwTxA1SQ5m1V/gv/T 59H3WPD2l+t8b+jAjwbumGiWjQvyUs5FaeiBiVqyWM6ozKP1lEiTQu3DVlcRyKqc RsMz9DSbkH3B+XfQZEYG9vo9IOVwxSIcjjSPbdMhNPzTnmX6AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8JLxTvdZYWcPjS1lGwV0dlnVfdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZmNj Y2RmOC1lNzcwLTRjNGMtYWJkMS1jOGI2MzIzODU5NGIvNjE3YzA5YTItYjc0YS0z NDhhLWJiMWItMDY1ZTIyMTIzOTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2ZjY2NkZjgtZTc3MC00YzRjLWFi ZDEtYzhiNjMyMzg1OTRiLzNmY2NjZGY4LWU3NzAtNGM0Yy1hYmQxLWM4YjYzMjM4 NTk0Yi5jcmwwHwYDVR0jBBgwFoAUeJRfTvj1o0JYuVXDwzkOF3DRE3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZmNjY2RmOC1lNzcwLTRjNGMtYWJkMS1jOGI2 MzIzODU5NGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGV3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZzq9+iEOynX97MiwN6lPf2MPvhzeGdatIf0y1O4ZY5diC8qSr8RaJI iZMsQHw2wtE1Q9ZoAthJeBMDSKAj1XW6DNwrDad2WKmvGxdXoCDYIVUKfsHPtsHl D91ddZ++pt3yWoV1eITtLyyMWXRNi2JkqEBuITuTKhn4Fs+xHUNVbrjcxIFCqyA1 J/9JoIYAdrnfnJuR4Ab9dlI3XfspVA6yL2P98ToMiWNX1I5ChojV9Y41gCjNuXJH EfXDxQ6nQdc0jkR3epaxHZkyFxGHfj04aMg/7tBxD9QujPC0mLxIky+PThcSxDT8 xGbIp0fhIbD+8aSQG5z4dezqJE/MlEA= -----END CERTIFICATE-----Generated at Mon Jun 16 12:01:40 2025 by rpki-client