$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa File: 31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa (raw, json) Hash identifier: uMmlvTWZJq9/eXt45P7flzf8YHCuDzbdDhvvmGpUxRQ= Subject key identifier: A8:2D:F3:26:BA:FC:2A:CC:45:2B:7A:0A:F8:13:13:A2:28:9A:CA:58 Certificate issuer: /CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Certificate serial: 010D0C9F4328584AAB265838F75195CB25217A00 Authority key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 192.152.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:58:38:f7:51:95:cb:25:21:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=fa17f1a9-6b57-4839-8102-02f4261d73a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:56:81:89:1f:66:cf:62:a0:7d:c8:d6:56:a0: f3:e8:ff:f0:cc:21:40:a7:3d:9a:f1:df:dd:63:d2: 99:2d:03:86:c7:00:9f:fd:4a:8d:44:24:2a:6d:42: b4:aa:97:a2:51:74:46:b1:a2:ee:0b:6b:d2:3d:a8: 91:a3:e7:95:f0:7c:37:f7:a6:91:4e:1f:6e:14:d6: 7b:3e:d3:18:32:f4:c4:a4:a4:c3:9e:de:92:30:40: 56:de:a8:1b:aa:3a:fa:5a:26:f0:33:4d:f6:e9:6c: e7:59:60:30:89:4a:1e:c9:40:2c:70:c0:86:cf:d3: 06:f4:e9:ac:0e:a0:4e:5f:46:1c:b2:13:e7:1a:1c: fc:aa:c4:9a:69:82:3f:32:0f:b1:73:44:8e:d6:58: b7:2d:6f:45:8a:e7:06:94:bd:de:30:56:e9:15:3c: c3:43:e4:14:6c:ba:35:df:de:2e:81:12:c4:53:bf: e6:75:d2:ae:ce:3f:08:d6:41:14:fc:b5:a5:cc:e8: e7:b9:b3:76:3d:e1:06:dc:35:64:63:d8:69:2f:09: 3b:27:bf:93:0f:26:37:47:cc:68:f0:85:70:95:5a: 7c:47:0e:5c:c7:13:88:b4:29:05:8c:99:84:ec:e8: bd:c0:ef:5b:e6:7d:75:1f:9f:aa:fb:57:d7:af:d2: 68:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2D:F3:26:BA:FC:2A:CC:45:2B:7A:0A:F8:13:13:A2:28:9A:CA:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl X509v3 Authority Key Identifier: keyid:59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer sbgp-ipAddrBlock: critical IPv4: 192.152.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:5c:b0:35:c8:8b:33:44:ca:10:fe:8e:05:23:2b:21:18:ff: 60:5b:20:51:0d:4f:67:a6:aa:06:fc:08:e6:9b:75:c5:24:9f: e8:03:07:2f:8e:9f:f7:cb:f5:cb:de:6c:e6:48:6c:a9:16:22: 75:7d:08:4d:7e:3d:a2:36:69:82:7c:1e:18:26:0f:e4:78:52: d0:ca:42:64:f1:1d:fc:e5:f9:26:cf:6e:3d:61:85:df:2d:b1: 3a:fa:3a:c8:ef:6e:af:43:de:64:7e:8d:96:2a:5a:d7:a8:0d: 73:ea:70:0c:14:5e:55:08:87:d1:4d:6d:2f:4c:bc:99:90:bf: 38:3a:c8:1a:b0:fa:c4:52:f2:7f:31:b8:9e:12:0c:02:5d:3a: c2:a1:a0:4e:61:bf:d4:ec:7b:93:e4:75:77:d8:e6:c7:bf:e0: c5:d7:09:9a:52:c2:5f:f0:af:d8:d5:a6:4e:ac:29:f5:2e:25: 8f:97:7c:7a:3c:b3:7b:d4:97:ba:7f:6f:42:c4:f6:36:c7:13: 26:9f:9a:5d:11:2d:96:40:60:6e:81:d8:1b:7f:c7:4e:f2:82: 74:67:71:94:9e:b4:f9:18:e5:77:1d:2e:00:a2:d9:1c:41:6c: d8:03:b8:d1:91:14:10:6a:06:2a:01:6f:54:f9:43:cb:1b:01: 2e:9c:f2:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlg491GVyyUhegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk4YzNmMDctOWI4ZS00NGEwLTkyZjQtNTM4YzBkNzJl YTRlMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk ZmExN2YxYTktNmI1Ny00ODM5LTgxMDItMDJmNDI2MWQ3M2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFaBiR9mz2KgfcjWVqDz6P/wzCFApz2a8d/d Y9KZLQOGxwCf/UqNRCQqbUK0qpeiUXRGsaLuC2vSPaiRo+eV8Hw396aRTh9uFNZ7 PtMYMvTEpKTDnt6SMEBW3qgbqjr6WibwM0326WznWWAwiUoeyUAscMCGz9MG9Oms DqBOX0YcshPnGhz8qsSaaYI/Mg+xc0SO1li3LW9FiucGlL3eMFbpFTzDQ+QUbLo1 394ugRLEU7/mddKuzj8I1kEU/LWlzOjnubN2PeEG3DVkY9hpLwk7J7+TDyY3R8xo 8IVwlVp8Rw5cxxOItCkFjJmE7Oi9wO9b5n11H5+q+1fXr9JomQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgt8ya6/CrMRSt6CvgTE6IomspYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OThj M2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3MmVhNGUvMzFjMmI5N2MtYmM5ZC0z OTNlLTgzZTAtZmQwM2ZmYTMxNjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk4YzNmMDctOWI4ZS00NGEwLTky ZjQtNTM4YzBkNzJlYTRlLzQ5OGMzZjA3LTliOGUtNDRhMC05MmY0LTUzOGMwZDcy ZWE0ZS5jcmwwHwYDVR0jBBgwFoAUWXNyFwevwe7BwLEwqSgH7DmcFFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01Mzhj MGQ3MmVhNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpcsDXIizNEyhD+jgUjKyEY/2BbIFENT2emqgb8COabdcUkn+gDBy+O n/fL9cvebOZIbKkWInV9CE1+PaI2aYJ8HhgmD+R4UtDKQmTxHfzl+SbPbj1hhd8t sTr6Osjvbq9D3mR+jZYqWteoDXPqcAwUXlUIh9FNbS9MvJmQvzg6yBqw+sRS8n8x uJ4SDAJdOsKhoE5hv9Tse5PkdXfY5se/4MXXCZpSwl/wr9jVpk6sKfUuJY+XfHo8 s3vUl7p/b0LE9jbHEyafml0RLZZAYG6B2Bt/x07ygnRncZSetPkY5XcdLgCi2RxB bNgDuNGRFBBqBioBb1T5Q8sbAS6c8kk= -----END CERTIFICATE-----Generated at Mon Aug 4 14:06:59 2025 by rpki-client