$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/3d876040-615b-3fd5-b6c7-b63f8cc00fcf.roa File: 3d876040-615b-3fd5-b6c7-b63f8cc00fcf.roa (raw, json) Hash identifier: tWUF2UXE5iTm/c+QfunQ2F3kM3fyM+aaBjtRlgfVIRo= Subject key identifier: F7:93:B8:A0:D6:F5:7F:48:26:E6:0F:8A:E1:76:26:EF:1F:98:1A:9B Certificate issuer: /CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Certificate serial: 010D0C9F4328584AAB26584BE9691A7D74DE4160 Authority key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/3d876040-615b-3fd5-b6c7-b63f8cc00fcf.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 192.152.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:58:4b:e9:69:1a:7d:74:de:41:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=b21fb577-6344-46f6-bf2e-f4bb87eb19a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:18:10:6d:34:51:14:05:72:de:b3:ee:74:a7: 75:49:34:b2:08:c4:4f:91:a7:39:58:7d:a4:f8:40: a8:80:46:50:e4:ef:3a:57:4e:55:65:14:21:47:c9: 4f:ed:33:44:58:05:05:d4:a5:2c:a8:fe:31:d5:e9: 36:66:c9:86:aa:da:08:39:24:4e:59:6a:06:f8:74: ef:39:cf:fc:4a:f6:dc:4d:20:a6:e8:d1:85:98:9f: c0:85:54:6b:36:a1:62:63:60:b7:fd:90:0f:a0:81: 52:4a:3e:9a:63:cc:0b:ff:c8:ec:4a:ec:c3:b6:42: ca:f6:6b:86:5a:ae:40:1f:1a:e8:ce:80:a2:a3:19: 62:9d:49:5e:29:3e:23:ca:96:88:81:2d:21:d4:41: dd:02:61:fe:2e:9a:7c:a2:5a:d8:7d:af:33:be:1d: c7:10:07:cc:c0:3f:b1:1b:78:65:8d:ef:e3:ef:ed: 6b:e9:26:fd:4e:76:ef:c8:1d:7e:a6:c1:a0:56:21: ad:e7:fd:76:d8:cc:12:51:dd:e4:99:ac:07:b7:bd: a8:02:0d:7d:31:82:8a:0b:ab:28:11:43:28:25:ca: 72:7b:3e:16:ce:84:55:65:c1:be:ed:cb:bf:46:5f: 7c:6e:f9:b7:bb:33:24:b6:eb:5e:82:b4:18:5e:37: 9b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:93:B8:A0:D6:F5:7F:48:26:E6:0F:8A:E1:76:26:EF:1F:98:1A:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/3d876040-615b-3fd5-b6c7-b63f8cc00fcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl X509v3 Authority Key Identifier: keyid:59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer sbgp-ipAddrBlock: critical IPv4: 192.152.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:7f:18:d0:93:91:94:69:e9:8c:94:76:ff:70:da:4e:0e:be: ba:ea:bc:be:3b:74:5a:e3:87:18:1e:04:78:72:b5:a4:31:b5: 26:56:03:1f:4f:a0:83:9e:1e:1c:b5:49:5e:1b:c9:63:e1:08: 1b:8f:ce:1e:bd:76:90:dd:50:53:16:69:35:d2:2d:d3:ca:54: 5a:f6:92:2b:e3:87:d1:e6:91:54:2b:18:ba:89:09:40:6a:a8: 53:82:5d:ab:6e:b5:aa:a8:89:7f:d5:e2:78:a5:86:2a:38:28: ea:e6:91:e7:03:00:12:8d:07:6d:9a:40:c6:0b:05:7a:c9:73: b8:83:65:fd:29:8b:b7:e0:89:ae:10:2d:ad:4a:9e:66:f6:6e: 3a:6e:4a:8b:17:7c:27:a7:0d:ab:26:a0:c7:75:6b:38:22:d8: 02:55:e1:fc:20:75:41:dc:fa:1f:ab:9d:22:01:91:4f:32:43: 89:7d:fa:ba:55:24:4d:a3:6b:72:f9:b4:3c:a2:1d:0d:59:24: 68:75:bd:67:79:23:d8:70:06:4b:5a:fa:9b:7f:77:57:29:34: 70:6f:25:db:d6:19:aa:0f:75:67:f1:49:e8:8d:08:09:06:93: 7b:80:bf:74:66:43:2b:b8:f8:e0:8c:83:05:29:04:a4:28:4e: a2:0c:9c:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlhL6WkafXTeQWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk4YzNmMDctOWI4ZS00NGEwLTkyZjQtNTM4YzBkNzJl YTRlMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk YjIxZmI1NzctNjM0NC00NmY2LWJmMmUtZjRiYjg3ZWIxOWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRgQbTRRFAVy3rPudKd1STSyCMRPkac5WH2k +ECogEZQ5O86V05VZRQhR8lP7TNEWAUF1KUsqP4x1ek2ZsmGqtoIOSROWWoG+HTv Oc/8SvbcTSCm6NGFmJ/AhVRrNqFiY2C3/ZAPoIFSSj6aY8wL/8jsSuzDtkLK9muG Wq5AHxrozoCioxlinUleKT4jypaIgS0h1EHdAmH+Lpp8olrYfa8zvh3HEAfMwD+x G3hlje/j7+1r6Sb9TnbvyB1+psGgViGt5/122MwSUd3kmawHt72oAg19MYKKC6so EUMoJcpyez4WzoRVZcG+7cu/Rl98bvm3uzMktutegrQYXjebPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeTuKDW9X9IJuYPiuF2Ju8fmBqbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OThj M2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3MmVhNGUvM2Q4NzYwNDAtNjE1Yi0z ZmQ1LWI2YzctYjYzZjhjYzAwZmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk4YzNmMDctOWI4ZS00NGEwLTky ZjQtNTM4YzBkNzJlYTRlLzQ5OGMzZjA3LTliOGUtNDRhMC05MmY0LTUzOGMwZDcy ZWE0ZS5jcmwwHwYDVR0jBBgwFoAUWXNyFwevwe7BwLEwqSgH7DmcFFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01Mzhj MGQ3MmVhNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1/GNCTkZRp6YyUdv9w2k4OvrrqvL47dFrjhxgeBHhytaQxtSZWAx9P oIOeHhy1SV4byWPhCBuPzh69dpDdUFMWaTXSLdPKVFr2kivjh9HmkVQrGLqJCUBq qFOCXatutaqoiX/V4nilhio4KOrmkecDABKNB22aQMYLBXrJc7iDZf0pi7fgia4Q La1Knmb2bjpuSosXfCenDasmoMd1azgi2AJV4fwgdUHc+h+rnSIBkU8yQ4l9+rpV JE2ja3L5tDyiHQ1ZJGh1vWd5I9hwBkta+pt/d1cpNHBvJdvWGaoPdWfxSeiNCAkG k3uAv3RmQyu4+OCMgwUpBKQoTqIMnJw= -----END CERTIFICATE-----Generated at Mon Aug 4 14:56:17 2025 by rpki-client