$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/4e46c8dd-d06a-3d58-8a07-e0b519fd1e8b.roa File: 4e46c8dd-d06a-3d58-8a07-e0b519fd1e8b.roa (raw, json) Hash identifier: ggmPJH6hA46znPxlrAI152CZtPiNdFhBdOcLOIeIaas= Subject key identifier: 8D:81:24:DE:40:85:79:EB:59:C9:A1:F8:4C:E2:E4:49:48:7C:AD:BE Certificate issuer: /CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Certificate serial: 010D0C9F4328584AAB2657CE297F0451075D2A00 Authority key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/4e46c8dd-d06a-3d58-8a07-e0b519fd1e8b.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 192.152.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:57:ce:29:7f:04:51:07:5d:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=4be2027a-ea2f-4be1-91be-cc1e6b5db7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:93:c8:00:37:c5:45:6c:7d:05:07:af:54:4d: 7e:ce:d8:eb:af:08:9e:aa:c7:95:2b:7e:7c:4a:aa: e2:14:91:93:80:44:55:54:33:69:b0:16:a3:30:74: 10:83:53:43:24:3a:6d:e3:56:13:66:d9:d0:7a:66: 54:da:05:e0:5a:fa:79:c8:17:a3:61:d6:db:53:be: 6f:dc:7e:39:b7:7b:10:d7:dc:58:62:ad:f3:c3:4b: 89:a9:d7:f3:73:f1:89:57:cc:db:66:4c:3d:fe:a5: f0:3d:7c:8e:d4:d7:b7:78:42:39:8a:a7:ea:07:c5: da:74:7f:15:e9:e2:0e:4a:9b:41:7b:a1:49:07:71: 9d:9a:d2:20:10:32:8a:dd:53:5c:a4:5c:ec:71:77: 79:df:09:ab:32:d0:14:f6:9c:43:07:b0:d8:4e:f2: 3f:c0:4d:9d:2a:9d:bd:d3:18:2f:aa:72:33:c0:c4: e6:e8:6a:a9:47:32:21:d7:ef:e2:44:0b:33:e1:60: 6b:a1:bf:d2:fb:af:a5:8b:39:08:3a:7a:ff:74:11: 4b:20:35:51:36:6e:3d:84:6f:d6:0e:e3:c2:6f:35: d1:cb:d8:ee:e9:73:0c:3a:d8:68:63:d6:c2:7f:a9: 70:bf:9e:43:f5:c4:ed:81:9b:c6:32:76:2a:4b:ff: 56:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:81:24:DE:40:85:79:EB:59:C9:A1:F8:4C:E2:E4:49:48:7C:AD:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/4e46c8dd-d06a-3d58-8a07-e0b519fd1e8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl X509v3 Authority Key Identifier: keyid:59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer sbgp-ipAddrBlock: critical IPv4: 192.152.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:50:4c:b8:0b:dd:e0:0b:b3:7c:5b:b7:53:d6:78:60:93:68: 6f:20:b7:27:b2:4c:cf:62:e1:65:fb:51:c3:bf:11:4a:2e:8a: 5d:b7:5b:6d:af:f2:6f:5a:e7:fb:ec:ad:41:cf:ba:62:21:23: bd:34:96:e0:4b:c3:8d:86:44:95:12:ef:28:76:83:05:d4:1f: f3:2c:fe:84:42:fb:65:c0:cb:51:ff:9e:1c:21:af:32:df:d0: e7:f1:a3:31:8c:77:3a:39:07:93:97:13:2d:d4:ce:7e:bd:ff: 31:b7:41:8a:e9:c8:6c:c1:c2:ce:a1:02:60:29:ec:89:c7:9a: 37:28:2e:fc:d1:68:b5:60:c3:50:c6:0b:3e:c2:95:51:58:b2: d9:e2:83:e7:a3:b2:05:cc:6e:ec:c9:5e:29:77:26:ea:6c:20: ef:c2:33:fe:80:3f:dd:51:f9:df:a8:d4:98:4f:e6:b8:56:a3: 1f:c5:4d:4b:77:1e:93:50:0f:07:5f:bb:53:a8:3e:4f:b6:78: 87:de:e4:be:fb:b4:87:00:61:fd:ae:3c:0d:0b:b8:23:68:d4: c3:61:56:d0:ce:3b:9d:b1:21:ed:13:62:8c:19:5b:1c:85:ea: 05:4e:96:50:e3:3b:aa:e5:bc:15:88:2c:36:e2:6b:d9:07:dc: 38:97:71:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlfOKX8EUQddKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk4YzNmMDctOWI4ZS00NGEwLTkyZjQtNTM4YzBkNzJl YTRlMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk NGJlMjAyN2EtZWEyZi00YmUxLTkxYmUtY2MxZTZiNWRiN2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5PIADfFRWx9BQevVE1+ztjrrwieqseVK358 SqriFJGTgERVVDNpsBajMHQQg1NDJDpt41YTZtnQemZU2gXgWvp5yBejYdbbU75v 3H45t3sQ19xYYq3zw0uJqdfzc/GJV8zbZkw9/qXwPXyO1Ne3eEI5iqfqB8XadH8V 6eIOSptBe6FJB3GdmtIgEDKK3VNcpFzscXd53wmrMtAU9pxDB7DYTvI/wE2dKp29 0xgvqnIzwMTm6GqpRzIh1+/iRAsz4WBrob/S+6+lizkIOnr/dBFLIDVRNm49hG/W DuPCbzXRy9ju6XMMOthoY9bCf6lwv55D9cTtgZvGMnYqS/9WawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2BJN5AhXnrWcmh+Ezi5ElIfK2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OThj M2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3MmVhNGUvNGU0NmM4ZGQtZDA2YS0z ZDU4LThhMDctZTBiNTE5ZmQxZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk4YzNmMDctOWI4ZS00NGEwLTky ZjQtNTM4YzBkNzJlYTRlLzQ5OGMzZjA3LTliOGUtNDRhMC05MmY0LTUzOGMwZDcy ZWE0ZS5jcmwwHwYDVR0jBBgwFoAUWXNyFwevwe7BwLEwqSgH7DmcFFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01Mzhj MGQ3MmVhNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMdQTLgL3eALs3xbt1PWeGCTaG8gtyeyTM9i4WX7UcO/EUouil23W22v 8m9a5/vsrUHPumIhI700luBLw42GRJUS7yh2gwXUH/Ms/oRC+2XAy1H/nhwhrzLf 0OfxozGMdzo5B5OXEy3Uzn69/zG3QYrpyGzBws6hAmAp7InHmjcoLvzRaLVgw1DG Cz7ClVFYstnig+ejsgXMbuzJXil3JupsIO/CM/6AP91R+d+o1JhP5rhWox/FTUt3 HpNQDwdfu1OoPk+2eIfe5L77tIcAYf2uPA0LuCNo1MNhVtDOO52xIe0TYowZWxyF 6gVOllDjO6rlvBWILDbia9kH3DiXcUM= -----END CERTIFICATE-----Generated at Mon Aug 4 14:11:31 2025 by rpki-client