$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa File: d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa (raw, json) Hash identifier: oq2bckdHUTKH7CkRPtodcHdlBokNfeisXXfqaTNZtc4= Subject key identifier: 27:B1:89:A0:1E:2B:F8:6A:1C:29:22:CF:F9:9B:E4:03:08:A0:DA:82 Certificate issuer: /CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2 Certificate serial: 010D0C9F4328584A1B5FFA6BDC78B846E0F7AC40 Authority key identifier: E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 16509 IP address blocks: 192.64.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:fa:6b:dc:78:b8:46:e0:f7:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=80508f8e-4fdb-4d63-be83-3911d6afbb54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:44:07:0f:0e:14:e1:f9:6c:17:67:47:56:ba: 50:a1:f4:db:7b:b1:38:c5:f6:a9:0d:ba:ee:a8:12: b9:1f:7f:cf:e9:cb:81:cf:d9:a2:bb:cf:20:6a:e7: a7:96:80:06:09:98:92:3e:94:c7:9c:91:db:60:89: 05:01:95:07:54:16:08:df:22:68:eb:32:41:04:29: f9:bc:56:04:bf:79:c5:0f:d0:81:07:29:60:a5:e3: 13:76:15:16:ad:8f:b9:06:06:97:5b:b7:9f:68:be: 1c:09:b7:e4:55:94:b5:1b:c0:f1:0c:43:f1:94:6d: cb:1b:d5:95:a5:04:fb:90:d3:64:78:58:d9:0d:19: 43:5c:b2:a1:ae:3a:d0:90:99:8b:85:ca:7e:3b:20: f4:4e:53:8f:95:04:b2:10:72:47:d4:cf:44:77:7f: a3:8b:e1:e9:c3:3e:32:74:c7:4c:53:c7:c1:30:6f: e1:c7:97:fb:58:fe:a1:57:8c:26:46:0e:b7:bf:d4: 27:8a:28:0a:a0:c0:7c:34:8b:f1:d2:bc:da:f3:df: db:20:3d:cc:1a:a3:bf:6b:04:25:96:7e:87:3d:65: 50:ba:33:54:64:c4:20:dc:88:8e:2f:85:6f:84:af: 93:47:74:17:22:2d:1c:01:8c:5e:d0:2a:91:17:1f: 17:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B1:89:A0:1E:2B:F8:6A:1C:29:22:CF:F9:9B:E4:03:08:A0:DA:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl X509v3 Authority Key Identifier: keyid:E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer sbgp-ipAddrBlock: critical IPv4: 192.64.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:06:4b:e3:ec:9d:39:16:78:ca:6b:5b:91:98:8b:57:76:94: 5d:ac:1f:a3:f5:64:ae:d3:c4:14:af:b9:b8:33:3d:11:97:27: 0d:05:aa:8b:52:6c:bb:6f:66:ea:f0:0e:66:dc:33:4b:fe:9c: df:01:c4:59:99:9c:58:60:20:9e:cd:1a:67:a0:67:92:fa:2c: 22:7c:59:0b:99:e7:fb:f3:ad:cf:68:63:f8:40:6c:37:74:30: 94:9b:f0:b4:44:e3:88:5e:83:ae:2e:7b:1b:43:5b:51:b5:69: 70:55:c1:a4:4a:ee:79:bc:89:2f:85:88:45:c1:83:9a:c8:7c: 7f:4d:e6:46:ed:2c:3c:59:bd:bf:77:72:16:ce:9c:ec:8c:46: 2b:e7:9d:6b:46:38:be:54:e1:f9:37:78:31:4c:54:b3:5b:99: f8:fc:45:09:3d:93:50:be:8f:b3:c1:91:02:cb:e8:e1:29:65: 2e:94:4d:d6:ae:8b:1d:63:a5:09:2b:36:6a:7c:66:b1:4e:b2: ac:e5:78:0c:3c:db:55:c2:c5:e6:fd:b8:1b:2c:22:03:62:90: 21:e3:a1:75:8c:ad:2a:c0:dc:92:f3:83:00:d3:7f:6a:5c:fd: df:d4:06:4e:2a:6a:71:b1:47:b5:bd:e8:98:cd:18:79:42:b4: 45:24:eb:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobX/pr3Hi4RuD3rEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkYzlmNDItODIwMS00YWYyLWEzYzItMjIzZDFlMjY4 N2EyMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk ODA1MDhmOGUtNGZkYi00ZDYzLWJlODMtMzkxMWQ2YWZiYjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUQHDw4U4flsF2dHVrpQofTbe7E4xfapDbru qBK5H3/P6cuBz9miu88gauenloAGCZiSPpTHnJHbYIkFAZUHVBYI3yJo6zJBBCn5 vFYEv3nFD9CBBylgpeMTdhUWrY+5BgaXW7efaL4cCbfkVZS1G8DxDEPxlG3LG9WV pQT7kNNkeFjZDRlDXLKhrjrQkJmLhcp+OyD0TlOPlQSyEHJH1M9Ed3+ji+Hpwz4y dMdMU8fBMG/hx5f7WP6hV4wmRg63v9QniigKoMB8NIvx0rza89/bID3MGqO/awQl ln6HPWVQujNUZMQg3IiOL4VvhK+TR3QXIi0cAYxe0CqRFx8XhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCexiaAeK/hqHCkiz/mb5AMIoNqCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWRj OWY0Mi04MjAxLTRhZjItYTNjMi0yMjNkMWUyNjg3YTIvZDU5YjhjMTItYTFlNC0z OGJiLTg1N2QtZWE3OGVkM2EzMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkYzlmNDItODIwMS00YWYyLWEz YzItMjIzZDFlMjY4N2EyLzRhZGM5ZjQyLTgyMDEtNGFmMi1hM2MyLTIyM2QxZTI2 ODdhMi5jcmwwHwYDVR0jBBgwFoAU4btomINz3yVYWM/rRkGgAfxhPV8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWRjOWY0Mi04MjAxLTRhZjItYTNjMi0yMjNk MWUyNjg3YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEBHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoGS+PsnTkWeMprW5GYi1d2lF2sH6P1ZK7TxBSvubgzPRGXJw0FqotS bLtvZurwDmbcM0v+nN8BxFmZnFhgIJ7NGmegZ5L6LCJ8WQuZ5/vzrc9oY/hAbDd0 MJSb8LRE44heg64uextDW1G1aXBVwaRK7nm8iS+FiEXBg5rIfH9N5kbtLDxZvb93 chbOnOyMRivnnWtGOL5U4fk3eDFMVLNbmfj8RQk9k1C+j7PBkQLL6OEpZS6UTdau ix1jpQkrNmp8ZrFOsqzleAw821XCxeb9uBssIgNikCHjoXWMrSrA3JLzgwDTf2pc /d/UBk4qanGxR7W96JjNGHlCtEUk6+Q= -----END CERTIFICATE-----Generated at Sat Jun 14 06:05:11 2025 by rpki-client