$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa File: cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa (raw, json) Hash identifier: FPr/oTyJAnKb0kftM6TeKBq5hPTjxp0bauQPaFBJsLs= Subject key identifier: 04:64:31:CA:49:64:B1:F4:F9:60:8F:51:3D:B7:A4:D0:4C:7E:7A:AF Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584AAB265C1399A8D8F115A7F000 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 40948 IP address blocks: 192.232.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:5c:13:99:a8:d8:f1:15:a7:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=a05430ff-a3b1-43af-9699-9f6c4a1da7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:2a:2b:b6:3f:ec:a8:70:49:c5:5c:c8:8a: da:1a:fa:ed:5e:f2:41:4b:49:db:93:28:ed:12:b9: 77:3a:84:94:3f:4e:72:26:f6:6f:05:1d:6e:e6:5d: f9:a7:7c:af:70:ff:51:91:f8:d9:68:34:35:c4:f6: 94:0b:a0:c3:b9:cd:54:be:a5:cd:74:d2:16:df:d2: 1b:15:e8:2f:d1:e9:77:d1:e1:f4:5a:5a:98:53:c6: 58:bb:6b:c3:71:71:14:f8:06:5f:79:49:94:65:19: 46:53:6f:32:a2:6d:c9:c3:fa:71:7f:d9:8e:1d:ab: ce:b3:f8:e8:a4:6e:52:ad:c2:40:0e:46:07:7a:0a: 1b:71:45:74:2f:4b:f6:bb:29:ea:63:dc:82:4c:ed: 0c:b9:e4:8d:e6:f9:80:f5:88:24:8c:33:1a:02:76: c3:43:00:77:bd:1e:62:75:21:3c:cc:ea:9c:14:6b: b9:b1:04:84:a3:b8:27:4f:83:40:64:27:fc:9e:37: 14:fe:46:22:b6:03:39:b6:cc:fe:d2:b4:a1:8e:b9: b4:c4:eb:b6:51:85:cb:58:db:d7:52:a2:2e:10:15: 98:49:f3:fc:34:c5:fe:07:f8:fd:3f:74:f8:2a:f9: e1:48:04:ae:82:ac:eb:14:6c:40:ee:77:cc:22:c4: cd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:64:31:CA:49:64:B1:F4:F9:60:8F:51:3D:B7:A4:D0:4C:7E:7A:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 192.232.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:69:1c:f6:31:f4:94:42:f9:52:ad:ec:3f:25:ee:4d:2f:29: c8:5b:69:fc:b1:47:84:70:d0:7f:be:c1:37:00:53:ed:91:64: 39:1e:6d:59:65:30:9d:cb:f3:f1:e9:95:fd:c9:e5:b8:6b:4c: f7:09:3e:7e:15:9f:13:1f:69:c7:51:4a:a2:e3:57:8c:86:29: 0e:38:47:e3:b9:44:4d:12:ee:4b:33:01:b7:05:c8:8f:ad:64: a6:7b:2d:14:2f:eb:89:fd:29:9f:89:6a:55:27:bf:26:36:8e: 67:23:e3:7c:37:91:18:db:97:0e:84:1a:7a:61:f6:e6:7f:4e: cb:36:be:ba:9f:53:b4:1c:6f:68:39:71:ac:d1:ee:da:5e:db: 78:b9:ef:1b:6d:6e:70:4b:6f:17:2d:6e:1b:fa:53:79:70:ab: ad:79:8e:60:f8:9d:9a:d6:39:f7:15:bd:d4:6f:a4:08:34:3c: 56:c4:a4:03:74:a8:42:76:f7:9a:f0:58:2f:f3:fd:71:d0:84: d7:76:6e:13:57:32:c2:b7:b7:f2:76:96:ec:25:b7:21:78:7a: 79:ba:3e:db:cf:7b:b7:c0:f5:6e:af:52:1b:d8:52:d7:ff:ad: 28:ba:7e:e5:5a:bb:51:90:fe:2a:c0:e3:4f:c6:d3:47:4a:4d: ed:5a:fd:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlwTmajY8RWn8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk YTA1NDMwZmYtYTNiMS00M2FmLTk2OTktOWY2YzRhMWRhN2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3cqK7Y/7KhwScVcyIraGvrtXvJBS0nbkyjt Erl3OoSUP05yJvZvBR1u5l35p3yvcP9RkfjZaDQ1xPaUC6DDuc1UvqXNdNIW39Ib Fegv0el30eH0WlqYU8ZYu2vDcXEU+AZfeUmUZRlGU28yom3Jw/pxf9mOHavOs/jo pG5SrcJADkYHegobcUV0L0v2uynqY9yCTO0MueSN5vmA9YgkjDMaAnbDQwB3vR5i dSE8zOqcFGu5sQSEo7gnT4NAZCf8njcU/kYitgM5tsz+0rShjrm0xOu2UYXLWNvX UqIuEBWYSfP8NMX+B/j9P3T4KvnhSASugqzrFGxA7nfMIsTNMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARkMcpJZLH0+WCPUT23pNBMfnqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvY2YyN2ViNWYtYWE2NS0z MGE4LWI3MWUtMTg4OWY1MGJlMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdpHPYx9JRC+VKt7D8l7k0vKchbafyxR4Rw0H++wTcAU+2RZDkebVll MJ3L8/Hplf3J5bhrTPcJPn4VnxMfacdRSqLjV4yGKQ44R+O5RE0S7kszAbcFyI+t ZKZ7LRQv64n9KZ+JalUnvyY2jmcj43w3kRjblw6EGnph9uZ/Tss2vrqfU7Qcb2g5 cazR7tpe23i57xttbnBLbxctbhv6U3lwq615jmD4nZrWOfcVvdRvpAg0PFbEpAN0 qEJ295rwWC/z/XHQhNd2bhNXMsK3t/J2luwltyF4enm6PtvPe7fA9W6vUhvYUtf/ rSi6fuVau1GQ/irA40/G00dKTe1a/YA= -----END CERTIFICATE-----Generated at Mon Aug 4 14:57:07 2025 by rpki-client