$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/affa89b7-1722-39a1-bc5a-ae5c3c705859.roa File: affa89b7-1722-39a1-bc5a-ae5c3c705859.roa (raw, json) Hash identifier: akBdF1g6Aic7ZCUVqbu0pyQSCT2IpCJFbrqPgKQOGZg= Subject key identifier: 2B:49:41:CA:B3:1E:52:E3:23:67:E0:26:FE:3C:90:58:CD:FD:5C:7F Certificate issuer: /CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Certificate serial: 010D0C9F4328584AB76E0F50945A5817A870DF40 Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/affa89b7-1722-39a1-bc5a-ae5c3c705859.roa Signing time: Fri 01 Aug 2025 22:35:27 +0000 ROA not before: Fri 01 Aug 2025 22:35:27 +0000 ROA not after: Thu 30 Oct 2025 22:35:27 +0000 asID: 52347 IP address blocks: 192.34.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:6e:0f:50:94:5a:58:17:a8:70:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Validity Not Before: Aug 1 22:35:27 2025 GMT Not After : Oct 30 22:35:27 2025 GMT Subject: CN=5362a9ed-55f6-454f-a147-c479120916f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:d8:df:1f:69:40:79:db:8d:0b:23:08:7e: fa:84:64:aa:8e:fd:73:3c:49:28:c0:a9:ba:bd:78: 23:b7:77:38:1c:42:56:7d:30:a0:eb:ab:90:fc:64: 4f:a3:81:09:7e:e3:56:d8:8e:84:c6:c6:65:57:f7: 62:2a:54:7b:16:d1:aa:0b:e5:5a:fa:6d:04:e7:09: ec:3e:ec:57:a0:a4:fa:29:31:3d:93:f7:11:f8:5f: 94:df:3c:34:cb:1e:98:c7:ac:9a:e1:74:86:9b:7a: 54:78:c4:b9:15:03:ba:42:d4:ff:ce:39:2e:42:18: 7d:10:93:a3:56:8a:b5:35:4f:00:f7:64:90:b8:70: 78:3b:c6:e0:11:ba:4f:e2:f7:a2:37:08:98:f6:e0: d8:f5:fe:31:ae:78:24:3f:c8:a2:31:e4:95:eb:79: 99:fb:4b:d7:e7:51:39:ea:e2:cb:99:4f:75:ba:b6: 38:a3:44:79:9d:47:b8:87:2a:22:be:c6:5a:77:62: 81:35:7c:01:df:e2:59:84:15:66:74:c7:ac:7b:b9: 88:4c:e8:3c:80:b9:14:62:c5:c1:ec:d3:a3:95:21: 5f:c8:47:b5:30:f3:e9:36:3a:ff:93:c0:09:1d:ad: d7:7a:27:8e:e6:82:66:a9:df:d2:fc:f1:f4:3c:ac: 0f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:49:41:CA:B3:1E:52:E3:23:67:E0:26:FE:3C:90:58:CD:FD:5C:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/affa89b7-1722-39a1-bc5a-ae5c3c705859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl X509v3 Authority Key Identifier: keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer sbgp-ipAddrBlock: critical IPv4: 192.34.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:9c:fb:f8:70:ae:48:e2:f6:7a:c0:64:ab:76:9e:80:64:1e: 1f:ca:3a:e9:e7:6d:d1:78:8d:fb:29:3f:da:6a:ed:38:76:a5: 77:24:c3:40:b8:2f:84:11:4a:1c:12:4b:82:fd:09:fa:04:47: 4e:67:5a:aa:31:a7:12:26:75:a9:1f:2f:c8:6b:62:7f:46:0b: c6:bb:61:c1:e0:96:f6:50:77:df:2a:7b:3f:1b:f7:92:dd:56: 77:bb:cc:fa:9c:e9:7a:40:24:95:8c:c2:74:ad:c0:b0:eb:82: 3f:50:c4:dc:bf:78:fc:17:b4:35:e7:4e:d4:bb:e9:ca:03:54: 1a:3b:4f:59:56:f7:2f:77:52:51:92:93:00:33:dc:d8:42:c8: 9d:bf:6d:bb:aa:d5:a5:d6:60:a7:52:db:16:9d:ef:79:85:51: f0:e3:68:5f:89:c7:25:2d:56:0c:1e:d9:70:d6:06:ac:d8:e7: c9:43:ed:d1:ed:f3:30:01:fb:d2:cd:14:67:84:8e:d2:b0:ed: 5e:e8:9d:60:3e:80:fb:2b:00:08:b2:c9:9e:04:30:89:de:8d: 0f:33:11:bb:b8:8a:dd:5f:7b:30:c6:98:64:32:a8:a2:df:60: 3a:06:11:7f:55:64:25:da:cd:57:9b:64:8c:86:9a:20:69:22: c6:e3:43:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3bg9QlFpYF6hw30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmMTY0ZGQtZGIzOS00NzBkLTg4MDUtM2FhNTE0ZDVl N2IwMB4XDTI1MDgwMTIyMzUyN1oXDTI1MTAzMDIyMzUyN1owLzEtMCsGA1UEAxMk NTM2MmE5ZWQtNTVmNi00NTRmLWExNDctYzQ3OTEyMDkxNmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk3Y3x9pQHnbjQsjCH76hGSqjv1zPEkowKm6 vXgjt3c4HEJWfTCg66uQ/GRPo4EJfuNW2I6ExsZlV/diKlR7FtGqC+Va+m0E5wns PuxXoKT6KTE9k/cR+F+U3zw0yx6Yx6ya4XSGm3pUeMS5FQO6QtT/zjkuQhh9EJOj Voq1NU8A92SQuHB4O8bgEbpP4veiNwiY9uDY9f4xrngkP8iiMeSV63mZ+0vX51E5 6uLLmU91urY4o0R5nUe4hyoivsZad2KBNXwB3+JZhBVmdMese7mITOg8gLkUYsXB 7NOjlSFfyEe1MPPpNjr/k8AJHa3XeieO5oJmqd/S/PH0PKwPjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtJQcqzHlLjI2fgJv48kFjN/Vx/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MWYx NjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1MTRkNWU3YjAvYWZmYTg5YjctMTcyMi0z OWExLWJjNWEtYWU1YzNjNzA1ODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjFmMTY0ZGQtZGIzOS00NzBkLTg4 MDUtM2FhNTE0ZDVlN2IwLzYxZjE2NGRkLWRiMzktNDcwZC04ODA1LTNhYTUxNGQ1 ZTdiMC5jcmwwHwYDVR0jBBgwFoAUn+qdbiydJN8Iu7seOhQEldnw9LYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MWYxNjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1 MTRkNWU3YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCILMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKc+/hwrkji9nrAZKt2noBkHh/KOunnbdF4jfspP9pq7Th2pXckw0C4 L4QRShwSS4L9CfoER05nWqoxpxImdakfL8hrYn9GC8a7YcHglvZQd98qez8b95Ld Vne7zPqc6XpAJJWMwnStwLDrgj9QxNy/ePwXtDXnTtS76coDVBo7T1lW9y93UlGS kwAz3NhCyJ2/bbuq1aXWYKdS2xad73mFUfDjaF+JxyUtVgwe2XDWBqzY58lD7dHt 8zAB+9LNFGeEjtKw7V7onWA+gPsrAAiyyZ4EMInejQ8zEbu4it1fezDGmGQyqKLf YDoGEX9VZCXazVebZIyGmiBpIsbjQyg= -----END CERTIFICATE-----Generated at Mon Aug 4 18:36:59 2025 by rpki-client