$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/dd4d4e00-eade-321d-a6a4-b773ea2c5458.roa File: dd4d4e00-eade-321d-a6a4-b773ea2c5458.roa (raw, json) Hash identifier: eN0cwF0aw6HxCAMD6V50anokpGD3SSvYc59fUCVbN6k= Subject key identifier: 49:50:47:A6:04:BE:80:FF:6A:64:E3:97:6F:67:8D:CC:64:48:B4:76 Certificate issuer: /CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Certificate serial: 010D0C9F4328584AAB264E285C58B96EE754DD80 Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/dd4d4e00-eade-321d-a6a4-b773ea2c5458.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 52347 IP address blocks: 192.34.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:4e:28:5c:58:b9:6e:e7:54:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=9fb49b07-5073-4e58-bf87-c01dcc73d8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5a:30:49:69:61:d7:59:4e:c3:7a:e7:ea:0c: 43:bd:19:5b:17:a7:fa:06:2c:8d:4e:41:2d:d0:a8: 93:96:7b:c6:43:8b:63:0c:a4:38:eb:14:bf:fa:ca: 6d:dd:78:2b:2b:65:ab:d5:b7:18:fa:24:ca:fc:d5: ea:f3:4e:14:d3:48:4d:2e:51:02:fe:b4:c8:03:ce: a3:a4:57:96:19:ad:72:96:c0:20:06:54:d7:4c:1f: 54:e9:b1:ae:d0:9a:85:ac:0c:1c:53:19:50:26:c6: 65:20:08:05:c3:1e:58:3f:65:f6:3e:7c:df:ce:c3: ed:81:b7:01:d4:be:36:25:94:19:50:3f:b0:16:fa: d5:27:c1:0f:34:1d:ed:08:da:47:85:50:59:a2:9b: a5:a7:fd:df:9e:31:02:4d:4b:53:58:c9:37:f1:94: b8:b7:d4:b6:03:38:d3:5a:25:c0:92:0c:e4:b9:ce: 2b:d2:8f:d0:57:a2:65:5e:13:49:2e:69:94:3a:e9: ea:1a:e1:27:f1:30:d5:5a:14:6f:a8:35:4f:00:c9: 92:90:ef:b7:04:c9:88:e9:73:12:d6:3f:d8:43:29: 37:bc:9e:1f:0b:73:e0:3c:dd:71:ea:ed:e7:67:f0: 46:6c:c0:40:43:76:68:23:20:83:f9:bf:c5:35:3f: 5b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:50:47:A6:04:BE:80:FF:6A:64:E3:97:6F:67:8D:CC:64:48:B4:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/dd4d4e00-eade-321d-a6a4-b773ea2c5458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl X509v3 Authority Key Identifier: keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer sbgp-ipAddrBlock: critical IPv4: 192.34.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:83:10:38:0a:98:2c:73:e8:d6:99:3e:cc:2a:71:7c:7d:9d: b3:e4:44:4d:c0:1f:b1:8d:5b:72:1e:46:e8:60:e4:fa:6d:97: 40:20:bd:c8:52:6e:eb:b8:22:42:66:8f:c7:2c:fb:1c:7c:fa: a0:14:66:d9:8a:e7:6a:e9:9a:d5:e5:cc:bf:10:49:11:79:33: 32:b7:66:1e:45:ba:6e:a1:ba:86:44:0c:97:62:0e:fb:74:ba: c0:5e:a6:37:ab:36:2d:3e:99:89:f0:32:1c:f3:b8:83:36:77: d8:8a:ea:85:50:15:be:91:66:3b:d4:ba:24:2b:99:03:36:95: 51:b0:b4:ad:24:6f:6b:78:d0:0a:5a:e1:ba:31:70:fe:60:62: 72:0f:61:e6:29:30:5b:cc:50:78:6c:be:bc:b3:e8:2d:0d:7d: 93:f1:32:f5:13:7a:0c:11:f0:e1:d7:d3:02:08:85:96:95:52: 2a:ba:59:ad:bf:27:30:4f:9f:ec:2b:fe:b7:c6:01:8f:d3:09: b6:a6:d0:cc:34:a6:77:89:4f:aa:45:54:5b:ec:30:7c:41:bb: e5:ac:00:ee:ff:db:78:2f:53:23:46:06:09:58:91:ca:c9:76: 0b:a0:3e:34:b0:16:81:2a:9e:4a:ff:8f:88:d6:9d:68:06:76: f6:69:ba:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJk4oXFi5budU3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmMTY0ZGQtZGIzOS00NzBkLTg4MDUtM2FhNTE0ZDVl N2IwMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk OWZiNDliMDctNTA3My00ZTU4LWJmODctYzAxZGNjNzNkOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllowSWlh11lOw3rn6gxDvRlbF6f6BiyNTkEt 0KiTlnvGQ4tjDKQ46xS/+spt3XgrK2Wr1bcY+iTK/NXq804U00hNLlEC/rTIA86j pFeWGa1ylsAgBlTXTB9U6bGu0JqFrAwcUxlQJsZlIAgFwx5YP2X2PnzfzsPtgbcB 1L42JZQZUD+wFvrVJ8EPNB3tCNpHhVBZopulp/3fnjECTUtTWMk38ZS4t9S2AzjT WiXAkgzkuc4r0o/QV6JlXhNJLmmUOunqGuEn8TDVWhRvqDVPAMmSkO+3BMmI6XMS 1j/YQyk3vJ4fC3PgPN1x6u3nZ/BGbMBAQ3ZoIyCD+b/FNT9bmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElQR6YEvoD/amTjl29njcxkSLR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MWYx NjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1MTRkNWU3YjAvZGQ0ZDRlMDAtZWFkZS0z MjFkLWE2YTQtYjc3M2VhMmM1NDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjFmMTY0ZGQtZGIzOS00NzBkLTg4 MDUtM2FhNTE0ZDVlN2IwLzYxZjE2NGRkLWRiMzktNDcwZC04ODA1LTNhYTUxNGQ1 ZTdiMC5jcmwwHwYDVR0jBBgwFoAUn+qdbiydJN8Iu7seOhQEldnw9LYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MWYxNjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1 MTRkNWU3YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCIOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiDEDgKmCxz6NaZPswqcXx9nbPkRE3AH7GNW3IeRuhg5Pptl0AgvchS buu4IkJmj8cs+xx8+qAUZtmK52rpmtXlzL8QSRF5MzK3Zh5Fum6huoZEDJdiDvt0 usBepjerNi0+mYnwMhzzuIM2d9iK6oVQFb6RZjvUuiQrmQM2lVGwtK0kb2t40Apa 4boxcP5gYnIPYeYpMFvMUHhsvryz6C0NfZPxMvUTegwR8OHX0wIIhZaVUiq6Wa2/ JzBPn+wr/rfGAY/TCbam0Mw0pneJT6pFVFvsMHxBu+WsAO7/23gvUyNGBglYkcrJ dgugPjSwFoEqnkr/j4jWnWgGdvZpum0= -----END CERTIFICATE-----Generated at Mon Aug 4 18:20:26 2025 by rpki-client