$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/3a740706-03b4-39a7-bb11-64dc9cf215e1.roa File: 3a740706-03b4-39a7-bb11-64dc9cf215e1.roa (raw, json) Hash identifier: 8eUPSJj97jVxHiUYM+wFYfyowuhvxnXP+ZBnwJNpo1I= Subject key identifier: 2C:8F:6B:22:35:14:DA:4F:35:CD:BD:B5:DF:E0:6A:4B:BF:B4:D6:33 Certificate issuer: /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Certificate serial: 010D0C9F4328584AC0162976A9D45205EDAD2480 Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/3a740706-03b4-39a7-bb11-64dc9cf215e1.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 30494 IP address blocks: 192.234.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:29:76:a9:d4:52:05:ed:ad:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=a5b74709-e890-4a15-8a01-f18ec0677662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:41:8a:c5:9f:d0:1d:fb:b6:78:b4:c8:53:41: 53:0a:83:f3:f2:5b:80:81:ea:4c:72:61:56:cc:f1: e0:de:18:78:46:ac:ef:e9:70:a8:8f:67:3f:c8:b3: 20:fb:f5:66:da:d6:c5:bc:37:8b:2c:2e:11:85:ac: b6:1f:f0:2b:4e:52:cd:55:f5:27:3d:29:1a:c4:5c: c3:a9:86:4f:06:82:09:27:5c:87:7d:8c:0e:28:3a: 80:33:b6:0e:c2:39:10:b2:eb:d0:8b:a4:f2:7a:e0: 95:18:c4:9f:c3:74:20:4f:61:2c:5d:84:be:4d:91: 9c:dc:da:99:b2:03:a7:db:9e:e5:ee:82:22:07:a3: b9:fb:40:c8:dc:d6:77:05:0c:62:9e:6f:84:20:15: ed:c1:7a:d6:c8:b9:5a:57:e6:8d:c7:83:44:e8:c4: 6b:02:c8:e2:d6:0f:c8:8e:6e:11:65:60:a0:24:80: 30:7d:46:f7:c0:4e:7a:d0:10:e5:6a:3d:2c:8c:ab: 10:80:39:36:6b:1f:15:6e:65:44:b2:16:8a:31:0c: a0:9c:c5:1c:f4:97:39:21:c9:ba:a9:a8:91:a8:a0: 72:8e:4f:10:fd:0a:28:3b:78:6e:69:af:a0:0c:b2: 97:13:4b:b3:2f:73:26:11:72:96:5f:db:77:92:93: 58:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8F:6B:22:35:14:DA:4F:35:CD:BD:B5:DF:E0:6A:4B:BF:B4:D6:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/3a740706-03b4-39a7-bb11-64dc9cf215e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl X509v3 Authority Key Identifier: keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer sbgp-ipAddrBlock: critical IPv4: 192.234.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:a5:e2:27:cf:49:f6:c7:00:12:57:7e:62:17:14:03:cf:13: a1:bd:83:9f:90:aa:5e:c1:03:7a:4a:3a:8d:24:32:50:cb:a7: 37:03:ef:35:57:7e:10:36:01:64:eb:cd:b4:04:17:8b:13:bb: 5b:75:61:a4:71:9e:9f:37:1c:aa:94:02:be:82:8a:71:e5:60: d9:c4:ee:9d:a5:6e:eb:ca:3d:cf:eb:dd:48:0f:78:51:12:6a: e2:07:aa:63:bd:c6:cc:3d:f2:e7:a2:fb:26:e9:d3:68:4f:28: 42:4a:45:d3:6d:05:56:c4:6e:f0:b8:7d:8d:14:35:5a:ed:d4: ce:97:21:d4:25:27:3a:83:ec:10:96:83:cc:5c:15:78:a4:09: da:3b:bd:64:c3:70:aa:45:ef:fc:57:91:f2:bf:36:16:2d:d3: 68:19:91:99:6a:6e:31:be:fc:af:fa:b4:45:1d:2c:18:09:47: 2f:48:1d:75:37:30:a1:e9:be:2a:0f:ee:97:05:9a:18:2c:5e: 4f:99:cc:e2:6d:56:16:82:55:29:b5:0e:f9:17:41:69:18:03: ab:e9:db:ca:c1:be:18:0b:6e:84:59:3e:52:95:c4:11:f3:26: d9:01:85:55:ab:fd:bf:f8:6d:3e:e6:e1:e0:1d:f9:e9:04:f1: 96:61:2b:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFil2qdRSBe2tJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjYTAyZTctN2ExMi00ZDkwLThmZWItOGYxMzBhYWVh MzgwMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YTViNzQ3MDktZTg5MC00YTE1LThhMDEtZjE4ZWMwNjc3NjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEGKxZ/QHfu2eLTIU0FTCoPz8luAgepMcmFW zPHg3hh4Rqzv6XCoj2c/yLMg+/Vm2tbFvDeLLC4Rhay2H/ArTlLNVfUnPSkaxFzD qYZPBoIJJ1yHfYwOKDqAM7YOwjkQsuvQi6TyeuCVGMSfw3QgT2EsXYS+TZGc3NqZ sgOn257l7oIiB6O5+0DI3NZ3BQxinm+EIBXtwXrWyLlaV+aNx4NE6MRrAsji1g/I jm4RZWCgJIAwfUb3wE560BDlaj0sjKsQgDk2ax8VbmVEshaKMQygnMUc9Jc5Icm6 qaiRqKByjk8Q/QooO3huaa+gDLKXE0uzL3MmEXKWX9t3kpNYwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyPayI1FNpPNc29td/gaku/tNYzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNh MDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFhZWEzODAvM2E3NDA3MDYtMDNiNC0z OWE3LWJiMTEtNjRkYzljZjIxNWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjBjYTAyZTctN2ExMi00ZDkwLThm ZWItOGYxMzBhYWVhMzgwL2IwY2EwMmU3LTdhMTItNGQ5MC04ZmViLThmMTMwYWFl YTM4MC5jcmwwHwYDVR0jBBgwFoAU7+jFlj49ZhUup1G+nGYMlTKJpFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEz MGFhZWEzODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOrrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGl4ifPSfbHABJXfmIXFAPPE6G9g5+Qql7BA3pKOo0kMlDLpzcD7zVX fhA2AWTrzbQEF4sTu1t1YaRxnp83HKqUAr6CinHlYNnE7p2lbuvKPc/r3UgPeFES auIHqmO9xsw98uei+ybp02hPKEJKRdNtBVbEbvC4fY0UNVrt1M6XIdQlJzqD7BCW g8xcFXikCdo7vWTDcKpF7/xXkfK/NhYt02gZkZlqbjG+/K/6tEUdLBgJRy9IHXU3 MKHpvioP7pcFmhgsXk+ZzOJtVhaCVSm1DvkXQWkYA6vp28rBvhgLboRZPlKVxBHz JtkBhVWr/b/4bT7m4eAd+ekE8ZZhKyg= -----END CERTIFICATE-----Generated at Wed Aug 6 07:52:27 2025 by rpki-client