$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/512f46e3-6a20-337a-9b25-a234b569aa41.roa File: 512f46e3-6a20-337a-9b25-a234b569aa41.roa (raw, json) Hash identifier: PqS0lKN2iLaCyleZqydUcP+01yabPFHiO7d1HmxdV8I= Subject key identifier: F8:68:0F:D1:71:8B:B9:F5:69:8C:15:2F:B6:4F:BB:69:07:03:AF:AB Certificate issuer: /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Certificate serial: 010D0C9F4328584AC01632F8ACBF0A3AA3A3F7A0 Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/512f46e3-6a20-337a-9b25-a234b569aa41.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 19905 IP address blocks: 192.234.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:32:f8:ac:bf:0a:3a:a3:a3:f7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=bd6ed796-7797-4070-9b8f-61e4639cea5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ee:b2:c3:02:41:d5:2e:50:83:cc:ac:3b:68: 43:3c:c4:28:0d:f7:03:c1:c6:1d:6b:c4:3e:cc:1c: ed:ce:5d:b2:c5:86:ce:59:a9:cd:cf:47:b2:d6:d9: 4d:9c:be:ec:a8:a4:6c:16:75:fe:b1:bc:f6:d4:29: 37:2b:3d:17:a0:10:2f:37:22:e6:7d:aa:0a:59:1e: b8:01:6b:0d:2d:c4:18:96:db:02:79:6f:7b:79:1c: 4a:2d:ed:38:ac:3f:ba:06:69:80:70:59:21:c2:80: 50:26:bb:d6:2c:cf:4c:4d:5f:c7:09:b0:0f:75:72: 92:de:12:b8:98:27:81:39:f1:c2:78:0a:f0:a5:8c: 07:e7:2b:97:a3:b0:6d:f7:26:db:f1:01:d3:31:e2: 2b:17:01:22:75:0a:f6:20:45:42:20:00:d6:f7:36: 13:f5:55:bc:9c:5c:cb:e0:d5:90:9f:aa:16:bb:07: 03:db:10:2b:ca:bf:b4:5b:66:4d:ba:e5:a6:d6:bd: 85:67:47:2b:fd:ee:9b:01:a2:8b:65:f8:cd:06:39: 37:c9:d3:52:ee:ed:0d:e3:63:27:b2:63:f8:43:a4: 3b:89:54:32:0b:e9:1f:ab:95:9f:5a:6c:33:c2:3f: 2a:5e:a5:d7:bc:6d:be:23:ad:13:3d:e1:7a:5d:38: 0c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:68:0F:D1:71:8B:B9:F5:69:8C:15:2F:B6:4F:BB:69:07:03:AF:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/512f46e3-6a20-337a-9b25-a234b569aa41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl X509v3 Authority Key Identifier: keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer sbgp-ipAddrBlock: critical IPv4: 192.234.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:7d:56:a4:87:c2:fe:d4:09:ca:7d:53:51:b1:2d:fc:b0:aa: f2:c1:70:b7:02:c6:16:7c:07:23:91:55:ed:16:4b:82:b2:ea: f4:c4:c2:ab:12:72:9b:d6:44:94:9f:a7:a1:67:f2:d2:d1:64: b6:55:d3:f2:cb:63:7f:2b:db:3d:13:34:48:7b:82:01:9a:bc: f3:d5:65:81:51:27:40:21:3b:f0:68:7a:45:5e:69:1b:2b:32: c3:d1:9c:b5:c8:33:9f:b3:f9:7e:71:81:24:c4:08:5d:62:58: 51:0e:94:04:d7:96:27:20:ff:84:b0:47:16:a0:d9:48:02:77: e2:d5:1f:af:9e:3a:97:67:57:cb:03:aa:b0:b2:e8:33:10:69: 73:b7:42:86:d8:a0:40:3d:dd:cb:93:84:ff:2e:ac:88:d1:67: 45:6c:86:17:b7:0f:42:f9:1f:34:d2:e3:da:88:b5:85:80:dc: 03:99:e0:18:37:6e:1c:ef:99:6b:dc:03:54:77:7f:dd:78:fc: 5b:38:7b:52:9f:c9:a0:1d:f4:d4:51:6c:bf:df:85:59:f2:05: 23:c1:67:21:0b:fe:2a:ff:80:3c:70:e2:08:fd:17:ee:a8:95: ce:00:ac:d2:d5:a3:c0:15:ce:14:ee:33:a5:ff:9d:76:b2:96: 46:0d:0b:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFjL4rL8KOqOj96AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjYTAyZTctN2ExMi00ZDkwLThmZWItOGYxMzBhYWVh MzgwMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YmQ2ZWQ3OTYtNzc5Ny00MDcwLTliOGYtNjFlNDYzOWNlYTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO6ywwJB1S5Qg8ysO2hDPMQoDfcDwcYda8Q+ zBztzl2yxYbOWanNz0ey1tlNnL7sqKRsFnX+sbz21Ck3Kz0XoBAvNyLmfaoKWR64 AWsNLcQYltsCeW97eRxKLe04rD+6BmmAcFkhwoBQJrvWLM9MTV/HCbAPdXKS3hK4 mCeBOfHCeArwpYwH5yuXo7Bt9ybb8QHTMeIrFwEidQr2IEVCIADW9zYT9VW8nFzL 4NWQn6oWuwcD2xAryr+0W2ZNuuWm1r2FZ0cr/e6bAaKLZfjNBjk3ydNS7u0N42Mn smP4Q6Q7iVQyC+kfq5WfWmwzwj8qXqXXvG2+I60TPeF6XTgMuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhoD9Fxi7n1aYwVL7ZPu2kHA6+rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNh MDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFhZWEzODAvNTEyZjQ2ZTMtNmEyMC0z MzdhLTliMjUtYTIzNGI1NjlhYTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjBjYTAyZTctN2ExMi00ZDkwLThm ZWItOGYxMzBhYWVhMzgwL2IwY2EwMmU3LTdhMTItNGQ5MC04ZmViLThmMTMwYWFl YTM4MC5jcmwwHwYDVR0jBBgwFoAU7+jFlj49ZhUup1G+nGYMlTKJpFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEz MGFhZWEzODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOrrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABd9VqSHwv7UCcp9U1GxLfywqvLBcLcCxhZ8ByORVe0WS4Ky6vTEwqsS cpvWRJSfp6Fn8tLRZLZV0/LLY38r2z0TNEh7ggGavPPVZYFRJ0AhO/BoekVeaRsr MsPRnLXIM5+z+X5xgSTECF1iWFEOlATXlicg/4SwRxag2UgCd+LVH6+eOpdnV8sD qrCy6DMQaXO3QobYoEA93cuThP8urIjRZ0Vshhe3D0L5HzTS49qItYWA3AOZ4Bg3 bhzvmWvcA1R3f914/Fs4e1KfyaAd9NRRbL/fhVnyBSPBZyEL/ir/gDxw4gj9F+6o lc4ArNLVo8AVzhTuM6X/nXaylkYNC5Q= -----END CERTIFICATE-----Generated at Tue Aug 5 17:26:42 2025 by rpki-client