$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/9af2c8b6-535e-3fd8-a8b9-b80572f8d1ca.roa File: 9af2c8b6-535e-3fd8-a8b9-b80572f8d1ca.roa (raw, json) Hash identifier: E45y//sGka/5f+iraMgm81d6DzGpsxhI+0weZm2wPK4= Subject key identifier: A8:46:11:A8:4A:AB:07:7E:47:05:E4:A5:57:69:90:84:74:24:5E:54 Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584A9D30EC32F17CD8D72E96FE00 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/9af2c8b6-535e-3fd8-a8b9-b80572f8d1ca.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 13807 IP address blocks: 192.189.248.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:ec:32:f1:7c:d8:d7:2e:96:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=4a41cb87-4e9b-4351-8039-978105f0735f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:42:8b:e4:fc:23:43:91:4a:5a:86:47:69:f2: ad:70:77:47:f9:00:fb:33:aa:67:ef:b9:1f:20:68: 6a:b4:84:3f:65:6c:ae:90:9c:d7:c9:45:cd:9b:47: 28:6b:2f:03:5b:03:6f:da:b5:37:e9:b0:d4:8c:d3: f3:2d:8d:db:75:59:6e:16:cc:c5:e9:0e:0e:44:fe: 07:30:f9:14:e1:8c:8a:6e:24:e6:93:d8:fa:a8:1f: 12:4b:be:db:fa:cc:5c:29:14:96:a6:58:25:74:eb: e0:2b:d6:52:af:cd:1e:2f:e6:60:a5:55:fc:60:54: ff:a8:9d:97:01:67:57:0f:9b:f4:b7:29:8b:c2:95: 35:7b:c4:0b:5e:d4:4a:60:7c:9e:d1:c1:33:b2:8f: 9b:67:a0:bc:15:16:19:e3:7e:0a:c9:10:69:b3:ca: 33:31:3f:2b:7c:82:87:96:22:ef:34:98:77:f7:74: 76:83:f8:a1:0a:32:ec:1d:b7:42:d7:bf:ca:e7:10: 5e:dd:e6:f0:24:09:95:27:4c:09:7b:ca:c6:02:ec: 06:4e:0f:a4:0a:61:bf:44:02:c3:4f:7d:c4:2d:e1: 16:7d:a3:bf:f2:21:47:a6:cf:e3:3a:1a:dd:dd:f6: f7:fe:ff:16:50:e5:13:1d:7e:ae:ff:5e:d6:eb:2d: 0a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:46:11:A8:4A:AB:07:7E:47:05:E4:A5:57:69:90:84:74:24:5E:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/9af2c8b6-535e-3fd8-a8b9-b80572f8d1ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 192.189.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:12:77:ab:0d:f5:5f:2f:9b:34:e9:95:04:17:1b:8d:84:08: 87:80:0e:3a:15:cc:86:d9:a0:d1:48:93:65:7b:ab:ad:41:9a: c9:80:60:e1:5d:e8:4e:eb:0e:2b:1a:80:6e:b2:3c:d9:65:f0: f9:b0:91:fb:30:49:06:f8:f1:17:0d:c6:a0:b8:da:06:54:b9: ca:22:0f:2b:8b:de:2e:1d:7c:13:f4:cd:62:9e:d7:70:c8:f9: ad:a8:ff:99:c9:e0:22:3e:4b:43:68:d8:91:ba:7a:69:86:4c: 1b:9f:4f:ad:e8:ca:01:67:43:6d:d8:a9:6b:d2:da:10:04:5d: 4d:56:a9:09:32:5f:89:e3:98:ec:45:fc:63:22:6a:41:9b:77: a9:9e:f1:a4:8a:97:73:49:68:51:91:cc:12:82:67:43:04:64: ed:98:66:3f:5c:b6:99:6a:ab:f6:fd:53:b9:c7:89:10:6e:ee: e5:64:59:4f:38:43:27:5e:40:40:23:38:0f:29:54:d6:86:71: 78:a0:08:ba:7e:29:c0:e0:0a:3c:ff:a0:39:b0:e7:48:48:19: 10:d1:4b:ff:03:33:87:72:34:b8:76:dc:84:7b:92:f9:e5:a9: 05:1e:df:e5:ce:27:1b:f9:b9:3f:d4:f1:ba:18:0e:27:85:91: f3:91:0c:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMOwy8XzY1y6W/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NGE0MWNiODctNGU5Yi00MzUxLTgwMzktOTc4MTA1ZjA3MzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEKL5PwjQ5FKWoZHafKtcHdH+QD7M6pn77kf IGhqtIQ/ZWyukJzXyUXNm0coay8DWwNv2rU36bDUjNPzLY3bdVluFszF6Q4ORP4H MPkU4YyKbiTmk9j6qB8SS77b+sxcKRSWplgldOvgK9ZSr80eL+ZgpVX8YFT/qJ2X AWdXD5v0tymLwpU1e8QLXtRKYHye0cEzso+bZ6C8FRYZ434KyRBps8ozMT8rfIKH liLvNJh393R2g/ihCjLsHbdC17/K5xBe3ebwJAmVJ0wJe8rGAuwGTg+kCmG/RALD T33ELeEWfaO/8iFHps/jOhrd3fb3/v8WUOUTHX6u/17W6y0KqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhGEahKqwd+RwXkpVdpkIR0JF5UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvOWFmMmM4YjYtNTM1ZS0z ZmQ4LWE4YjktYjgwNTcyZjhkMWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgSd6sN9V8vmzTplQQXG42ECIeADjoVzIbZoNFIk2V7q61BmsmAYOFd 6E7rDisagG6yPNll8PmwkfswSQb48RcNxqC42gZUucoiDyuL3i4dfBP0zWKe13DI +a2o/5nJ4CI+S0No2JG6emmGTBufT63oygFnQ23YqWvS2hAEXU1WqQkyX4njmOxF /GMiakGbd6me8aSKl3NJaFGRzBKCZ0MEZO2YZj9ctplqq/b9U7nHiRBu7uVkWU84 QydeQEAjOA8pVNaGcXigCLp+KcDgCjz/oDmw50hIGRDRS/8DM4dyNLh23IR7kvnl qQUe3+XOJxv5uT/U8boYDieFkfORDHo= -----END CERTIFICATE-----Generated at Thu Aug 7 11:12:04 2025 by rpki-client