$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/2acf3f1b-eacb-3746-939b-0407dc034a39.roa File: 2acf3f1b-eacb-3746-939b-0407dc034a39.roa (raw, json) Hash identifier: 1r8XAEtKgmgKpDO8cOXIF4Lqn19AIGCA+7he0TVv7Qw= Subject key identifier: 8D:CB:87:B5:FA:5E:A4:2B:88:BC:3C:DA:28:40:1F:5B:25:36:3A:6C Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584AADF0FEB41C7B90111DA05240 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/2acf3f1b-eacb-3746-939b-0407dc034a39.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 46408 IP address blocks: 192.58.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f0:fe:b4:1c:7b:90:11:1d:a0:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=e9100bae-a51c-48c2-a93d-855feb6026c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7d:80:fc:4f:1b:4f:84:09:48:71:f9:db:b3: b2:6d:75:58:b2:4a:59:4a:b1:20:9a:74:c1:f7:6f: e8:b3:12:ef:22:10:33:d5:4a:d4:17:96:e3:1c:4c: 9d:34:e9:7e:6a:2b:33:5b:f2:54:da:59:29:49:b4: 4d:b1:5a:1e:57:f5:37:17:1c:cb:a8:61:fb:76:25: d8:b0:c0:e8:78:b9:6a:fc:af:2a:bd:e1:79:a8:30: 45:90:43:91:07:f3:fa:40:fe:1c:2e:71:7b:88:25: 27:8f:a2:3e:0a:12:36:12:58:0d:e2:1e:03:8a:28: 2f:e1:e3:17:2d:2c:f8:a8:44:12:3c:a3:28:18:1e: 57:e0:7f:73:e0:3f:bc:7e:5d:5d:bd:a5:3e:1c:01: 2a:4f:e7:b2:f0:15:1a:62:ea:f6:03:17:75:47:88: 56:38:23:10:bf:25:b7:8a:92:b8:1e:c4:d6:12:e3: 3a:f5:fa:31:52:a5:ae:86:41:a2:fd:b7:b3:a3:14: a6:9b:b3:11:e9:2c:b6:7d:9c:ca:3e:d4:c1:26:d6: 8a:d1:84:b7:5e:60:c3:7f:7f:d4:ec:08:69:3b:51: e8:39:92:e6:72:81:ef:ef:57:4f:45:89:48:b3:91: e2:f8:b5:82:6e:7d:f2:8f:db:16:06:be:a6:a4:da: b6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CB:87:B5:FA:5E:A4:2B:88:BC:3C:DA:28:40:1F:5B:25:36:3A:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/2acf3f1b-eacb-3746-939b-0407dc034a39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 192.58.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:59:b5:20:4f:0f:25:bd:18:62:72:55:db:55:34:22:48:f6: 74:10:2b:aa:a0:46:4f:af:30:56:c4:99:17:30:0f:36:ba:69: 9c:e0:bf:53:02:b3:19:55:a6:f7:73:78:9b:81:c4:11:53:c8: f2:c4:aa:71:a7:22:26:d8:90:4d:52:9c:bf:3e:dd:3d:b3:b2: 1a:bd:a8:26:fe:e9:49:67:d8:e4:bd:2a:c1:cd:0a:98:0d:78: 9a:66:8d:76:93:e7:6a:7e:40:76:b2:10:a2:2a:08:f4:79:b4: ad:30:f9:d7:a1:e4:c2:b3:7a:a5:ae:05:f8:20:4f:28:64:6b: 29:16:c5:5b:1e:d1:55:a7:c3:f8:c7:1e:8f:b0:5b:fc:68:81: f3:fb:fb:22:b5:a8:3b:54:53:84:50:b3:27:66:55:30:9d:bd: 94:66:cb:1f:69:30:1e:a7:8e:8e:a8:81:16:02:ae:6c:e7:68: ec:9c:1b:86:71:0b:bc:2c:2c:8d:10:a8:cf:46:0f:ad:5c:bc: 5d:da:e7:d5:91:e6:4b:9e:3f:80:e5:25:1c:7c:25:d0:91:30: 2e:4c:21:26:99:b0:2e:13:c2:0d:24:b8:57:d6:ac:7a:72:cb: b4:d0:87:ac:2b:6f:40:e0:4e:52:5e:ea:37:1e:5d:07:79:61: c2:2f:81:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8P60HHuQER2gUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZTkxMDBiYWUtYTUxYy00OGMyLWE5M2QtODU1ZmViNjAyNmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH2A/E8bT4QJSHH527OybXVYskpZSrEgmnTB 92/osxLvIhAz1UrUF5bjHEydNOl+aiszW/JU2lkpSbRNsVoeV/U3FxzLqGH7diXY sMDoeLlq/K8qveF5qDBFkEORB/P6QP4cLnF7iCUnj6I+ChI2ElgN4h4Diigv4eMX LSz4qEQSPKMoGB5X4H9z4D+8fl1dvaU+HAEqT+ey8BUaYur2Axd1R4hWOCMQvyW3 ipK4HsTWEuM69foxUqWuhkGi/bezoxSmm7MR6Sy2fZzKPtTBJtaK0YS3XmDDf3/U 7AhpO1HoOZLmcoHv71dPRYlIs5Hi+LWCbn3yj9sWBr6mpNq2uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3Lh7X6XqQriLw82ihAH1slNjpsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvMmFjZjNmMWItZWFjYi0z NzQ2LTkzOWItMDQwN2RjMDM0YTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwDqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdZtSBPDyW9GGJyVdtVNCJI9nQQK6qgRk+vMFbEmRcwDza6aZzgv1MC sxlVpvdzeJuBxBFTyPLEqnGnIibYkE1SnL8+3T2zshq9qCb+6Uln2OS9KsHNCpgN eJpmjXaT52p+QHayEKIqCPR5tK0w+deh5MKzeqWuBfggTyhkaykWxVse0VWnw/jH Ho+wW/xogfP7+yK1qDtUU4RQsydmVTCdvZRmyx9pMB6njo6ogRYCrmznaOycG4Zx C7wsLI0QqM9GD61cvF3a59WR5kueP4DlJRx8JdCRMC5MISaZsC4Twg0kuFfWrHpy y7TQh6wrb0DgTlJe6jceXQd5YcIvgQQ= -----END CERTIFICATE-----Generated at Mon Aug 4 19:08:01 2025 by rpki-client