$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/ffadfc08-ef44-3134-a107-fa470ddc4033.roa File: ffadfc08-ef44-3134-a107-fa470ddc4033.roa (raw, json) Hash identifier: 9GT7yuywybgHhY1Uq0jGAZUrAya6sd5CBaOLhcabIq4= Subject key identifier: 68:18:BC:C5:E9:E0:46:7F:30:D8:C9:41:B4:5B:2D:E0:07:E0:D9:03 Certificate issuer: /CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa Certificate serial: 010D0C9F4328584A331AE75DD6B944C1D42FF280 Authority key identifier: 1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/ffadfc08-ef44-3134-a107-fa470ddc4033.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 14618 IP address blocks: 192.135.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:e7:5d:d6:b9:44:c1:d4:2f:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=0d112756-ea1c-4934-a92e-b3cf5c36451a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8d:78:a8:58:0f:a2:33:ae:aa:32:48:95:62: 50:97:5c:a6:56:e0:51:f1:d5:8c:39:5d:5f:59:80: eb:e8:99:89:29:fe:88:7f:2d:17:ae:05:3a:ac:63: 00:36:9d:52:b3:a4:a4:7b:69:9d:2b:a8:b6:1c:26: 19:f6:23:4e:42:85:7f:99:9a:00:32:ac:6a:be:e5: eb:6c:63:84:14:d1:f6:44:06:2d:56:b1:d2:76:4a: f7:1f:a7:1c:6f:6e:68:84:77:04:bc:89:24:ea:c2: b0:22:9a:da:95:a5:fe:11:c6:f5:ca:c1:35:c1:b0: de:77:93:93:3c:df:d7:71:1d:cc:89:44:1f:16:1f: be:81:88:a4:e2:67:65:1b:95:27:b6:c8:ee:14:2f: 1b:e7:e7:e8:89:03:0a:ad:36:4b:df:07:40:fc:53: f4:73:1b:0b:73:d5:5c:b8:14:70:95:3c:b4:ee:54: 22:9b:47:e7:93:88:9d:17:1f:f1:17:2b:ff:94:0f: 46:8d:ac:36:f7:f1:7b:7d:89:37:70:aa:a3:43:4f: ac:c7:62:2d:37:ef:e6:5b:b0:93:85:aa:45:23:91: ce:4a:7f:d7:57:1d:69:a7:9a:1f:43:48:c5:40:05: b8:4c:7e:bf:41:07:a3:c9:28:8b:95:66:f2:c5:5b: 64:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:18:BC:C5:E9:E0:46:7F:30:D8:C9:41:B4:5B:2D:E0:07:E0:D9:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/ffadfc08-ef44-3134-a107-fa470ddc4033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl X509v3 Authority Key Identifier: keyid:1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer sbgp-ipAddrBlock: critical IPv4: 192.135.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:8d:55:0e:73:f2:17:c2:9c:0a:72:ea:e7:40:3f:88:f5:68: 16:82:dc:50:b0:92:42:4d:42:65:40:06:1c:02:16:fe:44:e0: bc:0d:1b:3c:21:22:0e:04:6a:e5:8c:ed:c7:24:ef:26:20:69: c1:a2:79:c9:55:5f:da:60:20:6f:7c:7a:af:15:02:30:fa:d0: 23:1d:a9:66:b2:a9:25:89:29:03:42:b2:8c:07:3f:d7:21:7e: 5e:06:93:95:33:52:81:17:94:53:e3:84:30:92:15:01:6c:4e: 1d:bf:8d:96:59:2a:1c:53:77:58:d1:9e:59:1e:bc:f2:71:5e: e0:5e:30:14:2d:01:07:fa:71:d4:56:97:12:29:4d:78:8d:fa: f9:b8:87:80:01:d3:8e:0e:2c:b3:4e:9c:bc:b9:ed:37:09:6b: c7:7f:26:41:4d:d6:b2:51:53:5b:ea:92:2c:06:65:ad:a7:01: 8a:81:a5:58:76:8a:e6:0a:bf:12:de:af:27:d2:e6:8a:77:58: 46:df:1c:90:d1:21:cd:61:0c:98:b1:ac:0d:d7:1e:7f:b7:e6: 9d:8a:77:75:68:0d:bb:f9:b6:51:4e:0a:da:bc:3c:7f:53:b8: 16:c7:6b:50:c2:a9:6b:c1:70:f3:f4:1e:4a:a4:d1:8b:3e:b9: 19:a4:e9:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGudd1rlEwdQv8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1MWZkN2QtMzdkNy00ZGE2LThkZTgtN2QzNDZlMDAw NmFhMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk MGQxMTI3NTYtZWExYy00OTM0LWE5MmUtYjNjZjVjMzY0NTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi414qFgPojOuqjJIlWJQl1ymVuBR8dWMOV1f WYDr6JmJKf6Ify0XrgU6rGMANp1Ss6Ske2mdK6i2HCYZ9iNOQoV/mZoAMqxqvuXr bGOEFNH2RAYtVrHSdkr3H6ccb25ohHcEvIkk6sKwIpralaX+Ecb1ysE1wbDed5OT PN/XcR3MiUQfFh++gYik4mdlG5UntsjuFC8b5+foiQMKrTZL3wdA/FP0cxsLc9Vc uBRwlTy07lQim0fnk4idFx/xFyv/lA9Gjaw29/F7fYk3cKqjQ0+sx2ItN+/mW7CT hapFI5HOSn/XVx1pp5ofQ0jFQAW4TH6/QQejySiLlWbyxVtkHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgYvMXp4EZ/MNjJQbRbLeAH4NkDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZTUx ZmQ3ZC0zN2Q3LTRkYTYtOGRlOC03ZDM0NmUwMDA2YWEvZmZhZGZjMDgtZWY0NC0z MTM0LWExMDctZmE0NzBkZGM0MDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGU1MWZkN2QtMzdkNy00ZGE2LThk ZTgtN2QzNDZlMDAwNmFhL2RlNTFmZDdkLTM3ZDctNGRhNi04ZGU4LTdkMzQ2ZTAw MDZhYS5jcmwwHwYDVR0jBBgwFoAUHYsjQJQ4f91apjmhU9JAQqG/3KMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZTUxZmQ3ZC0zN2Q3LTRkYTYtOGRlOC03ZDM0 NmUwMDA2YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeNVQ5z8hfCnApy6udAP4j1aBaC3FCwkkJNQmVABhwCFv5E4LwNGzwh Ig4EauWM7cck7yYgacGieclVX9pgIG98eq8VAjD60CMdqWayqSWJKQNCsowHP9ch fl4Gk5UzUoEXlFPjhDCSFQFsTh2/jZZZKhxTd1jRnlkevPJxXuBeMBQtAQf6cdRW lxIpTXiN+vm4h4AB044OLLNOnLy57TcJa8d/JkFN1rJRU1vqkiwGZa2nAYqBpVh2 iuYKvxLeryfS5op3WEbfHJDRIc1hDJixrA3XHn+35p2Kd3VoDbv5tlFOCtq8PH9T uBbHa1DCqWvBcPP0Hkqk0Ys+uRmk6SM= -----END CERTIFICATE-----Generated at Mon Jun 16 22:07:07 2025 by rpki-client