$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/62a90f96-8aec-3e12-b7ac-38e78f13a34c.roa File: 62a90f96-8aec-3e12-b7ac-38e78f13a34c.roa (raw, json) Hash identifier: WhngbwOpSyPFF2oJ8CuyuOG9+hUTU4sBEjDKQVWnVTQ= Subject key identifier: 81:6C:63:B0:75:53:27:72:16:6A:40:B2:1B:94:EE:1F:5A:B3:F6:B0 Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F4328584AADF0FE07372B7E8EB220C080 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/62a90f96-8aec-3e12-b7ac-38e78f13a34c.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 6639 IP address blocks: 192.0.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f0:fe:07:37:2b:7e:8e:b2:20:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=260999ce-3678-488f-9bdb-fc0dd3ef2cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:56:33:0d:da:a2:fd:63:41:82:52:c7:f0:e3: dd:34:93:9d:e6:6b:b0:ca:27:c9:6c:e5:6d:f6:7c: c1:cc:67:9e:66:d3:8f:41:85:ec:64:72:75:38:ea: 5e:94:1e:5a:b6:aa:5d:2e:b0:d2:82:4b:3e:7a:84: 89:a2:4c:f3:c7:64:88:10:d5:83:59:2b:b4:69:54: de:c4:8f:4e:9b:90:55:45:e2:54:66:c9:d8:eb:2a: 6e:32:f3:23:03:ba:fb:03:35:cf:39:66:b1:ab:a2: 33:80:54:4d:17:49:b0:0e:b7:62:03:5a:c3:f3:59: 0a:5f:c3:fe:42:dc:8a:02:43:51:05:f6:34:26:a9: f4:87:e8:06:e0:00:c0:92:45:c1:78:07:19:79:88: 68:b8:8f:12:42:a3:ae:bc:32:32:75:8c:e8:a2:7f: ae:30:31:b0:aa:f4:63:5b:4c:8f:bd:2f:96:ed:35: be:ec:8c:80:a3:35:00:ef:a6:73:53:a8:6b:34:56: 16:06:1a:a7:0f:59:db:1b:01:e6:68:11:a8:71:39: 26:1c:6b:51:e9:df:06:4d:88:38:73:f7:4d:5c:38: 64:28:86:02:2d:03:60:7b:be:ca:08:71:f5:89:1d: 16:30:72:6b:36:53:38:74:1c:02:8b:1b:ce:e8:22: 6d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6C:63:B0:75:53:27:72:16:6A:40:B2:1B:94:EE:1F:5A:B3:F6:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/62a90f96-8aec-3e12-b7ac-38e78f13a34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv4: 192.0.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:4e:c6:5c:14:ea:a3:e1:87:ae:57:fc:a9:61:0a:53:31:c9: 60:55:84:c7:ed:a7:07:91:49:fe:2e:84:e8:ae:2c:98:0f:d9: 42:b3:c3:eb:d1:59:ec:fd:d2:04:cf:34:60:57:9a:f5:36:c0: 23:94:9b:4a:65:a3:3b:55:aa:2d:25:b1:25:55:a9:1b:49:6a: 8a:e6:d0:23:b7:1a:18:4b:57:12:b1:ba:93:ad:b9:2a:e8:d0: ca:6f:e1:57:83:c9:38:b9:be:01:d8:53:78:6a:0d:41:be:73: 09:99:0b:f1:bd:c0:77:95:8e:e5:84:67:cc:75:81:62:db:f4: 82:02:6d:54:fd:b5:e0:ac:dd:12:c3:cb:be:fd:af:8f:3b:c6: b4:0d:7b:25:67:d4:1d:f5:29:4b:4a:1b:fb:35:01:a5:da:e1: 7f:f7:24:e0:15:a9:2f:59:ea:1e:58:17:3d:c0:35:24:55:e4: 1a:8d:82:27:f3:38:55:72:78:4a:b4:c4:75:b4:9c:a6:00:6e: e0:ac:b8:2b:33:15:f2:d9:55:a8:4d:0a:8c:59:df:24:88:67: 81:02:4d:07:cd:cf:83:31:93:c5:0d:b3:29:40:a9:96:1c:7a: c0:00:2b:b4:1a:09:bd:b4:42:9d:a6:84:b3:ff:c0:95:a7:3a: 24:d5:57:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8P4HNyt+jrIgwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MjYwOTk5Y2UtMzY3OC00ODhmLTliZGItZmMwZGQzZWYyY2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVYzDdqi/WNBglLH8OPdNJOd5muwyifJbOVt 9nzBzGeeZtOPQYXsZHJ1OOpelB5atqpdLrDSgks+eoSJokzzx2SIENWDWSu0aVTe xI9Om5BVReJUZsnY6ypuMvMjA7r7AzXPOWaxq6IzgFRNF0mwDrdiA1rD81kKX8P+ QtyKAkNRBfY0Jqn0h+gG4ADAkkXBeAcZeYhouI8SQqOuvDIydYzoon+uMDGwqvRj W0yPvS+W7TW+7IyAozUA76ZzU6hrNFYWBhqnD1nbGwHmaBGocTkmHGtR6d8GTYg4 c/dNXDhkKIYCLQNge77KCHH1iR0WMHJrNlM4dBwCixvO6CJtYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFsY7B1UydyFmpAshuU7h9as/awMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvNjJhOTBmOTYtOGFlYy0z ZTEyLWI3YWMtMzhlNzhmMTNhMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwAAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdOxlwU6qPhh65X/KlhClMxyWBVhMftpweRSf4uhOiuLJgP2UKzw+vR Wez90gTPNGBXmvU2wCOUm0ploztVqi0lsSVVqRtJaorm0CO3GhhLVxKxupOtuSro 0Mpv4VeDyTi5vgHYU3hqDUG+cwmZC/G9wHeVjuWEZ8x1gWLb9IICbVT9teCs3RLD y779r487xrQNeyVn1B31KUtKG/s1AaXa4X/3JOAVqS9Z6h5YFz3ANSRV5BqNgifz OFVyeEq0xHW0nKYAbuCsuCszFfLZVahNCoxZ3ySIZ4ECTQfNz4Mxk8UNsylAqZYc esAAK7QaCb20Qp2mhLP/wJWnOiTVV/Y= -----END CERTIFICATE-----Generated at Mon Aug 4 14:56:31 2025 by rpki-client