$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/551a9112-b904-31c3-9e1b-27e3e1da8d8a.roa File: 551a9112-b904-31c3-9e1b-27e3e1da8d8a.roa (raw, json) Hash identifier: /qL++w1M90I/vlwZ05D1x2XtTd7u3Ozl1z+H+bRYXt0= Subject key identifier: 65:4C:64:D5:3F:9F:92:B1:0D:40:48:5B:C3:68:1D:D2:47:9F:4D:30 Certificate issuer: /CN=84304b6a-cd4a-40f2-b142-5f44e824b547 Certificate serial: 010D0C9F4328584A814651D64E72FB915AEBB920 Authority key identifier: 3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/551a9112-b904-31c3-9e1b-27e3e1da8d8a.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 31898 IP address blocks: 192.243.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:51:d6:4e:72:fb:91:5a:eb:b9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84304b6a-cd4a-40f2-b142-5f44e824b547 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=fbdcac05-285a-437d-901e-d376b0d26839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:58:8f:1e:6a:8d:a4:0d:56:61:e6:df:f5:0e: 58:75:32:9d:1c:c4:2d:30:9c:7f:c0:93:8b:0a:c5: 44:bc:a3:a8:d3:73:98:db:19:8c:8c:7a:51:bc:3f: 2f:2d:80:ba:ee:8f:9a:4f:5b:0a:39:1b:d1:23:42: bb:09:6f:9d:a8:4b:82:1a:b2:82:f2:bd:46:67:c6: 2a:40:6d:57:21:88:0b:51:7e:55:fa:d7:64:00:74: 0a:56:a8:74:c7:3c:4e:fc:ef:6d:6f:b6:f6:02:85: cd:c8:01:84:7c:09:de:1a:e8:3e:38:01:d5:df:74: 8a:36:d9:0f:27:57:d7:9f:7c:7e:a4:fb:59:d3:48: d9:64:e3:03:95:cb:c6:7d:2a:8d:dc:38:6a:d0:e5: 04:bf:de:e7:6d:1c:45:fb:5e:5c:2b:4b:d2:b4:29: d0:59:1b:b1:63:55:60:b1:40:5d:3e:a9:dc:52:bb: 42:19:8f:08:42:a7:58:9e:c0:e3:1a:eb:f0:1e:54: bd:95:5c:48:c0:ec:06:62:66:34:da:d9:ae:d2:9e: 5f:12:dc:01:07:42:7a:2f:8b:6a:4b:cf:c4:e6:6a: 55:bb:53:eb:a1:77:34:56:61:33:50:d9:67:bc:85: 29:35:31:e4:0f:24:a6:a4:9a:d0:f7:7c:0c:72:9d: dc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4C:64:D5:3F:9F:92:B1:0D:40:48:5B:C3:68:1D:D2:47:9F:4D:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/551a9112-b904-31c3-9e1b-27e3e1da8d8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl X509v3 Authority Key Identifier: keyid:3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer sbgp-ipAddrBlock: critical IPv4: 192.243.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:b1:6d:5f:ca:6d:bc:13:ba:4d:2c:59:84:e5:96:4e:8a:c1: 0d:dd:ba:0a:6a:af:5e:ac:85:9b:83:8d:ab:5d:b2:80:30:85: a5:56:aa:96:30:1d:28:83:9f:15:3b:87:4b:84:e2:be:9e:dc: 80:03:6b:1f:44:dc:26:5d:9c:fa:44:49:30:69:81:d2:b5:05: c9:e3:64:dd:99:0a:f1:a8:d0:4a:e9:f8:e9:c3:d3:4f:c2:2f: 4c:f4:27:d8:d7:b2:f9:cc:d2:88:a0:0b:f4:13:fa:9f:6f:65: 56:5a:4c:39:d4:58:69:3a:9c:f6:b5:69:33:5a:73:25:8b:7a: 62:ce:42:6d:19:6a:72:24:10:89:1b:7b:8c:73:89:15:b9:d9: 0a:e3:e0:8a:26:e0:3e:d8:2a:60:a4:8a:02:85:2b:3c:0f:75: aa:59:f3:62:ef:74:84:11:2e:6a:81:8d:83:99:28:4e:fc:ff: a8:7d:06:06:8c:19:cc:f1:d3:6d:c7:d4:cc:1b:45:79:de:22: 23:b1:d2:f9:fc:da:c0:33:44:73:50:77:4f:6d:2d:5e:e0:97: 8a:a8:6d:9c:b8:54:a9:d6:9f:84:20:28:dd:10:5f:cc:7a:dc: 2d:9c:c3:fe:30:4c:b7:4a:78:6f:c6:01:b3:e1:7b:bf:7d:21: 78:af:55:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRlHWTnL7kVrruSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQzMDRiNmEtY2Q0YS00MGYyLWIxNDItNWY0NGU4MjRi NTQ3MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZmJkY2FjMDUtMjg1YS00MzdkLTkwMWUtZDM3NmIwZDI2ODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1iPHmqNpA1WYebf9Q5YdTKdHMQtMJx/wJOL CsVEvKOo03OY2xmMjHpRvD8vLYC67o+aT1sKORvRI0K7CW+dqEuCGrKC8r1GZ8Yq QG1XIYgLUX5V+tdkAHQKVqh0xzxO/O9tb7b2AoXNyAGEfAneGug+OAHV33SKNtkP J1fXn3x+pPtZ00jZZOMDlcvGfSqN3Dhq0OUEv97nbRxF+15cK0vStCnQWRuxY1Vg sUBdPqncUrtCGY8IQqdYnsDjGuvwHlS9lVxIwOwGYmY02tmu0p5fEtwBB0J6L4tq S8/E5mpVu1ProXc0VmEzUNlnvIUpNTHkDySmpJrQ93wMcp3cDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVMZNU/n5KxDUBIW8NoHdJHn00wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84NDMw NGI2YS1jZDRhLTQwZjItYjE0Mi01ZjQ0ZTgyNGI1NDcvNTUxYTkxMTItYjkwNC0z MWMzLTllMWItMjdlM2UxZGE4ZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODQzMDRiNmEtY2Q0YS00MGYyLWIx NDItNWY0NGU4MjRiNTQ3Lzg0MzA0YjZhLWNkNGEtNDBmMi1iMTQyLTVmNDRlODI0 YjU0Ny5jcmwwHwYDVR0jBBgwFoAUPf1lkVOGZzUg0FsqvFPFF6iUjVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84NDMwNGI2YS1jZDRhLTQwZjItYjE0Mi01ZjQ0 ZTgyNGI1NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPNRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2xbV/KbbwTuk0sWYTllk6KwQ3dugpqr16shZuDjatdsoAwhaVWqpYw HSiDnxU7h0uE4r6e3IADax9E3CZdnPpESTBpgdK1BcnjZN2ZCvGo0Erp+OnD00/C L0z0J9jXsvnM0oigC/QT+p9vZVZaTDnUWGk6nPa1aTNacyWLemLOQm0ZanIkEIkb e4xziRW52Qrj4Iom4D7YKmCkigKFKzwPdapZ82LvdIQRLmqBjYOZKE78/6h9BgaM Gczx023H1MwbRXneIiOx0vn82sAzRHNQd09tLV7gl4qobZy4VKnWn4QgKN0QX8x6 3C2cw/4wTLdKeG/GAbPhe799IXivVaM= -----END CERTIFICATE-----Generated at Sun Jul 20 17:09:58 2025 by rpki-client