$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/c08b5e33-b653-3f50-b395-3e30e69a2601.roa File: c08b5e33-b653-3f50-b395-3e30e69a2601.roa (raw, json) Hash identifier: 496qKjHYVBhff+E1eKJapvux3F6YpOpv85nM2/G4NMg= Subject key identifier: 1D:D1:4E:D5:88:DF:CE:6F:4F:9D:1F:6D:63:E8:2D:D7:A9:D5:3A:65 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584A92063392E4DD9DAC8AF2E840 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/c08b5e33-b653-3f50-b395-3e30e69a2601.roa Signing time: Sat 19 Jul 2025 13:01:04 +0000 ROA not before: Sat 19 Jul 2025 13:01:04 +0000 ROA not after: Fri 17 Oct 2025 13:01:04 +0000 asID: 3300 IP address blocks: 192.157.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:92:06:33:92:e4:dd:9d:ac:8a:f2:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Jul 19 13:01:04 2025 GMT Not After : Oct 17 13:01:04 2025 GMT Subject: CN=684f5077-6620-42ad-868b-0b300ac2af6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:67:09:9c:a0:7e:9d:b3:13:c6:dd:00:7c:cf: af:83:32:cc:19:d2:10:46:e3:31:26:93:8f:b3:b7: 0f:7f:d7:27:17:09:d2:c2:be:58:d5:3c:7c:79:cc: ff:d1:86:04:49:4a:7b:73:53:59:8e:88:30:cc:01: d2:eb:73:04:97:c0:77:ee:5a:d5:d0:3e:ee:43:5e: 26:7f:a1:5c:d8:6b:87:3a:77:b7:1c:de:7b:7a:16: 3c:70:ad:d7:a9:1b:49:5e:83:a7:de:4f:72:19:9f: a9:91:e3:d8:a4:d1:89:54:98:42:33:d9:26:80:94: d4:9f:ec:f8:52:21:ae:af:6f:4e:cf:2b:35:7f:3b: e8:a2:15:a9:33:3d:a5:13:ab:8e:83:31:f3:7b:83: 47:c5:a1:e1:cc:6a:ce:e9:9f:9a:56:a4:a2:59:8b: 9c:6d:3a:d4:36:a4:33:53:16:70:07:4c:c4:fa:c0: d4:6b:cf:ab:ba:37:71:98:4b:88:0f:22:d6:5b:e9: 00:d7:1b:28:44:d6:c7:92:5e:ea:27:03:5b:62:b0: ad:40:61:ea:a4:4f:4f:16:ac:14:98:4a:e2:fb:57: 61:dc:83:28:11:8c:96:f7:cc:49:09:66:4b:73:10: 1e:67:29:be:0c:3f:ab:58:4c:a9:d6:87:7b:30:88: 33:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D1:4E:D5:88:DF:CE:6F:4F:9D:1F:6D:63:E8:2D:D7:A9:D5:3A:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/c08b5e33-b653-3f50-b395-3e30e69a2601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 192.157.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:02:84:bd:84:24:2a:8d:bd:a6:63:db:3b:03:90:26:03:66: 53:df:24:91:41:75:d0:49:e3:e6:0f:38:0c:bf:76:f0:bc:c5: 5f:6d:a1:5b:d2:20:40:64:b8:90:00:48:e7:c1:f2:3c:df:b3: 54:2e:54:93:bb:c1:b8:65:2c:d2:a7:6e:d1:7f:39:98:44:e4: 27:20:18:6c:c7:0a:19:24:6e:bf:6a:e8:f9:53:75:0d:c5:89: 8a:31:61:d5:5c:9d:c7:b4:9b:36:8f:a1:d8:f7:18:72:45:8f: 2b:9b:e8:cb:f9:80:65:e4:b0:bd:5c:c1:f3:71:6c:27:dd:d2: c3:b4:23:6e:24:d5:7a:3e:82:84:46:8d:00:37:21:71:12:15: fd:a8:c0:dd:4b:23:d6:93:2e:f4:63:9c:6d:67:3b:98:38:64: 24:6e:0d:c0:13:50:72:94:14:3e:f7:12:a6:4b:6f:24:ee:db: 6b:6d:b4:fe:3a:02:86:32:1b:1d:1d:af:5b:67:8c:81:80:29: a6:22:65:3d:4a:4d:33:a7:01:c1:39:ac:8f:2a:4d:2c:a4:e9: f6:e5:cb:db:c4:0d:5d:64:f3:e0:bb:c0:0d:b5:cc:09:13:fb: 95:c6:e7:dd:1e:0b:6b:cd:bc:05:32:9f:17:3b:ab:96:d8:c3: 67:da:31:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqSBjOS5N2drIry6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI1MDcxOTEzMDEwNFoXDTI1MTAxNzEzMDEwNFowLzEtMCsGA1UEAxMk Njg0ZjUwNzctNjYyMC00MmFkLTg2OGItMGIzMDBhYzJhZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimcJnKB+nbMTxt0AfM+vgzLMGdIQRuMxJpOP s7cPf9cnFwnSwr5Y1Tx8ecz/0YYESUp7c1NZjogwzAHS63MEl8B37lrV0D7uQ14m f6Fc2GuHOne3HN57ehY8cK3XqRtJXoOn3k9yGZ+pkePYpNGJVJhCM9kmgJTUn+z4 UiGur29Ozys1fzvoohWpMz2lE6uOgzHze4NHxaHhzGrO6Z+aVqSiWYucbTrUNqQz UxZwB0zE+sDUa8+rujdxmEuIDyLWW+kA1xsoRNbHkl7qJwNbYrCtQGHqpE9PFqwU mEri+1dh3IMoEYyW98xJCWZLcxAeZym+DD+rWEyp1od7MIgzcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3RTtWI385vT50fbWPoLdep1TplMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvYzA4YjVlMzMtYjY1My0z ZjUwLWIzOTUtM2UzMGU2OWEyNjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwJ2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIChL2EJCqNvaZj2zsDkCYDZlPfJJFBddBJ4+YPOAy/dvC8xV9toVvS IEBkuJAASOfB8jzfs1QuVJO7wbhlLNKnbtF/OZhE5CcgGGzHChkkbr9q6PlTdQ3F iYoxYdVcnce0mzaPodj3GHJFjyub6Mv5gGXksL1cwfNxbCfd0sO0I24k1Xo+goRG jQA3IXESFf2owN1LI9aTLvRjnG1nO5g4ZCRuDcATUHKUFD73EqZLbyTu22tttP46 AoYyGx0dr1tnjIGAKaYiZT1KTTOnAcE5rI8qTSyk6fbly9vEDV1k8+C7wA21zAkT +5XG590eC2vNvAUynxc7q5bYw2faMY0= -----END CERTIFICATE-----Generated at Sun Jul 27 08:33:51 2025 by rpki-client