$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/5c834625-9800-3718-ba47-cf93c4317d4b.roa File: 5c834625-9800-3718-ba47-cf93c4317d4b.roa (raw, json) Hash identifier: BMoy6L5LkGF70WWamb7AM/j1gXpSzQ2xC9N1qEUnAxM= Subject key identifier: 11:BA:5A:A0:78:E2:F2:19:28:91:4A:C9:CB:95:6A:82:05:F8:D4:E0 Certificate issuer: /CN=30eed87a-82d8-42e4-80c5-3a0409b7bbfe Certificate serial: 010D0C9F4328584A612B10CB3F2A732FA4CB9200 Authority key identifier: 3A:9C:45:98:C4:8B:5F:4D:5D:B1:DF:F9:C3:17:6C:7B:BA:C7:EE:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/5c834625-9800-3718-ba47-cf93c4317d4b.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 20381 IP address blocks: 192.160.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:10:cb:3f:2a:73:2f:a4:cb:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30eed87a-82d8-42e4-80c5-3a0409b7bbfe Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=578e4b28-4842-4c0e-b223-06859ebfb1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:33:4b:91:5c:85:da:79:27:17:94:d1:06:a8: bd:c2:5a:d8:57:43:e9:70:f9:6f:3a:74:f4:20:09: 00:60:87:d9:d4:6e:f0:9b:1d:9b:31:8c:c8:64:3b: c6:66:d3:28:fe:38:57:6e:e7:ab:57:75:fe:3e:05: f7:6c:6e:19:09:0a:6f:71:ee:1b:b1:07:c5:4e:09: 6f:33:c7:24:20:8e:71:02:75:35:38:10:fe:e2:90: c1:28:bb:19:7b:cf:16:a8:17:3f:4f:98:c5:06:c5: bd:c2:f4:9b:58:5f:0e:21:57:db:d2:fa:94:d6:7a: 57:0b:f6:39:5c:ea:5d:d4:10:0d:50:18:f7:47:c4: 81:b2:4d:c2:c1:3b:85:7c:1e:05:f5:51:e9:f2:fb: dd:94:ec:bb:e4:e6:84:b2:61:b8:57:06:47:ce:4f: 04:a7:be:1c:c8:ee:7e:27:b6:b2:90:f8:2e:c5:1e: 41:44:45:03:26:1f:40:b2:b6:2c:50:a9:cb:e0:41: df:29:22:e1:a6:6f:b0:b5:33:dd:42:f3:58:f8:d7: 69:ee:3b:d3:76:6c:58:ef:f4:24:b5:35:70:d9:ae: 1a:c0:72:0c:5a:5e:70:6d:f3:9b:d6:0b:11:a2:19: f7:80:ae:d4:91:5b:bd:49:a7:05:3c:7f:02:9d:35: d7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BA:5A:A0:78:E2:F2:19:28:91:4A:C9:CB:95:6A:82:05:F8:D4:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/5c834625-9800-3718-ba47-cf93c4317d4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.crl X509v3 Authority Key Identifier: keyid:3A:9C:45:98:C4:8B:5F:4D:5D:B1:DF:F9:C3:17:6C:7B:BA:C7:EE:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.cer sbgp-ipAddrBlock: critical IPv4: 192.160.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:95:9d:14:7b:0a:31:66:c5:b7:50:f5:8c:2d:5c:bf:7c:e9: b0:d5:94:da:30:ec:37:9a:64:81:17:33:de:a3:05:53:85:59: 9c:63:91:e6:78:c4:f4:49:70:98:a3:aa:77:31:aa:2f:c5:1e: 3a:b4:9a:4f:68:67:8a:96:59:a4:8f:44:a9:1c:c6:22:83:6b: 8d:46:00:91:f0:04:5b:79:c1:84:cf:44:fc:de:b9:dc:cc:28: b0:41:61:29:12:d4:ae:54:90:ac:f5:2e:81:47:d8:f2:4b:5b: 1c:53:90:64:49:c2:70:4a:2f:fd:d1:fc:ca:88:e0:76:42:6c: e2:1e:18:18:1c:58:59:97:db:69:15:d7:2d:8f:55:a8:b6:79: 1c:2a:05:a4:53:9b:67:98:24:91:2a:d6:21:04:80:1c:ba:ea: ba:12:99:40:fd:7f:c8:d8:51:0c:c5:6b:54:23:53:aa:18:49: ee:72:63:a4:b7:3a:80:d3:e0:89:66:b1:2a:62:95:85:d9:86: 6c:aa:46:ec:70:fa:ac:5f:6a:a7:2e:26:e0:1d:80:cc:86:6f: 63:ae:72:b5:cf:db:f4:ba:45:7c:e8:a3:02:45:15:30:92:08: 47:17:d1:82:58:a6:64:54:70:22:9f:df:8d:77:4e:38:35:3c: b4:32:72:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxDLPypzL6TLkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzBlZWQ4N2EtODJkOC00MmU0LTgwYzUtM2EwNDA5Yjdi YmZlMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk NTc4ZTRiMjgtNDg0Mi00YzBlLWIyMjMtMDY4NTllYmZiMWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDNLkVyF2nknF5TRBqi9wlrYV0PpcPlvOnT0 IAkAYIfZ1G7wmx2bMYzIZDvGZtMo/jhXbuerV3X+PgX3bG4ZCQpvce4bsQfFTglv M8ckII5xAnU1OBD+4pDBKLsZe88WqBc/T5jFBsW9wvSbWF8OIVfb0vqU1npXC/Y5 XOpd1BANUBj3R8SBsk3CwTuFfB4F9VHp8vvdlOy75OaEsmG4VwZHzk8Ep74cyO5+ J7aykPguxR5BREUDJh9AsrYsUKnL4EHfKSLhpm+wtTPdQvNY+Ndp7jvTdmxY7/Qk tTVw2a4awHIMWl5wbfOb1gsRohn3gK7UkVu9SacFPH8CnTXXBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBG6WqB44vIZKJFKycuVaoIF+NTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zMGVl ZDg3YS04MmQ4LTQyZTQtODBjNS0zYTA0MDliN2JiZmUvNWM4MzQ2MjUtOTgwMC0z NzE4LWJhNDctY2Y5M2M0MzE3ZDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzBlZWQ4N2EtODJkOC00MmU0LTgw YzUtM2EwNDA5YjdiYmZlLzMwZWVkODdhLTgyZDgtNDJlNC04MGM1LTNhMDQwOWI3 YmJmZS5jcmwwHwYDVR0jBBgwFoAUOpxFmMSLX01dsd/5wxdse7rH7lMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zMGVlZDg3YS04MmQ4LTQyZTQtODBjNS0zYTA0 MDliN2JiZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKBJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGVnRR7CjFmxbdQ9YwtXL986bDVlNow7DeaZIEXM96jBVOFWZxjkeZ4 xPRJcJijqncxqi/FHjq0mk9oZ4qWWaSPRKkcxiKDa41GAJHwBFt5wYTPRPzeudzM KLBBYSkS1K5UkKz1LoFH2PJLWxxTkGRJwnBKL/3R/MqI4HZCbOIeGBgcWFmX22kV 1y2PVai2eRwqBaRTm2eYJJEq1iEEgBy66roSmUD9f8jYUQzFa1QjU6oYSe5yY6S3 OoDT4IlmsSpilYXZhmyqRuxw+qxfaqcuJuAdgMyGb2OucrXP2/S6RXzoowJFFTCS CEcX0YJYpmRUcCKf3413Tjg1PLQycjw= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:32 2025 by rpki-client