$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/10b59e7b-111c-3514-821b-71e78d8eece8.roa File: 10b59e7b-111c-3514-821b-71e78d8eece8.roa (raw, json) Hash identifier: hHt1HSpajS1q9l4dMzQ4yVMl9dSbrAM26yc5P2/JuW8= Subject key identifier: 6D:E9:9C:B3:5A:A6:0E:8D:95:5F:B3:B2:2D:45:BD:EB:F6:79:48:B6 Certificate issuer: /CN=f9c367c2-ae39-45af-aac9-ca536571d493 Certificate serial: 010D0C9F4328584AA85BADB5114E4B9A3224DA54 Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/10b59e7b-111c-3514-821b-71e78d8eece8.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 27357 IP address blocks: 142.0.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 31 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:ad:b5:11:4e:4b:9a:32:24:da:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=272ece89-b50a-4ec7-91c9-9e6794479811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3b:d3:93:1d:1c:a1:b3:01:86:e5:65:19:50: c8:8f:b2:12:93:8d:8d:c2:88:e5:9d:b5:8e:ef:b9: 35:d8:27:3b:8e:e0:da:cf:3c:1c:ef:fd:0d:1e:4d: f1:bd:97:84:83:18:71:58:83:03:bd:2a:06:f9:80: 4f:b9:91:a0:2a:3e:a2:88:c0:c4:92:a2:91:17:2c: 01:0c:c1:bd:32:45:62:e9:b9:45:51:c2:bc:f6:87: a1:47:0d:97:a4:0b:42:c1:a1:71:35:c6:52:78:84: 11:6f:d7:b4:c9:df:d4:9b:15:06:16:39:46:2e:43: 20:f8:87:3a:69:1e:02:1b:56:15:15:09:d6:90:0e: 8a:eb:2e:b2:07:fa:89:b5:14:33:52:31:fc:2a:9a: 69:8d:1d:1f:6d:7b:f9:13:92:b1:f6:f4:4a:7e:79: d3:87:9d:28:3b:15:47:22:92:bc:04:ae:3d:ed:8f: 7f:26:79:07:75:6f:0a:ff:f5:29:62:27:00:bd:1b: fd:b7:7d:f9:e0:c9:e3:c9:8c:48:d0:88:23:95:95: b8:46:72:83:27:9a:5e:52:bb:aa:70:64:78:09:4a: 0d:2e:cc:2f:a8:81:17:56:fa:5b:10:f8:ef:23:0c: de:09:38:2d:85:6c:b9:8e:79:b1:5a:b7:c9:db:ca: 27:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E9:9C:B3:5A:A6:0E:8D:95:5F:B3:B2:2D:45:BD:EB:F6:79:48:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/10b59e7b-111c-3514-821b-71e78d8eece8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl X509v3 Authority Key Identifier: keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer sbgp-ipAddrBlock: critical IPv4: 142.0.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:59:41:b7:20:a6:6f:32:83:f2:2a:bc:14:9b:24:23:94:7f: e4:2a:a3:26:8d:4b:3c:03:e2:80:b1:c9:ea:15:d1:4f:d1:e5: bb:78:0c:02:49:b1:81:d0:ce:ad:af:aa:fa:2c:c8:1d:5b:49: c3:16:d0:76:78:66:db:5e:d8:eb:55:3b:1d:ea:aa:ea:4e:cd: 78:26:ce:ad:e6:3d:c0:43:3f:fe:db:95:46:55:b5:19:7e:86: 50:68:53:50:d3:a3:79:83:81:5d:07:7f:d9:d5:e6:0e:3d:93: 44:6b:86:d8:16:d1:cb:88:9d:82:4f:b4:bf:07:fd:bd:50:bb: 04:a1:78:18:80:65:5e:f5:73:90:4f:b3:40:89:a1:9f:b3:c8: 60:78:35:d3:16:77:31:e1:ee:75:23:d4:71:a4:f1:0c:50:02: 06:ad:18:6a:13:9e:3e:7e:42:02:6c:e8:b4:ff:0f:6c:36:89: c1:b8:6b:7a:fd:ff:c1:36:cf:ff:fb:1a:94:4b:b5:64:0d:8b: f0:26:5e:81:81:02:17:e2:28:c1:27:8a:3d:6e:a7:c8:18:d0: 3b:ec:05:e1:d6:5e:09:0a:bf:a4:ae:5f:ac:08:d9:6a:3f:30: 81:40:cb:c4:8c:f1:13:03:eb:52:51:16:a6:bb:ed:25:12:80: 6d:e1:a1:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW621EU5LmjIk2lQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjljMzY3YzItYWUzOS00NWFmLWFhYzktY2E1MzY1NzFk NDkzMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MjcyZWNlODktYjUwYS00ZWM3LTkxYzktOWU2Nzk0NDc5ODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzvTkx0cobMBhuVlGVDIj7ISk42NwojlnbWO 77k12Cc7juDazzwc7/0NHk3xvZeEgxhxWIMDvSoG+YBPuZGgKj6iiMDEkqKRFywB DMG9MkVi6blFUcK89oehRw2XpAtCwaFxNcZSeIQRb9e0yd/UmxUGFjlGLkMg+Ic6 aR4CG1YVFQnWkA6K6y6yB/qJtRQzUjH8KpppjR0fbXv5E5Kx9vRKfnnTh50oOxVH IpK8BK497Y9/JnkHdW8K//UpYicAvRv9t3354MnjyYxI0IgjlZW4RnKDJ5peUruq cGR4CUoNLswvqIEXVvpbEPjvIwzeCTgthWy5jnmxWrfJ28onrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3pnLNapg6NlV+zsi1Fvev2eUi2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMz NjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUzNjU3MWQ0OTMvMTBiNTllN2ItMTExYy0z NTE0LTgyMWItNzFlNzhkOGVlY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjljMzY3YzItYWUzOS00NWFmLWFh YzktY2E1MzY1NzFkNDkzL2Y5YzM2N2MyLWFlMzktNDVhZi1hYWM5LWNhNTM2NTcx ZDQ5My5jcmwwHwYDVR0jBBgwFoAUMplxZjowEaL2SVBbM9OH2n84vacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMzNjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUz NjU3MWQ0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjgC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlZQbcgpm8yg/IqvBSbJCOUf+QqoyaNSzwD4oCxyeoV0U/R5bt4DAJJ sYHQzq2vqvosyB1bScMW0HZ4Ztte2OtVOx3qqupOzXgmzq3mPcBDP/7blUZVtRl+ hlBoU1DTo3mDgV0Hf9nV5g49k0RrhtgW0cuInYJPtL8H/b1QuwSheBiAZV71c5BP s0CJoZ+zyGB4NdMWdzHh7nUj1HGk8QxQAgatGGoTnj5+QgJs6LT/D2w2icG4a3r9 /8E2z//7GpRLtWQNi/AmXoGBAhfiKMEnij1up8gY0DvsBeHWXgkKv6SuX6wI2Wo/ MIFAy8SM8RMD61JRFqa77SUSgG3hofM= -----END CERTIFICATE-----Generated at Wed Jul 30 06:22:58 2025 by rpki-client