$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa File: 43425afd-e380-3275-b610-aa2206fe32e5.roa (raw, json) Hash identifier: T3EbK6gA3vV295F8H2Uw9gywIIPpjARvrAJ+xSCT7EE= Subject key identifier: DF:B0:46:20:90:2E:80:EC:53:8D:A7:D6:3B:B0:40:6B:36:AB:74:A4 Certificate issuer: /CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb Certificate serial: 010D0C9F4328584A6C55D9A92A28BF820BF2AB80 Authority key identifier: 7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 10753 IP address blocks: 192.228.20.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:d9:a9:2a:28:bf:82:0b:f2:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=08ac3f85-3bc9-47cd-9a89-ccbe7d469b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:b7:ac:10:d1:03:21:ee:1f:dd:a5:4d:18: 0e:3f:21:47:5a:f8:37:cf:9d:5f:4a:fc:93:bd:c6: e9:48:b5:c9:bf:8c:2c:f8:a4:b9:4d:f7:3d:68:f5: 5c:53:ee:28:2f:90:7a:5e:d4:03:11:ed:c4:42:d6: 79:ab:9a:98:93:42:21:36:63:aa:fd:77:cd:56:ce: ef:c5:fb:06:d0:f1:40:b6:ce:e6:fe:7f:0e:e1:c2: 21:06:90:9a:83:c5:9b:4c:23:36:52:4c:1a:44:52: c8:be:4f:93:2d:1e:fa:16:0d:94:ed:fa:9a:30:f0: f7:3e:be:99:cb:87:62:bb:eb:f3:a7:59:b2:c7:f5: 72:87:c5:f5:dc:a8:c1:b5:b7:61:b6:da:ec:b8:47: 78:25:59:39:05:02:7b:74:5f:4d:73:5a:88:18:f6: d7:19:98:93:f4:9c:b5:98:27:0b:54:5c:ed:c4:c6: 0b:80:ef:99:8d:11:ac:30:23:54:d4:89:e5:7b:13: 9b:b4:12:da:22:35:76:ff:42:94:15:b4:bf:52:35: 28:3e:09:b2:27:67:cb:e1:dd:d0:12:bb:b1:d9:18: f6:a0:fe:c6:15:e7:37:31:95:67:57:6e:df:a1:94: 29:f8:a5:ee:d2:31:97:5b:f8:5c:95:1a:af:48:d3: 49:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B0:46:20:90:2E:80:EC:53:8D:A7:D6:3B:B0:40:6B:36:AB:74:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl X509v3 Authority Key Identifier: keyid:7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer sbgp-ipAddrBlock: critical IPv4: 192.228.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:3a:93:5d:07:94:25:f1:53:39:2d:0c:ab:5b:02:d5:ae:ee: 37:59:9b:52:ad:5f:74:d6:5b:83:95:f0:f9:71:d3:94:34:fb: 70:ba:ac:5b:52:c5:db:3f:69:3e:58:39:5f:c6:2c:ca:ba:9a: ba:cd:3f:cf:51:86:56:d6:15:d5:4d:64:39:ee:d5:90:b5:2c: 79:8f:52:b3:54:76:87:13:61:34:5d:7f:6f:5d:d1:63:d1:49: 19:47:6f:46:c5:be:1d:3e:0b:76:28:2e:ec:a1:72:d7:9f:34: 03:ac:dc:d0:e1:ab:b3:68:16:39:48:98:7c:08:99:1c:56:57: a3:3c:10:58:ca:6b:b4:e8:b2:bd:08:34:20:10:ff:1a:ae:a6: 80:e5:24:ce:1c:d0:5a:13:7c:e5:16:be:6c:db:a7:44:ca:79: 79:31:9c:c5:45:17:50:6f:16:4c:28:2c:38:eb:63:67:45:e9: 4d:ae:33:c2:8b:49:b7:2f:85:68:80:30:77:8c:40:97:a4:5a: 6b:70:a4:b7:63:18:2f:1e:a1:90:9d:ec:3b:fe:c6:11:46:38: 72:4f:db:5c:af:7d:00:4b:3e:14:8b:49:ee:6e:ca:9c:86:a2: 10:48:99:56:02:93:7f:67:eb:c8:0b:45:15:d3:e5:97:15:01: be:5b:2c:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdmpKii/ggvyq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JjYmUxNmItMGRkZS00NmMzLTgzN2YtYTk0MGEwZTlk NGNiMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk MDhhYzNmODUtM2JjOS00N2NkLTlhODktY2NiZTdkNDY5YjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov63rBDRAyHuH92lTRgOPyFHWvg3z51fSvyT vcbpSLXJv4ws+KS5Tfc9aPVcU+4oL5B6XtQDEe3EQtZ5q5qYk0IhNmOq/XfNVs7v xfsG0PFAts7m/n8O4cIhBpCag8WbTCM2UkwaRFLIvk+TLR76Fg2U7fqaMPD3Pr6Z y4diu+vzp1myx/Vyh8X13KjBtbdhttrsuEd4JVk5BQJ7dF9Nc1qIGPbXGZiT9Jy1 mCcLVFztxMYLgO+ZjRGsMCNU1InlexObtBLaIjV2/0KUFbS/UjUoPgmyJ2fL4d3Q Erux2Rj2oP7GFec3MZVnV27foZQp+KXu0jGXW/hclRqvSNNJjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+wRiCQLoDsU42n1juwQGs2q3SkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83YmNi ZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQwYTBlOWQ0Y2IvNDM0MjVhZmQtZTM4MC0z Mjc1LWI2MTAtYWEyMjA2ZmUzMmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2JjYmUxNmItMGRkZS00NmMzLTgz N2YtYTk0MGEwZTlkNGNiLzdiY2JlMTZiLTBkZGUtNDZjMy04MzdmLWE5NDBhMGU5 ZDRjYi5jcmwwHwYDVR0jBBgwFoAUfqcpYYmuSL66JjiBwpP8hasLXKYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83YmNiZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQw YTBlOWQ0Y2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAc6k10HlCXxUzktDKtbAtWu7jdZm1KtX3TWW4OV8Plx05Q0+3C6rFtS xds/aT5YOV/GLMq6mrrNP89RhlbWFdVNZDnu1ZC1LHmPUrNUdocTYTRdf29d0WPR SRlHb0bFvh0+C3YoLuyhctefNAOs3NDhq7NoFjlImHwImRxWV6M8EFjKa7Tosr0I NCAQ/xqupoDlJM4c0FoTfOUWvmzbp0TKeXkxnMVFF1BvFkwoLDjrY2dF6U2uM8KL SbcvhWiAMHeMQJekWmtwpLdjGC8eoZCd7Dv+xhFGOHJP21yvfQBLPhSLSe5uypyG ohBImVYCk39n68gLRRXT5ZcVAb5bLFM= -----END CERTIFICATE-----Generated at Thu Jul 10 07:59:47 2025 by rpki-client