$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/bccd0e06-f581-3834-a98d-5e65dbd7728f.roa File: bccd0e06-f581-3834-a98d-5e65dbd7728f.roa (raw, json) Hash identifier: P6I2ekViVOJpr2IpBwkp9AHOKlt5bBs4HuI3oei9eJA= Subject key identifier: 51:01:3D:43:31:0D:C6:D3:E9:8A:0B:67:61:FC:1D:C5:BB:9D:5B:36 Certificate issuer: /CN=7db346f0-17b1-4b0d-942b-291f70e18910 Certificate serial: 010D0C9F4328584A3B7AEF07D0643FE207824250 Authority key identifier: 4D:B3:C5:05:6C:88:DD:EA:E8:26:74:75:4A:EA:75:38:D5:7A:4B:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/bccd0e06-f581-3834-a98d-5e65dbd7728f.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 40317 IP address blocks: 192.96.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:ef:07:d0:64:3f:e2:07:82:42:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7db346f0-17b1-4b0d-942b-291f70e18910 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=510b2f5a-42f9-4d3f-8e7f-ddf1e7b15a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a8:5a:82:a6:c4:bc:bb:b3:34:db:60:53:5f: 0c:43:76:63:30:31:3c:1a:4f:df:7d:a3:a3:31:c3: 33:4c:b1:25:9b:65:54:bb:0f:51:06:98:4d:81:c0: ea:10:86:b8:33:24:00:3c:0b:9a:23:71:c1:9f:9e: fa:61:0f:3f:4e:6f:75:73:52:fd:62:90:17:34:aa: d6:55:16:ac:f9:ab:66:55:67:5b:00:64:46:38:9e: b2:f8:f6:fb:4d:33:d0:44:64:6a:8e:36:2e:ea:30: 39:6b:8b:e5:38:92:19:59:ad:1d:b3:33:9b:2c:21: 0e:47:64:c6:73:c0:7a:13:d8:8f:b8:bc:dc:32:5b: 9e:02:eb:5e:9c:19:15:56:fc:4a:e4:23:99:f4:ee: 07:67:da:7f:3f:38:25:9e:19:db:be:5e:45:e5:0e: b9:2b:dd:8e:07:19:32:c8:ac:14:94:f5:e5:64:ff: 61:e4:15:f9:d7:55:7c:09:c8:e0:b3:1b:17:d2:7f: eb:36:d0:57:b4:d7:d0:fb:b4:be:3d:06:fd:c2:b9: cb:c5:81:36:ee:3c:fc:0b:cc:b3:8b:ae:a6:fe:2b: 88:c9:10:00:bd:07:78:e2:8e:b4:b6:1a:3d:9c:ba: b9:dd:64:1c:d0:d6:ac:b2:33:96:aa:30:b0:91:0d: 3a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:01:3D:43:31:0D:C6:D3:E9:8A:0B:67:61:FC:1D:C5:BB:9D:5B:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/bccd0e06-f581-3834-a98d-5e65dbd7728f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.crl X509v3 Authority Key Identifier: keyid:4D:B3:C5:05:6C:88:DD:EA:E8:26:74:75:4A:EA:75:38:D5:7A:4B:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer sbgp-ipAddrBlock: critical IPv4: 192.96.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e1:86:2c:a6:a7:5e:33:95:82:4c:2f:1c:30:cf:9d:95:35: 4e:d1:eb:94:97:4b:3a:03:6f:43:f1:55:b0:18:08:84:1c:46: cd:cb:96:cd:d8:b8:20:d3:31:1f:f6:37:cb:6a:09:59:2b:d9: 8c:7e:c3:4b:9c:13:4c:5b:52:80:f6:6c:ec:d8:46:bb:29:c8: 9d:12:9a:e2:0e:30:d0:99:7e:f6:16:01:38:2c:08:85:a9:cd: 63:b0:e2:d3:b2:f8:ef:de:cc:6c:54:86:04:af:c6:9d:9e:bb: 57:54:26:88:13:98:ae:f9:4f:ab:95:cc:92:51:1d:e3:f8:71: 5b:8a:e8:2d:0c:cf:06:1e:23:ea:2b:0e:82:3a:44:f0:60:c7: c1:4e:a5:98:87:5e:7d:49:76:68:b6:2d:99:87:3e:04:74:e8: 5d:38:51:46:2f:1d:35:9e:98:21:71:c9:be:8b:8a:e6:74:b8: 75:da:e3:af:bd:58:cc:73:05:35:a0:65:72:50:2b:f1:f4:6b: 9f:cb:58:9d:0c:c4:d4:37:f6:76:8b:88:d9:f4:9c:75:44:96: 97:52:2c:db:f9:09:3e:b2:06:37:fb:a9:0d:f2:a4:15:66:fa: 5a:38:a3:04:14:a2:a4:d5:fc:fd:5b:b9:09:61:c0:1f:86:58: ee:a3:76:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7eu8H0GQ/4geCQlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RiMzQ2ZjAtMTdiMS00YjBkLTk0MmItMjkxZjcwZTE4 OTEwMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NTEwYjJmNWEtNDJmOS00ZDNmLThlN2YtZGRmMWU3YjE1YTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6hagqbEvLuzNNtgU18MQ3ZjMDE8Gk/ffaOj McMzTLElm2VUuw9RBphNgcDqEIa4MyQAPAuaI3HBn576YQ8/Tm91c1L9YpAXNKrW VRas+atmVWdbAGRGOJ6y+Pb7TTPQRGRqjjYu6jA5a4vlOJIZWa0dszObLCEOR2TG c8B6E9iPuLzcMlueAutenBkVVvxK5COZ9O4HZ9p/Pzglnhnbvl5F5Q65K92OBxky yKwUlPXlZP9h5BX511V8CcjgsxsX0n/rNtBXtNfQ+7S+PQb9wrnLxYE27jz8C8yz i66m/iuIyRAAvQd44o60tho9nLq53WQc0NassjOWqjCwkQ06RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEBPUMxDcbT6YoLZ2H8HcW7nVs2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ZGIz NDZmMC0xN2IxLTRiMGQtOTQyYi0yOTFmNzBlMTg5MTAvYmNjZDBlMDYtZjU4MS0z ODM0LWE5OGQtNWU2NWRiZDc3MjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2RiMzQ2ZjAtMTdiMS00YjBkLTk0 MmItMjkxZjcwZTE4OTEwLzdkYjM0NmYwLTE3YjEtNGIwZC05NDJiLTI5MWY3MGUx ODkxMC5jcmwwHwYDVR0jBBgwFoAUTbPFBWyI3eroJnR1Sup1ONV6S1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83ZGIzNDZmMC0xN2IxLTRiMGQtOTQyYi0yOTFm NzBlMTg5MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGAqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLhhiymp14zlYJMLxwwz52VNU7R65SXSzoDb0PxVbAYCIQcRs3Lls3Y uCDTMR/2N8tqCVkr2Yx+w0ucE0xbUoD2bOzYRrspyJ0SmuIOMNCZfvYWATgsCIWp zWOw4tOy+O/ezGxUhgSvxp2eu1dUJogTmK75T6uVzJJRHeP4cVuK6C0MzwYeI+or DoI6RPBgx8FOpZiHXn1Jdmi2LZmHPgR06F04UUYvHTWemCFxyb6LiuZ0uHXa46+9 WMxzBTWgZXJQK/H0a5/LWJ0MxNQ39naLiNn0nHVElpdSLNv5CT6yBjf7qQ3ypBVm +lo4owQUoqTV/P1buQlhwB+GWO6jdtk= -----END CERTIFICATE-----Generated at Tue Jul 1 11:40:41 2025 by rpki-client