$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f65257f-b470-457c-ae60-9f9105a2a833/2727f34b-731f-334e-8ed7-eb3e33f6a197.roa File: 2727f34b-731f-334e-8ed7-eb3e33f6a197.roa (raw, json) Hash identifier: TSjEgvofKk9R9v+grwMPXwRUkyTo0uJS9a8UM5xun4o= Subject key identifier: F0:C9:CD:BF:26:57:C3:E9:B7:1A:EB:79:48:F9:F3:44:C4:07:10:0D Certificate issuer: /CN=7f65257f-b470-457c-ae60-9f9105a2a833 Certificate serial: 010D0C9F4328584A3B7AEEC5B008BBA4F97CB700 Authority key identifier: 9C:CF:F6:32:F8:BA:D8:53:2A:2F:4E:AA:2E:7C:58:C2:4D:0F:2A:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f65257f-b470-457c-ae60-9f9105a2a833.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f65257f-b470-457c-ae60-9f9105a2a833/2727f34b-731f-334e-8ed7-eb3e33f6a197.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 399031 IP address blocks: 192.75.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f65257f-b470-457c-ae60-9f9105a2a833/7f65257f-b470-457c-ae60-9f9105a2a833.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f65257f-b470-457c-ae60-9f9105a2a833/7f65257f-b470-457c-ae60-9f9105a2a833.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f65257f-b470-457c-ae60-9f9105a2a833.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:ee:c5:b0:08:bb:a4:f9:7c:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f65257f-b470-457c-ae60-9f9105a2a833 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=77d96b18-387c-4a27-b0a1-de425c300fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2b:60:15:e9:cf:06:d5:b5:a8:1e:2e:72:96: 9f:3c:a9:96:b1:16:26:7c:0b:1a:01:7a:93:44:04: 10:1d:ea:0b:d1:2b:39:e6:57:ec:c8:b9:9e:3e:1a: db:d2:84:a6:e2:9c:27:65:7e:13:d7:82:9c:79:53: 77:d0:3c:ed:27:e8:cc:99:96:7a:71:02:05:4d:ed: bd:84:69:df:89:68:fa:3c:a1:60:12:b6:13:65:00: 1a:7e:18:e4:70:34:1a:a9:91:7f:37:32:0d:23:cb: 2a:54:ad:11:0b:76:f8:06:2c:01:b6:c0:36:48:e5: 99:11:5b:78:35:76:23:46:7c:ab:9f:e9:5d:aa:ce: 95:33:14:ab:4e:56:8a:14:a5:27:c0:77:84:f8:dd: 24:b0:d2:7b:7b:61:2e:af:79:80:33:50:16:e1:e9: 40:a8:5c:0c:92:09:b4:e9:14:46:dd:69:8e:ec:ec: 7b:85:75:fd:47:8b:ae:58:e6:0e:14:79:71:2c:4c: bf:f5:97:6f:d3:29:88:9d:31:a7:e1:1c:26:c5:00: 06:bd:46:9e:5f:58:6f:a9:3b:63:c2:e4:78:2b:b2: a9:b3:c8:7b:43:d9:a9:d8:7e:c4:88:d4:79:b8:c3: 7b:08:07:4c:c7:34:df:7b:c4:d8:3c:a8:db:26:10: 83:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C9:CD:BF:26:57:C3:E9:B7:1A:EB:79:48:F9:F3:44:C4:07:10:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f65257f-b470-457c-ae60-9f9105a2a833/2727f34b-731f-334e-8ed7-eb3e33f6a197.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f65257f-b470-457c-ae60-9f9105a2a833/7f65257f-b470-457c-ae60-9f9105a2a833.crl X509v3 Authority Key Identifier: keyid:9C:CF:F6:32:F8:BA:D8:53:2A:2F:4E:AA:2E:7C:58:C2:4D:0F:2A:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f65257f-b470-457c-ae60-9f9105a2a833.cer sbgp-ipAddrBlock: critical IPv4: 192.75.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:80:af:09:5b:d5:20:f0:9d:dd:fe:5f:1b:09:88:86:72:7e: 39:47:c7:f7:45:97:c7:68:f3:b7:93:ff:13:d7:8e:2a:9f:3c: ab:82:b1:ba:a9:af:93:d7:42:05:ba:11:da:52:5e:b2:6b:11: ce:8b:7d:6d:cc:0b:2f:af:30:07:c5:a3:65:2d:1c:0b:1c:9a: 79:54:e9:3c:b5:cc:ea:9c:07:36:c0:03:5c:76:5c:2c:8d:8b: 46:c4:a9:93:de:cd:ed:a9:12:04:7d:da:7b:3c:a8:82:6d:e6: 42:4e:c7:5a:38:d6:f5:05:4e:e2:e6:92:c8:7d:fe:2a:e0:cc: 1c:f3:f2:99:d5:28:d1:51:ea:e5:4b:77:49:f2:0f:31:a3:1e: 60:d8:6a:9e:cd:a4:e5:37:27:e5:1f:a8:38:47:89:6d:a6:1d: 7d:e9:19:e0:67:ad:ba:0a:f2:c7:60:5e:b7:da:c6:6c:ad:c7: 75:e2:e4:17:80:ce:b6:c9:95:8b:37:20:f4:31:23:77:7e:22: b8:03:a9:37:85:7f:3f:6c:9b:f7:18:1a:58:5e:41:51:93:9e: f3:56:a1:b3:ce:87:d2:26:01:43:0c:0e:14:92:db:8c:f1:05: 6b:65:5b:3d:b9:b4:26:20:2a:db:66:d4:b9:ce:24:46:a2:4f: f4:c5:46:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7eu7FsAi7pPl8twAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2NTI1N2YtYjQ3MC00NTdjLWFlNjAtOWY5MTA1YTJh ODMzMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NzdkOTZiMTgtMzg3Yy00YTI3LWIwYTEtZGU0MjVjMzAwZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCtgFenPBtW1qB4ucpafPKmWsRYmfAsaAXqT RAQQHeoL0Ss55lfsyLmePhrb0oSm4pwnZX4T14KceVN30DztJ+jMmZZ6cQIFTe29 hGnfiWj6PKFgErYTZQAafhjkcDQaqZF/NzINI8sqVK0RC3b4BiwBtsA2SOWZEVt4 NXYjRnyrn+ldqs6VMxSrTlaKFKUnwHeE+N0ksNJ7e2Eur3mAM1AW4elAqFwMkgm0 6RRG3WmO7Ox7hXX9R4uuWOYOFHlxLEy/9Zdv0ymInTGn4RwmxQAGvUaeX1hvqTtj wuR4K7Kps8h7Q9mp2H7EiNR5uMN7CAdMxzTfe8TYPKjbJhCDtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDJzb8mV8PptxrreUj580TEBxANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ZjY1 MjU3Zi1iNDcwLTQ1N2MtYWU2MC05ZjkxMDVhMmE4MzMvMjcyN2YzNGItNzMxZi0z MzRlLThlZDctZWIzZTMzZjZhMTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2Y2NTI1N2YtYjQ3MC00NTdjLWFl NjAtOWY5MTA1YTJhODMzLzdmNjUyNTdmLWI0NzAtNDU3Yy1hZTYwLTlmOTEwNWEy YTgzMy5jcmwwHwYDVR0jBBgwFoAUnM/2Mvi62FMqL06qLnxYwk0PKoIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83ZjY1MjU3Zi1iNDcwLTQ1N2MtYWU2MC05Zjkx MDVhMmE4MzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEtfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuArwlb1SDwnd3+XxsJiIZyfjlHx/dFl8do87eT/xPXjiqfPKuCsbqp r5PXQgW6EdpSXrJrEc6LfW3MCy+vMAfFo2UtHAscmnlU6Ty1zOqcBzbAA1x2XCyN i0bEqZPeze2pEgR92ns8qIJt5kJOx1o41vUFTuLmksh9/irgzBzz8pnVKNFR6uVL d0nyDzGjHmDYap7NpOU3J+UfqDhHiW2mHX3pGeBnrboK8sdgXrfaxmytx3Xi5BeA zrbJlYs3IPQxI3d+IrgDqTeFfz9sm/cYGlheQVGTnvNWobPOh9ImAUMMDhSS24zx BWtlWz25tCYgKttm1LnOJEaiT/TFRvQ= -----END CERTIFICATE-----Generated at Thu Jul 3 14:55:07 2025 by rpki-client