$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98/9c616a97-4e5f-3c08-a99b-c273786acbca.roa File: 9c616a97-4e5f-3c08-a99b-c273786acbca.roa (raw, json) Hash identifier: k4CsLoBGXV5ttbhsUeyQOc8lI0R+DNrHGqpc135kWoM= Subject key identifier: D9:34:5F:FB:25:39:1F:F6:E6:AA:AB:C7:97:08:A9:7B:FA:7E:02:75 Certificate issuer: /CN=70e06abf-51dd-4cb1-873b-6ecca4436f98 Certificate serial: 010D0C9F4328584B0CDC0FED85331D2D88225EC0 Authority key identifier: AF:57:52:B8:3D:0F:2E:1D:F7:55:A3:9F:0D:65:8B:41:44:89:62:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98/9c616a97-4e5f-3c08-a99b-c273786acbca.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 8075 IP address blocks: 192.64.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98/70e06abf-51dd-4cb1-873b-6ecca4436f98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98/70e06abf-51dd-4cb1-873b-6ecca4436f98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:0f:ed:85:33:1d:2d:88:22:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e06abf-51dd-4cb1-873b-6ecca4436f98 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=96f4a2ae-50fd-41c4-867b-4391f456da56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1a:ec:7e:d4:20:aa:24:38:63:76:6f:94:df: f2:31:e2:07:2d:be:ab:80:81:64:56:69:b2:1b:88: 0f:77:b3:16:67:dc:02:0f:e2:c4:1c:12:b8:22:4f: 98:29:3b:92:83:5d:e5:fd:37:88:5e:9a:e3:dc:ee: 9d:a4:09:62:8d:a6:51:4b:b6:f7:b7:73:62:32:9b: c8:02:a8:b2:03:54:1c:ed:9f:97:46:3b:f6:f7:ab: 48:37:03:f4:3e:04:10:2d:8f:de:98:60:01:6f:80: e9:b7:e2:56:19:32:82:9e:fc:d2:4e:2b:68:52:0c: 3b:bc:03:80:11:88:fd:ad:26:8c:58:69:e2:fd:13: 51:6c:70:46:61:4e:75:ea:3a:7c:da:71:c3:48:9a: 6f:3b:a5:f2:79:44:d5:d3:df:fd:21:ad:23:6a:b1: 0c:52:87:a4:c0:29:6e:1c:a3:a4:59:a0:7a:a6:07: 43:50:b8:ca:01:12:ea:0e:c0:f5:98:ff:f4:11:1c: 29:f5:59:b5:28:c0:4e:d1:fa:d8:4a:cf:dd:26:00: 1b:b8:97:44:c7:eb:4d:bc:af:13:63:06:d7:8d:6f: 69:61:bf:9a:f5:e5:d5:69:da:6f:a6:86:00:d0:ec: a2:18:db:2e:58:4c:41:fa:a6:c5:93:a9:ba:57:d5: 6e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:34:5F:FB:25:39:1F:F6:E6:AA:AB:C7:97:08:A9:7B:FA:7E:02:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98/9c616a97-4e5f-3c08-a99b-c273786acbca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98/70e06abf-51dd-4cb1-873b-6ecca4436f98.crl X509v3 Authority Key Identifier: keyid:AF:57:52:B8:3D:0F:2E:1D:F7:55:A3:9F:0D:65:8B:41:44:89:62:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98.cer sbgp-ipAddrBlock: critical IPv4: 192.64.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:2f:c9:ab:59:03:b2:e0:30:f3:7a:e1:8f:a2:80:a8:0e:4f: b2:c6:9b:52:f5:be:d5:56:21:89:7a:6a:c8:64:47:60:58:b4: 41:ec:24:80:6b:9d:c3:74:97:2a:7c:ce:0e:95:3c:8b:9c:b9: 8f:9a:8e:19:db:c8:b6:e6:d7:4e:23:02:24:63:a6:46:bf:22: d4:3f:e8:19:2c:12:fd:a8:de:14:6a:71:58:38:9e:0a:21:11: fe:92:dc:6d:81:41:0e:f1:0e:5d:83:14:be:ba:39:d6:c2:4b: 77:48:12:f7:58:5a:60:f1:1c:93:a8:ae:6a:0a:81:4d:b7:9d: 87:47:42:ee:44:39:79:22:aa:14:c3:e9:0f:83:ca:26:e9:ac: 88:f8:b7:a0:c8:04:f3:7d:d0:0b:77:1d:b9:4b:73:ed:73:6c: b3:f3:98:74:d4:42:c5:04:13:47:de:20:64:44:55:0d:9d:e2: f1:c5:9f:a4:67:b3:e1:27:6d:72:17:e7:54:40:a1:4d:6f:e9: 8c:25:6d:c6:ea:68:17:dd:fc:64:59:41:56:70:40:c5:34:ad: d6:c8:7b:76:b2:ea:6a:01:43:10:a5:72:91:70:95:9b:4e:cf: 3b:5b:4c:5c:f8:1d:c9:e3:b7:48:7a:e4:60:d3:ac:92:9f:16: 7e:1a:3c:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3A/thTMdLYgiXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBlMDZhYmYtNTFkZC00Y2IxLTg3M2ItNmVjY2E0NDM2 Zjk4MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk OTZmNGEyYWUtNTBmZC00MWM0LTg2N2ItNDM5MWY0NTZkYTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBrsftQgqiQ4Y3ZvlN/yMeIHLb6rgIFkVmmy G4gPd7MWZ9wCD+LEHBK4Ik+YKTuSg13l/TeIXprj3O6dpAlijaZRS7b3t3NiMpvI AqiyA1Qc7Z+XRjv296tINwP0PgQQLY/emGABb4Dpt+JWGTKCnvzSTitoUgw7vAOA EYj9rSaMWGni/RNRbHBGYU516jp82nHDSJpvO6XyeUTV09/9Ia0jarEMUoekwClu HKOkWaB6pgdDULjKARLqDsD1mP/0ERwp9Vm1KMBO0frYSs/dJgAbuJdEx+tNvK8T YwbXjW9pYb+a9eXVadpvpoYA0OyiGNsuWExB+qbFk6m6V9VutQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNk0X/slOR/25qqrx5cIqXv6fgJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MGUw NmFiZi01MWRkLTRjYjEtODczYi02ZWNjYTQ0MzZmOTgvOWM2MTZhOTctNGU1Zi0z YzA4LWE5OWItYzI3Mzc4NmFjYmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzBlMDZhYmYtNTFkZC00Y2IxLTg3 M2ItNmVjY2E0NDM2Zjk4LzcwZTA2YWJmLTUxZGQtNGNiMS04NzNiLTZlY2NhNDQz NmY5OC5jcmwwHwYDVR0jBBgwFoAUr1dSuD0PLh33VaOfDWWLQUSJYmQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83MGUwNmFiZi01MWRkLTRjYjEtODczYi02ZWNj YTQ0MzZmOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEDJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0vyatZA7LgMPN64Y+igKgOT7LGm1L1vtVWIYl6ashkR2BYtEHsJIBr ncN0lyp8zg6VPIucuY+ajhnbyLbm104jAiRjpka/ItQ/6BksEv2o3hRqcVg4ngoh Ef6S3G2BQQ7xDl2DFL66OdbCS3dIEvdYWmDxHJOormoKgU23nYdHQu5EOXkiqhTD 6Q+DyibprIj4t6DIBPN90At3HblLc+1zbLPzmHTUQsUEE0feIGREVQ2d4vHFn6Rn s+EnbXIX51RAoU1v6YwlbcbqaBfd/GRZQVZwQMU0rdbIe3ay6moBQxClcpFwlZtO zztbTFz4Hcnjt0h65GDTrJKfFn4aPNA= -----END CERTIFICATE-----Generated at Wed Sep 3 23:51:56 2025 by rpki-client