$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b468f5d9-7a72-39a4-a972-97bfc3b63415.roa File: b468f5d9-7a72-39a4-a972-97bfc3b63415.roa (raw, json) Hash identifier: U4so7zB5XcQod2lx+KFEUIGaARfTMZISxe3AJPQlGpk= Subject key identifier: 56:C7:0C:E3:90:BA:FA:54:44:09:DC:15:DF:F9:05:66:5C:87:9B:10 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584B153C196D8AB570272C1BE640 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b468f5d9-7a72-39a4-a972-97bfc3b63415.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 21949 IP address blocks: 192.69.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:19:6d:8a:b5:70:27:2c:1b:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=1a69b7c0-0952-4d02-b54b-be9e7991e5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:29:04:47:0f:bf:e0:a1:4a:73:0f:81:b3:d7: ec:1e:3f:0d:9e:85:68:4c:be:f4:39:d8:19:c9:6e: 93:38:dc:74:62:ba:55:7c:56:c9:66:f4:36:3e:de: 2b:f2:1e:b6:e5:d4:99:8d:1d:84:ab:f3:e4:26:57: aa:e5:84:e7:27:06:f1:a9:9e:af:45:5e:f3:44:1a: 77:ca:05:cc:8b:a4:b1:02:86:e7:76:df:ca:08:65: 94:0f:a0:c6:41:fd:9d:07:f8:3d:6f:cd:c3:03:20: f1:9f:51:12:06:5a:35:d5:f5:43:ca:36:08:c2:9e: 32:0e:64:a1:fd:a7:d5:df:9c:76:ba:35:e9:d9:e8: 56:fd:a5:ae:99:1c:73:a0:74:bb:29:ab:b9:0b:ff: 1a:bf:4a:2e:6a:50:09:4a:b1:4b:89:5a:12:36:46: c9:29:37:28:f4:5e:b9:02:6f:e0:86:be:fd:19:f1: f2:06:d4:eb:ab:fe:b9:bc:a5:1f:89:8a:19:97:fa: 34:7c:98:b1:1a:bd:38:d2:ec:63:48:1d:89:f0:6f: bd:54:c7:ec:fc:6a:af:88:3b:e4:7c:51:b5:32:e5: ea:14:9e:93:b0:3d:b0:83:94:31:43:22:fe:e0:64: e7:2c:d5:27:6c:b5:09:12:31:14:90:09:85:f1:c7: 04:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C7:0C:E3:90:BA:FA:54:44:09:DC:15:DF:F9:05:66:5C:87:9B:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b468f5d9-7a72-39a4-a972-97bfc3b63415.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 192.69.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:6b:fa:39:1f:f1:00:ab:02:8e:b0:18:ee:22:ba:be:51:8f: 8e:c0:f5:d8:1f:dd:ad:0e:f3:a0:6e:8d:2a:9d:ff:f5:5b:34: 8f:7d:bd:d6:30:7c:fd:60:97:45:86:74:ef:7e:2d:d0:2e:65: 3f:6f:17:2a:d4:63:00:2d:32:c9:06:82:db:8c:e2:b1:91:5a: 76:9c:ed:a4:fc:93:40:1b:34:a9:94:8d:7a:53:6e:09:a7:c4: e8:a5:32:bc:00:44:9b:12:96:3a:74:08:7a:8b:74:b1:46:ed: 38:1b:19:46:bb:92:f6:3a:8e:40:15:76:80:9f:61:e7:9c:04: 47:e1:89:65:5e:ad:3b:f8:b7:eb:09:de:2a:54:7d:6c:cd:5e: 4f:f7:48:43:ed:15:3c:23:d0:ce:0f:8a:76:cb:18:06:88:41: 76:f3:79:f2:f9:a0:06:10:b9:9a:76:58:2f:23:5f:a4:da:c9: ce:2e:57:80:f7:81:ef:17:ce:5f:8f:6a:2f:ca:21:1a:45:0e: 18:9f:7e:ac:80:6d:84:92:93:ba:68:1c:59:69:29:a4:27:69: 04:a1:58:60:be:7e:6b:84:0c:24:67:73:ed:30:48:ce:a7:a3: 74:39:03:43:3b:dc:43:70:93:43:d4:9f:32:a0:70:e1:fe:87: 3e:79:7e:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBltirVwJywb5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk MWE2OWI3YzAtMDk1Mi00ZDAyLWI1NGItYmU5ZTc5OTFlNWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCkERw+/4KFKcw+Bs9fsHj8NnoVoTL70OdgZ yW6TONx0YrpVfFbJZvQ2Pt4r8h625dSZjR2Eq/PkJleq5YTnJwbxqZ6vRV7zRBp3 ygXMi6SxAobndt/KCGWUD6DGQf2dB/g9b83DAyDxn1ESBlo11fVDyjYIwp4yDmSh /afV35x2ujXp2ehW/aWumRxzoHS7Kau5C/8av0oualAJSrFLiVoSNkbJKTco9F65 Am/ghr79GfHyBtTrq/65vKUfiYoZl/o0fJixGr040uxjSB2J8G+9VMfs/GqviDvk fFG1MuXqFJ6TsD2wg5QxQyL+4GTnLNUnbLUJEjEUkAmF8ccEcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbHDOOQuvpURAncFd/5BWZch5sQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYjQ2OGY1ZDktN2E3Mi0z OWE0LWE5NzItOTdiZmMzYjYzNDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEUBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1r+jkf8QCrAo6wGO4iur5Rj47A9dgf3a0O86BujSqd//VbNI99vdYw fP1gl0WGdO9+LdAuZT9vFyrUYwAtMskGgtuM4rGRWnac7aT8k0AbNKmUjXpTbgmn xOilMrwARJsSljp0CHqLdLFG7TgbGUa7kvY6jkAVdoCfYeecBEfhiWVerTv4t+sJ 3ipUfWzNXk/3SEPtFTwj0M4PinbLGAaIQXbzefL5oAYQuZp2WC8jX6Tayc4uV4D3 ge8Xzl+Pai/KIRpFDhiffqyAbYSSk7poHFlpKaQnaQShWGC+fmuEDCRnc+0wSM6n o3Q5A0M73ENwk0PUnzKgcOH+hz55fik= -----END CERTIFICATE-----Generated at Mon Sep 15 17:10:53 2025 by rpki-client