$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/693b043c-7dd0-3e66-9b30-96dc0a32abd1.roa File: 693b043c-7dd0-3e66-9b30-96dc0a32abd1.roa (raw, json) Hash identifier: BOFdVs8CKVl/kH5zSAzlF4tUH9yBWg7lKUhg8ilnxsk= Subject key identifier: C7:22:FE:F2:60:80:28:E5:63:78:81:FD:1F:9B:9C:31:3D:E3:2C:90 Certificate issuer: /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Certificate serial: 010D0C9F4328584A0D6A8A85D5E87EE418607880 Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/693b043c-7dd0-3e66-9b30-96dc0a32abd1.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 11736 IP address blocks: 192.55.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:8a:85:d5:e8:7e:e4:18:60:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=d96ba6f0-fbad-4e6b-a937-a9fa62220113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:4c:84:26:4c:6d:70:ba:95:46:31:66:a5: f2:be:6f:f0:4a:6d:fc:86:a2:f0:73:d9:91:65:b0: bf:89:fe:53:11:b8:62:d3:92:eb:66:2f:60:2c:22: a6:69:06:49:f3:db:ed:a8:0a:f4:91:84:0c:8c:ac: e1:61:56:e7:d9:c6:1f:10:5d:64:e2:3a:55:90:f8: 2c:00:ff:09:c1:71:84:61:6e:a1:ec:b9:bf:2b:72: 26:33:db:fa:4a:40:9e:a0:5b:29:a3:66:bd:c5:cd: 14:b3:e7:68:01:8a:60:a8:15:7c:fe:cd:e1:f1:67: 91:6f:91:33:60:a9:a2:45:7e:89:82:6e:17:26:37: ff:35:e2:d0:7f:fc:32:6d:c1:78:2f:39:6d:36:b9: 39:1c:fe:52:03:47:3f:0f:68:b3:bd:29:1d:f6:7e: 49:50:4c:e2:0e:09:e0:87:ea:e0:88:f9:de:34:29: 3e:f5:7d:81:98:db:16:35:a7:1f:da:9f:2e:dc:47: 36:8f:77:8f:1d:01:bb:3e:b6:45:2b:a1:1b:2b:b4: bf:67:cb:c7:07:64:5d:a8:25:2d:8b:d3:91:ab:e4: a2:9b:a9:8f:93:c3:33:37:c8:9c:7c:a3:26:e2:11: dc:d6:a2:6b:f6:78:45:6e:a3:3c:a7:4c:b1:cb:1b: c0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:22:FE:F2:60:80:28:E5:63:78:81:FD:1F:9B:9C:31:3D:E3:2C:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/693b043c-7dd0-3e66-9b30-96dc0a32abd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl X509v3 Authority Key Identifier: keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer sbgp-ipAddrBlock: critical IPv4: 192.55.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:6f:ec:04:5d:a0:1d:6e:ae:73:c1:09:20:3e:7f:5b:94:61: 95:e4:0e:d3:d3:47:10:96:3b:b3:31:71:c9:3f:d2:e9:59:d8: f8:0a:d5:98:b3:0e:e2:2e:5c:34:f3:f0:1f:d9:8f:d9:6f:36: f5:3f:aa:a5:85:15:f8:08:c6:f3:7b:39:95:d7:0a:61:76:10: 39:a7:28:13:da:c7:56:53:c8:c6:f6:1b:83:fa:1a:0a:05:48: f2:99:16:ce:95:d3:16:bd:44:a7:1a:ff:dd:27:03:e3:ff:55: 3e:9d:e9:c6:82:db:c8:39:11:35:2b:3f:2e:e1:41:e0:87:7a: 80:9f:f5:c7:02:1c:ca:64:34:1e:fb:70:99:ab:73:60:07:9c: 0c:24:e4:da:e3:bd:46:f8:84:de:19:31:c3:6c:a3:76:85:be: b2:69:48:21:67:a6:58:eb:1d:bb:82:16:54:4d:6b:d5:8c:b1: 8f:24:0b:3e:c7:e6:d3:3f:15:16:e4:49:3f:59:04:46:31:24: b5:07:c1:e1:ba:fa:9f:0d:a6:32:f5:cd:ca:1e:63:65:be:9c: 13:5e:2b:8c:1f:35:0a:9c:6c:78:46:e2:d1:33:9a:c4:18:fe: 49:4b:f0:81:e7:a3:45:9e:71:0d:4b:33:e5:f6:80:f4:81:ad: a9:0e:5b:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNaoqF1eh+5BhgeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5MDBlNGUtNWYwYS00YjE0LTk4YzAtNjY0N2JmZjVl NjRlMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk ZDk2YmE2ZjAtZmJhZC00ZTZiLWE5MzctYTlmYTYyMjIwMTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxStMhCZMbXC6lUYxZqXyvm/wSm38hqLwc9mR ZbC/if5TEbhi05LrZi9gLCKmaQZJ89vtqAr0kYQMjKzhYVbn2cYfEF1k4jpVkPgs AP8JwXGEYW6h7Lm/K3ImM9v6SkCeoFspo2a9xc0Us+doAYpgqBV8/s3h8WeRb5Ez YKmiRX6Jgm4XJjf/NeLQf/wybcF4LzltNrk5HP5SA0c/D2izvSkd9n5JUEziDgng h+rgiPneNCk+9X2BmNsWNacf2p8u3Ec2j3ePHQG7PrZFK6EbK7S/Z8vHB2RdqCUt i9ORq+Sim6mPk8MzN8icfKMm4hHc1qJr9nhFbqM8p0yxyxvAowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMci/vJggCjlY3iB/R+bnDE94yyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Zjkw MGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZmNWU2NGUvNjkzYjA0M2MtN2RkMC0z ZTY2LTliMzAtOTZkYzBhMzJhYmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y5MDBlNGUtNWYwYS00YjE0LTk4 YzAtNjY0N2JmZjVlNjRlLzdmOTAwZTRlLTVmMGEtNGIxNC05OGMwLTY2NDdiZmY1 ZTY0ZS5jcmwwHwYDVR0jBBgwFoAU8+WK0rjvh9c+gIgy/nujowv1xKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3 YmZmNWU2NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDfkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlv7ARdoB1urnPBCSA+f1uUYZXkDtPTRxCWO7Mxcck/0ulZ2PgK1Ziz DuIuXDTz8B/Zj9lvNvU/qqWFFfgIxvN7OZXXCmF2EDmnKBPax1ZTyMb2G4P6GgoF SPKZFs6V0xa9RKca/90nA+P/VT6d6caC28g5ETUrPy7hQeCHeoCf9ccCHMpkNB77 cJmrc2AHnAwk5NrjvUb4hN4ZMcNso3aFvrJpSCFnpljrHbuCFlRNa9WMsY8kCz7H 5tM/FRbkST9ZBEYxJLUHweG6+p8NpjL1zcoeY2W+nBNeK4wfNQqcbHhG4tEzmsQY /klL8IHno0WecQ1LM+X2gPSBrakOW3I= -----END CERTIFICATE-----Generated at Sat Jun 7 19:41:02 2025 by rpki-client