$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/da31a2ca-e36b-3c25-9cd9-9338c211a22a.roa File: da31a2ca-e36b-3c25-9cd9-9338c211a22a.roa (raw, json) Hash identifier: 4qZFV8DLscApsAtp/bYGPQbcZYLlvj3C3jhFGMGgafM= Subject key identifier: 2D:9F:15:D6:82:12:DA:00:E8:66:77:61:FC:97:48:52:CC:3F:98:7F Certificate issuer: /CN=c241be4c-9ded-4e11-a20d-5f2444f46b6a Certificate serial: 010D0C9F4328584B05E140A36F2C0F3C044D1B0C Authority key identifier: 27:8E:22:73:6C:9C:2F:55:11:74:B7:4D:DA:25:C1:B8:D2:D3:4E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/da31a2ca-e36b-3c25-9cd9-9338c211a22a.roa Signing time: Sat 30 Aug 2025 01:00:34 +0000 ROA not before: Sat 30 Aug 2025 01:00:34 +0000 ROA not after: Fri 28 Nov 2025 02:00:34 +0000 asID: 60117 IP address blocks: 192.119.167.0/24 maxlen: 24 192.119.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c241be4c-9ded-4e11-a20d-5f2444f46b6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c241be4c-9ded-4e11-a20d-5f2444f46b6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:e1:40:a3:6f:2c:0f:3c:04:4d:1b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c241be4c-9ded-4e11-a20d-5f2444f46b6a Validity Not Before: Aug 30 01:00:34 2025 GMT Not After : Nov 28 02:00:34 2025 GMT Subject: CN=f870e201-c2ca-48d0-8b2b-d5c359d95cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fe:5d:c0:73:65:d2:8b:f7:49:9e:37:cd:81: ef:50:41:0d:a3:c9:54:29:8f:11:4a:62:95:33:7f: 7d:78:61:00:ec:69:5e:09:11:ed:bb:49:ec:cb:82: e3:be:55:31:fa:79:c6:d6:7f:81:69:2c:8c:94:89: c2:84:5c:84:27:a3:55:92:ba:54:e5:82:8f:63:b2: 96:ca:fb:a1:79:20:12:81:3b:ef:e6:13:a3:48:ce: 4c:89:88:f0:32:29:9b:93:86:9b:5b:00:59:28:09: ea:d0:8c:b6:87:66:30:56:fb:90:45:df:96:19:1b: cc:49:8e:2e:df:88:90:a6:2e:60:83:d5:72:f1:aa: a6:81:e8:b1:27:18:3a:8d:47:ba:2c:7f:47:4c:5b: da:ea:66:44:23:56:e6:e0:99:43:24:51:a7:00:9c: 07:49:72:a5:5d:82:65:8d:c4:01:ad:61:c3:7a:37: 05:3f:9b:68:89:60:e6:d8:0b:f7:75:9a:28:26:56: 35:0f:8b:27:c5:3a:28:61:ec:89:fe:a9:b6:09:23: 22:93:0f:8a:49:37:a8:af:e0:e1:4e:a7:fe:75:2c: e3:e9:a6:1c:85:52:21:80:6b:80:35:80:af:9c:4f: 77:45:7a:78:b6:f9:d1:9d:91:45:4b:b2:e9:9e:06: 0f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9F:15:D6:82:12:DA:00:E8:66:77:61:FC:97:48:52:CC:3F:98:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/da31a2ca-e36b-3c25-9cd9-9338c211a22a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c241be4c-9ded-4e11-a20d-5f2444f46b6a.crl X509v3 Authority Key Identifier: keyid:27:8E:22:73:6C:9C:2F:55:11:74:B7:4D:DA:25:C1:B8:D2:D3:4E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer sbgp-ipAddrBlock: critical IPv4: 192.119.167.0/24 192.119.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:ed:66:68:9d:a1:6a:b8:1c:0d:6c:7b:82:6d:7d:a7:db:92: 48:74:b2:fb:ed:5a:3d:54:66:75:97:83:aa:a4:d7:38:76:9e: de:96:6c:81:e1:a8:ee:96:9d:ab:5e:c6:ab:55:7b:15:6f:ed: bc:5e:60:67:a6:d8:47:fd:9f:69:4e:84:2f:81:81:6d:f6:b2: 62:a1:2b:75:ef:ab:29:8c:d7:7a:fd:7f:fa:1e:5f:7d:b5:3e: 30:64:e5:57:e5:fb:eb:24:64:eb:48:69:0e:a4:a1:4e:6d:75: 0f:6a:e5:29:f7:0f:d2:5d:ae:53:4d:30:dd:2e:26:97:6e:83: e6:95:54:fa:cc:72:30:8f:b1:08:12:40:a6:2d:c1:a8:82:a4: eb:13:eb:c9:f3:f7:32:55:17:e8:99:13:1e:78:9d:dc:85:74: 8f:11:67:d6:97:fc:f0:53:18:0f:0a:26:61:09:6f:20:3f:e6: 56:98:82:88:85:84:89:b0:23:7e:80:97:52:84:39:66:78:c8: ad:e5:dd:8d:4e:77:f3:68:ee:0c:6a:79:69:8e:e4:56:63:78: 14:9b:db:0c:fd:f4:c8:a6:ac:46:39:8b:ca:7e:40:46:82:ae: 92:cf:e6:4b:ed:a8:e7:df:51:b0:87:bd:9f:ae:bc:69:10:73: b7:37:a0:1a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsF4UCjbywPPARNGwwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzI0MWJlNGMtOWRlZC00ZTExLWEyMGQtNWYyNDQ0ZjQ2 YjZhMB4XDTI1MDgzMDAxMDAzNFoXDTI1MTEyODAyMDAzNFowLzEtMCsGA1UEAxMk Zjg3MGUyMDEtYzJjYS00OGQwLThiMmItZDVjMzU5ZDk1Y2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv5dwHNl0ov3SZ43zYHvUEENo8lUKY8RSmKV M399eGEA7GleCRHtu0nsy4LjvlUx+nnG1n+BaSyMlInChFyEJ6NVkrpU5YKPY7KW yvuheSASgTvv5hOjSM5MiYjwMimbk4abWwBZKAnq0Iy2h2YwVvuQRd+WGRvMSY4u 34iQpi5gg9Vy8aqmgeixJxg6jUe6LH9HTFva6mZEI1bm4JlDJFGnAJwHSXKlXYJl jcQBrWHDejcFP5toiWDm2Av3dZooJlY1D4snxTooYeyJ/qm2CSMikw+KSTeor+Dh Tqf+dSzj6aYchVIhgGuANYCvnE93RXp4tvnRnZFFS7LpngYPIwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFC2fFdaCEtoA6GZ3YfyXSFLMP5h/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMjQx YmU0Yy05ZGVkLTRlMTEtYTIwZC01ZjI0NDRmNDZiNmEvZGEzMWEyY2EtZTM2Yi0z YzI1LTljZDktOTMzOGMyMTFhMjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzI0MWJlNGMtOWRlZC00ZTExLWEy MGQtNWYyNDQ0ZjQ2YjZhL2MyNDFiZTRjLTlkZWQtNGUxMS1hMjBkLTVmMjQ0NGY0 NmI2YS5jcmwwHwYDVR0jBBgwFoAUJ44ic2ycL1URdLdN2iXBuNLTTu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMjQxYmU0Yy05ZGVkLTRlMTEtYTIwZC01ZjI0 NDRmNDZiNmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHenAwQA wHetMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKDtZmidoWq4HA1se4Jtfafbkkh0svvtWj1UZnWXg6qk1zh2 nt6WbIHhqO6WnatexqtVexVv7bxeYGem2Ef9n2lOhC+BgW32smKhK3XvqymM13r9 f/oeX321PjBk5Vfl++skZOtIaQ6koU5tdQ9q5Sn3D9JdrlNNMN0uJpdug+aVVPrM cjCPsQgSQKYtwaiCpOsT68nz9zJVF+iZEx54ndyFdI8RZ9aX/PBTGA8KJmEJbyA/ 5laYgoiFhImwI36Al1KEOWZ4yK3l3Y1Od/No7gxqeWmO5FZjeBSb2wz99MimrEY5 i8p+QEaCrpLP5kvtqOffUbCHvZ+uvGkQc7c3oBo= -----END CERTIFICATE-----Generated at Sun Sep 7 14:38:39 2025 by rpki-client