$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d01de867-d842-3f15-838a-d66341794f48.roa File: d01de867-d842-3f15-838a-d66341794f48.roa (raw, json) Hash identifier: I8vuNVQhE1l12S9Obi90zxhXIxSo4HjvkPBDoLVQrGo= Subject key identifier: 95:9D:43:29:0F:39:C9:5A:E3:9C:45:2E:4F:F3:31:AF:A2:5B:60:F8 Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584A71EB2000E0FC2DF036F74600 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d01de867-d842-3f15-838a-d66341794f48.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 16509 IP address blocks: 192.28.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:20:00:e0:fc:2d:f0:36:f7:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=9fb410c3-820e-40f8-8404-6c3707ecc2a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:51:a3:28:63:95:d2:97:61:8a:04:4c:3e:7d: ea:70:25:32:c8:8b:db:e1:09:9b:dd:23:e3:c0:cc: 0c:2f:df:84:4e:2f:7f:c8:ab:8e:db:a3:57:33:b0: c1:cb:99:b1:f5:67:0b:02:34:47:67:e1:53:d4:70: 91:66:6e:29:8a:05:86:91:53:92:e1:87:25:1f:c4: 4f:44:97:7e:bc:32:65:e2:8c:d3:52:46:85:20:58: 27:5b:7e:95:26:82:14:6c:eb:86:de:f5:db:c7:17: f4:92:4e:2b:4c:5e:13:68:83:6d:58:9b:f6:77:8f: 9c:07:3b:8d:1d:f9:10:74:6f:81:07:db:9a:59:0c: f6:25:3c:15:c8:d5:7b:85:09:41:76:cd:e7:94:c8: 93:13:4c:cc:07:74:77:14:bc:aa:7f:08:f1:6d:33: 4a:a8:22:5e:8b:f2:6b:0f:05:15:20:8c:0d:15:d7: f7:a1:58:63:9d:e4:9e:82:94:aa:bc:83:33:74:05: 3a:52:07:4e:0d:7e:71:e8:57:5d:fe:af:ca:3a:9d: 1e:af:4a:7b:5e:5a:2a:13:ce:3b:f1:c3:8a:b9:92: cd:15:17:33:83:67:eb:69:60:9e:7b:04:b2:08:10: d5:37:37:1b:3d:7e:79:3d:c6:07:64:4d:89:ab:a7: 81:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9D:43:29:0F:39:C9:5A:E3:9C:45:2E:4F:F3:31:AF:A2:5B:60:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d01de867-d842-3f15-838a-d66341794f48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:cf:54:4f:2d:51:89:d8:f9:cd:94:40:3b:a0:53:97:b4:12: ed:31:dd:93:e7:81:db:cb:d4:e5:a2:c4:02:5c:29:0f:52:6b: c6:a3:83:9d:cb:2b:5e:27:45:1f:35:ce:9d:81:0a:c4:d0:b4: 3d:1a:cc:08:b9:9e:c8:52:74:39:0b:41:55:1c:53:95:bc:12: 3f:b6:bd:a1:4f:83:b3:b3:85:70:71:70:ea:4f:ac:75:84:d5: dd:35:66:94:1b:18:a2:a3:2f:9c:af:eb:9f:56:43:90:ab:4e: c1:ee:1e:c3:06:32:dc:12:d7:df:ce:b5:1c:15:36:3d:6c:32: b3:04:b1:46:ee:dd:59:71:8a:f1:38:f8:d5:98:64:4f:6d:15: 1c:eb:d9:86:a5:99:f8:f1:76:c0:e1:58:90:80:8f:d5:d5:77: 85:1e:40:b6:34:6b:b1:af:ba:38:49:4b:4a:46:6e:8a:86:7f: e8:0e:d5:13:58:1e:da:d5:e2:fc:2a:8b:56:d3:22:31:8a:ec: 07:a6:0d:37:81:23:cd:88:63:a2:f9:bc:c7:22:09:ab:8f:6b: 2b:43:73:5c:db:99:6f:d6:81:28:33:45:a3:5d:87:1d:60:f9: 94:9e:bf:22:be:0b:2d:5d:51:11:54:c2:b8:7f:90:92:38:b2: 56:53:7e:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx6yAA4Pwt8Db3RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk OWZiNDEwYzMtODIwZS00MGY4LTg0MDQtNmMzNzA3ZWNjMmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlGjKGOV0pdhigRMPn3qcCUyyIvb4Qmb3SPj wMwML9+ETi9/yKuO26NXM7DBy5mx9WcLAjRHZ+FT1HCRZm4pigWGkVOS4YclH8RP RJd+vDJl4ozTUkaFIFgnW36VJoIUbOuG3vXbxxf0kk4rTF4TaINtWJv2d4+cBzuN HfkQdG+BB9uaWQz2JTwVyNV7hQlBds3nlMiTE0zMB3R3FLyqfwjxbTNKqCJei/Jr DwUVIIwNFdf3oVhjneSegpSqvIMzdAU6UgdODX5x6Fdd/q/KOp0er0p7XloqE847 8cOKuZLNFRczg2fraWCeewSyCBDVNzcbPX55PcYHZE2Jq6eBwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWdQykPOcla45xFLk/zMa+iW2D4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvZDAxZGU4NjctZDg0Mi0z ZjE1LTgzOGEtZDY2MzQxNzk0ZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzPVE8tUYnY+c2UQDugU5e0Eu0x3ZPngdvL1OWixAJcKQ9Sa8ajg53L K14nRR81zp2BCsTQtD0azAi5nshSdDkLQVUcU5W8Ej+2vaFPg7OzhXBxcOpPrHWE 1d01ZpQbGKKjL5yv659WQ5CrTsHuHsMGMtwS19/OtRwVNj1sMrMEsUbu3VlxivE4 +NWYZE9tFRzr2YalmfjxdsDhWJCAj9XVd4UeQLY0a7GvujhJS0pGboqGf+gO1RNY HtrV4vwqi1bTIjGK7AemDTeBI82IY6L5vMciCauPaytDc1zbmW/WgSgzRaNdhx1g +ZSevyK+Cy1dURFUwrh/kJI4slZTfhA= -----END CERTIFICATE-----Generated at Wed Jul 9 22:34:12 2025 by rpki-client