$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa File: aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa (raw, json) Hash identifier: u1PqNwznZkvM/+vNDZi6pIH2L4Z2RyiOz8AFqDkiijs= Subject key identifier: 41:C4:E4:F6:C9:F7:58:A3:75:EA:89:DE:98:09:24:13:F1:C4:4D:50 Certificate issuer: /CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Certificate serial: 010D0C9F4328584A5CFB2B63E96D497D7B679ED0 Authority key identifier: 7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 399103 IP address blocks: 192.240.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:2b:63:e9:6d:49:7d:7b:67:9e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=b2d69d2b-05ad-4a80-903b-5b33f6ae3ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a3:d8:00:81:bd:43:9e:9b:02:47:77:02:d5: 95:2a:54:a8:ef:c9:db:4e:65:81:b3:19:66:50:f4: 30:b4:89:0d:91:30:09:38:d7:1c:41:44:ee:ba:32: d8:fa:d6:1a:58:70:1c:00:8b:d9:97:fe:09:fa:ce: 91:9e:cd:7d:ad:b9:cf:8c:66:b1:72:be:8e:e0:89: 41:6f:2e:14:4a:a5:dd:eb:a2:4d:1f:7e:6a:d2:51: 26:35:9e:fc:40:e7:9f:6d:fa:46:68:48:38:55:4d: e7:b0:62:87:ca:94:d3:7b:2b:1d:ab:c8:5e:2d:5d: dc:aa:8e:4c:93:5a:6c:f7:24:28:ae:1b:e3:61:8d: cc:89:d3:80:34:80:24:48:c4:2b:c6:fa:da:ff:a8: 17:6f:a4:4d:8a:75:80:c9:a7:6f:48:95:b0:98:1e: 76:f9:af:71:5a:1a:da:30:f3:81:46:31:b6:1c:2d: 24:de:c4:2e:ff:04:59:55:2b:a8:6a:6b:43:d8:14: d1:64:88:48:07:ff:7d:13:12:b0:39:4f:7c:62:c1: 5e:14:ce:75:f7:03:ef:3f:47:92:10:6f:08:71:ae: 63:9b:54:b6:57:af:e5:d7:d7:54:cc:46:64:5f:1f: fd:66:49:d9:f7:08:26:d2:f4:47:cf:e2:3e:04:80: 78:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C4:E4:F6:C9:F7:58:A3:75:EA:89:DE:98:09:24:13:F1:C4:4D:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl X509v3 Authority Key Identifier: keyid:7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer sbgp-ipAddrBlock: critical IPv4: 192.240.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:a9:55:d0:14:f1:f2:dd:30:29:01:3f:5d:bd:ed:ec:32:15: 9a:d7:13:e2:ed:af:41:a9:0d:86:09:6e:b0:2a:10:e7:09:ce: 69:80:23:c4:ba:0c:f6:ba:75:b7:d3:cf:fa:25:29:41:e8:ad: 45:fa:9b:4a:b9:f2:85:97:61:70:6c:9c:45:67:76:e8:71:30: 11:50:19:83:85:d2:e0:ab:09:b4:75:95:67:6c:c6:98:70:c8: 56:23:5f:01:a2:90:97:fe:1a:d4:65:2d:47:2d:62:17:5b:e0: ab:ed:d0:23:8e:be:c0:1c:bd:5a:5e:ba:ab:78:ef:68:81:9e: 4f:40:06:e3:9f:3f:70:1b:0b:8f:c5:70:22:2b:b2:0e:57:de: 42:0e:46:15:ad:b6:15:0f:18:ef:37:f0:8a:b3:ca:61:e6:9d: 76:7f:93:c8:21:68:7f:ee:4b:44:c6:4c:f8:ac:83:b2:69:8a: ff:d7:7b:0c:63:3c:e0:5c:56:7f:4c:57:7c:e4:cf:db:7b:5e: 5a:9b:d5:84:5e:99:2a:45:78:17:33:65:b1:1c:18:d9:fa:74: 59:38:fb:0f:7c:62:4b:a9:bc:45:4a:18:c6:20:dd:5e:6b:87: 4f:a2:69:3b:3d:34:f2:4e:a7:35:00:9b:3f:5a:ca:7f:a1:74: 79:b0:37:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+ytj6W1JfXtnntAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwNmQxZjktMGQwNC00ODJmLWE2NjUtOGMyNzAyNjBl MmMxMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YjJkNjlkMmItMDVhZC00YTgwLTkwM2ItNWIzM2Y2YWUzZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaPYAIG9Q56bAkd3AtWVKlSo78nbTmWBsxlm UPQwtIkNkTAJONccQUTuujLY+tYaWHAcAIvZl/4J+s6Rns19rbnPjGaxcr6O4IlB by4USqXd66JNH35q0lEmNZ78QOefbfpGaEg4VU3nsGKHypTTeysdq8heLV3cqo5M k1ps9yQorhvjYY3MidOANIAkSMQrxvra/6gXb6RNinWAyadvSJWwmB52+a9xWhra MPOBRjG2HC0k3sQu/wRZVSuoamtD2BTRZIhIB/99ExKwOU98YsFeFM519wPvP0eS EG8Ica5jm1S2V6/l19dUzEZkXx/9ZknZ9wgm0vRHz+I+BIB4LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHE5PbJ91ijdeqJ3pgJJBPxxE1QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YTA2 ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3MDI2MGUyYzEvYWE1ZGJhZjctOWYzNC0z YTVhLWFiZmItMzQ0NzExYzY2ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGEwNmQxZjktMGQwNC00ODJmLWE2 NjUtOGMyNzAyNjBlMmMxLzRhMDZkMWY5LTBkMDQtNDgyZi1hNjY1LThjMjcwMjYw ZTJjMS5jcmwwHwYDVR0jBBgwFoAUe0QsNGqg9PARtSeTwzdFa2qmQ+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YTA2ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3 MDI2MGUyYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPAvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKpVdAU8fLdMCkBP1297ewyFZrXE+Ltr0GpDYYJbrAqEOcJzmmAI8S6 DPa6dbfTz/olKUHorUX6m0q58oWXYXBsnEVnduhxMBFQGYOF0uCrCbR1lWdsxphw yFYjXwGikJf+GtRlLUctYhdb4Kvt0COOvsAcvVpeuqt472iBnk9ABuOfP3AbC4/F cCIrsg5X3kIORhWtthUPGO838IqzymHmnXZ/k8ghaH/uS0TGTPisg7Jpiv/Xewxj POBcVn9MV3zkz9t7Xlqb1YRemSpFeBczZbEcGNn6dFk4+w98YkupvEVKGMYg3V5r h0+iaTs9NPJOpzUAmz9ayn+hdHmwNz4= -----END CERTIFICATE-----Generated at Thu Jul 3 13:36:30 2025 by rpki-client