$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b48555ab-431a-34fa-93ce-8f818290244b.roa File: b48555ab-431a-34fa-93ce-8f818290244b.roa (raw, json) Hash identifier: OysjP8OR/GJmI7m253/aTn9E/1fD+0z1v6CNlkTmGK4= Subject key identifier: 36:24:10:25:69:EE:86:94:31:7C:1A:BE:73:BC:2F:96:A7:55:51:9F Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584A94D4FCE7CDE0108DA7305980 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b48555ab-431a-34fa-93ce-8f818290244b.roa Signing time: Sun 20 Jul 2025 13:09:33 +0000 ROA not before: Sun 20 Jul 2025 13:09:33 +0000 ROA not after: Sat 18 Oct 2025 13:09:33 +0000 asID: 26548 IP address blocks: 192.34.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d4:fc:e7:cd:e0:10:8d:a7:30:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Jul 20 13:09:33 2025 GMT Not After : Oct 18 13:09:33 2025 GMT Subject: CN=43d908d9-6c71-4567-8604-aabdc0abf778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:77:ff:b7:19:2a:84:e8:e8:ec:a1:2c:13:5c: 08:61:f8:88:ee:d8:6f:26:84:ef:97:26:52:ca:2e: a9:09:95:2a:ff:70:bb:e8:92:88:74:ee:98:18:8f: c3:22:f5:81:96:8f:8c:6c:f9:19:e0:d3:4b:81:a8: 57:dc:e7:c4:39:1f:9d:8b:cb:b7:0d:0e:33:cc:9b: 89:cc:10:17:cc:e6:95:0d:3c:f7:e0:29:4a:29:cf: cf:77:60:07:71:6d:35:0c:17:8b:86:c1:4e:fd:73: 86:07:2f:97:f5:6e:14:42:23:e6:6b:7a:b0:01:29: 60:70:90:7b:6b:46:e1:5b:8c:5b:67:12:96:b5:75: 66:48:e8:35:bb:e5:f7:4e:1b:d5:90:75:c7:12:e8: 78:5d:53:da:3f:4e:1c:19:d7:07:6c:c7:e2:7a:9c: 82:35:f9:70:60:b3:e2:e2:3c:57:98:91:62:c5:fa: 54:5d:83:80:bb:25:74:b7:3f:7b:54:dd:b1:ce:7d: bc:a4:dc:88:24:ce:3b:87:0d:96:e6:4a:a5:6d:a9: f8:60:8b:2c:1a:ae:21:a2:67:2d:a5:c8:67:04:35: 8a:96:d4:d2:3b:5d:7c:bf:91:0d:7a:c4:11:5d:43: 2b:a1:ca:fe:3c:90:56:32:da:fa:ce:f4:2e:40:36: 18:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:24:10:25:69:EE:86:94:31:7C:1A:BE:73:BC:2F:96:A7:55:51:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b48555ab-431a-34fa-93ce-8f818290244b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 192.34.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f6:4a:3d:ed:48:78:c4:4a:cd:12:ef:5d:95:97:50:38:5a: 78:b4:e9:2e:e9:46:1d:7f:b9:b2:d1:79:5d:6e:7c:c4:ad:14: 9e:6b:12:0c:85:12:35:3f:8e:5a:6d:9d:a0:36:bf:38:f7:dd: cb:5f:dc:9a:50:27:97:4a:9e:eb:70:21:ca:96:bd:ea:4c:b7: 67:fc:93:f2:38:e1:82:8b:54:cb:e9:1b:d0:68:68:15:08:19: d7:8b:43:9c:be:b9:d1:97:b8:26:98:d7:8f:33:c5:25:c8:04: e6:38:19:0b:0f:55:64:c3:2d:44:60:85:44:a1:2a:78:3d:84: 24:71:e8:ee:c1:95:81:49:98:6f:63:16:01:29:b8:16:71:7e: ea:cf:31:5a:a7:35:3e:a3:0d:a8:6b:c4:cd:fc:cf:bc:04:94: 3a:ea:09:a7:6b:f7:ac:41:7e:bf:f6:71:0c:cc:f9:bb:20:07: 6f:ae:bb:13:64:ab:43:96:9b:f6:f8:71:0e:ed:15:f8:1a:7a: 7a:ac:12:59:88:ba:57:3a:90:03:26:23:43:82:0c:14:84:de: c3:95:2e:4e:83:7c:8a:79:c1:40:ef:57:1a:d0:17:ed:2f:cb: 14:8c:e2:ea:97:9e:e1:39:32:38:1b:57:86:7d:b9:07:fd:1e: ab:b8:ec:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU1PznzeAQjacwWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDcyMDEzMDkzM1oXDTI1MTAxODEzMDkzM1owLzEtMCsGA1UEAxMk NDNkOTA4ZDktNmM3MS00NTY3LTg2MDQtYWFiZGMwYWJmNzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHf/txkqhOjo7KEsE1wIYfiI7thvJoTvlyZS yi6pCZUq/3C76JKIdO6YGI/DIvWBlo+MbPkZ4NNLgahX3OfEOR+di8u3DQ4zzJuJ zBAXzOaVDTz34ClKKc/Pd2AHcW01DBeLhsFO/XOGBy+X9W4UQiPma3qwASlgcJB7 a0bhW4xbZxKWtXVmSOg1u+X3ThvVkHXHEuh4XVPaP04cGdcHbMfiepyCNflwYLPi 4jxXmJFixfpUXYOAuyV0tz97VN2xzn28pNyIJM47hw2W5kqlban4YIssGq4homct pchnBDWKltTSO118v5ENesQRXUMrocr+PJBWMtr6zvQuQDYYCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYkECVp7oaUMXwavnO8L5anVVGfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvYjQ4NTU1YWItNDMxYS0z NGZhLTkzY2UtOGY4MTgyOTAyNDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCJmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/2Sj3tSHjESs0S712Vl1A4Wni06S7pRh1/ubLReV1ufMStFJ5rEgyF EjU/jlptnaA2vzj33ctf3JpQJ5dKnutwIcqWvepMt2f8k/I44YKLVMvpG9BoaBUI GdeLQ5y+udGXuCaY148zxSXIBOY4GQsPVWTDLURghUShKng9hCRx6O7BlYFJmG9j FgEpuBZxfurPMVqnNT6jDahrxM38z7wElDrqCadr96xBfr/2cQzM+bsgB2+uuxNk q0OWm/b4cQ7tFfgaenqsElmIulc6kAMmI0OCDBSE3sOVLk6DfIp5wUDvVxrQF+0v yxSM4uqXnuE5MjgbV4Z9uQf9Hqu47MI= -----END CERTIFICATE-----Generated at Tue Jul 22 04:24:43 2025 by rpki-client