$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa File: 400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa (raw, json) Hash identifier: LQ7BykuvfxMeDhkFWFpThPwreCMlkAIwqk9RqPuS3As= Subject key identifier: 4A:74:5C:BE:B1:B7:A2:27:00:9B:61:07:E5:15:1B:DA:C3:05:0A:30 Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F4328584A5FC5E41389DB63E5525BBB00 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 63240 IP address blocks: 192.254.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e4:13:89:db:63:e5:52:5b:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=42f2f4c6-1f10-4477-ab83-4bc50f05d64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:88:f7:07:79:f9:ed:b0:e2:28:e4:57:e7:46: 4f:f2:88:ba:7f:33:69:7a:0e:cc:19:8a:ad:a9:d5: 94:f0:7b:c3:99:70:63:eb:4f:1b:e2:33:5d:1f:56: 02:a0:09:17:2c:35:fe:be:85:61:7a:68:ed:ef:de: e4:29:c4:4f:2a:ab:c2:59:fa:d9:ad:17:7f:19:e4: 48:d4:da:36:2a:04:c0:1b:6d:f3:3e:9a:a7:88:3d: 2f:42:12:e4:49:c6:1d:d3:e5:2b:4e:ce:41:f6:5f: 57:bc:e5:0d:25:4d:b5:5a:d0:cd:c6:1a:34:0d:2e: 28:fb:12:d0:01:85:84:a0:58:6e:6c:43:e3:63:f0: 30:de:d3:83:7c:eb:ef:b3:bd:a1:ef:60:9b:09:08: c1:93:1b:d1:a7:1d:4b:99:d4:53:2b:82:32:4d:69: e5:d3:cd:c8:eb:2d:b8:ab:ae:66:99:5c:39:81:87: 74:fb:1b:fe:cc:7d:0f:b3:a4:88:97:f0:63:6d:4b: cf:50:49:47:7a:04:ca:c1:05:89:c9:12:35:1a:db: 17:73:95:9b:eb:fa:ed:c7:c9:c4:75:1b:f1:7e:f9: 19:79:f2:a9:b4:ef:03:55:10:99:2d:3e:c9:62:d0: 71:98:85:f1:58:c4:e1:b2:30:ac:04:05:d8:1e:b0: 51:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:74:5C:BE:B1:B7:A2:27:00:9B:61:07:E5:15:1B:DA:C3:05:0A:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv4: 192.254.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:15:57:ee:7b:81:53:7b:28:e9:f8:7d:ec:7c:a9:ef:f9:36: 40:4b:d5:c4:c3:a3:73:4d:f0:a0:11:2c:8a:0f:df:3b:5c:66: cf:71:f7:e3:95:26:d5:1b:30:42:77:87:ce:42:37:75:b2:58: f4:53:72:2e:a6:ed:5a:5f:81:eb:83:f6:c6:d5:9f:1d:d3:dd: cb:2b:f5:ad:2b:62:8a:b8:70:65:d9:ef:fd:1f:72:c5:1a:2c: 9f:8f:55:0a:e0:1d:95:8c:e4:c6:4b:2e:32:a9:31:91:45:b3: 6d:f1:9a:e2:b8:1c:b4:23:a7:8d:b6:26:5b:eb:0c:bf:b8:54: d2:e1:aa:98:0b:e4:fe:88:d8:fb:f6:f0:97:57:b6:79:bd:85: 28:2d:b7:1f:3d:ca:14:a8:1e:30:12:99:d9:06:23:18:44:82: 78:35:c7:69:0f:ed:92:99:8a:48:46:0a:11:2e:6c:52:37:59: 26:88:ee:b8:c2:5f:d1:21:8d:69:30:3c:2d:75:c8:dc:96:55: f9:47:07:23:40:36:96:31:47:43:11:4c:e4:cd:e4:c4:cd:2b: eb:11:02:5e:dd:eb:3e:37:7e:91:27:6b:b3:20:d1:56:fc:04: f1:2e:68:f8:f1:55:c3:e5:35:19:36:fd:91:fd:35:50:7b:91: fc:f5:55:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxeQTidtj5VJbuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk NDJmMmY0YzYtMWYxMC00NDc3LWFiODMtNGJjNTBmMDVkNjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYj3B3n57bDiKORX50ZP8oi6fzNpeg7MGYqt qdWU8HvDmXBj608b4jNdH1YCoAkXLDX+voVhemjt797kKcRPKqvCWfrZrRd/GeRI 1No2KgTAG23zPpqniD0vQhLkScYd0+UrTs5B9l9XvOUNJU21WtDNxho0DS4o+xLQ AYWEoFhubEPjY/Aw3tODfOvvs72h72CbCQjBkxvRpx1LmdRTK4IyTWnl083I6y24 q65mmVw5gYd0+xv+zH0Ps6SIl/BjbUvPUElHegTKwQWJyRI1GtsXc5Wb6/rtx8nE dRvxfvkZefKptO8DVRCZLT7JYtBxmIXxWMThsjCsBAXYHrBROwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEp0XL6xt6InAJthB+UVG9rDBQowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvNDAwZGZmOTQtYThkMC0z ZGIyLWJiZGMtMGY1YjI5NzAxNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP5tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEVV+57gVN7KOn4fex8qe/5NkBL1cTDo3NN8KARLIoP3ztcZs9x9+OV JtUbMEJ3h85CN3WyWPRTci6m7VpfgeuD9sbVnx3T3csr9a0rYoq4cGXZ7/0fcsUa LJ+PVQrgHZWM5MZLLjKpMZFFs23xmuK4HLQjp422JlvrDL+4VNLhqpgL5P6I2Pv2 8JdXtnm9hSgttx89yhSoHjASmdkGIxhEgng1x2kP7ZKZikhGChEubFI3WSaI7rjC X9EhjWkwPC11yNyWVflHByNANpYxR0MRTOTN5MTNK+sRAl7d6z43fpEna7Mg0Vb8 BPEuaPjxVcPlNRk2/ZH9NVB7kfz1VfM= -----END CERTIFICATE-----Generated at Tue Jul 1 14:28:40 2025 by rpki-client