$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/752c601a-7e44-38fa-a562-2121c064f9d3.roa File: 752c601a-7e44-38fa-a562-2121c064f9d3.roa (raw, json) Hash identifier: hiEtMsZ7Tm/wS2EV/vYRgazxndCky+J6nh6bm4o1V6o= Subject key identifier: 02:1B:EA:AE:84:59:F8:37:4A:37:96:83:B9:66:3F:D8:7D:EB:22:8E Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F4328584A5FC5E424E98074801D56C880 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/752c601a-7e44-38fa-a562-2121c064f9d3.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 393573 IP address blocks: 192.254.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e4:24:e9:80:74:80:1d:56:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=2c93e3c9-a6fc-4fd9-8ced-3dcd04b7e13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bd:20:89:db:ab:de:64:7e:19:ad:68:87:cb: e8:ea:9a:bc:de:06:84:9d:20:18:20:0e:23:66:74: 22:a2:9a:65:23:40:04:e1:7b:d3:13:5a:70:fb:a9: e3:2b:08:13:99:5b:da:19:ee:b3:b7:de:b4:d8:e6: 7c:82:ee:82:22:9c:8f:fa:8e:7e:1f:76:23:da:af: d8:5c:36:be:34:0c:7c:51:f8:d0:ca:ec:c6:8e:75: ea:d9:5c:bc:7c:32:4c:e3:8a:92:40:44:6b:08:bb: 65:97:d3:a0:b0:7e:ee:61:05:39:5c:1b:d8:71:0d: 34:94:ab:3a:45:63:f7:d0:be:c8:b4:6b:a1:00:57: ca:91:37:16:a1:c1:1c:bc:cd:fd:a6:e0:c3:bc:b8: e8:14:d9:10:93:1f:48:fc:78:8b:2d:ce:75:4a:60: 3b:bc:cc:70:d3:37:e0:49:58:c4:ef:c9:f9:f7:00: 0d:6d:45:63:c3:9d:85:81:4e:b0:a0:8d:de:2e:af: 56:35:a8:c3:fe:73:9c:19:4d:2f:b8:4b:26:fb:ac: 08:0f:b5:02:08:11:9b:26:78:4b:e1:c6:b8:4c:50: 84:1a:65:7d:e3:ca:a5:59:73:2d:4b:26:5f:19:3f: d2:06:38:5c:13:05:03:6a:f1:37:e6:28:9e:17:5e: f5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1B:EA:AE:84:59:F8:37:4A:37:96:83:B9:66:3F:D8:7D:EB:22:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/752c601a-7e44-38fa-a562-2121c064f9d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv4: 192.254.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9d:c3:fe:ce:1d:28:56:56:c7:fe:d6:88:79:4f:e2:67:de: 95:bf:0e:e4:44:87:9d:95:34:6f:16:4d:03:50:06:0e:ca:00: e9:68:dc:ee:f9:04:67:5e:13:aa:f3:c9:31:ea:2f:19:de:dd: 46:2b:fe:7e:5b:e7:b4:dd:f7:6d:07:50:c0:35:88:dc:49:34: 10:a3:31:f7:d6:a6:54:03:28:a3:53:e3:3a:50:86:f6:7e:c3: 19:31:1f:07:b9:3e:ab:a4:b4:1b:26:c3:9e:1c:5e:f4:54:bd: 47:62:a5:46:5b:08:8a:d9:a1:58:15:40:64:72:63:be:bf:cb: 67:a6:bc:0c:14:9f:f1:f9:e2:de:af:9e:fe:3c:df:68:a6:39: 82:2d:5e:85:14:72:1c:25:d0:f6:8a:0b:9f:34:47:77:70:08: e4:0d:9f:f1:36:73:90:15:56:92:62:af:73:79:29:8c:a8:c5: fc:76:83:d7:48:14:16:26:cc:15:71:7c:06:9a:ed:d3:d9:61: c3:78:93:56:59:ee:60:6f:05:05:c5:84:0c:66:75:a1:ae:ac: bf:98:03:05:45:6c:bf:43:84:5a:5c:f5:e7:08:1e:3f:74:1a: 70:91:19:57:ac:3b:4a:57:99:47:eb:99:f1:02:89:bb:c0:c2: a8:7f:9b:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxeQk6YB0gB1WyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk MmM5M2UzYzktYTZmYy00ZmQ5LThjZWQtM2RjZDA0YjdlMTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb0gidur3mR+Ga1oh8vo6pq83gaEnSAYIA4j ZnQiopplI0AE4XvTE1pw+6njKwgTmVvaGe6zt9602OZ8gu6CIpyP+o5+H3Yj2q/Y XDa+NAx8UfjQyuzGjnXq2Vy8fDJM44qSQERrCLtll9OgsH7uYQU5XBvYcQ00lKs6 RWP30L7ItGuhAFfKkTcWocEcvM39puDDvLjoFNkQkx9I/HiLLc51SmA7vMxw0zfg SVjE78n59wANbUVjw52FgU6woI3eLq9WNajD/nOcGU0vuEsm+6wID7UCCBGbJnhL 4ca4TFCEGmV948qlWXMtSyZfGT/SBjhcEwUDavE35iieF171bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIb6q6EWfg3SjeWg7lmP9h96yKOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvNzUyYzYwMWEtN2U0NC0z OGZhLWE1NjItMjEyMWMwNjRmOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP5uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOdw/7OHShWVsf+1oh5T+Jn3pW/DuREh52VNG8WTQNQBg7KAOlo3O75 BGdeE6rzyTHqLxne3UYr/n5b57Td920HUMA1iNxJNBCjMffWplQDKKNT4zpQhvZ+ wxkxHwe5PquktBsmw54cXvRUvUdipUZbCIrZoVgVQGRyY76/y2emvAwUn/H54t6v nv4832imOYItXoUUchwl0PaKC580R3dwCOQNn/E2c5AVVpJir3N5KYyoxfx2g9dI FBYmzBVxfAaa7dPZYcN4k1ZZ7mBvBQXFhAxmdaGurL+YAwVFbL9DhFpc9ecIHj90 GnCRGVesO0pXmUfrmfECibvAwqh/m9Q= -----END CERTIFICATE-----Generated at Tue Jul 1 15:22:12 2025 by rpki-client