$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa File: dd3f5672-56e3-308a-a96f-4014a9782301.roa (raw, json) Hash identifier: Q5V20YEhsZ1yKpzxcPhhU4K7rxa8wdGN/mHXIe8bV9I= Subject key identifier: 7C:F0:10:C4:2C:2A:E8:87:29:E9:FF:BA:84:E1:2F:BB:41:21:77:17 Certificate issuer: /CN=1f54df1e-3d93-4ac5-b209-e24261193230 Certificate serial: 010D0C9F4328584A66C064B7FDE93BED9D088780 Authority key identifier: C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 30211 IP address blocks: 192.161.68.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:64:b7:fd:e9:3b:ed:9d:08:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f54df1e-3d93-4ac5-b209-e24261193230 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=d5bfb1f0-7e09-4294-b3cc-c4d2c5685b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:88:84:e7:62:5e:a2:c7:fe:de:2c:45:bf:6b: 3b:b8:c9:eb:15:b4:a1:77:9c:8c:1d:74:4d:15:34: 03:59:bc:69:e2:b8:f6:75:d6:01:38:c8:5c:4b:02: b9:28:05:14:a8:12:f5:20:e6:4d:d4:8e:84:62:40: 14:c8:3b:05:14:11:d4:24:ad:e9:ad:ca:53:83:d6: 29:ed:10:b4:8e:96:7d:1d:ca:dd:fb:dd:c4:91:aa: 41:e0:01:57:bc:e7:f6:38:98:18:f4:80:5e:f6:bd: 7a:8b:aa:0f:67:c6:a7:96:7e:69:b1:78:de:8d:4d: f1:82:44:26:76:20:0b:1f:e5:20:52:98:43:62:75: 6b:6d:82:ed:52:40:08:36:c1:5c:c1:8f:8e:5f:45: 31:ac:ff:3a:d9:7c:5d:77:bf:ec:bd:07:94:db:8f: 00:fc:79:fe:87:e2:62:a5:c7:a3:aa:a5:10:8a:d4: 56:75:0c:23:e0:6e:a4:03:08:94:1a:9b:38:d9:85: 5b:ba:e5:2a:48:72:68:68:58:0d:f0:d0:0e:9a:8b: 1f:df:b5:d6:7e:ed:b0:c4:41:f4:96:ec:4e:a4:63: 77:75:72:a5:29:ef:f5:f5:f2:ba:a9:99:50:4a:14: 1c:24:fe:31:3d:6c:77:70:48:00:83:ad:34:ca:6b: ca:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F0:10:C4:2C:2A:E8:87:29:E9:FF:BA:84:E1:2F:BB:41:21:77:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl X509v3 Authority Key Identifier: keyid:C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer sbgp-ipAddrBlock: critical IPv4: 192.161.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:36:9c:bf:55:c1:b6:48:62:a1:ca:ed:44:bd:65:15:1c:52: 4b:50:e2:e2:be:5d:50:78:80:1a:1a:bb:88:0a:d7:9b:01:ec: 8f:96:1d:66:23:4c:fa:7a:62:57:08:4f:18:2b:e2:9c:19:97: 31:3d:eb:a7:f1:aa:3b:a1:fe:f5:48:68:4c:3b:cb:5d:cc:b3: 83:4f:c3:04:a5:9a:89:8b:77:39:14:8f:d6:53:79:88:dd:99: 02:db:10:35:37:25:81:61:16:bb:da:2b:54:26:b6:4b:3d:94: 35:2e:eb:be:98:82:6f:47:10:3b:75:a0:30:45:63:48:70:9e: e7:38:8b:4c:62:fb:43:53:5e:5b:61:30:11:f0:d7:6f:24:eb: 4c:f0:b1:0f:dc:83:da:90:9e:4f:c3:6e:20:74:ba:1a:3c:06: dc:dc:1a:9f:64:09:91:b9:b2:4b:e8:96:70:d8:ea:e1:3c:36: 52:aa:19:b6:19:1e:83:b6:4c:f1:8c:e0:f5:72:39:31:30:6b: c2:f5:ff:32:0c:c6:40:23:0e:53:69:65:f8:47:61:0c:5d:be: ed:4c:ed:53:9a:3e:0a:53:5a:df:92:a7:ef:c0:a5:9f:c1:47: 34:7a:db:29:5e:40:b1:fe:e4:f7:37:2c:e0:46:9a:1a:ec:e3: f3:1b:b6:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwGS3/ek77Z0Ih4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1NGRmMWUtM2Q5My00YWM1LWIyMDktZTI0MjYxMTkz MjMwMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk ZDViZmIxZjAtN2UwOS00Mjk0LWIzY2MtYzRkMmM1Njg1YjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYiE52Jeosf+3ixFv2s7uMnrFbShd5yMHXRN FTQDWbxp4rj2ddYBOMhcSwK5KAUUqBL1IOZN1I6EYkAUyDsFFBHUJK3prcpTg9Yp 7RC0jpZ9Hcrd+93EkapB4AFXvOf2OJgY9IBe9r16i6oPZ8anln5psXjejU3xgkQm diALH+UgUphDYnVrbYLtUkAINsFcwY+OX0UxrP862Xxdd7/svQeU248A/Hn+h+Ji pcejqqUQitRWdQwj4G6kAwiUGps42YVbuuUqSHJoaFgN8NAOmosf37XWfu2wxEH0 luxOpGN3dXKlKe/19fK6qZlQShQcJP4xPWx3cEgAg600ymvKnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzwEMQsKuiHKen/uoThL7tBIXcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZjU0 ZGYxZS0zZDkzLTRhYzUtYjIwOS1lMjQyNjExOTMyMzAvZGQzZjU2NzItNTZlMy0z MDhhLWE5NmYtNDAxNGE5NzgyMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWY1NGRmMWUtM2Q5My00YWM1LWIy MDktZTI0MjYxMTkzMjMwLzFmNTRkZjFlLTNkOTMtNGFjNS1iMjA5LWUyNDI2MTE5 MzIzMC5jcmwwHwYDVR0jBBgwFoAUwRjOhaCEySkN6DYj8bFiouq4dPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZjU0ZGYxZS0zZDkzLTRhYzUtYjIwOS1lMjQy NjExOTMyMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwKFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo2nL9VwbZIYqHK7US9ZRUcUktQ4uK+XVB4gBoau4gK15sB7I+WHWYj TPp6YlcITxgr4pwZlzE966fxqjuh/vVIaEw7y13Ms4NPwwSlmomLdzkUj9ZTeYjd mQLbEDU3JYFhFrvaK1Qmtks9lDUu676Ygm9HEDt1oDBFY0hwnuc4i0xi+0NTXlth MBHw128k60zwsQ/cg9qQnk/DbiB0uho8BtzcGp9kCZG5skvolnDY6uE8NlKqGbYZ HoO2TPGM4PVyOTEwa8L1/zIMxkAjDlNpZfhHYQxdvu1M7VOaPgpTWt+Sp+/ApZ/B RzR62yleQLH+5Pc3LOBGmhrs4/MbtiQ= -----END CERTIFICATE-----Generated at Tue Jul 8 22:42:50 2025 by rpki-client