$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/bdabc6ac-4781-384f-a473-cf26c0ffdaa3.roa File: bdabc6ac-4781-384f-a473-cf26c0ffdaa3.roa (raw, json) Hash identifier: MJNJYADn6YGgTzU/2yjkzsBdmUq/j+X/Zbome0Md1Jc= Subject key identifier: 7E:FB:B8:92:3B:53:45:04:12:ED:8D:31:2C:3A:6D:AF:5A:85:CE:EF Certificate issuer: /CN=2b52814e-343c-46a0-bf89-2e9064856503 Certificate serial: 010D0C9F4328584B196C14D4B52F590A8D5CEA80 Authority key identifier: E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/bdabc6ac-4781-384f-a473-cf26c0ffdaa3.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 16276 IP address blocks: 192.30.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:14:d4:b5:2f:59:0a:8d:5c:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b52814e-343c-46a0-bf89-2e9064856503 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=424e8bea-fe7a-426c-baaa-96b4d06ebba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:07:30:34:fe:cb:60:1e:72:ed:ed:41:52:69: 51:5f:df:55:01:8c:98:0a:e9:72:ba:20:54:a6:bc: f0:b6:61:76:2c:69:26:e8:98:42:60:44:f0:a8:3f: df:c1:d0:46:be:48:5e:72:40:0b:8c:60:4d:fb:ee: 40:7d:a1:97:a9:0d:ea:25:19:8b:36:97:97:a1:39: 1c:68:bb:06:d6:e0:4a:f7:ad:24:f2:25:eb:ce:50: 5d:d2:e3:7f:ff:51:07:a0:5b:6e:15:42:91:39:c9: 37:19:f6:bf:0c:1b:79:08:c1:42:59:9a:26:e7:36: 5d:41:8f:be:21:59:c6:58:0e:87:7d:a3:53:4c:68: c1:12:0a:51:1f:73:c0:96:ad:f9:24:ed:5c:1a:f6: 75:45:a1:4a:b8:4b:b0:65:61:5c:55:36:43:09:12: e5:93:76:ba:83:e6:c6:f7:f3:a5:c6:ee:79:29:08: 59:43:9e:6a:1c:5a:f4:b4:f3:e9:eb:3b:50:1c:29: f6:80:85:cf:a1:39:71:c3:57:15:58:53:c5:9e:1d: 3d:fa:52:33:86:7e:fa:c5:34:9f:fd:dd:85:14:6b: c1:16:0a:68:47:2b:26:1d:ae:f6:a7:a3:a2:3a:1f: 74:0a:cf:4f:0a:4e:96:92:86:aa:52:eb:71:ea:8f: fc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FB:B8:92:3B:53:45:04:12:ED:8D:31:2C:3A:6D:AF:5A:85:CE:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/bdabc6ac-4781-384f-a473-cf26c0ffdaa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl X509v3 Authority Key Identifier: keyid:E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer sbgp-ipAddrBlock: critical IPv4: 192.30.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:8d:fa:48:d4:36:1c:c7:bb:59:2e:ac:b5:48:ee:01:c5:ec: a8:4a:2e:75:77:4c:e0:83:4f:1f:2d:0b:5b:5b:57:86:2f:a0: 34:ea:10:ac:49:e7:cd:6d:61:ac:62:d4:08:f1:a9:3c:17:fe: c7:98:5b:76:60:ab:4b:35:bc:6f:23:74:76:21:54:de:ae:51: f2:4d:d7:c8:f4:c6:33:e1:85:02:7c:d3:4d:08:84:5c:53:2d: d9:d0:93:60:0d:25:a3:23:28:18:30:d5:fc:be:5b:06:7f:5e: fa:5e:7d:21:ef:85:27:cf:7a:a0:13:6a:2e:67:be:15:bc:b9: 66:93:31:b5:2c:7c:4e:ec:fb:16:81:14:43:6f:2c:f7:0b:47: 93:b7:ff:18:5c:d0:97:71:40:42:b0:a8:e9:a4:06:f7:62:23: 21:7f:ce:47:57:68:0e:16:ed:d9:be:61:cc:f2:2f:11:61:ab: 4f:78:1d:b9:2a:3e:8e:eb:9f:8d:ad:14:ac:fc:26:76:72:f1: 21:01:29:b6:5a:00:53:34:bd:71:ff:c1:5a:44:c5:5c:18:d6: 70:59:a6:a5:56:0b:5d:8e:63:98:7a:0b:fe:99:b7:95:14:75: 0b:dd:1f:4f:4f:63:93:8c:a0:99:33:0b:ea:82:dd:b4:a1:ae: 3d:ee:0c:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbBTUtS9ZCo1c6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI1MjgxNGUtMzQzYy00NmEwLWJmODktMmU5MDY0ODU2 NTAzMB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk NDI0ZThiZWEtZmU3YS00MjZjLWJhYWEtOTZiNGQwNmViYmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgcwNP7LYB5y7e1BUmlRX99VAYyYCulyuiBU przwtmF2LGkm6JhCYETwqD/fwdBGvkheckALjGBN++5AfaGXqQ3qJRmLNpeXoTkc aLsG1uBK960k8iXrzlBd0uN//1EHoFtuFUKROck3Gfa/DBt5CMFCWZom5zZdQY++ IVnGWA6HfaNTTGjBEgpRH3PAlq35JO1cGvZ1RaFKuEuwZWFcVTZDCRLlk3a6g+bG 9/Olxu55KQhZQ55qHFr0tPPp6ztQHCn2gIXPoTlxw1cVWFPFnh09+lIzhn76xTSf /d2FFGvBFgpoRysmHa72p6OiOh90Cs9PCk6WkoaqUutx6o/8OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH77uJI7U0UEEu2NMSw6ba9ahc7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYjUy ODE0ZS0zNDNjLTQ2YTAtYmY4OS0yZTkwNjQ4NTY1MDMvYmRhYmM2YWMtNDc4MS0z ODRmLWE0NzMtY2YyNmMwZmZkYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmI1MjgxNGUtMzQzYy00NmEwLWJm ODktMmU5MDY0ODU2NTAzLzJiNTI4MTRlLTM0M2MtNDZhMC1iZjg5LTJlOTA2NDg1 NjUwMy5jcmwwHwYDVR0jBBgwFoAU6dRwuiGQ7tcv2d+VxyZ/OvYvKE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYjUyODE0ZS0zNDNjLTQ2YTAtYmY4OS0yZTkw NjQ4NTY1MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2N+kjUNhzHu1kurLVI7gHF7KhKLnV3TOCDTx8tC1tbV4YvoDTqEKxJ 581tYaxi1AjxqTwX/seYW3Zgq0s1vG8jdHYhVN6uUfJN18j0xjPhhQJ8000IhFxT LdnQk2ANJaMjKBgw1fy+WwZ/XvpefSHvhSfPeqATai5nvhW8uWaTMbUsfE7s+xaB FENvLPcLR5O3/xhc0JdxQEKwqOmkBvdiIyF/zkdXaA4W7dm+YczyLxFhq094Hbkq Po7rn42tFKz8JnZy8SEBKbZaAFM0vXH/wVpExVwY1nBZpqVWC12OY5h6C/6Zt5UU dQvdH09PY5OMoJkzC+qC3bShrj3uDPk= -----END CERTIFICATE-----Generated at Sun Sep 7 12:33:35 2025 by rpki-client