$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1c90cbfb-dada-385a-9811-e9d9f7e7d19b.roa File: 1c90cbfb-dada-385a-9811-e9d9f7e7d19b.roa (raw, json) Hash identifier: /ecjoPnACABXyBhiEFNaG7ELMy0dHfGCTZ0Sx/In3Dg= Subject key identifier: A9:81:4C:0C:A6:C4:FD:86:17:A5:84:3B:19:EB:F7:91:89:1A:E6:C1 Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb Certificate serial: 010D0C9F4328584A6C55E28552A639A4F2CDFC00 Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1c90cbfb-dada-385a-9811-e9d9f7e7d19b.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 397373 IP address blocks: 192.154.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:e2:85:52:a6:39:a4:f2:cd:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=859d8035-9c1b-41c2-86a0-1822dd53b102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:66:69:32:fc:39:63:9b:74:60:b9:78:0c:91: 34:d1:99:fe:f1:3a:d9:95:11:26:f4:49:4e:70:e8: 2e:2c:e0:82:65:a8:6c:fb:c7:13:a2:d7:3f:2d:d4: 6e:98:dd:ce:9c:f7:d7:64:a0:03:b6:84:3a:d6:fa: df:8d:25:38:2e:3e:c1:a5:a7:fd:8a:19:79:41:ad: 0a:d4:9d:c5:9c:54:a9:63:98:a5:70:b7:1d:23:e9: 07:03:3b:df:24:30:19:42:19:5f:fd:00:75:53:3b: 8f:c1:8c:fd:6c:ef:a3:7a:9a:55:e6:68:18:9c:d1: fa:15:c5:b5:74:c7:97:a0:70:23:9c:11:bb:77:29: 2c:ef:0e:b8:0f:f8:fe:cf:41:4f:14:74:cf:9f:02: f5:4e:47:81:08:55:b6:7b:68:cc:cc:cf:90:fd:60: de:9f:88:14:cc:e9:6f:c4:95:7c:1d:01:23:6d:95: 7b:85:5d:31:9d:e9:28:c2:e8:3e:62:1d:cc:78:2c: 40:40:35:2b:de:77:27:f6:09:f2:57:1c:27:0f:e3: 9d:56:d0:9f:80:f8:49:dc:15:6b:ea:ac:05:06:b0: 80:dc:e3:36:40:30:4d:23:93:4f:9d:fa:11:3d:94: 2f:36:5d:9d:6f:7f:35:f5:cd:99:fc:58:5e:7a:99: 04:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:81:4C:0C:A6:C4:FD:86:17:A5:84:3B:19:EB:F7:91:89:1A:E6:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1c90cbfb-dada-385a-9811-e9d9f7e7d19b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl X509v3 Authority Key Identifier: keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer sbgp-ipAddrBlock: critical IPv4: 192.154.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:5f:e6:26:66:38:56:78:1f:c0:5f:92:45:2e:ec:d2:62:40: 46:23:33:9d:a9:09:75:d8:8c:9d:76:6e:5b:21:a6:0a:f9:cb: c8:f4:d1:28:31:ca:88:53:0a:8b:47:73:d2:2e:6b:4f:b7:1e: 3b:f4:6e:64:ee:a6:06:c2:4d:cf:13:c0:9e:62:0d:f9:d6:dd: 48:43:24:68:71:ec:f8:b1:64:04:66:30:5b:b4:a4:2d:20:3f: 9e:67:22:0b:e4:59:3f:f5:02:38:5b:9b:d3:ea:d8:36:b5:11: 4a:fe:38:4f:ab:e6:b0:68:0e:9f:3a:ed:01:88:e5:fc:45:91: 06:54:0f:78:61:65:82:4c:75:7d:ff:87:14:cb:9c:29:e5:07: a5:04:33:cc:c7:d4:ff:fb:24:b3:44:b3:e8:9e:bc:c9:1d:a2: 6c:20:c4:97:a8:52:5f:b6:87:70:33:16:75:56:a5:2c:2f:45: 2e:03:3f:a9:32:66:a9:ee:1d:9a:3c:df:fc:7d:38:01:9b:34: 6a:a5:12:8a:34:85:1c:57:a4:21:8b:98:73:23:f1:c7:e3:2c: bb:85:4e:1f:b7:ed:12:7a:ee:ad:25:9c:00:bb:e8:53:57:5f: 4e:41:69:6c:34:c4:20:e0:ba:33:1f:42:0f:b1:43:99:df:24: 88:dc:08:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVeKFUqY5pPLN/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx ZWViMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk ODU5ZDgwMzUtOWMxYi00MWMyLTg2YTAtMTgyMmRkNTNiMTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmZpMvw5Y5t0YLl4DJE00Zn+8TrZlREm9ElO cOguLOCCZahs+8cTotc/LdRumN3OnPfXZKADtoQ61vrfjSU4Lj7Bpaf9ihl5Qa0K 1J3FnFSpY5ilcLcdI+kHAzvfJDAZQhlf/QB1UzuPwYz9bO+jeppV5mgYnNH6FcW1 dMeXoHAjnBG7dyks7w64D/j+z0FPFHTPnwL1TkeBCFW2e2jMzM+Q/WDen4gUzOlv xJV8HQEjbZV7hV0xnekowug+Yh3MeCxAQDUr3ncn9gnyVxwnD+OdVtCfgPhJ3BVr 6qwFBrCA3OM2QDBNI5NPnfoRPZQvNl2db3819c2Z/FheepkEfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmBTAymxP2GF6WEOxnr95GJGubBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvMWM5MGNiZmItZGFkYS0z ODVhLTk4MTEtZTlkOWY3ZTdkMTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5 YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJr6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdf5iZmOFZ4H8BfkkUu7NJiQEYjM52pCXXYjJ12blshpgr5y8j00Sgx yohTCotHc9Iua0+3Hjv0bmTupgbCTc8TwJ5iDfnW3UhDJGhx7PixZARmMFu0pC0g P55nIgvkWT/1Ajhbm9Pq2Da1EUr+OE+r5rBoDp867QGI5fxFkQZUD3hhZYJMdX3/ hxTLnCnlB6UEM8zH1P/7JLNEs+ievMkdomwgxJeoUl+2h3AzFnVWpSwvRS4DP6ky ZqnuHZo83/x9OAGbNGqlEoo0hRxXpCGLmHMj8cfjLLuFTh+37RJ67q0lnAC76FNX X05BaWw0xCDgujMfQg+xQ5nfJIjcCBA= -----END CERTIFICATE-----Generated at Thu Jul 10 13:59:35 2025 by rpki-client