$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/2447bcc4-96e5-3c96-98e6-cfbb76fcd991.roa File: 2447bcc4-96e5-3c96-98e6-cfbb76fcd991.roa (raw, json) Hash identifier: ppFBMtxg7Co/BsGs+XNG2NscCl+NefMBquHfS76RF9Y= Subject key identifier: E5:0A:EC:8C:97:2B:A1:77:D8:A7:E1:41:9F:40:74:C3:E6:B7:4F:2C Certificate issuer: /CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Certificate serial: 010D0C9F4328584B0A115EFCEE78F25559E12580 Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/2447bcc4-96e5-3c96-98e6-cfbb76fcd991.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 52347 IP address blocks: 192.34.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:5e:fc:ee:78:f2:55:59:e1:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=a479a906-a6fa-4679-ba1d-3bd470b5da78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ec:ee:f5:8d:3a:a6:89:d5:75:41:30:f8:96: 8c:0c:a8:ba:31:73:cc:58:13:f0:0b:62:08:39:08: 60:4f:c0:7d:bc:45:f7:ba:08:5a:1c:dd:4b:74:1b: c5:33:20:87:1d:a7:17:a5:8a:19:39:d7:25:5c:62: f6:4a:d2:53:a6:76:44:8b:17:ba:ba:a5:a6:41:10: 7a:95:bb:99:71:c2:9e:3a:15:3b:00:4b:a7:ad:c3: 36:16:78:9d:96:57:85:c5:78:67:20:e2:44:7e:61: 33:ca:34:cb:c6:4d:1a:b7:eb:86:81:b9:96:64:f7: a3:f0:d0:86:9e:93:38:bc:8e:15:dc:60:a1:9a:02: 26:7d:6a:2d:11:72:42:92:ae:79:8e:2c:3f:2d:eb: f9:c6:58:91:81:c1:53:1a:07:2e:49:f9:21:24:10: db:e8:2f:60:1d:54:a8:c2:b4:13:29:aa:8b:6b:25: 61:75:a9:e3:50:27:c6:cc:b6:28:fe:67:aa:8b:b8: 87:27:7f:43:0c:72:02:38:fe:3a:a8:70:8e:2b:33: 2c:26:52:34:ab:8b:e2:8f:53:78:bb:ce:6a:04:27: cd:03:5d:0b:c2:28:e2:70:d0:94:28:db:ba:05:03: 6f:33:15:20:f6:fb:f0:64:71:7d:f2:b1:8c:b5:58: 44:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0A:EC:8C:97:2B:A1:77:D8:A7:E1:41:9F:40:74:C3:E6:B7:4F:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/2447bcc4-96e5-3c96-98e6-cfbb76fcd991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl X509v3 Authority Key Identifier: keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer sbgp-ipAddrBlock: critical IPv4: 192.34.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:6c:7c:5b:cf:52:43:6f:9e:4e:83:21:8f:ed:91:7e:fc:ca: cc:aa:13:ea:f0:28:1c:67:ba:84:9c:84:ca:9c:89:6d:3d:4f: a2:f6:02:14:ba:47:0b:1e:ac:85:d0:d2:d3:70:aa:36:d8:3b: 8e:01:0e:df:bb:6d:61:d8:0b:cd:03:0e:cc:ef:9a:0e:03:85: 7a:77:9c:77:7f:a9:1b:7a:04:db:5d:e4:43:76:17:ea:76:f4: 0f:04:ac:b6:f0:e6:16:9a:7c:7a:63:e8:0b:a3:fd:41:2a:84: a3:06:f0:8e:88:54:4e:8e:98:fc:69:d7:1f:b3:7e:e2:75:20: 94:fe:2f:5e:90:f1:93:f6:bf:c4:90:e9:ac:c6:68:70:82:c4: 64:0a:7b:64:4e:df:55:56:bc:40:7f:cc:3c:b0:12:64:9c:30: 0b:67:de:fc:b2:23:ca:4a:bf:a7:7f:41:68:4e:19:19:be:bd: bd:03:78:bd:96:36:ad:23:7c:c0:4e:2c:3d:73:2c:d7:3f:d4: 06:34:bf:94:40:b2:84:38:00:b6:21:fb:7b:bc:2f:21:73:c4: 52:f2:11:d8:5d:ab:9d:ca:07:c4:0f:dd:7f:c0:ed:6f:67:07: 75:5a:69:b0:22:5b:a2:c0:af:5a:2c:08:eb:24:e5:e5:9f:cc: 64:2f:03:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEV787njyVVnhJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmMTY0ZGQtZGIzOS00NzBkLTg4MDUtM2FhNTE0ZDVl N2IwMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk YTQ3OWE5MDYtYTZmYS00Njc5LWJhMWQtM2JkNDcwYjVkYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOzu9Y06ponVdUEw+JaMDKi6MXPMWBPwC2II OQhgT8B9vEX3ughaHN1LdBvFMyCHHacXpYoZOdclXGL2StJTpnZEixe6uqWmQRB6 lbuZccKeOhU7AEunrcM2FnidlleFxXhnIOJEfmEzyjTLxk0at+uGgbmWZPej8NCG npM4vI4V3GChmgImfWotEXJCkq55jiw/Lev5xliRgcFTGgcuSfkhJBDb6C9gHVSo wrQTKaqLayVhdanjUCfGzLYo/meqi7iHJ39DDHICOP46qHCOKzMsJlI0q4vij1N4 u85qBCfNA10LwijicNCUKNu6BQNvMxUg9vvwZHF98rGMtVhEHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUK7IyXK6F32KfhQZ9AdMPmt08sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MWYx NjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1MTRkNWU3YjAvMjQ0N2JjYzQtOTZlNS0z Yzk2LTk4ZTYtY2ZiYjc2ZmNkOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjFmMTY0ZGQtZGIzOS00NzBkLTg4 MDUtM2FhNTE0ZDVlN2IwLzYxZjE2NGRkLWRiMzktNDcwZC04ODA1LTNhYTUxNGQ1 ZTdiMC5jcmwwHwYDVR0jBBgwFoAUn+qdbiydJN8Iu7seOhQEldnw9LYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MWYxNjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1 MTRkNWU3YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwCIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxsfFvPUkNvnk6DIY/tkX78ysyqE+rwKBxnuoSchMqciW09T6L2AhS6 RwserIXQ0tNwqjbYO44BDt+7bWHYC80DDszvmg4DhXp3nHd/qRt6BNtd5EN2F+p2 9A8ErLbw5haafHpj6Auj/UEqhKMG8I6IVE6OmPxp1x+zfuJ1IJT+L16Q8ZP2v8SQ 6azGaHCCxGQKe2RO31VWvEB/zDywEmScMAtn3vyyI8pKv6d/QWhOGRm+vb0DeL2W Nq0jfMBOLD1zLNc/1AY0v5RAsoQ4ALYh+3u8LyFzxFLyEdhdq53KB8QP3X/A7W9n B3VaabAiW6LAr1osCOsk5eWfzGQvA8o= -----END CERTIFICATE-----Generated at Sun Oct 19 22:11:33 2025 by rpki-client