$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/d79b62cc-36d6-3e6c-97bd-3d162be55196.roa File: d79b62cc-36d6-3e6c-97bd-3d162be55196.roa (raw, json) Hash identifier: k8O3soGF+Beckf645u6qYDxy1C1rtVMLTbG55FrIb3g= Subject key identifier: 1E:89:1E:A7:58:27:C9:8B:28:99:CF:68:52:22:27:26:F2:B5:60:CB Certificate issuer: /CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Certificate serial: 010D0C9F4328584B0A11576C8C6C06EF5319B880 Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/d79b62cc-36d6-3e6c-97bd-3d162be55196.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 52347 IP address blocks: 192.34.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:57:6c:8c:6c:06:ef:53:19:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=6c0a8353-fa36-437d-8749-a861ec6c342e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4f:f8:f9:41:8c:78:bb:5d:f3:a1:0e:ad:9e: 03:36:b3:e2:69:e1:e3:2d:a3:22:ae:3a:98:45:67: de:12:21:42:e8:34:69:9e:7c:28:3b:41:87:f3:0e: 2b:14:9a:52:ae:de:88:31:c9:bc:9d:69:f0:25:b4: 97:e2:f6:85:c4:72:73:59:91:d8:52:de:85:56:f9: 27:e9:85:92:ac:44:8c:9a:98:84:0d:00:38:19:ca: c0:3d:b5:0b:52:26:77:dc:a7:91:4a:3d:96:70:0d: 63:18:01:c9:74:68:ea:16:c5:5e:b7:d4:87:87:9f: de:99:37:c2:da:b3:8c:95:5e:fc:6c:bf:6c:45:53: 09:9c:46:cc:94:80:a1:78:d9:94:1e:7d:da:3a:20: 62:fc:11:4b:7f:83:8d:d2:c7:9a:5f:cb:45:b5:77: 43:b7:19:70:c3:ef:60:d0:22:ae:cf:ba:55:41:74: d9:c6:2c:4b:49:8d:77:01:8b:a8:85:49:41:bd:64: de:65:8f:3e:f5:95:66:0e:73:0d:fe:9d:2e:85:82: 79:b5:18:c6:d7:2e:c0:82:d2:bd:23:cb:97:4c:10: 97:fa:86:80:9a:4f:03:70:eb:0a:3e:e0:09:19:fa: bd:10:c5:b1:79:8e:71:e5:78:5a:36:7f:5d:11:ce: d7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:89:1E:A7:58:27:C9:8B:28:99:CF:68:52:22:27:26:F2:B5:60:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/d79b62cc-36d6-3e6c-97bd-3d162be55196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl X509v3 Authority Key Identifier: keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer sbgp-ipAddrBlock: critical IPv4: 192.34.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f8:f7:79:c4:45:4e:66:e6:41:47:0d:0b:4c:3f:ee:8d:d1: f0:d6:8e:bf:29:ee:e2:b8:ad:2f:1c:f4:be:08:03:8c:59:41: 85:3c:40:16:4c:70:c5:62:01:0f:bb:d7:82:42:86:40:73:88: 2a:f3:a9:a8:8e:d0:1d:90:d9:40:ee:d8:eb:88:45:ef:48:c9: 64:29:af:f0:46:00:1a:40:52:a9:2f:d8:c8:0e:44:7b:f5:a2: 8b:07:fb:dd:06:5f:9b:a4:f1:2c:44:e1:63:b1:05:10:9a:c1: 41:fc:da:a4:ac:bf:59:b0:79:a0:e8:d2:3e:2f:16:f6:9b:78: 45:6b:e4:88:3a:69:0f:2e:a5:e6:30:c7:35:42:e0:35:73:e2: cb:67:2c:b5:00:15:df:29:d2:7e:9b:86:73:0e:16:1b:6d:3b: 0f:01:36:80:8b:b9:83:67:ec:ca:62:ea:22:31:cc:2d:b3:8f: a2:7f:01:ef:67:56:f9:b7:a2:ee:54:31:0d:8f:77:31:d1:d5: 5d:b7:13:da:95:f1:35:52:52:d2:00:dd:cd:2d:24:16:3e:c1: 27:ae:fd:69:81:3d:3f:b6:63:94:8d:dd:8b:65:87:d3:85:94: fe:d4:01:95:1c:3a:6f:05:98:77:a2:6c:02:ad:7c:1f:6c:e8: d5:2c:49:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEVdsjGwG71MZuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmMTY0ZGQtZGIzOS00NzBkLTg4MDUtM2FhNTE0ZDVl N2IwMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk NmMwYTgzNTMtZmEzNi00MzdkLTg3NDktYTg2MWVjNmMzNDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk/4+UGMeLtd86EOrZ4DNrPiaeHjLaMirjqY RWfeEiFC6DRpnnwoO0GH8w4rFJpSrt6IMcm8nWnwJbSX4vaFxHJzWZHYUt6FVvkn 6YWSrESMmpiEDQA4GcrAPbULUiZ33KeRSj2WcA1jGAHJdGjqFsVet9SHh5/emTfC 2rOMlV78bL9sRVMJnEbMlICheNmUHn3aOiBi/BFLf4ON0seaX8tFtXdDtxlww+9g 0CKuz7pVQXTZxixLSY13AYuohUlBvWTeZY8+9ZVmDnMN/p0uhYJ5tRjG1y7AgtK9 I8uXTBCX+oaAmk8DcOsKPuAJGfq9EMWxeY5x5XhaNn9dEc7XvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6JHqdYJ8mLKJnPaFIiJybytWDLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MWYx NjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1MTRkNWU3YjAvZDc5YjYyY2MtMzZkNi0z ZTZjLTk3YmQtM2QxNjJiZTU1MTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjFmMTY0ZGQtZGIzOS00NzBkLTg4 MDUtM2FhNTE0ZDVlN2IwLzYxZjE2NGRkLWRiMzktNDcwZC04ODA1LTNhYTUxNGQ1 ZTdiMC5jcmwwHwYDVR0jBBgwFoAUn+qdbiydJN8Iu7seOhQEldnw9LYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MWYxNjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1 MTRkNWU3YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD493nERU5m5kFHDQtMP+6N0fDWjr8p7uK4rS8c9L4IA4xZQYU8QBZM cMViAQ+714JChkBziCrzqaiO0B2Q2UDu2OuIRe9IyWQpr/BGABpAUqkv2MgORHv1 oosH+90GX5uk8SxE4WOxBRCawUH82qSsv1mweaDo0j4vFvabeEVr5Ig6aQ8upeYw xzVC4DVz4stnLLUAFd8p0n6bhnMOFhttOw8BNoCLuYNn7Mpi6iIxzC2zj6J/Ae9n Vvm3ou5UMQ2PdzHR1V23E9qV8TVSUtIA3c0tJBY+wSeu/WmBPT+2Y5SN3Ytlh9OF lP7UAZUcOm8FmHeibAKtfB9s6NUsSZI= -----END CERTIFICATE-----Generated at Sun Oct 19 22:11:32 2025 by rpki-client