$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/4d0df983-efe5-30fb-9b23-cf9f866054a3.roa File: 4d0df983-efe5-30fb-9b23-cf9f866054a3.roa (raw, json) Hash identifier: PNrZ52UnoF+qsZg21ZggZ3lfh7n1U1P1TmmDG5d11N4= Subject key identifier: 28:A3:4B:0F:4C:65:31:A6:D2:3F:5F:A1:9C:EA:09:C8:C9:A2:50:74 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584A5E60634B82FDDFEE3CFF5C68 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/4d0df983-efe5-30fb-9b23-cf9f866054a3.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 59895 IP address blocks: 192.186.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:63:4b:82:fd:df:ee:3c:ff:5c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=48696779-4dcb-481c-8b44-9acc7e00bad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:96:02:6a:ad:91:78:37:18:f7:7a:0a:54:07: 8d:6c:a3:2f:a5:15:c3:c7:7d:e8:46:c1:1c:8d:2b: 44:ae:3e:32:96:d1:1e:7e:bc:c6:0b:0e:74:dc:e0: a3:1f:df:c9:ea:a7:10:7a:e2:80:10:5a:6d:bf:a4: ce:9a:ad:e2:9a:43:29:a7:e5:e5:98:86:08:34:be: bb:91:b0:29:89:03:8a:91:de:e1:ff:dd:46:5c:7b: 49:7f:7d:ff:a0:a1:28:54:fe:36:a9:76:8f:9f:cb: fc:74:23:cb:73:b7:38:e8:11:6d:ff:43:7a:fc:aa: 6d:f2:d7:17:d2:e5:24:6a:94:91:ca:1e:36:fc:ad: fb:5b:cf:66:b7:ce:6d:fa:1e:19:05:3c:ed:7b:2b: 46:ed:e3:e7:bd:b2:61:9b:0a:b2:f5:4d:a1:e4:6c: 39:5f:16:4c:d7:2e:73:23:af:47:8b:84:b7:68:55: 30:d2:f2:54:1d:78:48:29:05:71:b5:8b:09:98:80: 5b:fd:d9:ab:9f:8e:78:10:ed:dd:88:f7:86:de:d8: 1d:b8:a3:2e:b6:7d:5e:28:a1:78:27:31:71:52:51: 9d:a3:01:75:fa:1c:01:9e:c7:ea:45:cc:b5:e6:2b: 31:dc:e6:e9:e3:87:8a:c0:93:34:83:d0:6a:be:c6: 88:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A3:4B:0F:4C:65:31:A6:D2:3F:5F:A1:9C:EA:09:C8:C9:A2:50:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/4d0df983-efe5-30fb-9b23-cf9f866054a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 192.186.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:6c:8d:82:44:08:38:3e:d0:ef:78:83:44:3f:63:16:36:5a: 77:51:38:94:b3:36:f2:1b:c3:28:87:61:79:4b:88:1b:5e:42: ae:16:30:2d:56:92:5c:c9:a6:15:86:58:86:48:0f:1d:82:6c: 08:d2:d9:2d:a6:82:ac:73:59:80:26:69:02:fc:38:69:3d:da: eb:ae:94:22:b3:98:c7:81:7e:8d:64:47:c5:32:78:30:7c:1d: 55:3d:37:d6:07:0f:b0:a3:15:d3:49:26:39:a8:e3:43:32:50: fa:6f:ba:e5:3f:6c:9f:38:90:7f:3f:ef:e2:91:0c:50:f5:50: dc:bf:1f:aa:3e:a6:7c:b9:e2:38:de:d7:fb:b5:cb:ee:a2:f6: 96:4b:f6:0a:51:ba:c9:de:1e:7e:9d:d6:92:0b:30:81:1d:6a: ce:8a:fa:c2:90:af:85:d8:04:cc:74:be:02:03:a2:fe:0d:d1: 3f:2d:ff:f3:d2:d9:49:a3:ed:85:ab:58:25:ce:d5:90:87:a5: 4b:0a:90:48:a1:fb:84:cb:a1:6b:9f:5b:d8:cc:fc:25:9a:ac: 11:2d:23:cf:88:5b:17:f5:2f:5e:f6:28:33:f8:39:51:56:24: 3a:d8:ae:b0:96:61:d0:61:7e:17:a7:9d:9c:42:07:c2:08:a1: a0:b8:ae:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGNLgv3f7jz/XGgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk NDg2OTY3NzktNGRjYi00ODFjLThiNDQtOWFjYzdlMDBiYWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5YCaq2ReDcY93oKVAeNbKMvpRXDx33oRsEc jStErj4yltEefrzGCw503OCjH9/J6qcQeuKAEFptv6TOmq3imkMpp+XlmIYINL67 kbApiQOKkd7h/91GXHtJf33/oKEoVP42qXaPn8v8dCPLc7c46BFt/0N6/Kpt8tcX 0uUkapSRyh42/K37W89mt85t+h4ZBTzteytG7ePnvbJhmwqy9U2h5Gw5XxZM1y5z I69Hi4S3aFUw0vJUHXhIKQVxtYsJmIBb/dmrn454EO3diPeG3tgduKMutn1eKKF4 JzFxUlGdowF1+hwBnsfqRcy15isx3Obp44eKwJM0g9BqvsaI2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCijSw9MZTGm0j9foZzqCcjJolB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNGQwZGY5ODMtZWZlNS0z MGZiLTliMjMtY2Y5Zjg2NjA1NGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLq7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNsjYJECDg+0O94g0Q/YxY2WndROJSzNvIbwyiHYXlLiBteQq4WMC1W klzJphWGWIZIDx2CbAjS2S2mgqxzWYAmaQL8OGk92uuulCKzmMeBfo1kR8UyeDB8 HVU9N9YHD7CjFdNJJjmo40MyUPpvuuU/bJ84kH8/7+KRDFD1UNy/H6o+pny54jje 1/u1y+6i9pZL9gpRusneHn6d1pILMIEdas6K+sKQr4XYBMx0vgIDov4N0T8t//PS 2Umj7YWrWCXO1ZCHpUsKkEih+4TLoWufW9jM/CWarBEtI8+IWxf1L172KDP4OVFW JDrYrrCWYdBhfhennZxCB8IIoaC4rro= -----END CERTIFICATE-----Generated at Tue Jul 1 22:54:56 2025 by rpki-client