$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/149af3ce-cb4d-3df1-a7df-1a7845dd354a.roa File: 149af3ce-cb4d-3df1-a7df-1a7845dd354a.roa (raw, json) Hash identifier: Lx3GuMM6mMLRtjCfeoIVf0iZ/Czq4UscXDfslxVHt7g= Subject key identifier: 3C:C2:6E:95:AF:E0:1D:BE:16:3A:5D:2F:C0:4B:12:44:D7:ED:9E:73 Certificate issuer: /CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa Certificate serial: 010D0C9F4328584B13D6AA5A061C5B6BBEF4D860 Authority key identifier: 1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/149af3ce-cb4d-3df1-a7df-1a7845dd354a.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 192.135.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:aa:5a:06:1c:5b:6b:be:f4:d8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=7f36a2eb-b52c-442d-bb6d-48073c4fb589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3f:d1:d2:12:68:0d:8f:8d:0a:2f:26:c6:6a: 9a:c8:72:51:d4:a9:12:9f:7d:c3:0d:c5:41:1b:cb: a7:bc:f5:37:7a:3d:3d:83:33:90:1a:37:30:db:15: 92:99:2e:12:ac:e9:1e:da:d8:90:17:22:a6:aa:10: a4:e8:0c:ef:76:f4:88:ec:d1:15:23:7f:1d:f7:01: 45:a1:9b:f2:86:29:e8:8d:1c:cf:d5:fb:bf:fe:af: 86:4e:74:b5:f1:e9:e3:51:d6:d8:32:79:3d:b0:15: 0b:35:84:cf:74:86:1c:60:a5:be:2e:bb:e7:02:86: 31:f9:d5:64:e7:24:fb:64:f2:23:4e:6b:46:1a:60: 24:89:60:7a:2f:35:e4:2a:ac:eb:a1:73:da:c3:f5: 6c:5a:a0:54:ae:ec:ff:72:a1:a8:c4:fc:81:e3:ef: 51:58:05:7b:34:78:3b:f1:dd:d7:d8:80:04:2e:25: f8:fb:63:7d:a0:b5:12:cb:37:fe:ae:f4:02:1e:54: 68:f5:3d:df:3c:80:a7:45:5f:26:12:8b:8b:e3:6b: c9:1b:d3:59:d6:5a:15:09:f1:9e:ec:f7:76:18:44: ab:d5:de:f3:34:63:b0:ea:b3:31:36:7e:e0:c4:bd: 01:57:b7:4a:5c:81:a9:01:ed:e4:f6:64:a5:b9:1e: 10:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C2:6E:95:AF:E0:1D:BE:16:3A:5D:2F:C0:4B:12:44:D7:ED:9E:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/149af3ce-cb4d-3df1-a7df-1a7845dd354a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl X509v3 Authority Key Identifier: keyid:1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer sbgp-ipAddrBlock: critical IPv4: 192.135.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:82:80:c7:60:cf:a2:1b:37:54:27:49:02:a6:f2:55:3b:c8: 81:d6:ef:db:64:4f:ea:0b:92:1d:05:ac:f0:b0:c8:e6:ec:41: 2a:ac:93:88:9e:0a:6a:52:48:a3:47:99:e5:47:f2:31:d7:a2: 2d:a8:93:c2:45:f3:c7:3c:20:64:bf:58:d1:eb:84:ea:81:f2: d4:1a:d7:7a:04:e0:04:6d:75:5f:07:c5:ee:15:88:88:02:69: 35:e6:93:e8:8f:77:95:dd:60:30:94:71:c4:0e:5b:b0:6b:de: bb:67:68:35:25:e1:21:1c:de:72:5f:36:84:84:86:c1:66:b1: d5:59:23:57:0d:a8:aa:6d:4e:0c:87:15:32:32:04:19:57:b3: e5:3d:f2:12:10:51:56:9c:4a:31:07:2e:28:4f:e7:ad:d6:5e: 4e:aa:6e:68:80:25:96:53:46:b8:4b:55:6f:c7:f2:12:3f:f0: 16:5c:14:30:68:20:a9:86:a9:fe:c5:d5:53:d3:e6:d5:ee:bf: c9:59:72:45:ef:24:28:4f:8f:b0:95:7c:1d:a8:80:8c:94:e4: b0:dd:c2:fa:ff:ec:d1:42:ec:79:d7:0a:0e:30:d4:e4:6a:b9: c1:1f:d7:44:82:b2:5a:37:8c:f5:4b:df:0c:36:4c:a5:7d:01: a3:15:ce:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1qpaBhxba7702GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1MWZkN2QtMzdkNy00ZGE2LThkZTgtN2QzNDZlMDAw NmFhMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk N2YzNmEyZWItYjUyYy00NDJkLWJiNmQtNDgwNzNjNGZiNTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz/R0hJoDY+NCi8mxmqayHJR1KkSn33DDcVB G8unvPU3ej09gzOQGjcw2xWSmS4SrOke2tiQFyKmqhCk6AzvdvSI7NEVI38d9wFF oZvyhinojRzP1fu//q+GTnS18enjUdbYMnk9sBULNYTPdIYcYKW+LrvnAoYx+dVk 5yT7ZPIjTmtGGmAkiWB6LzXkKqzroXPaw/VsWqBUruz/cqGoxPyB4+9RWAV7NHg7 8d3X2IAELiX4+2N9oLUSyzf+rvQCHlRo9T3fPICnRV8mEouL42vJG9NZ1loVCfGe 7Pd2GESr1d7zNGOw6rMxNn7gxL0BV7dKXIGpAe3k9mSluR4Q0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzCbpWv4B2+FjpdL8BLEkTX7Z5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZTUx ZmQ3ZC0zN2Q3LTRkYTYtOGRlOC03ZDM0NmUwMDA2YWEvMTQ5YWYzY2UtY2I0ZC0z ZGYxLWE3ZGYtMWE3ODQ1ZGQzNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGU1MWZkN2QtMzdkNy00ZGE2LThk ZTgtN2QzNDZlMDAwNmFhL2RlNTFmZDdkLTM3ZDctNGRhNi04ZGU4LTdkMzQ2ZTAw MDZhYS5jcmwwHwYDVR0jBBgwFoAUHYsjQJQ4f91apjmhU9JAQqG/3KMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZTUxZmQ3ZC0zN2Q3LTRkYTYtOGRlOC03ZDM0 NmUwMDA2YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+CgMdgz6IbN1QnSQKm8lU7yIHW79tkT+oLkh0FrPCwyObsQSqsk4ie CmpSSKNHmeVH8jHXoi2ok8JF88c8IGS/WNHrhOqB8tQa13oE4ARtdV8Hxe4ViIgC aTXmk+iPd5XdYDCUccQOW7Br3rtnaDUl4SEc3nJfNoSEhsFmsdVZI1cNqKptTgyH FTIyBBlXs+U98hIQUVacSjEHLihP563WXk6qbmiAJZZTRrhLVW/H8hI/8BZcFDBo IKmGqf7F1VPT5tXuv8lZckXvJChPj7CVfB2ogIyU5LDdwvr/7NFC7HnXCg4w1ORq ucEf10SCslo3jPVL3ww2TKV9AaMVzqc= -----END CERTIFICATE-----Generated at Fri Sep 5 05:55:30 2025 by rpki-client