$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e045b047-e3c4-38ab-aace-d4c0e412a6b9.roa File: e045b047-e3c4-38ab-aace-d4c0e412a6b9.roa (raw, json) Hash identifier: ZQXTfZbjhhzOU29rUqEdOMrlIQ79n5f9QAxqNlUkfpE= Subject key identifier: 5F:9F:5B:3D:60:C4:A4:43:1D:32:2A:D5:41:5D:5C:EF:7C:3C:63:03 Certificate issuer: /CN=e8a5a257-a121-41de-b0be-6ab191fc4486 Certificate serial: 010D0C9F4328584A612B1D90A84836A9D507D900 Authority key identifier: 32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e045b047-e3c4-38ab-aace-d4c0e412a6b9.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 32709 IP address blocks: 168.92.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:1d:90:a8:48:36:a9:d5:07:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8a5a257-a121-41de-b0be-6ab191fc4486 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=787920d8-de75-419d-98e7-a94c3c1030ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ba:e7:aa:7c:87:e0:eb:91:5d:ae:99:91:2c: 59:a4:59:fc:04:79:c6:38:4e:d1:25:a2:71:08:ee: e7:a4:ed:16:9f:41:07:13:ad:8f:79:35:9d:c1:f1: 05:0c:1f:1d:c5:cc:e3:4a:59:b6:e5:b6:f1:f7:28: 3d:5d:c2:f2:58:4f:f4:25:de:41:0b:77:11:e6:0b: 71:c7:e3:dc:61:62:76:18:58:2e:c0:0d:60:13:f5: aa:f0:c4:3a:6f:d0:1f:90:56:bb:c3:58:08:1e:9a: c4:f5:dc:a6:77:23:3e:9c:6e:d8:44:d6:63:08:1d: db:ef:bd:83:68:03:de:cd:45:9d:20:e1:d7:0a:66: d9:c8:96:b6:6c:c3:42:4e:26:55:2f:5b:06:be:84: a9:97:cf:43:ae:a4:7c:02:ce:45:6b:e7:b5:a8:c6: b5:ac:e5:e3:42:bb:c6:39:64:0e:cd:95:59:63:9b: de:ae:cf:86:23:64:d9:6d:83:bc:a7:25:bd:5e:e0: a0:b5:8f:18:c3:b2:9e:5b:b1:9c:b8:4f:08:f4:cc: 7d:4b:66:de:ab:c1:6c:12:d6:7f:ff:8a:9f:39:0f: 53:4c:10:63:08:f9:81:b4:cf:a9:af:85:d4:fb:36: 26:51:e3:27:dd:8d:a5:d4:94:77:9c:0b:38:16:69: 12:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9F:5B:3D:60:C4:A4:43:1D:32:2A:D5:41:5D:5C:EF:7C:3C:63:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e045b047-e3c4-38ab-aace-d4c0e412a6b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl X509v3 Authority Key Identifier: keyid:32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer sbgp-ipAddrBlock: critical IPv4: 168.92.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:84:92:35:81:bd:03:ef:9f:b8:4b:2a:f9:a7:82:cb:ce:d6: da:58:db:1f:26:ca:2b:56:83:4f:cd:51:f7:19:4a:02:c4:a0: ae:a6:70:0d:00:fa:fb:99:de:3c:a4:d2:65:18:5e:b5:70:dd: e0:90:3d:22:d2:21:a4:1d:ee:06:54:ca:14:5c:e6:50:eb:37: c2:44:0d:cd:d3:7a:70:7a:b8:ad:91:09:fc:55:f4:10:2c:6d: 00:15:3a:2a:25:6e:73:3f:de:a7:61:52:b0:be:4a:fe:37:f3: be:c3:ff:54:0b:6c:b8:0e:95:bc:4b:ea:7a:fd:b7:9d:8b:eb: 3a:b4:36:50:a0:06:be:75:cb:39:ae:2b:6f:d3:3e:8f:2a:00: dd:9f:92:68:47:66:38:5a:40:9b:78:99:e7:a4:e7:7b:4a:b7: 2d:12:fe:29:cc:2a:1c:56:5e:b6:e1:31:c0:73:62:ed:02:5b: 77:c0:25:04:c7:f3:cf:66:55:b7:72:67:e6:15:39:2f:89:cd: 6b:2d:9e:06:c2:8a:3f:cf:68:df:ff:41:1d:8f:3a:ad:de:fb: 24:9d:dc:9f:c1:9c:66:50:15:c4:3f:9c:dc:49:8c:76:d7:5a: 4f:7b:6d:6e:a5:77:95:41:d1:e9:dd:a9:27:95:4a:98:dc:8c: d3:ce:0d:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKx2QqEg2qdUH2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThhNWEyNTctYTEyMS00MWRlLWIwYmUtNmFiMTkxZmM0 NDg2MB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk Nzg3OTIwZDgtZGU3NS00MTlkLTk4ZTctYTk0YzNjMTAzMGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7rnqnyH4OuRXa6ZkSxZpFn8BHnGOE7RJaJx CO7npO0Wn0EHE62PeTWdwfEFDB8dxczjSlm25bbx9yg9XcLyWE/0Jd5BC3cR5gtx x+PcYWJ2GFguwA1gE/Wq8MQ6b9AfkFa7w1gIHprE9dymdyM+nG7YRNZjCB3b772D aAPezUWdIOHXCmbZyJa2bMNCTiZVL1sGvoSpl89DrqR8As5Fa+e1qMa1rOXjQrvG OWQOzZVZY5vers+GI2TZbYO8pyW9XuCgtY8Yw7KeW7GcuE8I9Mx9S2beq8FsEtZ/ /4qfOQ9TTBBjCPmBtM+pr4XU+zYmUeMn3Y2l1JR3nAs4FmkSqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+fWz1gxKRDHTIq1UFdXO98PGMDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOGE1 YTI1Ny1hMTIxLTQxZGUtYjBiZS02YWIxOTFmYzQ0ODYvZTA0NWIwNDctZTNjNC0z OGFiLWFhY2UtZDRjMGU0MTJhNmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZThhNWEyNTctYTEyMS00MWRlLWIw YmUtNmFiMTkxZmM0NDg2L2U4YTVhMjU3LWExMjEtNDFkZS1iMGJlLTZhYjE5MWZj NDQ4Ni5jcmwwHwYDVR0jBBgwFoAUMoEBACTss5HVn2xikJ/BC2weBc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOGE1YTI1Ny1hMTIxLTQxZGUtYjBiZS02YWIx OTFmYzQ0ODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqFzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmEkjWBvQPvn7hLKvmngsvO1tpY2x8myitWg0/NUfcZSgLEoK6mcA0A +vuZ3jyk0mUYXrVw3eCQPSLSIaQd7gZUyhRc5lDrN8JEDc3TenB6uK2RCfxV9BAs bQAVOiolbnM/3qdhUrC+Sv43877D/1QLbLgOlbxL6nr9t52L6zq0NlCgBr51yzmu K2/TPo8qAN2fkmhHZjhaQJt4meek53tKty0S/inMKhxWXrbhMcBzYu0CW3fAJQTH 889mVbdyZ+YVOS+JzWstngbCij/PaN//QR2POq3e+ySd3J/BnGZQFcQ/nNxJjHbX Wk97bW6ld5VB0endqSeVSpjcjNPODU0= -----END CERTIFICATE-----Generated at Thu Jul 10 19:44:31 2025 by rpki-client