$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/4f49763f-ed78-345f-8b50-e6621c015ab1.roa File: 4f49763f-ed78-345f-8b50-e6621c015ab1.roa (raw, json) Hash identifier: 3fXNPyS8vJmRiwawK7WAqfBb9vjWksWFXR/gbMS1UfQ= Subject key identifier: E8:4A:F8:E3:ED:0E:A3:17:BB:B3:62:2C:1F:16:E7:05:A0:D8:58:58 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584A3CE022F81231205959601400 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/4f49763f-ed78-345f-8b50-e6621c015ab1.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 3477 IP address blocks: 192.58.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:22:f8:12:31:20:59:59:60:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=abfa5119-429a-452a-89ad-a5ecd68bf9e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:90:8f:6e:f7:f9:3e:53:20:5c:85:82:06: 6c:af:65:b4:d6:bb:16:a5:52:b3:c0:ce:1a:e9:2e: 4c:24:56:d8:91:72:93:0e:3e:2e:00:79:82:cf:d8: ff:c0:42:2b:42:0e:1a:04:41:a3:6d:18:a8:ec:ee: f3:9b:4d:92:79:55:b0:28:fb:e7:8c:4e:bd:c4:e7: ed:36:fc:50:c8:6d:a8:b2:1c:62:94:39:6c:5b:1a: af:89:7f:8c:e8:d3:19:a5:df:99:99:b4:78:aa:1d: a7:6f:26:53:23:32:af:53:f2:19:8f:af:d2:18:9d: c7:54:e4:6e:91:9d:3d:0b:49:e3:7e:ec:99:88:65: a2:e7:41:30:57:c0:36:90:a6:a6:60:be:9b:a6:aa: 7d:24:38:1d:0a:fc:ab:d3:28:ce:1a:a8:62:a2:87: c2:cd:3f:c4:65:b7:e7:89:35:08:b7:60:41:ce:63: 50:10:62:67:62:d8:cd:a1:c9:77:04:1e:0d:c5:13: 10:5b:f3:75:fc:2c:64:b9:9f:3e:78:14:c6:51:23: c7:5f:5f:f1:86:07:40:99:51:db:aa:9b:62:b5:54: 57:c0:8f:14:8a:33:b5:b7:94:a1:7f:9b:ab:40:8c: 98:b6:ab:96:73:61:3e:f5:55:da:f6:c2:59:68:09: d8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4A:F8:E3:ED:0E:A3:17:BB:B3:62:2C:1F:16:E7:05:A0:D8:58:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/4f49763f-ed78-345f-8b50-e6621c015ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.58.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:82:99:2b:6f:7f:56:0c:84:8a:5e:4b:1a:9a:e1:cb:ae:8e: 40:f1:b5:8c:15:9b:0f:17:de:14:68:c0:07:e9:1a:64:7a:c9: ec:b9:cf:de:54:d0:fb:3d:f1:97:d4:e3:d9:ca:f9:2a:5a:9e: b3:2f:ee:51:84:c6:8d:9d:fb:1e:5a:cd:c9:27:c1:99:9f:76: d7:ff:79:21:03:b4:67:f2:ba:00:d2:03:c1:b3:e3:45:37:c4: 28:04:7b:7a:81:16:0f:d2:db:77:ce:07:6a:01:50:0c:07:e5: 36:d1:10:47:e0:fb:21:ce:c8:a2:37:f3:d2:71:ff:f4:11:c5: 53:9a:84:38:4e:31:d8:0c:dd:44:bd:96:35:17:90:0e:23:29: ca:4c:64:bc:2f:0e:2b:70:fd:07:1f:db:a7:f5:5d:0b:30:b2: 35:b6:06:fb:5f:ae:e6:11:61:b9:ab:9d:a7:98:9f:30:f7:fd: 9d:8b:13:7a:ad:cb:2d:b1:b5:82:53:ef:c5:bf:f4:29:54:0e: ec:eb:cc:44:07:89:4a:af:3c:00:18:d2:f1:f5:39:06:e3:2b: 0a:33:c5:88:7e:d2:f0:71:3d:2b:fb:ab:8d:59:e8:19:63:d3: fb:96:3f:85:04:d7:58:1f:d2:f0:da:c1:86:53:e5:ce:da:0d: 28:aa:d1:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84CL4EjEgWVlgFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk YWJmYTUxMTktNDI5YS00NTJhLTg5YWQtYTVlY2Q2OGJmOWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9CQj273+T5TIFyFggZsr2W01rsWpVKzwM4a 6S5MJFbYkXKTDj4uAHmCz9j/wEIrQg4aBEGjbRio7O7zm02SeVWwKPvnjE69xOft NvxQyG2oshxilDlsWxqviX+M6NMZpd+ZmbR4qh2nbyZTIzKvU/IZj6/SGJ3HVORu kZ09C0njfuyZiGWi50EwV8A2kKamYL6bpqp9JDgdCvyr0yjOGqhioofCzT/EZbfn iTUIt2BBzmNQEGJnYtjNocl3BB4NxRMQW/N1/CxkuZ8+eBTGUSPHX1/xhgdAmVHb qptitVRXwI8UijO1t5Shf5urQIyYtquWc2E+9VXa9sJZaAnY/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhK+OPtDqMXu7NiLB8W5wWg2FhYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvNGY0OTc2M2YtZWQ3OC0z NDVmLThiNTAtZTY2MjFjMDE1YWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDoDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2CmStvf1YMhIpeSxqa4cuujkDxtYwVmw8X3hRowAfpGmR6yey5z95U 0Ps98ZfU49nK+SpanrMv7lGExo2d+x5azcknwZmfdtf/eSEDtGfyugDSA8Gz40U3 xCgEe3qBFg/S23fOB2oBUAwH5TbREEfg+yHOyKI389Jx//QRxVOahDhOMdgM3US9 ljUXkA4jKcpMZLwvDitw/Qcf26f1XQswsjW2BvtfruYRYbmrnaeYnzD3/Z2LE3qt yy2xtYJT78W/9ClUDuzrzEQHiUqvPAAY0vH1OQbjKwozxYh+0vBxPSv7q41Z6Blj 0/uWP4UE11gf0vDawYZT5c7aDSiq0b0= -----END CERTIFICATE-----Generated at Sun Jun 29 15:58:59 2025 by rpki-client