$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/94b919d1-b053-3e4c-8ada-5c10fb23217e.roa File: 94b919d1-b053-3e4c-8ada-5c10fb23217e.roa (raw, json) Hash identifier: dBNPZhfFcaOzwbcnHBFPPagAHFvnQd3xiXEoNR2GuIg= Subject key identifier: CF:45:D9:D5:62:84:02:86:F2:69:B8:75:81:27:F1:66:DC:EA:49:3D Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584A3CE022A2FB25CFCA0E8DF300 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/94b919d1-b053-3e4c-8ada-5c10fb23217e.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 0 IP address blocks: 192.58.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:22:a2:fb:25:cf:ca:0e:8d:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=cb5e4faa-f2ad-4bd9-819f-ef4b511c0916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a2:c8:b1:ba:4b:30:53:27:3d:c8:cc:82:4e: b1:af:05:1a:a1:d6:36:41:37:65:00:dd:51:4c:ff: 8b:f3:de:5e:eb:e3:18:2a:f3:a8:1c:76:0b:e6:cf: 98:c6:3d:0a:15:cf:0a:38:ae:8c:a7:0a:1e:00:7a: 1d:a0:fd:de:e2:df:44:cb:b5:54:ea:a4:29:26:9a: 14:87:66:49:0c:5e:92:e8:bf:80:fd:47:d7:bb:0a: 61:d5:30:77:9e:60:35:b6:5c:6d:b5:a6:18:37:9f: 6f:a9:17:64:50:a7:5e:2c:61:78:8d:75:9d:9d:6e: 6d:e2:ad:bf:5a:8b:64:b4:e2:3d:1b:c5:c9:ce:31: 43:c1:44:c8:12:25:83:48:2e:17:98:31:2d:1a:80: 6b:8b:d0:2a:e0:9c:3e:9e:00:74:f1:d0:7b:4e:73: 60:8b:27:ac:2b:89:89:df:51:8b:02:a7:e3:6b:90: c8:8a:f1:4b:9a:61:17:66:b4:60:aa:8d:22:7f:af: 58:2f:f1:c7:b0:f0:35:46:54:35:01:01:17:d1:1a: 44:b0:eb:b3:dc:be:eb:55:f2:74:09:01:6b:59:dc: 28:c3:f5:a2:51:7f:d5:7b:b5:68:bb:09:7c:c0:5e: d5:b6:d2:d0:8f:da:2e:d3:96:6a:13:94:fb:a7:72: 73:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:45:D9:D5:62:84:02:86:F2:69:B8:75:81:27:F1:66:DC:EA:49:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/94b919d1-b053-3e4c-8ada-5c10fb23217e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.58.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:3a:b7:8f:5a:14:fe:82:c9:83:33:db:7e:be:bd:18:72:b7: 02:b1:08:8d:e1:a7:86:d7:d8:51:8e:89:84:9f:52:7b:a8:15: 8f:57:45:21:03:3d:6d:ba:d6:42:04:fc:e2:e7:fd:24:25:e6: f2:bb:8c:4d:83:4f:4c:8b:8e:92:f8:94:9d:b8:7f:49:0a:ea: ff:8b:b7:b7:8f:47:10:9b:55:99:6c:5e:13:47:07:5b:93:5a: 29:57:26:66:20:c9:21:b0:a4:a3:93:d2:89:53:f8:ca:02:9c: 6e:7f:ef:a6:9f:b3:7a:9e:b9:39:16:1a:9f:72:ba:c6:fe:a6: 13:09:d8:ea:96:53:f0:38:5d:60:16:c0:12:32:b8:4a:19:03: 0f:fb:1d:a9:01:20:21:e7:48:9a:cd:49:6a:70:1e:cc:05:c2: 03:f6:67:0c:18:81:2f:53:86:11:4a:9a:68:6a:36:cf:0d:5f: 16:31:92:8f:10:5a:cf:3a:57:a1:d4:c4:36:6d:d6:1c:4f:3c: 17:96:a5:2d:71:02:5d:4b:51:51:7b:f8:25:96:90:af:8c:a9: 1c:e3:67:70:f2:ca:90:40:43:03:34:88:05:8e:41:7d:d6:15: 4a:1e:a0:d3:36:f3:c8:e1:f8:84:6b:71:75:ab:e1:74:76:34: 7e:c3:fb:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84CKi+yXPyg6N8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk Y2I1ZTRmYWEtZjJhZC00YmQ5LTgxOWYtZWY0YjUxMWMwOTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qLIsbpLMFMnPcjMgk6xrwUaodY2QTdlAN1R TP+L895e6+MYKvOoHHYL5s+Yxj0KFc8KOK6MpwoeAHodoP3e4t9Ey7VU6qQpJpoU h2ZJDF6S6L+A/UfXuwph1TB3nmA1tlxttaYYN59vqRdkUKdeLGF4jXWdnW5t4q2/ WotktOI9G8XJzjFDwUTIEiWDSC4XmDEtGoBri9Aq4Jw+ngB08dB7TnNgiyesK4mJ 31GLAqfja5DIivFLmmEXZrRgqo0if69YL/HHsPA1RlQ1AQEX0RpEsOuz3L7rVfJ0 CQFrWdwow/WiUX/Ve7Vouwl8wF7VttLQj9ou05ZqE5T7p3Jz1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9F2dVihAKG8mm4dYEn8Wbc6kk9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvOTRiOTE5ZDEtYjA1My0z ZTRjLThhZGEtNWMxMGZiMjMyMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwDrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHI6t49aFP6CyYMz236+vRhytwKxCI3hp4bX2FGOiYSfUnuoFY9XRSED PW261kIE/OLn/SQl5vK7jE2DT0yLjpL4lJ24f0kK6v+Lt7ePRxCbVZlsXhNHB1uT WilXJmYgySGwpKOT0olT+MoCnG5/76afs3qeuTkWGp9yusb+phMJ2OqWU/A4XWAW wBIyuEoZAw/7HakBICHnSJrNSWpwHswFwgP2ZwwYgS9ThhFKmmhqNs8NXxYxko8Q Ws86V6HUxDZt1hxPPBeWpS1xAl1LUVF7+CWWkK+MqRzjZ3DyypBAQwM0iAWOQX3W FUoeoNM288jh+IRrcXWr4XR2NH7D+60= -----END CERTIFICATE-----Generated at Sun Jun 29 10:40:38 2025 by rpki-client