$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/b5434cff-a9db-3c1e-9c5a-27bfa2c47f94.roa File: b5434cff-a9db-3c1e-9c5a-27bfa2c47f94.roa (raw, json) Hash identifier: CPQnw97Lyuy1uE+Xj8uC73BfCyvweL5iI8Npnu3840g= Subject key identifier: D1:AE:1E:56:8B:3E:2F:1D:B7:53:07:60:D5:E7:D5:CC:7F:92:55:72 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584A4AD594E7A95BA26D230B5380 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/b5434cff-a9db-3c1e-9c5a-27bfa2c47f94.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 3477 IP address blocks: 192.133.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:94:e7:a9:5b:a2:6d:23:0b:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=5b93158f-5fbb-4448-9e01-9c23fcc84020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b4:1a:1e:27:14:40:82:a2:33:64:95:2f:dd: cc:d4:56:cd:70:83:28:50:18:65:04:35:79:11:99: bc:17:1d:ff:a0:01:01:e3:29:75:96:d6:fa:72:01: 1c:7e:67:ed:6a:46:90:64:10:f7:51:d1:8e:0d:4f: 6f:14:8f:ef:d5:31:76:7e:1d:c4:6b:78:28:5d:e7: 96:5f:b9:3f:ee:84:b9:08:e9:0b:00:ad:a0:7d:fa: 1a:6b:bf:fa:f3:b1:9a:92:50:89:cc:ef:cd:30:6a: 1e:ca:a3:eb:44:bf:32:ad:52:eb:4f:6b:06:85:5a: ce:6d:7d:3d:56:35:f8:a1:d0:68:0d:e0:f2:5c:02: a8:9d:b0:d9:6d:39:68:df:39:db:ac:db:10:b9:b7: d3:d4:1b:67:af:08:d0:1c:58:6e:dd:c0:3e:9e:98: 15:2e:d4:27:fb:b3:32:f3:60:7b:70:9e:03:18:78: 9a:72:35:3f:7a:3a:45:df:9d:bf:21:f9:45:5d:a0: fe:60:35:09:94:01:53:dd:42:77:7d:77:14:a0:e9: 29:54:15:8b:84:f8:17:35:3d:de:30:2e:ad:28:99: 5e:21:27:e9:7c:30:4c:f2:06:b3:89:ab:bb:fd:3d: 1c:25:f3:a8:19:a0:35:70:f0:ac:0b:b1:68:2a:c8: 0c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AE:1E:56:8B:3E:2F:1D:B7:53:07:60:D5:E7:D5:CC:7F:92:55:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/b5434cff-a9db-3c1e-9c5a-27bfa2c47f94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.133.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:85:5c:b6:5a:dd:be:12:56:50:82:a6:c5:7c:49:e1:82:88: 81:87:0c:f3:81:e7:bf:79:26:91:ce:50:29:b3:41:87:59:f1: dc:08:46:e9:2d:0d:8a:90:81:f8:68:46:28:c8:8d:6b:41:4f: be:2e:bd:bb:b9:78:4b:43:29:ce:75:6e:9a:3f:9a:61:24:af: 42:2a:6f:9e:d8:fa:4c:3c:77:66:15:dc:25:c5:d9:06:b6:5c: 31:12:ce:ce:7c:d8:86:da:b3:0e:b1:f9:2e:92:ae:46:ad:e2: 84:be:84:bc:ba:8e:5d:eb:a4:6c:14:95:d3:75:f7:44:d8:7d: 8f:cd:8b:3f:68:3c:bc:1c:b9:21:a3:f0:79:1a:96:10:9c:5e: 39:74:d7:85:e7:82:df:9d:c6:3d:66:1a:bb:df:5e:cc:2e:69: 4d:93:9b:f6:d6:b2:cf:be:7c:de:23:4c:85:f8:cd:e0:3b:d7: 11:ec:bd:a8:fb:f3:f7:f8:de:b6:f1:8f:dc:9a:46:6c:11:ae: 0f:72:82:a6:eb:9d:c2:2d:55:78:6b:93:12:0e:c7:a6:24:f7: 22:a6:35:96:0b:d6:47:52:00:88:94:ce:09:b7:41:85:e3:15: 75:7b:07:3c:9b:73:ac:f5:90:a3:d4:70:8d:dc:be:7a:06:2b: 30:ba:1a:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpK1ZTnqVuibSMLU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk NWI5MzE1OGYtNWZiYi00NDQ4LTllMDEtOWMyM2ZjYzg0MDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrQaHicUQIKiM2SVL93M1FbNcIMoUBhlBDV5 EZm8Fx3/oAEB4yl1ltb6cgEcfmftakaQZBD3UdGODU9vFI/v1TF2fh3Ea3goXeeW X7k/7oS5COkLAK2gffoaa7/687GaklCJzO/NMGoeyqPrRL8yrVLrT2sGhVrObX09 VjX4odBoDeDyXAKonbDZbTlo3znbrNsQubfT1BtnrwjQHFhu3cA+npgVLtQn+7My 82B7cJ4DGHiacjU/ejpF352/IflFXaD+YDUJlAFT3UJ3fXcUoOkpVBWLhPgXNT3e MC6tKJleISfpfDBM8gaziau7/T0cJfOoGaA1cPCsC7FoKsgMhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGuHlaLPi8dt1MHYNXn1cx/klVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvYjU0MzRjZmYtYTlkYi0z YzFlLTljNWEtMjdiZmEyYzQ3Zjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIUdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGFXLZa3b4SVlCCpsV8SeGCiIGHDPOB5795JpHOUCmzQYdZ8dwIRukt DYqQgfhoRijIjWtBT74uvbu5eEtDKc51bpo/mmEkr0Iqb57Y+kw8d2YV3CXF2Qa2 XDESzs582Ibasw6x+S6Srkat4oS+hLy6jl3rpGwUldN190TYfY/Niz9oPLwcuSGj 8HkalhCcXjl014Xngt+dxj1mGrvfXswuaU2Tm/bWss++fN4jTIX4zeA71xHsvaj7 8/f43rbxj9yaRmwRrg9ygqbrncItVXhrkxIOx6Yk9yKmNZYL1kdSAIiUzgm3QYXj FXV7Bzybc6z1kKPUcI3cvnoGKzC6GmQ= -----END CERTIFICATE-----Generated at Sun Jun 29 15:01:56 2025 by rpki-client