$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/b8b9f498-4bc0-3c3e-b203-a7fc6680a780.roa File: b8b9f498-4bc0-3c3e-b203-a7fc6680a780.roa (raw, json) Hash identifier: /BIx9sp/H/6rTmVblil2Wjp6nevmdouETudlG8zOtmA= Subject key identifier: 07:CF:95:36:30:1D:B5:5E:69:71:35:58:F5:07:F9:7E:F4:32:8E:1C Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584A3CE02A9C8A6F69E419647D80 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/b8b9f498-4bc0-3c3e-b203-a7fc6680a780.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 0 IP address blocks: 192.58.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:2a:9c:8a:6f:69:e4:19:64:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=b8e36214-2333-4747-83ba-9d4794a23e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8a:96:2f:7b:ba:bf:e8:8d:cd:67:fa:17:ab: d2:0b:82:15:e6:a0:3b:08:8f:e8:83:5b:82:b6:8d: 72:f7:29:50:79:a7:b1:e7:08:bf:1f:ed:31:7c:54: 92:05:c3:9f:4d:1e:ef:68:9b:58:e2:74:54:d3:06: fb:43:a5:a1:b1:1b:97:2e:82:e9:a7:eb:f8:45:28: a5:c7:d0:8c:3b:15:56:c2:0a:a4:72:ea:9e:38:e1: 0d:b2:cc:10:ee:82:f0:bb:4f:88:55:69:12:1d:f1: af:36:ea:53:40:ea:65:df:f6:c9:20:79:44:ca:6b: b8:5d:27:0c:ac:2b:bc:91:ab:62:bb:77:5a:59:48: 44:05:10:34:6a:26:cb:d1:99:ce:b9:96:35:c7:9d: 64:57:26:1b:7b:16:2e:80:e2:81:4a:f0:c6:91:a9: ac:32:cc:1a:a4:39:02:12:5f:1c:c0:dd:89:7c:7a: b4:80:fc:c2:de:d1:dc:11:94:71:ed:01:71:4e:0c: 70:c2:05:d4:00:ba:52:6f:7a:b5:19:68:6f:6d:30: 67:3e:52:c3:a5:65:aa:f7:75:37:71:21:ad:91:44: 21:56:a5:1e:96:5c:b0:ef:8d:8f:39:30:78:cf:0e: 01:98:c1:37:da:bf:c2:ae:1b:36:3b:1d:71:b7:35: 38:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CF:95:36:30:1D:B5:5E:69:71:35:58:F5:07:F9:7E:F4:32:8E:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/b8b9f498-4bc0-3c3e-b203-a7fc6680a780.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.58.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:04:0c:d2:c7:55:9a:67:b7:71:7f:67:29:ff:83:a4:96:0e: 3c:fd:89:2a:72:36:44:7c:5b:8f:a2:c6:1a:bb:e6:cf:b0:a0: 36:82:ed:7a:55:b8:be:eb:37:7e:4a:f5:75:2a:af:4f:21:b2: 5b:78:27:90:bc:9a:94:5e:32:d4:9f:14:d6:51:4a:71:90:8d: 49:dc:26:f0:ac:cd:30:91:15:5e:e8:b5:67:d9:f3:5e:84:ed: 28:1a:35:0a:f7:9f:6a:5e:53:f3:0b:f0:41:b2:77:a1:3e:5f: 67:cc:4d:f8:23:28:2c:0e:0a:58:f7:df:2d:09:ef:94:34:39: 97:68:c8:74:c8:2b:95:8c:2c:a1:8d:32:55:aa:73:11:ea:cb: 10:dc:74:dc:9c:38:b2:9c:fa:27:7a:13:2a:57:a8:ce:5c:ea: 02:f4:eb:d7:98:5a:95:be:40:67:a4:67:5b:15:b2:8e:0a:8b: 4f:92:04:2f:05:46:b5:6d:ee:7f:67:c6:b1:61:7f:cc:ad:b8: e0:92:f6:de:d8:79:df:c5:f1:8e:05:4a:b8:dd:99:ab:20:dd: 1d:07:ae:19:83:7d:88:f7:b6:92:28:44:b6:0f:36:50:ca:1e: 00:a1:b2:83:8c:89:47:0c:a2:5f:62:19:57:1d:f0:38:e6:9b: e7:5a:c0:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84Cqcim9p5BlkfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk YjhlMzYyMTQtMjMzMy00NzQ3LTgzYmEtOWQ0Nzk0YTIzZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YqWL3u6v+iNzWf6F6vSC4IV5qA7CI/og1uC to1y9ylQeaex5wi/H+0xfFSSBcOfTR7vaJtY4nRU0wb7Q6WhsRuXLoLpp+v4RSil x9CMOxVWwgqkcuqeOOENsswQ7oLwu0+IVWkSHfGvNupTQOpl3/bJIHlEymu4XScM rCu8katiu3daWUhEBRA0aibL0ZnOuZY1x51kVyYbexYugOKBSvDGkamsMswapDkC El8cwN2JfHq0gPzC3tHcEZRx7QFxTgxwwgXUALpSb3q1GWhvbTBnPlLDpWWq93U3 cSGtkUQhVqUellyw742POTB4zw4BmME32r/Crhs2Ox1xtzU4gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfPlTYwHbVeaXE1WPUH+X70Mo4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvYjhiOWY0OTgtNGJjMC0z YzNlLWIyMDMtYTdmYzY2ODBhNzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsEDNLHVZpnt3F/Zyn/g6SWDjz9iSpyNkR8W4+ixhq75s+woDaC7XpV uL7rN35K9XUqr08hslt4J5C8mpReMtSfFNZRSnGQjUncJvCszTCRFV7otWfZ816E 7SgaNQr3n2peU/ML8EGyd6E+X2fMTfgjKCwOClj33y0J75Q0OZdoyHTIK5WMLKGN MlWqcxHqyxDcdNycOLKc+id6EypXqM5c6gL069eYWpW+QGekZ1sVso4Ki0+SBC8F RrVt7n9nxrFhf8ytuOCS9t7Yed/F8Y4FSrjdmasg3R0HrhmDfYj3tpIoRLYPNlDK HgChsoOMiUcMol9iGVcd8Djmm+dawFw= -----END CERTIFICATE-----Generated at Sun Jun 29 15:37:55 2025 by rpki-client