$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/9e6c2e32-ee59-3df5-a9b2-52442844eca3.roa File: 9e6c2e32-ee59-3df5-a9b2-52442844eca3.roa (raw, json) Hash identifier: VISmAb1ALctJ75Nk53IAuDLJ1aAwj99lljvWR9VX3XM= Subject key identifier: AB:AC:66:91:72:72:51:E9:48:9A:76:F3:AE:E2:68:2A:79:FE:F7:CF Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584AE4611185A2DCD87DE6F198A0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/9e6c2e32-ee59-3df5-a9b2-52442844eca3.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 14061 IP address blocks: 192.34.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:11:85:a2:dc:d8:7d:e6:f1:98:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=32a7c81e-6ef8-428e-8ce8-d0a02d4a5cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:16:7e:5d:b0:44:f6:c5:c9:74:bc:b5:0b:9a: f8:a6:c5:1a:f0:c2:33:b1:02:60:b5:03:46:ff:26: 78:c1:95:93:01:de:49:86:ac:a4:18:c8:68:8d:df: 2e:c0:52:84:a2:ba:0a:2a:a2:31:8f:9f:af:de:07: 72:2f:55:6d:51:c8:1a:45:1b:ee:0f:97:5e:53:3f: 12:d0:2c:ff:e3:47:97:66:2e:a6:98:11:2b:19:00: fb:92:09:52:76:93:74:37:8f:01:ae:f5:a8:a7:55: 00:24:ef:58:62:e8:25:c5:0d:59:6d:04:34:0b:4e: e9:72:9e:4b:f5:47:7f:2f:58:6b:d4:ba:9c:e1:71: 0a:cb:61:23:d5:3c:bf:7c:1c:2c:4b:ee:75:29:ff: e1:8a:e8:01:20:cb:5c:0a:f9:84:24:72:cb:d6:f0: 27:5b:32:95:b8:59:2d:7c:7b:db:ba:08:3b:da:83: a7:1f:e0:b1:c4:22:04:ec:c6:b0:9e:be:5d:f7:c1: ba:c2:e3:91:4e:3a:6b:b9:f6:87:e2:5d:30:3d:2b: 95:ba:43:9e:56:ed:8f:1b:70:2a:47:93:3f:1c:d6: c7:42:5a:f4:60:ea:dd:ab:94:0d:94:c5:ef:0a:c0: 60:12:0d:43:d8:95:63:7f:90:71:79:a5:5e:f0:d6: 2f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AC:66:91:72:72:51:E9:48:9A:76:F3:AE:E2:68:2A:79:FE:F7:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/9e6c2e32-ee59-3df5-a9b2-52442844eca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 192.34.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:4d:79:1a:aa:cb:56:fd:20:a1:69:0d:17:d0:d2:71:71:f3: 21:dd:04:13:cd:1e:a5:90:6c:53:04:e0:9c:de:db:2e:15:66: 4f:e0:ac:6f:49:da:0f:12:40:83:87:eb:d1:92:06:fc:e8:3c: 73:44:09:0e:ae:5d:da:41:94:57:8c:fa:2c:c0:a4:f0:6d:53: f9:e5:7d:4c:19:0a:fe:88:d5:36:48:4c:c1:fa:39:eb:af:7c: 4c:00:9e:d5:45:8c:0e:9f:39:75:fe:cd:e4:9b:45:c0:cf:35: db:7e:26:3b:ac:58:25:06:59:60:cd:d0:5d:71:1b:8d:c3:fe: 27:29:25:65:b1:87:10:61:20:7b:f5:61:95:ee:54:e7:99:01: 08:9e:7b:3e:ba:e7:9c:6d:17:ed:d0:39:ba:b5:ad:5d:17:7f: 98:e3:9a:fa:76:18:14:fc:a5:a2:80:a9:d4:e1:a9:e3:63:14: a9:4a:3c:db:55:6b:79:e8:10:3a:bf:a5:63:42:8a:52:c1:fe: 2f:b9:5b:8b:6b:3f:c8:e9:bb:b2:31:96:c3:ef:74:f0:91:7f: 4b:28:14:07:7e:93:5f:71:e5:be:ad:67:52:ec:43:17:f2:f5: 47:48:2e:1b:9c:67:f8:53:28:9b:cf:dc:db:a3:32:45:c9:19: 50:3e:bb:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRGFotzYfebxmKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MzJhN2M4MWUtNmVmOC00MjhlLThjZTgtZDBhMDJkNGE1Y2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhZ+XbBE9sXJdLy1C5r4psUa8MIzsQJgtQNG /yZ4wZWTAd5JhqykGMhojd8uwFKEoroKKqIxj5+v3gdyL1VtUcgaRRvuD5deUz8S 0Cz/40eXZi6mmBErGQD7kglSdpN0N48BrvWop1UAJO9YYuglxQ1ZbQQ0C07pcp5L 9Ud/L1hr1Lqc4XEKy2Ej1Ty/fBwsS+51Kf/hiugBIMtcCvmEJHLL1vAnWzKVuFkt fHvbugg72oOnH+CxxCIE7Mawnr5d98G6wuORTjprufaH4l0wPSuVukOeVu2PG3Aq R5M/HNbHQlr0YOrdq5QNlMXvCsBgEg1D2JVjf5BxeaVe8NYvJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKusZpFyclHpSJp2867iaCp5/vfPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvOWU2YzJlMzItZWU1OS0z ZGY1LWE5YjItNTI0NDI4NDRlY2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwCI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRNeRqqy1b9IKFpDRfQ0nFx8yHdBBPNHqWQbFME4Jze2y4VZk/grG9J 2g8SQIOH69GSBvzoPHNECQ6uXdpBlFeM+izApPBtU/nlfUwZCv6I1TZITMH6Oeuv fEwAntVFjA6fOXX+zeSbRcDPNdt+JjusWCUGWWDN0F1xG43D/icpJWWxhxBhIHv1 YZXuVOeZAQieez6655xtF+3QObq1rV0Xf5jjmvp2GBT8paKAqdThqeNjFKlKPNtV a3noEDq/pWNCilLB/i+5W4trP8jpu7IxlsPvdPCRf0soFAd+k19x5b6tZ1LsQxfy 9UdILhucZ/hTKJvP3NujMkXJGVA+uzA= -----END CERTIFICATE-----Generated at Sat Aug 23 17:59:02 2025 by rpki-client