$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/653d01b9-7954-3a85-b2a2-a3ec86645ac6.roa File: 653d01b9-7954-3a85-b2a2-a3ec86645ac6.roa (raw, json) Hash identifier: buTto5aBvUgTDhqycu/aaSxuscG6lajvsuocC6qptGU= Subject key identifier: 95:1B:52:C3:9F:6F:DA:9A:E8:CF:F8:AD:72:64:E5:18:A4:5B:2D:9A Certificate issuer: /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221 Certificate serial: 010D0C9F4328584A42D3DF230417377AE27DA880 Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/653d01b9-7954-3a85-b2a2-a3ec86645ac6.roa Signing time: Sat 21 Jun 2025 04:11:01 +0000 ROA not before: Sat 21 Jun 2025 04:11:01 +0000 ROA not after: Fri 19 Sep 2025 04:11:01 +0000 asID: 6922 IP address blocks: 192.124.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:d3:df:23:04:17:37:7a:e2:7d:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221 Validity Not Before: Jun 21 04:11:01 2025 GMT Not After : Sep 19 04:11:01 2025 GMT Subject: CN=c5371adc-2490-46f8-b500-e61e2e253e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:23:f3:91:e6:13:89:06:f8:88:e0:df:15:7b: 49:61:c3:ed:33:0d:74:32:81:55:f2:e1:37:da:fd: 75:93:05:cb:ef:0b:a6:04:4a:df:00:2b:04:8e:c5: b6:c7:7c:17:a0:42:2a:f2:41:21:ff:7c:4a:15:1c: db:5c:62:36:05:19:ba:97:43:91:9e:c9:cc:5c:fe: bd:d7:d7:f5:31:80:4c:6f:e8:07:90:81:75:41:5a: 15:36:cd:fd:8d:a7:af:13:72:ec:3d:3e:39:2f:4f: 68:83:64:16:5c:5d:58:94:e6:dc:b7:3c:e6:e0:3f: 4e:3c:14:c3:e3:57:73:9e:63:ac:7a:cf:53:54:15: bf:9e:2d:1d:45:05:a3:3d:44:7f:48:6c:ca:33:8a: eb:45:47:71:4c:d9:c1:2e:a3:b2:42:17:a0:44:f8: 63:ed:c0:30:d3:81:4f:d2:fa:2d:e0:1e:36:fa:07: 3e:08:40:47:a6:ae:e1:53:98:49:a2:0e:ea:31:8b: de:81:f8:20:5a:2d:df:0c:64:86:54:8b:25:c8:32: eb:d6:46:2f:a7:36:14:f1:b9:a4:7f:cf:ad:63:f3: 37:52:f6:a2:39:0a:21:b0:73:7a:b4:21:7f:0d:af: 0e:ca:11:5f:fd:0d:cd:77:19:3e:45:4a:b1:e5:d5: bc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1B:52:C3:9F:6F:DA:9A:E8:CF:F8:AD:72:64:E5:18:A4:5B:2D:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/653d01b9-7954-3a85-b2a2-a3ec86645ac6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl X509v3 Authority Key Identifier: keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer sbgp-ipAddrBlock: critical IPv4: 192.124.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:53:bf:0b:b4:49:69:f2:c3:fa:31:54:56:11:26:05:69:46: 6b:6f:71:53:0d:dc:6e:dc:48:55:c0:cd:90:6e:a0:bd:33:56: 25:cd:44:67:62:f8:3b:52:f7:12:39:d3:35:17:55:73:59:a2: f2:6d:14:0a:6c:7f:32:e4:78:de:50:70:be:57:31:35:36:cd: 1d:c0:08:54:5d:a0:b4:46:af:10:15:ab:b3:0f:70:90:93:5f: eb:4c:38:8b:34:88:a8:23:06:1a:05:9e:0c:10:59:0a:10:44: bb:e2:10:3c:d4:12:68:ff:36:3b:82:1e:a9:60:8e:60:cd:95: b9:29:05:9f:a8:52:01:d6:b0:34:6b:96:c4:3c:ca:6f:00:3d: 2a:ab:3f:60:c3:cd:0b:7c:8d:de:ac:79:53:f1:1e:14:39:d1: 74:0e:4d:cb:d0:6b:e1:bc:6e:07:b4:22:9e:e2:c9:51:96:44: 06:ce:8b:cc:4d:b3:2a:93:6f:2b:f8:d2:ba:e7:38:91:4d:c3: e7:41:9b:d6:bd:33:8c:4f:ee:10:16:8c:6b:8a:1c:56:d3:cb: dd:db:16:28:77:e6:df:0e:00:90:a3:8a:38:59:56:bf:bf:50: 9a:2c:b9:1e:aa:53:ea:ec:9b:f2:bc:6d:c3:49:e7:ce:6e:f4: 92:e7:ed:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpC098jBBc3euJ9qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4MWEyNTYtNDFmZi00ZjUxLTgwOTItYzdmZmZhNGQ5 MjIxMB4XDTI1MDYyMTA0MTEwMVoXDTI1MDkxOTA0MTEwMVowLzEtMCsGA1UEAxMk YzUzNzFhZGMtMjQ5MC00NmY4LWI1MDAtZTYxZTJlMjUzZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyPzkeYTiQb4iODfFXtJYcPtMw10MoFV8uE3 2v11kwXL7wumBErfACsEjsW2x3wXoEIq8kEh/3xKFRzbXGI2BRm6l0ORnsnMXP69 19f1MYBMb+gHkIF1QVoVNs39jaevE3LsPT45L09og2QWXF1YlObctzzm4D9OPBTD 41dznmOses9TVBW/ni0dRQWjPUR/SGzKM4rrRUdxTNnBLqOyQhegRPhj7cAw04FP 0vot4B42+gc+CEBHpq7hU5hJog7qMYvegfggWi3fDGSGVIslyDLr1kYvpzYU8bmk f8+tY/M3UvaiOQohsHN6tCF/Da8OyhFf/Q3Ndxk+RUqx5dW8kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUbUsOfb9qa6M/4rXJk5RikWy2aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgx YTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0ZDkyMjEvNjUzZDAxYjktNzk1NC0z YTg1LWIyYTItYTNlYzg2NjQ1YWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU4MWEyNTYtNDFmZi00ZjUxLTgw OTItYzdmZmZhNGQ5MjIxLzRlODFhMjU2LTQxZmYtNGY1MS04MDkyLWM3ZmZmYTRk OTIyMS5jcmwwHwYDVR0jBBgwFoAUwitnYdEerOUTJk8QRtL6zHxFiyowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2Zm ZmE0ZDkyMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINTvwu0SWnyw/oxVFYRJgVpRmtvcVMN3G7cSFXAzZBuoL0zViXNRGdi +DtS9xI50zUXVXNZovJtFApsfzLkeN5QcL5XMTU2zR3ACFRdoLRGrxAVq7MPcJCT X+tMOIs0iKgjBhoFngwQWQoQRLviEDzUEmj/NjuCHqlgjmDNlbkpBZ+oUgHWsDRr lsQ8ym8APSqrP2DDzQt8jd6seVPxHhQ50XQOTcvQa+G8bge0Ip7iyVGWRAbOi8xN syqTbyv40rrnOJFNw+dBm9a9M4xP7hAWjGuKHFbTy93bFih35t8OAJCjijhZVr+/ UJosuR6qU+rsm/K8bcNJ585u9JLn7bU= -----END CERTIFICATE-----Generated at Tue Jul 1 18:23:56 2025 by rpki-client