$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/4c663947-cdb4-31f7-9ec5-f6133eeee712.roa File: 4c663947-cdb4-31f7-9ec5-f6133eeee712.roa (raw, json) Hash identifier: eX6Xxq1UPOXoJe4JVAQFfPPeCctaL5gF9AHHB2H2GOQ= Subject key identifier: D9:F7:B4:B3:D9:23:04:64:07:C9:21:FB:9D:7D:F5:BA:4E:14:0D:92 Certificate issuer: /CN=48376997-5b17-4e52-923f-f46bcbd7b94e Certificate serial: 010D0C9F4328584A45403B8CEEF9673E4A4E5480 Authority key identifier: E8:F2:FC:4B:70:1B:DB:CB:C0:FA:18:54:4C:4A:CE:22:9F:4B:DD:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/4c663947-cdb4-31f7-9ec5-f6133eeee712.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 394971 IP address blocks: 192.136.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/48376997-5b17-4e52-923f-f46bcbd7b94e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/48376997-5b17-4e52-923f-f46bcbd7b94e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:3b:8c:ee:f9:67:3e:4a:4e:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48376997-5b17-4e52-923f-f46bcbd7b94e Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=32df2453-8026-4e99-a233-b19b3b5d43f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:df:db:a5:c7:55:73:ca:9a:78:f4:39:a8: 79:cf:ca:53:91:ea:e9:11:7d:cb:43:19:09:16:3e: 0d:ad:5d:5b:62:aa:b3:c5:1a:d8:89:8e:db:f7:f9: 44:4b:80:dc:55:a0:7e:8a:f2:f7:78:a0:16:bb:e8: fa:b3:e9:e3:7b:45:e3:f3:43:eb:9a:b0:d0:ed:52: c0:58:3a:68:ef:5a:68:34:33:7e:51:05:9c:6d:90: 2d:6f:94:98:46:8c:b3:33:4c:85:f2:8e:5b:c8:fb: 8e:24:fd:87:b1:5a:ac:b0:97:1f:5f:3a:48:aa:80: a5:6a:27:ca:16:4d:cc:c9:19:c8:28:ac:71:2d:c6: 51:09:ed:da:00:f2:55:b4:ce:c9:aa:2d:35:c6:b5: fd:7b:e6:91:b7:04:7c:26:4c:ee:af:3d:e1:69:27: 7e:24:44:1f:5c:09:e6:21:0a:b3:08:e5:71:d6:3b: b3:c9:96:4e:2d:f6:bd:f9:55:83:7a:b3:79:6e:ef: 36:0f:ff:1a:83:3e:8f:59:cf:84:76:e2:da:31:ff: d7:e4:34:1b:03:fd:56:3f:98:6d:b4:82:84:77:ff: ea:97:cc:6e:48:14:1c:45:9b:21:4b:ab:4e:4c:c9: ae:d3:e5:a2:62:99:82:f2:f7:b0:56:65:f8:c9:ed: ff:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F7:B4:B3:D9:23:04:64:07:C9:21:FB:9D:7D:F5:BA:4E:14:0D:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/4c663947-cdb4-31f7-9ec5-f6133eeee712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/48376997-5b17-4e52-923f-f46bcbd7b94e.crl X509v3 Authority Key Identifier: keyid:E8:F2:FC:4B:70:1B:DB:CB:C0:FA:18:54:4C:4A:CE:22:9F:4B:DD:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e.cer sbgp-ipAddrBlock: critical IPv4: 192.136.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a3:01:6c:2a:59:b9:28:aa:0e:29:c8:eb:e8:05:ac:d8:29: 49:cb:5f:25:18:f6:b3:c4:8e:40:d0:c6:1c:04:07:25:6b:c1: e2:be:dc:6e:aa:9c:ae:bd:ae:bd:21:90:27:35:27:96:e4:c0: 0d:c2:2e:57:1d:4c:90:d7:b2:62:1b:8a:c7:48:8c:46:ff:6d: 7a:7b:05:2b:94:60:fd:0f:c4:44:da:63:0d:84:25:40:fb:19: 32:66:a7:8e:18:c8:18:15:b9:e3:8d:28:19:23:dd:8a:f4:16: 22:b4:52:e6:af:1b:cc:c5:0e:ff:72:de:83:da:73:0a:91:40: 57:75:0c:b9:41:9e:26:1d:aa:1b:24:35:1c:39:7b:0c:01:69: 96:75:10:c3:6b:71:58:0f:ce:92:21:20:96:30:50:7d:3d:29: 5a:ad:68:01:3d:23:06:b8:3f:bb:d7:b4:34:17:f8:41:08:95: 7b:04:f5:71:e8:ba:96:75:37:e1:d0:d3:ef:b8:73:75:a2:c3: ea:c6:47:bc:41:4d:0e:e3:21:e4:9a:fe:2a:12:25:3a:56:b5: c9:0a:51:3c:a3:04:b0:c5:52:72:22:8d:f7:1f:cf:c3:eb:5b: df:8e:6e:df:b3:ca:69:4a:0a:45:ab:a4:f3:0e:83:87:da:b2: 1a:d7:f5:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQDuM7vlnPkpOVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgzNzY5OTctNWIxNy00ZTUyLTkyM2YtZjQ2YmNiZDdi OTRlMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk MzJkZjI0NTMtODAyNi00ZTk5LWEyMzMtYjE5YjNiNWQ0M2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsivf26XHVXPKmnj0Oah5z8pTkerpEX3LQxkJ Fj4NrV1bYqqzxRrYiY7b9/lES4DcVaB+ivL3eKAWu+j6s+nje0Xj80PrmrDQ7VLA WDpo71poNDN+UQWcbZAtb5SYRoyzM0yF8o5byPuOJP2HsVqssJcfXzpIqoClaifK Fk3MyRnIKKxxLcZRCe3aAPJVtM7Jqi01xrX9e+aRtwR8Jkzurz3haSd+JEQfXAnm IQqzCOVx1juzyZZOLfa9+VWDerN5bu82D/8agz6PWc+EduLaMf/X5DQbA/1WP5ht tIKEd//ql8xuSBQcRZshS6tOTMmu0+WiYpmC8vewVmX4ye3/mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNn3tLPZIwRkB8kh+5199bpOFA2SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80ODM3 Njk5Ny01YjE3LTRlNTItOTIzZi1mNDZiY2JkN2I5NGUvNGM2NjM5NDctY2RiNC0z MWY3LTllYzUtZjYxMzNlZWVlNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDgzNzY5OTctNWIxNy00ZTUyLTky M2YtZjQ2YmNiZDdiOTRlLzQ4Mzc2OTk3LTViMTctNGU1Mi05MjNmLWY0NmJjYmQ3 Yjk0ZS5jcmwwHwYDVR0jBBgwFoAU6PL8S3Ab28vA+hhUTErOIp9L3YswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80ODM3Njk5Ny01YjE3LTRlNTItOTIzZi1mNDZi Y2JkN2I5NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwIhyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGjAWwqWbkoqg4pyOvoBazYKUnLXyUY9rPEjkDQxhwEByVrweK+3G6q nK69rr0hkCc1J5bkwA3CLlcdTJDXsmIbisdIjEb/bXp7BSuUYP0PxETaYw2EJUD7 GTJmp44YyBgVueONKBkj3Yr0FiK0UuavG8zFDv9y3oPacwqRQFd1DLlBniYdqhsk NRw5ewwBaZZ1EMNrcVgPzpIhIJYwUH09KVqtaAE9Iwa4P7vXtDQX+EEIlXsE9XHo upZ1N+HQ0++4c3Wiw+rGR7xBTQ7jIeSa/ioSJTpWtckKUTyjBLDFUnIijfcfz8Pr W9+Obt+zymlKCkWrpPMOg4fashrX9W8= -----END CERTIFICATE-----Generated at Mon Jun 30 11:41:18 2025 by rpki-client