$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa File: a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa (raw, json) Hash identifier: 9MZhdHu4A9idcyQG0sxPFydERQldvJIRhNepGKyaYww= Subject key identifier: 53:EE:DF:9F:D2:3B:7C:6E:85:5D:E3:AD:C1:4C:76:8A:61:D9:EC:72 Certificate issuer: /CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Certificate serial: 010D0C9F43285849EA8522BFFB845181362C1100 Authority key identifier: 9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 29764 IP address blocks: 192.48.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:22:bf:fb:84:51:81:36:2c:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=dad1b4bd-d15b-4f9b-9600-60d86462d701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d7:f6:0a:ea:cd:4e:37:26:40:5e:cd:f1:b3: a3:eb:8a:bf:9f:97:66:ba:a0:cf:3a:ee:e4:11:fe: 25:ab:77:d2:fd:db:29:fc:4c:b8:60:c1:10:58:4a: 5d:25:74:47:97:2c:22:28:68:f0:e6:db:d0:1e:f6: 57:c6:63:cf:ee:c0:ec:9c:b0:5f:ec:af:e2:f6:51: 0d:34:e8:ac:5c:d3:30:da:34:3d:ea:22:0f:75:61: 98:30:33:c1:ea:e8:95:35:48:c8:02:83:8e:47:7c: 8f:94:6d:47:f4:5d:4b:82:4a:6a:e3:53:b6:8a:29: fe:9f:6e:30:d2:ea:6c:d6:ef:87:f5:fc:5c:2c:ec: 72:27:2d:43:ae:0a:aa:cb:1b:1d:99:ea:69:03:63: 87:65:ab:70:d9:de:af:43:f2:5c:5c:89:11:0f:01: e8:9e:bd:fb:3f:17:dc:38:7f:23:ff:6a:eb:21:28: d5:50:8d:79:5f:d6:92:28:b7:a0:bc:7d:87:2a:3f: ff:3d:c8:ca:81:91:36:c8:c6:71:c9:5c:ad:5d:46: fd:0e:4b:d8:5e:85:f0:67:ca:c1:3f:ae:d3:27:29: bb:6d:54:df:ee:bf:5b:84:ab:7c:05:50:d3:c8:e3: 8a:65:d0:4e:ab:13:c4:f7:a3:87:31:e1:b8:e1:ce: 9f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EE:DF:9F:D2:3B:7C:6E:85:5D:E3:AD:C1:4C:76:8A:61:D9:EC:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/a1b7b8d1-44b5-3966-b053-c661a6fa3494.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl X509v3 Authority Key Identifier: keyid:9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer sbgp-ipAddrBlock: critical IPv4: 192.48.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:67:8f:24:86:60:df:a5:87:71:97:7f:3d:94:41:1f:52:13: 21:e7:66:be:c9:87:d7:b6:b9:d3:58:59:21:d7:b5:3d:73:2a: 98:cb:47:34:59:61:32:f5:3d:49:6f:81:43:50:ca:78:0e:de: fb:84:43:19:d8:7c:65:48:d2:cb:03:df:19:b3:46:9b:e7:7d: 72:9d:9a:5c:64:7d:f2:e7:61:15:6f:7a:bb:dc:a4:d1:cc:cc: 88:10:0c:76:56:94:a1:47:a7:a6:1e:b4:9c:b0:66:a0:50:6f: bb:62:58:f9:6c:4f:34:0f:34:c1:47:bf:56:1e:5c:80:34:a6: 40:e5:7a:83:ed:87:6f:5f:d9:35:4a:2a:ec:13:f6:f6:38:fe: 76:9a:d9:14:e7:51:f7:24:fe:f7:5e:b6:6e:d0:82:24:c6:dc: 93:d3:08:40:9e:e3:f5:9d:80:6e:da:2e:cb:fc:df:e7:a8:7d: c6:80:6a:7c:24:95:58:5a:7b:fe:a9:e8:9e:9d:3b:80:2e:cb: 10:f1:a2:03:28:e2:3e:5a:2b:42:73:18:69:5c:18:2c:df:81: da:fc:e4:f0:f9:92:ed:52:b9:35:c5:a8:fc:e1:86:bd:64:33: 0e:2e:07:bc:62:31:e2:ab:01:f2:4b:86:d8:69:29:fa:0a:7d: f0:4b:e8:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhSK/+4RRgTYsEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJiOGJkMzYtYjI2NC00Mjc5LWExNmUtMzYwZjRhMzNl YjgwMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZGFkMWI0YmQtZDE1Yi00ZjliLTk2MDAtNjBkODY0NjJkNzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9f2CurNTjcmQF7N8bOj64q/n5dmuqDPOu7k Ef4lq3fS/dsp/Ey4YMEQWEpdJXRHlywiKGjw5tvQHvZXxmPP7sDsnLBf7K/i9lEN NOisXNMw2jQ96iIPdWGYMDPB6uiVNUjIAoOOR3yPlG1H9F1Lgkpq41O2iin+n24w 0ups1u+H9fxcLOxyJy1DrgqqyxsdmeppA2OHZatw2d6vQ/JcXIkRDwHonr37Pxfc OH8j/2rrISjVUI15X9aSKLegvH2HKj//PcjKgZE2yMZxyVytXUb9DkvYXoXwZ8rB P67TJym7bVTf7r9bhKt8BVDTyOOKZdBOqxPE96OHMeG44c6fVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPu35/SO3xuhV3jrcFMdoph2exyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YmI4 YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBmNGEzM2ViODAvYTFiN2I4ZDEtNDRiNS0z OTY2LWIwNTMtYzY2MWE2ZmEzNDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGJiOGJkMzYtYjI2NC00Mjc5LWEx NmUtMzYwZjRhMzNlYjgwLzhiYjhiZDM2LWIyNjQtNDI3OS1hMTZlLTM2MGY0YTMz ZWI4MC5jcmwwHwYDVR0jBBgwFoAUmhRl3/GbXiMlq5sw0PEkjGwnrbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YmI4YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBm NGEzM2ViODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVnjySGYN+lh3GXfz2UQR9SEyHnZr7Jh9e2udNYWSHXtT1zKpjLRzRZ YTL1PUlvgUNQyngO3vuEQxnYfGVI0ssD3xmzRpvnfXKdmlxkffLnYRVvervcpNHM zIgQDHZWlKFHp6YetJywZqBQb7tiWPlsTzQPNMFHv1YeXIA0pkDleoPth29f2TVK KuwT9vY4/naa2RTnUfck/vdetm7QgiTG3JPTCECe4/WdgG7aLsv83+eofcaAanwk lVhae/6p6J6dO4AuyxDxogMo4j5aK0JzGGlcGCzfgdr85PD5ku1SuTXFqPzhhr1k Mw4uB7xiMeKrAfJLhthpKfoKffBL6L0= -----END CERTIFICATE-----Generated at Tue Jul 1 09:10:08 2025 by rpki-client