$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/d68ed165-7389-3232-85d4-20e1edff7e2f.roa File: d68ed165-7389-3232-85d4-20e1edff7e2f.roa (raw, json) Hash identifier: 66FXpE64Y+34E/BXkYxChVURYQSOWlbo5rZZ4ZDeYqU= Subject key identifier: 74:A3:E9:47:8F:23:B2:8B:52:B2:46:5B:0A:E4:6F:92:DC:2E:84:0A Certificate issuer: /CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Certificate serial: 010D0C9F4328584ACB40EE9C24F039351DB67500 Authority key identifier: 9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/d68ed165-7389-3232-85d4-20e1edff7e2f.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 7922 IP address blocks: 192.48.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:ee:9c:24:f0:39:35:1d:b6:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=9842ee87-6d47-4e78-b60e-8faaa0496c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f3:88:57:88:72:79:f5:74:cb:76:3c:74:f6: 80:77:c0:bf:6f:09:f0:b3:51:44:3e:0f:c4:0c:0f: 5f:e6:96:dd:70:51:53:3b:75:94:69:ae:4d:e5:09: 0f:5e:a7:76:d9:6f:a9:fb:b5:45:f6:17:12:6a:64: b7:8e:cc:13:bc:72:3f:13:ed:26:07:42:13:0f:9e: 80:20:b4:f9:b2:8b:32:12:d0:de:bd:5f:d0:f0:20: 2a:e1:56:a2:ef:2e:03:3b:3f:98:14:65:87:77:72: 34:25:a9:5d:85:ed:b0:67:64:0d:ae:41:0e:0e:89: e1:bf:2d:c6:c2:90:fc:82:ba:5d:32:4d:85:ac:db: d0:ef:d1:cf:00:3a:a2:86:c0:97:63:14:9f:d7:b9: 2a:19:6e:c4:81:fd:b8:a1:f6:25:b0:dc:87:01:6c: 05:10:ce:22:c2:32:99:2d:64:79:41:12:8e:c6:52: 0f:3f:86:3b:1e:92:c2:14:1f:79:08:32:71:ef:33: 51:db:6b:4e:fc:79:19:c2:1d:95:8a:d9:fe:2e:48: e9:23:5f:ed:8d:65:a0:5d:4f:89:58:78:bb:72:90: d6:13:19:ca:d3:d2:6d:56:ee:30:a4:84:d9:4d:99: c1:0a:21:3b:a8:fd:be:29:85:58:3c:22:e9:f6:fb: a3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A3:E9:47:8F:23:B2:8B:52:B2:46:5B:0A:E4:6F:92:DC:2E:84:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/d68ed165-7389-3232-85d4-20e1edff7e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl X509v3 Authority Key Identifier: keyid:9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer sbgp-ipAddrBlock: critical IPv4: 192.48.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:81:fb:26:bd:f6:7f:ef:af:9b:b6:f4:af:2c:06:da:11:36: ad:d1:55:ce:db:e3:d6:07:66:75:08:7b:eb:f8:1d:de:06:bf: 51:a9:78:b1:81:2b:9a:67:c3:f4:7b:f9:ec:00:17:24:3a:4b: 3e:70:be:72:a9:e9:c1:79:84:fc:a8:c2:14:69:c4:34:c2:7e: 51:7c:79:67:8e:a6:19:ee:2c:72:59:63:f8:6d:33:60:d9:83: 4c:07:c1:a3:e8:92:6d:84:2a:47:73:b2:59:a4:f1:cd:c4:ba: 39:26:b0:67:4d:85:15:33:b8:25:b7:ae:b3:8f:a8:11:6b:28: ab:a9:2c:80:a4:2c:c2:b9:1c:89:7d:05:ec:c5:8c:ba:80:61: 69:7e:6d:29:40:d2:b0:86:d5:f9:7a:d6:0c:f4:29:94:07:65: b3:f3:16:95:f3:f5:da:b7:01:be:65:c2:06:a7:b6:0c:fd:aa: fd:ad:41:c6:5e:05:e1:63:9f:d1:f2:17:b1:e8:1a:0b:80:92: f7:be:b1:8b:c3:21:ad:02:97:d7:70:d7:19:24:83:09:01:25: 35:e8:93:70:64:65:f5:e8:ea:f5:f1:3b:a9:0c:aa:93:ae:bf: d2:59:ab:61:73:c7:47:56:25:08:72:8d:08:ec:7d:48:83:05: b7:0c:06:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQO6cJPA5NR22dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJiOGJkMzYtYjI2NC00Mjc5LWExNmUtMzYwZjRhMzNl YjgwMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk OTg0MmVlODctNmQ0Ny00ZTc4LWI2MGUtOGZhYWEwNDk2YzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/OIV4hyefV0y3Y8dPaAd8C/bwnws1FEPg/E DA9f5pbdcFFTO3WUaa5N5QkPXqd22W+p+7VF9hcSamS3jswTvHI/E+0mB0ITD56A ILT5sosyEtDevV/Q8CAq4Vai7y4DOz+YFGWHd3I0Jaldhe2wZ2QNrkEODonhvy3G wpD8grpdMk2FrNvQ79HPADqihsCXYxSf17kqGW7Egf24ofYlsNyHAWwFEM4iwjKZ LWR5QRKOxlIPP4Y7HpLCFB95CDJx7zNR22tO/HkZwh2Vitn+LkjpI1/tjWWgXU+J WHi7cpDWExnK09JtVu4wpITZTZnBCiE7qP2+KYVYPCLp9vujUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSj6UePI7KLUrJGWwrkb5LcLoQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YmI4 YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBmNGEzM2ViODAvZDY4ZWQxNjUtNzM4OS0z MjMyLTg1ZDQtMjBlMWVkZmY3ZTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGJiOGJkMzYtYjI2NC00Mjc5LWEx NmUtMzYwZjRhMzNlYjgwLzhiYjhiZDM2LWIyNjQtNDI3OS1hMTZlLTM2MGY0YTMz ZWI4MC5jcmwwHwYDVR0jBBgwFoAUmhRl3/GbXiMlq5sw0PEkjGwnrbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YmI4YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBm NGEzM2ViODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6B+ya99n/vr5u29K8sBtoRNq3RVc7b49YHZnUIe+v4Hd4Gv1GpeLGB K5pnw/R7+ewAFyQ6Sz5wvnKp6cF5hPyowhRpxDTCflF8eWeOphnuLHJZY/htM2DZ g0wHwaPokm2EKkdzslmk8c3EujkmsGdNhRUzuCW3rrOPqBFrKKupLICkLMK5HIl9 BezFjLqAYWl+bSlA0rCG1fl61gz0KZQHZbPzFpXz9dq3Ab5lwgantgz9qv2tQcZe BeFjn9HyF7HoGguAkve+sYvDIa0Cl9dw1xkkgwkBJTXok3BkZfXo6vXxO6kMqpOu v9JZq2Fzx0dWJQhyjQjsfUiDBbcMBls= -----END CERTIFICATE-----Generated at Sun Aug 24 04:23:34 2025 by rpki-client