$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/48ed3810-816a-3e90-8728-bcb8b396c1a9.roa File: 48ed3810-816a-3e90-8728-bcb8b396c1a9.roa (raw, json) Hash identifier: xxQTecCsex4hXM8yvtMGJr1yV7Qq+ckfbD4vH0g62EY= Subject key identifier: 8C:72:0C:0B:B3:BC:26:AC:4F:2D:24:7A:53:B8:1E:71:C3:96:45:A7 Certificate issuer: /CN=02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450 Certificate serial: 010D0C9F4328584A119AAA3E8BB2CFE24AFBBA60 Authority key identifier: A2:42:64:E5:0B:6C:5C:DA:DE:37:D9:44:16:26:3D:B5:FC:75:92:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/48ed3810-816a-3e90-8728-bcb8b396c1a9.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 394688 IP address blocks: 192.152.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:aa:3e:8b:b2:cf:e2:4a:fb:ba:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=5f017913-f9fa-4bb2-add6-85704149405f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:38:58:fd:47:a1:2e:36:a2:6d:49:b3:7b:56: 54:e6:95:c3:52:d1:60:dd:7b:db:18:6c:d7:03:c0: e1:ad:9c:7b:5d:49:56:61:f3:01:94:14:20:d3:56: 7e:a8:e4:ed:13:5c:10:d4:35:68:2e:6f:41:7d:ed: 79:29:12:61:8f:a6:28:bf:4a:55:0b:30:b5:c7:22: 81:d0:56:79:a4:8d:da:b7:15:70:e5:3b:9b:e8:54: 66:6e:07:74:24:3e:d9:44:ae:d2:24:93:a3:03:cc: c0:52:75:85:11:06:1b:b7:c9:3f:9f:74:1d:fe:be: d5:c6:27:07:b7:66:71:0a:f2:7c:28:f0:9a:37:5e: 3e:be:0d:49:d5:ab:21:2a:9b:52:6d:3b:85:0a:76: bd:3c:66:36:64:24:31:8a:44:78:2d:e3:d9:1f:32: 23:f6:b1:c5:65:bf:03:e3:63:d0:ca:7d:eb:c9:16: 43:f3:a4:3c:55:e9:18:c7:43:dd:33:55:00:df:66: e8:7e:60:72:36:ca:8f:19:8d:e7:03:59:a8:6f:5a: 99:b6:63:88:e2:24:a4:62:a8:9e:26:ec:e0:37:f2: 7f:af:28:d4:58:1c:d5:97:83:3d:0e:0f:43:47:9c: 72:4b:e9:49:c4:7b:c6:86:22:40:50:c3:3e:fa:5d: bc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:72:0C:0B:B3:BC:26:AC:4F:2D:24:7A:53:B8:1E:71:C3:96:45:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/48ed3810-816a-3e90-8728-bcb8b396c1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.crl X509v3 Authority Key Identifier: keyid:A2:42:64:E5:0B:6C:5C:DA:DE:37:D9:44:16:26:3D:B5:FC:75:92:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.cer sbgp-ipAddrBlock: critical IPv4: 192.152.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:94:1f:6f:f2:c2:62:a1:1f:15:3c:0a:6e:b8:59:33:79:cd: 60:e2:75:17:e3:70:4f:4c:78:56:fc:6a:1f:32:e2:e6:63:e2: d7:28:3a:ae:b1:fb:78:54:c8:1d:58:01:7b:fc:ee:f8:fa:2d: 48:c4:b3:b0:b2:a0:b4:80:46:b4:e0:1a:23:c1:f2:72:57:0f: 81:4a:3c:d7:02:96:bf:62:37:db:ec:de:eb:42:96:05:ab:c9: 75:5a:59:79:fb:99:59:b7:2f:96:39:3f:41:b5:a5:5a:b6:27: e4:81:44:ba:85:35:b6:dc:22:35:c2:52:e8:76:29:c1:ea:c6: d0:9a:3d:b0:cf:08:12:6d:6b:1b:a8:e7:67:29:ad:06:10:a6: be:d6:8d:ce:5c:1b:57:01:27:7d:81:2a:90:24:10:a5:26:43: da:c1:f3:77:a0:ff:4c:69:bc:86:85:64:eb:0d:16:52:4b:e4: 88:7a:16:01:8c:80:20:e9:f1:62:e2:89:54:af:cd:79:b5:51: 90:75:cc:c6:ca:ef:ed:41:5b:80:e5:cb:f6:53:32:3b:32:7c: 6e:23:b6:7d:11:ec:7e:33:67:c1:de:c3:f8:87:94:70:03:a8: c3:45:74:cf:5d:d2:ff:c8:da:6d:08:8b:d8:36:db:a3:17:d6: 6c:17:4d:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmqo+i7LP4kr7umAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJkYjQxYzYtZjhlZi00ZWUyLWI2ZGMtYTYxYmEwZmI5 NDUwMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk NWYwMTc5MTMtZjlmYS00YmIyLWFkZDYtODU3MDQxNDk0MDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDhY/UehLjaibUmze1ZU5pXDUtFg3XvbGGzX A8DhrZx7XUlWYfMBlBQg01Z+qOTtE1wQ1DVoLm9Bfe15KRJhj6Yov0pVCzC1xyKB 0FZ5pI3atxVw5Tub6FRmbgd0JD7ZRK7SJJOjA8zAUnWFEQYbt8k/n3Qd/r7VxicH t2ZxCvJ8KPCaN14+vg1J1ashKptSbTuFCna9PGY2ZCQxikR4LePZHzIj9rHFZb8D 42PQyn3ryRZD86Q8VekYx0PdM1UA32bofmByNsqPGY3nA1mob1qZtmOI4iSkYqie JuzgN/J/ryjUWBzVl4M9Dg9DR5xyS+lJxHvGhiJAUMM++l28bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxyDAuzvCasTy0kelO4HnHDlkWnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMmRi NDFjNi1mOGVmLTRlZTItYjZkYy1hNjFiYTBmYjk0NTAvNDhlZDM4MTAtODE2YS0z ZTkwLTg3MjgtYmNiOGIzOTZjMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDJkYjQxYzYtZjhlZi00ZWUyLWI2 ZGMtYTYxYmEwZmI5NDUwLzAyZGI0MWM2LWY4ZWYtNGVlMi1iNmRjLWE2MWJhMGZi OTQ1MC5jcmwwHwYDVR0jBBgwFoAUokJk5QtsXNreN9lEFiY9tfx1koswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMmRiNDFjNi1mOGVmLTRlZTItYjZkYy1hNjFi YTBmYjk0NTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJjzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOUH2/ywmKhHxU8Cm64WTN5zWDidRfjcE9MeFb8ah8y4uZj4tcoOq6x +3hUyB1YAXv87vj6LUjEs7CyoLSARrTgGiPB8nJXD4FKPNcClr9iN9vs3utClgWr yXVaWXn7mVm3L5Y5P0G1pVq2J+SBRLqFNbbcIjXCUuh2KcHqxtCaPbDPCBJtaxuo 52cprQYQpr7Wjc5cG1cBJ32BKpAkEKUmQ9rB83eg/0xpvIaFZOsNFlJL5Ih6FgGM gCDp8WLiiVSvzXm1UZB1zMbK7+1BW4Dly/ZTMjsyfG4jtn0R7H4zZ8Hew/iHlHAD qMNFdM9d0v/I2m0Ii9g226MX1mwXTT0= -----END CERTIFICATE-----Generated at Mon Jun 30 22:22:43 2025 by rpki-client