$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa File: cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa (raw, json) Hash identifier: skJAFbwo8iHt9x+8qkAFlFAmJDtDcOk6bdDLk4Q88PM= Subject key identifier: E8:B9:7B:C8:46:75:AD:70:E2:78:BF:07:F6:87:6C:66:43:F2:59:DC Certificate issuer: /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Certificate serial: 010D0C9F4328584A3B7AF43DF3AE4F7F654F5380 Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 202888 IP address blocks: 174.136.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:f4:3d:f3:ae:4f:7f:65:4f:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=40a542f8-3ccc-4260-8369-146fc6f04c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b4:15:33:ba:ea:40:d6:6e:6d:f1:21:80:ee: 01:84:45:d3:3d:de:e4:1a:c4:43:36:e6:50:e1:88: da:4f:dd:55:c9:a4:41:85:b5:61:eb:f1:a8:3d:0a: 48:07:74:21:8f:cd:f3:96:2b:3b:d8:78:d5:b1:27: 85:0b:d1:ef:d7:70:3a:ea:18:d9:d7:f9:1c:3e:d4: 7f:e1:46:7a:23:67:66:b1:72:5e:26:eb:23:a5:a2: 2f:bc:fe:05:f1:33:4d:e2:95:15:83:75:d8:f6:a3: 06:11:b7:cd:92:c2:17:33:0e:dc:43:66:bc:f5:c8: 75:a6:ed:06:5c:0b:bb:30:a1:ef:1d:f3:84:b3:83: 62:2c:87:d1:6a:da:a6:6d:91:40:e3:9f:3b:6d:33: e2:5c:5d:9d:8c:d6:c2:81:1a:29:b2:25:e0:4f:59: 95:77:cf:d4:97:ea:15:4b:79:e0:41:f0:30:c5:18: f6:9f:08:96:84:b1:fd:e0:b5:d6:27:83:5d:85:ac: 02:88:99:3a:5b:fc:7f:0a:90:a5:93:be:b8:34:4f: ee:14:6f:d6:fd:f2:35:0c:a5:b2:10:f9:7d:37:98: 8f:0f:a1:bb:7f:19:0a:78:aa:ac:0b:8a:52:0f:77: 99:cf:98:e7:ab:c6:b2:4a:24:71:a7:07:c7:76:e8: b6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B9:7B:C8:46:75:AD:70:E2:78:BF:07:F6:87:6C:66:43:F2:59:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl X509v3 Authority Key Identifier: keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer sbgp-ipAddrBlock: critical IPv4: 174.136.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ea:2a:e8:61:5b:06:b9:9a:0b:ee:38:0e:cd:16:0a:6e:5e: f5:a1:1d:ff:4a:55:4a:20:e8:29:f0:9d:07:9e:82:60:ca:27: 74:6b:be:41:ce:3c:95:9b:e1:ac:fb:23:6e:dc:3e:20:2b:02: 0c:44:f3:93:03:d6:a7:c8:23:36:f2:16:44:d2:3a:1d:1b:4c: 25:e2:86:1e:17:e3:a4:77:1b:22:50:d0:e1:9f:e6:6c:d8:6d: c4:d7:a5:16:59:1f:a3:3b:b4:7c:7f:29:3f:12:41:68:af:e4: b8:ad:42:07:bd:4a:b5:3e:b1:00:36:01:b4:1a:3c:4c:f4:50: b4:5d:4b:ae:f7:6d:05:a9:ee:ef:f6:a1:7f:86:00:c4:de:24: 08:e7:07:2c:48:15:01:23:7d:88:a6:bc:46:9f:58:f4:ec:00: 69:8a:6e:47:d5:47:6a:a0:38:fd:f4:05:e1:e8:ed:22:ee:21: c3:c4:6d:e0:73:fb:95:5d:ba:5b:fc:d5:c3:fd:a6:f1:9d:94: cd:52:bc:53:02:c7:99:37:a2:3e:15:c9:03:1f:2f:a2:c4:c7: da:f4:4c:25:fd:03:80:48:58:ce:f4:11:d2:9b:2b:76:64:04: 94:58:d6:80:18:94:5f:a7:36:cd:b9:6c:46:d4:99:df:a2:5e: c1:b3:02:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7evQ9865Pf2VPU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYxOTM3M2ItMmNjNS00MGY0LWE2ZDAtN2NjYWNjNjM0 ODU3MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NDBhNTQyZjgtM2NjYy00MjYwLTgzNjktMTQ2ZmM2ZjA0YzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLQVM7rqQNZubfEhgO4BhEXTPd7kGsRDNuZQ 4YjaT91VyaRBhbVh6/GoPQpIB3Qhj83zlis72HjVsSeFC9Hv13A66hjZ1/kcPtR/ 4UZ6I2dmsXJeJusjpaIvvP4F8TNN4pUVg3XY9qMGEbfNksIXMw7cQ2a89ch1pu0G XAu7MKHvHfOEs4NiLIfRatqmbZFA4587bTPiXF2djNbCgRopsiXgT1mVd8/Ul+oV S3ngQfAwxRj2nwiWhLH94LXWJ4NdhawCiJk6W/x/CpClk764NE/uFG/W/fI1DKWy EPl9N5iPD6G7fxkKeKqsC4pSD3eZz5jnq8aySiRxpwfHdui2KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOi5e8hGda1w4ni/B/aHbGZD8lncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5 MzczYi0yY2M1LTQwZjQtYTZkMC03Y2NhY2M2MzQ4NTcvY2IzMmNlNjktYmU0OC0z NGU1LTlmOTAtNmE1YWZiOGZhOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGYxOTM3M2ItMmNjNS00MGY0LWE2 ZDAtN2NjYWNjNjM0ODU3LzBmMTkzNzNiLTJjYzUtNDBmNC1hNmQwLTdjY2FjYzYz NDg1Ny5jcmwwHwYDVR0jBBgwFoAUp46RWPy5WfebiT1L1fsMf5AC/TMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5MzczYi0yY2M1LTQwZjQtYTZkMC03Y2Nh Y2M2MzQ4NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArojuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7qKuhhWwa5mgvuOA7NFgpuXvWhHf9KVUog6CnwnQeegmDKJ3RrvkHO PJWb4az7I27cPiArAgxE85MD1qfIIzbyFkTSOh0bTCXihh4X46R3GyJQ0OGf5mzY bcTXpRZZH6M7tHx/KT8SQWiv5LitQge9SrU+sQA2AbQaPEz0ULRdS673bQWp7u/2 oX+GAMTeJAjnByxIFQEjfYimvEafWPTsAGmKbkfVR2qgOP30BeHo7SLuIcPEbeBz +5Vdulv81cP9pvGdlM1SvFMCx5k3oj4VyQMfL6LEx9r0TCX9A4BIWM70EdKbK3Zk BJRY1oAYlF+nNs25bEbUmd+iXsGzAiU= -----END CERTIFICATE-----Generated at Mon Jun 30 05:42:07 2025 by rpki-client