$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa File: 45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa (raw, json) Hash identifier: n9J4qMAEU/fGmoNBLDTT9hqhwqrY8mDkmr3fKzjcjas= Subject key identifier: 40:82:15:AD:B0:64:F2:E6:3B:A9:F8:96:A1:67:5A:39:50:4A:25:98 Certificate issuer: /CN=1ccfe266-0609-49cd-b2ba-671a64efdc7c Certificate serial: 010D0C9F4328584A10353CB97E87BABE41440B80 Authority key identifier: D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 32787 IP address blocks: 192.169.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:3c:b9:7e:87:ba:be:41:44:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ccfe266-0609-49cd-b2ba-671a64efdc7c Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=8f92c37a-7d31-4246-9b73-187906512755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b8:b2:8c:a0:86:7e:45:55:52:dc:44:9a:5b: b1:d9:18:37:65:27:a9:cb:b4:f9:82:82:96:dc:f3: ca:2d:1d:f9:d2:20:14:77:e0:2f:6c:66:31:5d:bf: 43:de:74:3e:19:8b:76:9f:82:ea:77:7f:d0:2f:53: 07:0a:95:82:77:f6:f9:4d:39:f2:21:8c:10:a7:80: 55:ec:84:d7:58:9d:fa:40:30:7c:75:a1:37:07:d5: 4b:a9:68:e2:a1:dc:4d:6e:0a:c2:32:a7:4a:12:b1: 40:d9:5f:3a:51:61:65:1b:a9:36:17:58:b3:d2:bc: f3:8b:c3:1f:52:f6:b9:c0:70:57:13:5f:28:75:b8: 60:70:21:46:18:eb:9f:9d:ad:f6:d3:45:74:13:86: 98:e9:97:e7:a4:a4:39:37:52:52:94:57:11:4e:eb: ec:6f:f1:fd:7f:2e:4f:11:61:30:ee:75:0e:f6:19: 8a:fd:9a:74:c8:87:62:5e:9d:a6:6e:b2:8d:e5:6a: 81:d4:fe:70:06:c4:a0:0f:19:62:58:b2:45:a1:96: f0:01:f6:63:f8:30:42:7f:bb:d0:5a:ec:f8:20:3f: a6:d7:ca:7f:c0:0b:d5:8b:42:4c:31:a7:df:91:d1: 13:c4:3e:1c:26:cf:bf:11:7b:87:66:9e:19:c6:b2: 6b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:82:15:AD:B0:64:F2:E6:3B:A9:F8:96:A1:67:5A:39:50:4A:25:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.crl X509v3 Authority Key Identifier: keyid:D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer sbgp-ipAddrBlock: critical IPv4: 192.169.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a6:ab:d6:31:96:76:e3:46:dd:06:7b:60:8c:96:b9:96:46: 48:0d:7f:21:51:67:89:78:3e:76:33:4e:ee:22:8b:c3:04:68: ed:ac:e0:85:d7:95:2c:b0:dc:96:6b:24:a7:e5:18:0c:63:57: 88:bf:25:ed:7e:71:55:32:86:cc:1b:aa:50:fd:c0:b0:59:73: 29:3a:31:fe:b1:c5:ef:bd:4f:b8:e7:b1:f4:c3:a1:a7:20:0e: 6d:2a:c4:03:d9:dd:0b:c2:d0:d9:f1:ec:5c:3e:60:94:37:86: 66:96:56:bc:7d:ef:18:27:72:bb:20:f4:74:95:c1:71:b5:a5: 6b:10:2b:49:d4:77:93:6c:ba:fc:86:b9:a2:10:99:e9:d2:ce: e8:22:77:24:8c:16:ba:74:8c:21:9c:02:db:49:49:5a:d0:32: 73:3f:31:31:0c:cf:06:fa:ed:68:15:bf:ed:a2:9c:66:9f:ea: 41:1c:d3:61:65:21:33:03:cd:77:b3:0f:b2:eb:16:1f:03:a5: a5:2b:c1:4a:69:fc:09:36:64:e4:d8:ea:06:c9:d0:e3:8b:de: 10:cf:23:19:da:ab:c0:04:2f:be:b7:15:a1:08:78:f2:71:c0: fc:b7:69:39:94:40:f1:5d:3a:9f:bf:42:f4:8a:c4:0d:82:d8: ba:db:ca:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNTy5foe6vkFEC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNjZmUyNjYtMDYwOS00OWNkLWIyYmEtNjcxYTY0ZWZk YzdjMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk OGY5MmMzN2EtN2QzMS00MjQ2LTliNzMtMTg3OTA2NTEyNzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgriyjKCGfkVVUtxEmlux2Rg3ZSepy7T5goKW 3PPKLR350iAUd+AvbGYxXb9D3nQ+GYt2n4Lqd3/QL1MHCpWCd/b5TTnyIYwQp4BV 7ITXWJ36QDB8daE3B9VLqWjiodxNbgrCMqdKErFA2V86UWFlG6k2F1iz0rzzi8Mf Uva5wHBXE18odbhgcCFGGOufna3200V0E4aY6ZfnpKQ5N1JSlFcRTuvsb/H9fy5P EWEw7nUO9hmK/Zp0yIdiXp2mbrKN5WqB1P5wBsSgDxliWLJFoZbwAfZj+DBCf7vQ Wuz4ID+m18p/wAvVi0JMMaffkdETxD4cJs+/EXuHZp4ZxrJr+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECCFa2wZPLmO6n4lqFnWjlQSiWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xY2Nm ZTI2Ni0wNjA5LTQ5Y2QtYjJiYS02NzFhNjRlZmRjN2MvNDVhYjdlZDctMTMwNy0z NmMzLTg0N2ItZTJiOTAxM2M0ZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWNjZmUyNjYtMDYwOS00OWNkLWIy YmEtNjcxYTY0ZWZkYzdjLzFjY2ZlMjY2LTA2MDktNDljZC1iMmJhLTY3MWE2NGVm ZGM3Yy5jcmwwHwYDVR0jBBgwFoAU0vlps9WA6dWmnzmbJ4no4nNpERkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xY2NmZTI2Ni0wNjA5LTQ5Y2QtYjJiYS02NzFh NjRlZmRjN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqmq9YxlnbjRt0Ge2CMlrmWRkgNfyFRZ4l4PnYzTu4ii8MEaO2s4IXX lSyw3JZrJKflGAxjV4i/Je1+cVUyhswbqlD9wLBZcyk6Mf6xxe+9T7jnsfTDoacg Dm0qxAPZ3QvC0Nnx7Fw+YJQ3hmaWVrx97xgncrsg9HSVwXG1pWsQK0nUd5NsuvyG uaIQmenSzugidySMFrp0jCGcAttJSVrQMnM/MTEMzwb67WgVv+2inGaf6kEc02Fl ITMDzXezD7LrFh8DpaUrwUpp/Ak2ZOTY6gbJ0OOL3hDPIxnaq8AEL763FaEIePJx wPy3aTmUQPFdOp+/QvSKxA2C2Lrbyjk= -----END CERTIFICATE-----Generated at Mon Jun 30 14:11:16 2025 by rpki-client