$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/693b043c-7dd0-3e66-9b30-96dc0a32abd1.roa File: 693b043c-7dd0-3e66-9b30-96dc0a32abd1.roa (raw, json) Hash identifier: 5ogHxP3Jh0E2YHd7jy3R9jT9snhGC1YpTDEBd3qD7ao= Subject key identifier: 3E:35:05:91:A1:13:11:C6:61:51:14:20:7E:0E:74:97:63:99:53:39 Certificate issuer: /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Certificate serial: 010D0C9F4328584AEE2687C2229B8752038784A0 Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/693b043c-7dd0-3e66-9b30-96dc0a32abd1.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 11736 IP address blocks: 192.55.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:87:c2:22:9b:87:52:03:87:84:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=db76d49c-df7e-4dcb-9f73-f3fd85e8b688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:75:be:3e:cd:a6:f4:e0:95:66:7d:42:ce:c1: 43:ac:84:44:16:5e:16:68:21:58:05:52:fc:32:d0: d6:ee:fa:7b:6a:b3:d8:91:0c:27:39:6c:bf:69:49: a6:cd:c7:1d:24:90:57:4b:a2:12:c6:47:53:9d:94: 09:74:d2:38:51:20:a2:9f:2b:65:c1:ad:ab:96:2a: 6f:5e:c8:27:e7:d9:38:9b:b0:fb:55:19:e4:38:a9: e5:37:08:7d:dc:38:1d:3a:71:1e:c6:35:cc:7d:25: 66:ee:65:b2:04:47:c7:2d:db:96:e3:d9:1d:a2:4c: 0f:f1:b8:18:a3:2d:46:26:32:be:e4:d4:a7:18:43: ec:6b:40:ad:43:ab:ad:4a:6c:ab:66:7a:4c:96:fe: b9:f4:a5:92:bc:b7:d1:6e:78:0b:f9:07:2e:20:58: 22:63:83:64:2d:43:f1:44:95:4e:12:d5:6e:5e:d8: a9:f8:61:2b:18:98:14:18:c0:c6:ad:41:0c:fd:e1: 1a:a2:7c:4f:0e:04:78:b8:23:24:72:0e:13:4c:9f: 92:b8:31:af:07:fc:6d:a0:20:c9:c5:e9:95:1a:70: ab:38:68:39:b1:05:0c:0f:9d:09:46:78:97:a4:fd: 4d:01:0b:c0:a3:69:7c:22:71:ba:5f:7c:bb:90:5e: fa:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:35:05:91:A1:13:11:C6:61:51:14:20:7E:0E:74:97:63:99:53:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/693b043c-7dd0-3e66-9b30-96dc0a32abd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl X509v3 Authority Key Identifier: keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer sbgp-ipAddrBlock: critical IPv4: 192.55.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:68:bd:ea:b8:47:ac:a8:11:b1:d3:a2:81:c0:5d:1b:0e:6b: 83:ba:bf:aa:9e:fc:ff:14:a2:a7:f4:74:0e:a1:e9:37:fa:1a: bb:9c:dd:64:32:9c:f7:0f:ea:2a:19:b9:49:25:49:51:29:b3: 92:8f:01:82:e2:a7:17:54:e9:fd:76:1a:d3:e5:8f:8b:45:18: 07:5f:a6:f0:48:c9:22:48:06:3c:0b:0b:47:07:3e:b6:46:27: dd:66:ad:32:ee:05:40:c5:78:12:16:43:0f:ad:be:8b:f5:8f: ba:5d:4e:e1:8d:dc:5c:6d:54:74:db:31:27:da:b5:01:42:76: 30:0f:e6:79:c0:b5:fb:7f:f9:3d:d9:f2:9f:ee:1b:43:87:fa: 9c:f2:94:8a:fc:73:b9:ce:c7:11:7f:84:5a:f9:9d:84:66:88: 15:de:3d:14:b3:88:4e:ab:c4:29:d5:11:cc:1d:09:82:ed:38: 60:a9:c3:22:31:12:3b:6a:a6:70:78:d2:fe:c4:dd:50:c3:de: 0a:dc:33:f5:38:2e:94:3b:e6:fc:70:1c:a7:05:cc:41:ef:c0: 09:2a:1c:72:ca:50:06:79:2d:a0:dc:a9:91:1e:c5:1d:6a:26: 91:f9:cb:59:70:1c:4c:4f:a2:bf:ab:dc:2d:1f:91:af:f1:93: 8c:35:35:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJofCIpuHUgOHhKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5MDBlNGUtNWYwYS00YjE0LTk4YzAtNjY0N2JmZjVl NjRlMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk ZGI3NmQ0OWMtZGY3ZS00ZGNiLTlmNzMtZjNmZDg1ZThiNjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHW+Ps2m9OCVZn1CzsFDrIREFl4WaCFYBVL8 MtDW7vp7arPYkQwnOWy/aUmmzccdJJBXS6ISxkdTnZQJdNI4USCinytlwa2rlipv Xsgn59k4m7D7VRnkOKnlNwh93DgdOnEexjXMfSVm7mWyBEfHLduW49kdokwP8bgY oy1GJjK+5NSnGEPsa0CtQ6utSmyrZnpMlv659KWSvLfRbngL+QcuIFgiY4NkLUPx RJVOEtVuXtip+GErGJgUGMDGrUEM/eEaonxPDgR4uCMkcg4TTJ+SuDGvB/xtoCDJ xemVGnCrOGg5sQUMD50JRniXpP1NAQvAo2l8InG6X3y7kF76MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD41BZGhExHGYVEUIH4OdJdjmVM5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Zjkw MGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZmNWU2NGUvNjkzYjA0M2MtN2RkMC0z ZTY2LTliMzAtOTZkYzBhMzJhYmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y5MDBlNGUtNWYwYS00YjE0LTk4 YzAtNjY0N2JmZjVlNjRlLzdmOTAwZTRlLTVmMGEtNGIxNC05OGMwLTY2NDdiZmY1 ZTY0ZS5jcmwwHwYDVR0jBBgwFoAU8+WK0rjvh9c+gIgy/nujowv1xKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3 YmZmNWU2NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDfkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFloveq4R6yoEbHTooHAXRsOa4O6v6qe/P8Uoqf0dA6h6Tf6Gruc3WQy nPcP6ioZuUklSVEps5KPAYLipxdU6f12GtPlj4tFGAdfpvBIySJIBjwLC0cHPrZG J91mrTLuBUDFeBIWQw+tvov1j7pdTuGN3FxtVHTbMSfatQFCdjAP5nnAtft/+T3Z 8p/uG0OH+pzylIr8c7nOxxF/hFr5nYRmiBXePRSziE6rxCnVEcwdCYLtOGCpwyIx EjtqpnB40v7E3VDD3grcM/U4LpQ75vxwHKcFzEHvwAkqHHLKUAZ5LaDcqZEexR1q JpH5y1lwHExPor+r3C0fka/xk4w1Nck= -----END CERTIFICATE-----Generated at Sun Aug 24 01:36:34 2025 by rpki-client