$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa File: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (raw, json) Hash identifier: +HumoP+y1kRF/KbtKLXmgaKsyGkfY1ADuS5c+aY+Rf8= Subject key identifier: FF:FB:E2:CF:4D:4B:06:12:E3:5E:08:6E:06:B6:4F:12:31:D9:9E:07 Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584AF2567C6D6E65373F2EB96300 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 395464 IP address blocks: 192.68.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:7c:6d:6e:65:37:3f:2e:b9:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=c4f256e2-ad67-445d-8dbe-c0e7f43cb065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:02:44:64:fc:cf:3f:a8:01:7a:99:a9:5a:8c: 57:1f:90:85:0b:e4:b9:ba:89:0c:2e:e0:ed:a7:85: 4e:72:c2:19:13:38:3d:31:54:b6:2e:6d:cc:84:3b: 63:6c:df:d7:3a:6c:6c:b2:7a:73:3e:90:d9:6a:64: 46:e6:be:6e:b0:3b:2f:61:c7:3f:67:d9:65:70:98: 17:0c:e1:45:3c:3f:32:69:5f:98:0a:63:db:0e:de: cf:52:47:be:f5:90:da:11:aa:52:f8:7b:4d:fb:9c: b4:be:eb:60:1b:24:07:10:d1:5f:b3:48:3f:f8:b2: ad:aa:6a:3a:31:d6:58:81:fa:ec:74:b4:73:27:a7: 9b:ab:91:3c:ce:7f:c1:5f:0c:fc:64:5a:be:f1:93: 74:82:d8:a3:05:31:72:ff:b8:41:a7:80:65:d6:ae: c0:ec:e4:8d:db:03:76:b9:43:e3:c5:fc:e9:69:3e: 69:99:46:35:04:39:1b:99:6b:ce:80:eb:37:5b:17: fe:f7:98:32:db:04:02:8c:20:e4:31:00:7d:e8:ad: 19:55:02:75:d9:51:d3:a3:21:22:07:f0:8f:69:5b: f1:93:36:41:8a:63:8a:fe:1a:45:e5:df:85:ec:6e: 95:47:b9:f1:bc:5d:74:c0:f1:6d:11:f4:0a:35:00: 9d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FB:E2:CF:4D:4B:06:12:E3:5E:08:6E:06:B6:4F:12:31:D9:9E:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: 192.68.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:6e:c9:7d:f8:99:a2:70:bc:16:ae:f6:8c:ae:b0:bd:35:59: 39:32:76:5d:4c:47:8b:9b:07:94:8b:0c:06:95:1f:47:77:eb: ea:09:36:d7:b5:e4:71:12:b2:21:84:68:71:0d:8f:dc:4e:cf: 17:2b:6b:bf:77:93:7a:81:1d:4b:56:43:1f:01:44:b5:26:3f: d1:29:0c:f7:55:9a:b7:72:df:19:4e:d9:05:36:5b:f5:db:87: 5d:e6:8d:d9:b8:17:4c:44:54:89:28:ba:a5:1a:20:7d:a7:be: 4c:25:a0:cb:44:d7:d9:48:a0:02:ad:0d:b1:37:7e:24:a4:dd: c6:03:e5:9b:6a:c5:c3:89:ac:05:1c:bf:d8:13:1a:de:d7:22: f4:a5:47:74:46:3a:a3:35:f2:bf:02:37:bb:be:b4:7a:c0:16: e1:9c:8e:b1:3c:42:63:a5:f7:ac:0a:a1:c7:7a:ac:ab:a9:88: 7d:97:ab:75:40:b0:0c:27:fa:8e:eb:98:ae:cf:84:52:26:b4: 89:d3:d2:f0:58:69:9a:f4:d9:f6:b2:a1:e8:46:36:c1:2e:e1: 1d:b0:d1:8c:91:77:a9:f1:79:fa:71:bf:7c:b1:79:a2:9c:b0: 2d:28:16:ad:c4:a6:25:ba:50:3c:28:7b:ef:b6:8f:be:c6:f2: 28:99:01:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnxtbmU3Py65YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk YzRmMjU2ZTItYWQ2Ny00NDVkLThkYmUtYzBlN2Y0M2NiMDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwJEZPzPP6gBepmpWoxXH5CFC+S5uokMLuDt p4VOcsIZEzg9MVS2Lm3MhDtjbN/XOmxssnpzPpDZamRG5r5usDsvYcc/Z9llcJgX DOFFPD8yaV+YCmPbDt7PUke+9ZDaEapS+HtN+5y0vutgGyQHENFfs0g/+LKtqmo6 MdZYgfrsdLRzJ6ebq5E8zn/BXwz8ZFq+8ZN0gtijBTFy/7hBp4Bl1q7A7OSN2wN2 uUPjxfzpaT5pmUY1BDkbmWvOgOs3Wxf+95gy2wQCjCDkMQB96K0ZVQJ12VHToyEi B/CPaVvxkzZBimOK/hpF5d+F7G6VR7nxvF10wPFtEfQKNQCd9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/74s9NSwYS414Ibga2TxIx2Z4HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvOTVjYmNlNTItYTBmMC0z ODJjLThiODEtZDIzYzcwY2EzNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwERwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNuyX34maJwvBau9oyusL01WTkydl1MR4ubB5SLDAaVH0d36+oJNte1 5HESsiGEaHENj9xOzxcra793k3qBHUtWQx8BRLUmP9EpDPdVmrdy3xlO2QU2W/Xb h13mjdm4F0xEVIkouqUaIH2nvkwloMtE19lIoAKtDbE3fiSk3cYD5ZtqxcOJrAUc v9gTGt7XIvSlR3RGOqM18r8CN7u+tHrAFuGcjrE8QmOl96wKocd6rKupiH2Xq3VA sAwn+o7rmK7PhFImtInT0vBYaZr02fayoehGNsEu4R2w0YyRd6nxefpxv3yxeaKc sC0oFq3EpiW6UDwoe++2j77G8iiZAbg= -----END CERTIFICATE-----Generated at Sat Aug 23 23:46:31 2025 by rpki-client