$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa File: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (raw, json) Hash identifier: fXpFuLOxrKf3G3jytIUInemtnxTtEVnjA4Y6JNfJZ8g= Subject key identifier: 6E:C9:A5:B0:23:2A:62:6B:36:C4:14:0C:A5:CD:4A:08:01:F5:99:F0 Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584A119AAE0BA341F120A51CB200 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 395464 IP address blocks: 192.68.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:ae:0b:a3:41:f1:20:a5:1c:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=70eb6c09-aa05-4c07-9f8f-a9a252701b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d6:06:44:ab:bd:a9:43:d0:de:95:61:0e:69: b1:fd:8c:79:5f:2f:0b:c6:3b:ea:8a:f6:1f:63:87: 3e:a8:4e:df:8e:63:31:47:cd:5d:76:3b:e2:61:51: 7f:a3:09:71:ff:90:da:a2:d6:a8:58:5b:e3:e0:15: ac:79:22:cf:1e:01:67:af:e4:64:fa:8b:52:7d:a2: 65:47:b7:5f:b2:a0:2e:95:0f:8e:6f:d8:48:df:82: 43:c4:18:3b:a0:96:31:10:f2:2e:a3:9c:56:99:99: 00:48:05:21:1f:70:f0:45:1b:6a:86:d0:aa:73:f9: 52:84:8c:1e:19:fd:a9:26:fc:eb:32:7c:08:79:fe: 34:d6:6a:41:26:b2:ed:fd:fa:72:27:cc:07:c9:3a: 4c:e5:cc:45:bf:f9:73:1e:d9:83:70:68:6e:46:5a: ad:b5:6e:86:f7:7b:17:69:24:92:b3:ee:d9:1c:12: 62:ef:e9:a4:19:85:22:cb:9f:b1:6b:b5:c9:c5:a4: 1f:67:31:cc:45:76:f6:88:3a:75:54:f1:62:0a:df: 53:f5:5d:4d:17:5a:51:f9:2f:6a:c6:0b:5c:ea:df: ea:7b:54:e1:53:1f:1f:d7:eb:fe:06:f0:7c:73:dd: 5a:c2:6c:26:c4:5a:58:28:49:f6:d2:b8:0d:46:9f: cb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C9:A5:B0:23:2A:62:6B:36:C4:14:0C:A5:CD:4A:08:01:F5:99:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: 192.68.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:03:ca:1d:91:7f:22:a6:3e:d8:13:02:b8:e4:c0:fb:79:62: 51:f0:78:cd:1b:8a:8a:3e:9e:76:1d:0f:d7:c3:7d:97:b0:ab: c7:d7:52:ed:45:c3:99:66:00:95:69:10:a4:a6:83:f6:65:4b: b7:14:db:19:14:c8:19:2a:b1:02:ca:a2:a9:3a:7b:51:d7:43: fd:06:b7:b3:ce:22:75:a6:b3:b4:c1:f8:f3:f5:8f:a8:9e:eb: c5:11:82:33:1a:6b:12:0c:ae:d3:50:00:58:cf:91:5a:c7:dd: be:00:6d:15:c9:70:e8:d5:ca:c4:58:9f:61:bf:bd:32:3e:1c: ec:e5:64:83:26:35:3a:cf:23:c2:af:72:0b:4a:2c:8f:fa:3d: b2:c4:f8:db:6e:a7:55:8a:ca:3b:0d:90:8a:8f:1b:6c:07:21: c7:16:90:6a:6d:98:8f:65:18:10:0a:3e:0a:cb:60:e1:9e:0f: 6f:a4:f7:07:5b:8d:55:a9:dd:ff:be:c7:e3:d3:f4:41:b1:0b: 31:2e:1e:7c:fc:51:7e:b8:0e:cd:47:f3:9d:fb:57:c3:8d:45: 4f:2f:fe:68:8d:84:b5:ca:da:d1:4e:bc:45:05:53:7d:95:88: 5c:3c:44:85:7f:ee:f1:fa:0c:af:bf:cb:2d:5f:88:fd:14:ab: 32:23:5b:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmq4Lo0HxIKUcsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk NzBlYjZjMDktYWEwNS00YzA3LTlmOGYtYTlhMjUyNzAxYjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tYGRKu9qUPQ3pVhDmmx/Yx5Xy8LxjvqivYf Y4c+qE7fjmMxR81ddjviYVF/owlx/5DaotaoWFvj4BWseSLPHgFnr+Rk+otSfaJl R7dfsqAulQ+Ob9hI34JDxBg7oJYxEPIuo5xWmZkASAUhH3DwRRtqhtCqc/lShIwe Gf2pJvzrMnwIef401mpBJrLt/fpyJ8wHyTpM5cxFv/lzHtmDcGhuRlqttW6G93sX aSSSs+7ZHBJi7+mkGYUiy5+xa7XJxaQfZzHMRXb2iDp1VPFiCt9T9V1NF1pR+S9q xgtc6t/qe1ThUx8f1+v+BvB8c91awmwmxFpYKEn20rgNRp/LsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7JpbAjKmJrNsQUDKXNSggB9ZnwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvOTVjYmNlNTItYTBmMC0z ODJjLThiODEtZDIzYzcwY2EzNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwERwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcDyh2RfyKmPtgTArjkwPt5YlHweM0bioo+nnYdD9fDfZewq8fXUu1F w5lmAJVpEKSmg/ZlS7cU2xkUyBkqsQLKoqk6e1HXQ/0Gt7POInWms7TB+PP1j6ie 68URgjMaaxIMrtNQAFjPkVrH3b4AbRXJcOjVysRYn2G/vTI+HOzlZIMmNTrPI8Kv cgtKLI/6PbLE+Ntup1WKyjsNkIqPG2wHIccWkGptmI9lGBAKPgrLYOGeD2+k9wdb jVWp3f++x+PT9EGxCzEuHnz8UX64Ds1H8537V8ONRU8v/miNhLXK2tFOvEUFU32V iFw8RIV/7vH6DK+/yy1fiP0UqzIjW3c= -----END CERTIFICATE-----Generated at Mon Jun 30 10:32:07 2025 by rpki-client