$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa File: 6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa (raw, json) Hash identifier: 8kTN9u66M6Nsztcy/hQhpR3uLP4Ht7SmYKQ0RACAH6s= Subject key identifier: 9F:6D:CA:51:7D:F1:95:E2:48:D7:AD:D0:BF:C5:5A:74:71:D5:78:D2 Certificate issuer: /CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Certificate serial: 010D0C9F4328584AE89123F6E78CEFB686540D80 Authority key identifier: F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 6579 IP address blocks: 192.75.24.0/24 maxlen: 24 192.219.31.0/24 maxlen: 24 208.85.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:23:f6:e7:8c:ef:b6:86:54:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=370c5b62-94f7-4ef1-a476-3ab888ea8243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:85:19:90:47:5d:c5:17:b1:12:17:d1:d2:00: 56:67:cf:fd:17:3b:5d:88:50:d1:34:c2:18:73:95: 1d:66:ca:5f:02:a0:ec:8c:ac:96:c0:e8:f8:32:6c: 98:6d:45:a0:85:04:78:80:a7:29:5e:2b:c8:64:9a: 68:56:61:47:65:18:75:a2:68:64:f4:34:e9:a3:90: db:ed:8c:8d:3d:d8:02:e1:87:c3:9b:90:a2:36:6c: 3e:13:e1:a7:53:23:1d:83:50:ec:bb:a6:89:b3:c0: 13:31:92:38:41:81:51:cc:97:d5:2b:94:7b:81:ec: 0b:f8:28:98:37:30:43:f7:dd:0e:66:8d:71:14:c0: 31:c5:5c:10:24:d1:56:39:e5:88:d3:af:f4:88:5c: a1:f5:54:71:6b:ef:cd:9f:1a:49:cd:9d:ef:15:98: 9f:4a:9f:50:03:a8:56:8d:1a:dc:90:e9:31:4b:6c: b3:39:fa:af:e3:a9:78:f1:a7:eb:20:44:92:6c:0a: c4:26:35:59:3c:7e:b4:80:a1:f9:45:46:2a:d7:b4: 47:b3:26:ed:73:85:8c:67:3f:62:02:13:99:35:15: 44:d1:80:6c:38:8f:40:b7:ec:f0:9c:ca:30:1a:b8: 8d:cf:4b:bd:8d:1b:de:cc:54:02:59:51:7a:68:93: 99:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6D:CA:51:7D:F1:95:E2:48:D7:AD:D0:BF:C5:5A:74:71:D5:78:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl X509v3 Authority Key Identifier: keyid:F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer sbgp-ipAddrBlock: critical IPv4: 192.75.24.0/24 192.219.31.0/24 208.85.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:6b:0c:6b:30:b5:71:eb:5f:9f:57:f7:b9:a0:46:59:da:71: 30:d9:f6:63:96:02:60:6a:31:a5:dd:cc:af:19:f0:e8:0c:69: 63:cf:2d:e3:7a:b0:06:99:85:c7:f1:5b:d4:15:51:50:50:88: c3:88:fb:f0:5c:14:29:40:ea:cd:4c:1b:9c:ad:75:5d:ff:41: 39:3d:7a:b9:eb:bf:bf:be:05:73:a2:8f:cc:f8:a3:ee:6c:47: 07:14:f4:e8:3d:e6:f3:01:85:f0:e4:f7:dc:9f:31:ea:49:21: a0:44:99:b5:41:c0:bf:e7:9b:d6:e3:f4:40:4d:77:51:5b:8e: 7f:c0:b7:98:92:da:fe:00:9f:77:a1:ae:d3:67:5f:37:bf:8e: 5b:a5:96:1c:8b:0e:2d:df:72:c3:23:b4:df:fc:a1:6b:59:3f: 94:db:41:83:a8:ab:1b:02:e6:db:42:6c:06:40:43:90:c4:43: 31:96:89:48:c8:51:22:a6:10:21:86:7f:e6:23:6c:86:df:58: 4f:a9:e4:e5:49:e6:c2:2e:e1:7d:d8:bf:de:b3:6e:5f:e6:a9: 3e:04:ca:1e:92:b9:0f:4b:bc:f6:92:f3:c5:73:13:ac:11:4a: a3:a5:67:61:d9:25:62:9f:4c:dc:29:1a:b9:59:9e:e0:ec:3f: 65:f1:93:46 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWErokSP254zvtoZUDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNjMWU0N2YtMmJkOS00ZTQyLWE5NTAtMGY4MWU0NWNk NDYxMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk MzcwYzViNjItOTRmNy00ZWYxLWE0NzYtM2FiODg4ZWE4MjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4UZkEddxRexEhfR0gBWZ8/9FztdiFDRNMIY c5UdZspfAqDsjKyWwOj4MmyYbUWghQR4gKcpXivIZJpoVmFHZRh1omhk9DTpo5Db 7YyNPdgC4YfDm5CiNmw+E+GnUyMdg1Dsu6aJs8ATMZI4QYFRzJfVK5R7gewL+CiY NzBD990OZo1xFMAxxVwQJNFWOeWI06/0iFyh9VRxa+/NnxpJzZ3vFZifSp9QA6hW jRrckOkxS2yzOfqv46l48afrIESSbArEJjVZPH60gKH5RUYq17RHsybtc4WMZz9i AhOZNRVE0YBsOI9At+zwnMowGriNz0u9jRvezFQCWVF6aJOZDQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFJ9tylF98ZXiSNet0L/FWnRx1XjSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kM2Mx ZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgxZTQ1Y2Q0NjEvNmZhODAxZTMtMzM0Mi0z ZjFjLWEzOTYtNmY5MjAxYzBkNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDNjMWU0N2YtMmJkOS00ZTQyLWE5 NTAtMGY4MWU0NWNkNDYxL2QzYzFlNDdmLTJiZDktNGU0Mi1hOTUwLTBmODFlNDVj ZDQ2MS5jcmwwHwYDVR0jBBgwFoAU+OBUZFYuBvxFQDv49h9ShSjaIsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kM2MxZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgx ZTQ1Y2Q0NjEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwEsYAwQA wNsfAwQC0FVQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADtrDGswtXHrX59X97mgRlnacTDZ9mOWAmBqMaXd zK8Z8OgMaWPPLeN6sAaZhcfxW9QVUVBQiMOI+/BcFClA6s1MG5ytdV3/QTk9ernr v7++BXOij8z4o+5sRwcU9Og95vMBhfDk99yfMepJIaBEmbVBwL/nm9bj9EBNd1Fb jn/At5iS2v4An3ehrtNnXze/jlullhyLDi3fcsMjtN/8oWtZP5TbQYOoqxsC5ttC bAZAQ5DEQzGWiUjIUSKmECGGf+YjbIbfWE+p5OVJ5sIu4X3Yv96zbl/mqT4Eyh6S uQ9LvPaS88VzE6wRSqOlZ2HZJWKfTNwpGrlZnuDsP2Xxk0Y= -----END CERTIFICATE-----Generated at Sat Aug 23 23:44:24 2025 by rpki-client