$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa File: 9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa (raw, json) Hash identifier: xpcpxFO+9kGJ0Gxj4ozanyCWaWhBPCEMw8GI7zzcAYY= Subject key identifier: 14:F1:66:CD:BC:BD:3D:B5:60:B2:E8:11:C5:54:D3:21:99:C2:C9:AF Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F4328584A5FC5DC4CF4E2C9EE48EDEC80 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 395403 IP address blocks: 192.135.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:dc:4c:f4:e2:c9:ee:48:ed:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=fefdf930-cd34-4618-b778-3ef24240c976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b4:d6:8f:a5:b8:47:77:2b:88:72:81:01:42: 44:00:51:e4:fd:08:0a:a9:52:db:b4:33:9c:bf:c2: 83:3a:d6:cf:cb:fc:1e:98:74:53:cb:39:6e:13:8d: 9f:9f:31:8b:6b:cc:db:88:b6:51:06:e3:81:68:68: 04:e7:d8:f9:ea:80:e2:de:88:df:43:04:bc:19:1c: 13:1f:0f:5d:d6:6a:4f:07:fa:74:09:ba:b9:c9:c9: 29:76:98:c8:c1:12:41:35:86:26:3a:26:a2:8d:ed: b1:79:c3:40:4c:b6:9e:75:ac:d9:39:1b:a3:3b:19: 9a:80:6a:88:2e:80:3c:02:8c:41:35:6f:ce:df:68: b4:42:97:9e:fb:3e:63:c1:7c:92:3e:24:02:a5:a3: 8e:ed:3d:08:22:50:2b:dd:3f:83:31:e6:9f:5a:74: ea:fe:85:97:77:02:d2:f0:b7:56:07:63:c9:4f:2f: 9c:ed:f9:03:68:28:5e:bb:83:a4:ab:bf:b9:42:e5: 63:ab:c9:2a:66:58:0d:02:a1:72:02:89:75:f8:1e: d9:49:f5:c3:9c:06:8b:1a:12:14:db:32:d6:03:52: bb:80:d8:d4:60:aa:06:eb:b5:8c:70:91:ee:7f:bb: 3a:db:c3:39:ef:81:c6:88:25:8f:bb:f9:f5:60:5a: cb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F1:66:CD:BC:BD:3D:B5:60:B2:E8:11:C5:54:D3:21:99:C2:C9:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv4: 192.135.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:41:8f:63:5f:16:db:7a:7d:31:20:7a:8d:b6:01:26:29:6d: 7b:0e:2a:64:c5:41:66:57:63:f9:2a:91:d8:00:37:44:fd:cf: 11:ef:f1:5b:56:21:29:2d:aa:48:4c:84:50:4c:3b:4c:a9:8f: c6:77:1f:cb:ad:c2:e6:f5:c3:cd:2e:4a:c5:39:c4:36:ff:79: 25:81:7b:fb:93:5e:68:d2:fd:27:66:1a:3c:2a:27:fc:70:9a: 29:c1:de:44:8f:12:36:d3:3f:02:1e:c5:85:d6:60:77:6e:28: 1a:8c:c9:d4:bb:8a:20:5b:ce:30:30:08:90:50:42:73:fa:10: 0d:b6:8e:4c:45:19:56:1b:98:7b:13:ca:fc:36:3c:03:8a:39: 2b:5a:85:9e:3a:00:59:3f:b7:eb:6b:5c:ca:14:70:ea:a7:25: fe:8e:00:43:c4:5e:6a:6b:c0:c3:c9:6f:ea:70:83:41:fb:3c: 1e:be:7e:4f:48:56:64:49:24:7c:17:60:6b:17:7e:a8:40:e1: 72:af:dd:29:a3:88:ca:3f:c5:0b:02:c3:aa:2f:d3:be:9f:59: 72:5e:c0:79:cc:a4:5c:e0:38:88:52:02:0e:97:cf:e5:08:a7: e1:ff:74:c4:69:0f:98:75:33:76:83:56:b8:b6:34:b8:68:58: 59:50:0c:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxdxM9OLJ7kjt7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk ZmVmZGY5MzAtY2QzNC00NjE4LWI3NzgtM2VmMjQyNDBjOTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibTWj6W4R3criHKBAUJEAFHk/QgKqVLbtDOc v8KDOtbPy/wemHRTyzluE42fnzGLa8zbiLZRBuOBaGgE59j56oDi3ojfQwS8GRwT Hw9d1mpPB/p0Cbq5yckpdpjIwRJBNYYmOiaije2xecNATLaedazZORujOxmagGqI LoA8AoxBNW/O32i0Qpee+z5jwXySPiQCpaOO7T0IIlAr3T+DMeafWnTq/oWXdwLS 8LdWB2PJTy+c7fkDaCheu4Okq7+5QuVjq8kqZlgNAqFyAol1+B7ZSfXDnAaLGhIU 2zLWA1K7gNjUYKoG67WMcJHuf7s628M574HGiCWPu/n1YFrLVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTxZs28vT21YLLoEcVU0yGZwsmvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvOWViMmRlYzItOTcwMC0z YTZhLThkOTEtNmQ5MGViNjJiODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIffMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBBj2NfFtt6fTEgeo22ASYpbXsOKmTFQWZXY/kqkdgAN0T9zxHv8VtW ISktqkhMhFBMO0ypj8Z3H8utwub1w80uSsU5xDb/eSWBe/uTXmjS/SdmGjwqJ/xw minB3kSPEjbTPwIexYXWYHduKBqMydS7iiBbzjAwCJBQQnP6EA22jkxFGVYbmHsT yvw2PAOKOStahZ46AFk/t+trXMoUcOqnJf6OAEPEXmprwMPJb+pwg0H7PB6+fk9I VmRJJHwXYGsXfqhA4XKv3SmjiMo/xQsCw6ov076fWXJewHnMpFzgOIhSAg6Xz+UI p+H/dMRpD5h1M3aDVri2NLhoWFlQDEU= -----END CERTIFICATE-----Generated at Thu Jul 3 03:42:34 2025 by rpki-client