$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/d2aa202d-ca92-33b2-9fe0-1806d0f31f6b.roa File: d2aa202d-ca92-33b2-9fe0-1806d0f31f6b.roa (raw, json) Hash identifier: 7RLO0N4oohAciAMpA4mXn7rnt0hv2S6BZJvrYgkio1M= Subject key identifier: 2D:DD:90:45:3B:62:70:EA:58:E9:53:5A:1F:B9:D9:9A:0C:8D:C9:5B Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F4328584A5FC5D7C789E071B7F1CA1AA0 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/d2aa202d-ca92-33b2-9fe0-1806d0f31f6b.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 16509 IP address blocks: 192.135.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:d7:c7:89:e0:71:b7:f1:ca:1a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=fecefa13-9733-4ec3-bf8b-5209b77456fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e4:ca:e5:ca:ae:5c:2c:e7:e8:01:7c:95:59: c2:0f:a6:4c:70:8a:2d:11:af:5c:c3:2b:bd:ee:97: 79:70:e1:a8:27:09:ac:df:0c:67:b4:2d:cc:f6:55: 4a:43:3e:b0:58:78:b2:f9:ee:26:d8:d9:e6:c4:91: 80:85:08:f3:c9:48:79:f4:81:44:c5:28:55:72:ac: f5:01:44:0a:b7:57:fe:eb:cf:5d:08:6e:f3:7e:3b: d1:28:0b:15:b3:77:bb:3e:65:7b:15:46:39:72:5b: 6d:07:4c:6b:c3:bd:f8:3e:1a:59:c8:08:a6:ee:f4: 87:9b:a1:ba:57:2c:ab:3f:5c:b5:d5:e1:79:f4:f4: ce:0a:81:9c:68:34:60:01:ef:c4:a1:af:39:a9:6f: 25:00:03:fb:8c:a5:cc:60:3a:9c:42:b2:ca:25:81: 80:f6:45:81:48:0a:f2:63:55:58:da:e3:f7:5e:8a: 1e:66:61:b7:32:9b:ad:c9:44:17:65:58:87:de:22: c4:e6:33:1a:a6:f4:72:ec:06:60:bf:2c:7b:d0:24: 4b:c8:99:99:39:5d:61:6b:00:ce:cb:d8:6b:40:6c: 97:8e:75:e2:49:cb:79:6a:d2:fb:e6:6d:a7:8f:cf: 89:a7:b2:04:a7:d2:fe:ea:0b:75:ab:b8:a2:8d:48: 75:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DD:90:45:3B:62:70:EA:58:E9:53:5A:1F:B9:D9:9A:0C:8D:C9:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/d2aa202d-ca92-33b2-9fe0-1806d0f31f6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv4: 192.135.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:d2:15:84:e2:75:08:07:86:c1:8c:97:97:a1:65:57:4f:e6: 94:9b:fd:2d:11:47:23:14:a2:c3:14:2f:66:92:7d:41:15:a0: a8:19:9a:91:d8:3c:05:0a:08:6c:17:78:5a:37:e5:10:67:11: 1e:44:f2:e7:c9:c3:f5:9d:08:11:62:44:02:52:e5:9b:c9:31: 5d:ea:24:fe:a4:59:58:ef:ea:c2:1d:40:b7:25:e1:00:3e:71: 7b:81:da:2e:f8:63:65:2d:d5:b6:de:a1:ef:9a:26:fe:e3:df: 7b:a3:7c:c6:ca:5c:da:28:79:e2:48:a0:10:85:d7:33:d5:cc: 56:10:5d:08:72:05:aa:9f:2f:ae:02:c0:f7:28:db:d6:b6:db: 62:fb:dd:6e:ca:cf:26:a3:5b:68:b1:a0:54:97:47:fb:eb:d1: 6c:b4:b6:b4:8e:1e:8e:97:8c:cc:db:98:c8:a5:c5:2f:07:f1: 85:a3:83:e2:48:5c:cd:3b:35:65:46:cf:43:71:35:ac:4a:e0: 14:bf:a2:e4:f1:10:1e:56:ed:e1:24:c1:b9:b9:c9:19:8b:ae: 7b:42:6d:ac:2e:19:d9:36:ea:ae:2f:10:82:65:30:7d:91:7b: 35:9a:ba:42:d0:b6:4f:91:ad:f3:bc:40:9b:84:7f:f1:e4:a2: 46:26:4d:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxdfHieBxt/HKGqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk ZmVjZWZhMTMtOTczMy00ZWMzLWJmOGItNTIwOWI3NzQ1NmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuTK5cquXCzn6AF8lVnCD6ZMcIotEa9cwyu9 7pd5cOGoJwms3wxntC3M9lVKQz6wWHiy+e4m2NnmxJGAhQjzyUh59IFExShVcqz1 AUQKt1f+689dCG7zfjvRKAsVs3e7PmV7FUY5clttB0xrw734PhpZyAim7vSHm6G6 VyyrP1y11eF59PTOCoGcaDRgAe/Eoa85qW8lAAP7jKXMYDqcQrLKJYGA9kWBSAry Y1VY2uP3XooeZmG3MputyUQXZViH3iLE5jMapvRy7AZgvyx70CRLyJmZOV1hawDO y9hrQGyXjnXiSct5atL75m2nj8+Jp7IEp9L+6gt1q7iijUh19wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3dkEU7YnDqWOlTWh+52ZoMjclbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvZDJhYTIwMmQtY2E5Mi0z M2IyLTlmZTAtMTgwNmQwZjMxZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIffMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7SFYTidQgHhsGMl5ehZVdP5pSb/S0RRyMUosMUL2aSfUEVoKgZmpHY PAUKCGwXeFo35RBnER5E8ufJw/WdCBFiRAJS5ZvJMV3qJP6kWVjv6sIdQLcl4QA+ cXuB2i74Y2Ut1bbeoe+aJv7j33ujfMbKXNooeeJIoBCF1zPVzFYQXQhyBaqfL64C wPco29a222L73W7KzyajW2ixoFSXR/vr0Wy0trSOHo6XjMzbmMilxS8H8YWjg+JI XM07NWVGz0NxNaxK4BS/ouTxEB5W7eEkwbm5yRmLrntCbawuGdk26q4vEIJlMH2R ezWaukLQtk+RrfO8QJuEf/HkokYmTTM= -----END CERTIFICATE-----Generated at Tue Jul 1 18:47:28 2025 by rpki-client