$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/17e9c215-3aa1-3b2b-8b8d-ce2fc2b25dc0.roa File: 17e9c215-3aa1-3b2b-8b8d-ce2fc2b25dc0.roa (raw, json) Hash identifier: 4ownVSqUwq57Y/tqAvQ1GurR56fua+sVZit9GecFJNU= Subject key identifier: A1:83:B3:E9:2E:3F:58:80:3A:E6:DF:47:04:AC:79:8D:BF:BC:34:EB Certificate issuer: /CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd Certificate serial: 010D0C9F4328584A46A5AAE9A191924926F03E80 Authority key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/17e9c215-3aa1-3b2b-8b8d-ce2fc2b25dc0.roa Signing time: Sun 22 Jun 2025 13:01:03 +0000 ROA not before: Sun 22 Jun 2025 13:01:03 +0000 ROA not after: Sat 20 Sep 2025 13:01:03 +0000 asID: 398555 IP address blocks: 192.111.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:a5:aa:e9:a1:91:92:49:26:f0:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd Validity Not Before: Jun 22 13:01:03 2025 GMT Not After : Sep 20 13:01:03 2025 GMT Subject: CN=b4896155-7cfa-4d63-af43-a221a4f61e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:42:f9:86:89:56:c1:10:74:20:59:b4:ea:c8: 10:1b:9b:74:06:cf:7f:42:5d:80:dd:ed:a8:37:4a: e8:fd:c8:30:5c:6b:79:61:41:76:60:bc:94:d0:54: cf:75:a9:9e:b3:d9:cf:80:47:b0:39:4f:d9:3e:97: 75:c6:69:7d:31:89:ae:6a:f0:db:be:57:fa:53:50: 71:d8:2e:a6:c5:86:88:6a:f9:43:e2:e1:79:b9:ab: c1:24:38:e0:c3:96:c7:dc:19:8c:c6:63:29:67:fa: fe:0f:2f:f2:87:fc:82:d6:42:dd:0b:30:9d:1c:23: 6f:4b:d0:0d:8c:71:9f:97:f3:10:2f:78:27:ad:b1: 3b:a6:f8:da:f0:4f:68:43:11:bf:29:fe:c3:3f:37: dc:3a:9b:9a:64:70:a2:4a:5d:05:35:85:cf:7b:17: 9c:fb:9e:ed:67:a5:41:d7:15:0d:9e:e8:9c:de:26: 35:ab:0a:2f:5c:bc:91:44:9d:28:f8:ff:76:eb:0b: 3d:9d:e0:72:47:3a:e5:ce:27:1d:59:98:a8:91:5b: c8:86:71:b2:3f:35:ad:a5:73:15:da:49:78:f3:46: 33:8b:3e:b6:18:1b:ce:fd:2a:37:c9:6a:2d:1c:d5: 89:e7:25:4b:ae:1a:d0:31:c5:2a:8c:6d:67:1d:a4: 49:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:83:B3:E9:2E:3F:58:80:3A:E6:DF:47:04:AC:79:8D:BF:BC:34:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/17e9c215-3aa1-3b2b-8b8d-ce2fc2b25dc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl X509v3 Authority Key Identifier: keyid:C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer sbgp-ipAddrBlock: critical IPv4: 192.111.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:bf:0c:69:a5:3a:c1:42:16:4d:a6:24:a7:31:62:3f:9d:d2: c9:37:d0:fc:2c:12:5f:3e:12:0a:1f:8a:33:84:ea:e6:fc:43: 66:e4:09:63:d7:72:75:d0:d2:3e:ea:ba:12:ee:92:13:05:5e: 4c:1a:71:97:07:34:ff:32:1c:84:5f:6d:61:29:a4:ff:b7:73: e5:ff:d0:3d:84:d8:ae:bd:02:0d:37:63:bd:b1:c9:95:9d:05: 87:7c:b6:09:bb:11:bd:42:f8:7c:1d:c9:ef:46:19:f6:fa:d6: 1c:1c:96:43:9d:ab:99:0c:5a:74:cb:0c:6e:53:16:5b:9e:40: 58:56:36:9c:ad:76:8a:51:26:9e:31:03:0d:69:81:2c:ca:b1: c1:d1:57:ee:a1:18:68:14:ae:2a:7d:0d:da:05:62:f7:61:6e: 9f:b1:d7:30:19:d9:8b:2a:f3:10:b6:a7:63:24:6f:42:0d:aa: 2e:79:64:b8:24:79:7e:3c:43:65:3a:af:15:a6:0f:4a:84:8b: 64:9c:42:51:9a:54:97:3b:21:ea:14:22:5c:34:f8:13:05:74: 58:37:e8:ea:eb:90:24:3a:cc:7f:f2:93:99:a8:a4:32:e1:33: fe:10:44:16:5c:e1:99:af:ae:5b:9d:f8:d8:e4:8f:3d:61:b5: 05:6f:83:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGparpoZGSSSbwPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmVlN2I2N2UtNWU0Zi00YTA1LWE1OWUtOWU4MjBjODk4 ZmNkMB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk YjQ4OTYxNTUtN2NmYS00ZDYzLWFmNDMtYTIyMWE0ZjYxZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEL5holWwRB0IFm06sgQG5t0Bs9/Ql2A3e2o N0ro/cgwXGt5YUF2YLyU0FTPdames9nPgEewOU/ZPpd1xml9MYmuavDbvlf6U1Bx 2C6mxYaIavlD4uF5uavBJDjgw5bH3BmMxmMpZ/r+Dy/yh/yC1kLdCzCdHCNvS9AN jHGfl/MQL3gnrbE7pvja8E9oQxG/Kf7DPzfcOpuaZHCiSl0FNYXPexec+57tZ6VB 1xUNnuic3iY1qwovXLyRRJ0o+P926ws9neByRzrlzicdWZiokVvIhnGyPzWtpXMV 2kl480Yziz62GBvO/So3yWotHNWJ5yVLrhrQMcUqjG1nHaRJmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGDs+kuP1iAOubfRwSseY2/vDTrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3 YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgyMGM4OThmY2QvMTdlOWMyMTUtM2FhMS0z YjJiLThiOGQtY2UyZmMyYjI1ZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmVlN2I2N2UtNWU0Zi00YTA1LWE1 OWUtOWU4MjBjODk4ZmNkL2ZlZTdiNjdlLTVlNGYtNGEwNS1hNTllLTllODIwYzg5 OGZjZC5jcmwwHwYDVR0jBBgwFoAUyUCeXczprJIdAfK0l1qNJ/cvAbIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgy MGM4OThmY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACW/DGmlOsFCFk2mJKcxYj+d0sk30PwsEl8+EgofijOE6ub8Q2bkCWPX cnXQ0j7quhLukhMFXkwacZcHNP8yHIRfbWEppP+3c+X/0D2E2K69Ag03Y72xyZWd BYd8tgm7Eb1C+Hwdye9GGfb61hwclkOdq5kMWnTLDG5TFlueQFhWNpytdopRJp4x Aw1pgSzKscHRV+6hGGgUrip9DdoFYvdhbp+x1zAZ2Ysq8xC2p2Mkb0INqi55ZLgk eX48Q2U6rxWmD0qEi2ScQlGaVJc7IeoUIlw0+BMFdFg36OrrkCQ6zH/yk5mopDLh M/4QRBZc4Zmvrlud+Njkjz1htQVvg3c= -----END CERTIFICATE-----Generated at Mon Jun 30 13:41:00 2025 by rpki-client