$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/d98ff242-b4f1-3965-86dc-a85d09eab58c.roa File: d98ff242-b4f1-3965-86dc-a85d09eab58c.roa (raw, json) Hash identifier: nCvNucI67tikkK4P2vBd2Pt5L+LHLuhadIJSLcurt1U= Subject key identifier: 21:3E:68:E1:16:0A:3F:DC:26:1D:1D:50:FB:CC:4C:8D:AD:CE:36:C4 Certificate issuer: /CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd Certificate serial: 010D0C9F4328584A46A5A8307F29A12C533FC180 Authority key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/d98ff242-b4f1-3965-86dc-a85d09eab58c.roa Signing time: Sun 22 Jun 2025 13:01:03 +0000 ROA not before: Sun 22 Jun 2025 13:01:03 +0000 ROA not after: Sat 20 Sep 2025 13:01:03 +0000 asID: 15164 IP address blocks: 192.111.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:a5:a8:30:7f:29:a1:2c:53:3f:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd Validity Not Before: Jun 22 13:01:03 2025 GMT Not After : Sep 20 13:01:03 2025 GMT Subject: CN=d8b78dc7-df07-4fdd-be75-c71bbce4044f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:59:4e:ca:fd:d0:89:29:13:96:74:82:bc:00: 39:4f:e0:d0:8b:9d:1b:56:f5:0f:5a:b4:d3:fa:4b: d1:83:50:d9:b6:82:53:d3:cc:21:87:a1:98:dd:d7: 7a:04:0d:90:af:20:fc:8f:8a:73:81:c0:02:b5:f6: ce:b5:32:b0:f2:44:14:7d:03:d4:fa:0b:c8:86:4b: 27:3f:b3:9a:df:f7:ab:b3:80:65:a9:53:ef:eb:80: 28:b9:46:41:0c:9c:d9:b9:1f:2c:ab:96:9b:39:a3: 6c:b8:76:fc:ac:17:93:a5:a3:f3:88:76:6c:5c:fd: 6e:ab:cb:e3:ca:69:43:f5:98:53:be:e2:e0:ba:6d: f6:39:98:0a:c4:df:a9:2e:08:2b:98:fd:57:93:b6: 39:60:a9:2a:05:16:3d:45:3b:10:9e:8f:a0:5d:15: f2:65:62:5a:dd:c2:a3:09:7d:35:2f:43:ef:20:cf: 00:d5:f5:bb:93:11:43:00:0a:a7:8f:81:6e:d6:65: 2a:2f:51:25:11:0f:f4:bd:04:9e:a2:65:44:56:0e: 12:f8:7f:e5:14:30:a9:8e:cb:a5:ce:70:f3:4d:58: 30:34:b1:cb:09:a8:97:ac:25:c6:7f:59:2a:00:8f: 33:c1:bd:f6:80:17:02:b5:f6:db:f8:65:83:71:76: d5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3E:68:E1:16:0A:3F:DC:26:1D:1D:50:FB:CC:4C:8D:AD:CE:36:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/d98ff242-b4f1-3965-86dc-a85d09eab58c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl X509v3 Authority Key Identifier: keyid:C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer sbgp-ipAddrBlock: critical IPv4: 192.111.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:72:61:f1:1c:12:20:32:32:75:11:af:01:ca:1a:13:38:80: f4:92:cc:c6:df:f7:03:e2:bc:34:19:64:0a:bd:50:fd:54:42: 79:96:ac:9b:8e:1d:80:41:d2:16:c0:4e:8e:ac:7b:80:e5:a8: c5:d7:94:f8:10:cf:59:03:21:fc:a0:55:87:dc:d1:63:c9:61: de:f2:c3:1a:d3:d3:cd:41:65:9b:e4:3c:0d:7b:fb:b5:4e:ce: 6a:47:43:57:d8:50:ce:ac:00:b6:5c:78:b3:28:d4:c3:cd:d4: 3b:6a:45:e9:f4:52:87:bb:dc:d6:0d:35:e2:27:0c:88:42:02: 5e:29:81:21:8c:e4:66:c3:c1:a0:de:2a:0b:0b:2a:28:a7:56: 86:ce:8c:7e:b8:23:90:9c:e9:e9:5a:95:22:91:d1:bb:21:5c: 97:45:7a:6a:2d:6b:28:96:4c:38:40:29:66:6d:6a:dc:0f:dd: bd:5c:09:c9:94:f2:1e:42:ab:02:38:04:7a:95:5e:65:87:24: 24:df:4a:1c:40:c6:de:e3:3b:8c:56:18:29:81:71:19:5c:88: 15:da:ca:d2:15:f0:9d:27:aa:52:cf:b6:a3:fd:df:b8:7f:77: 1d:12:3f:c0:c6:92:71:78:8c:0c:4d:4e:b1:2c:01:7e:26:cb: 14:d7:60:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGpagwfymhLFM/wYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmVlN2I2N2UtNWU0Zi00YTA1LWE1OWUtOWU4MjBjODk4 ZmNkMB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk ZDhiNzhkYzctZGYwNy00ZmRkLWJlNzUtYzcxYmJjZTQwNDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFlOyv3QiSkTlnSCvAA5T+DQi50bVvUPWrTT +kvRg1DZtoJT08whh6GY3dd6BA2QryD8j4pzgcACtfbOtTKw8kQUfQPU+gvIhksn P7Oa3/ers4BlqVPv64AouUZBDJzZuR8sq5abOaNsuHb8rBeTpaPziHZsXP1uq8vj ymlD9ZhTvuLgum32OZgKxN+pLggrmP1Xk7Y5YKkqBRY9RTsQno+gXRXyZWJa3cKj CX01L0PvIM8A1fW7kxFDAAqnj4Fu1mUqL1ElEQ/0vQSeomVEVg4S+H/lFDCpjsul znDzTVgwNLHLCaiXrCXGf1kqAI8zwb32gBcCtfbb+GWDcXbVyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCE+aOEWCj/cJh0dUPvMTI2tzjbEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3 YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgyMGM4OThmY2QvZDk4ZmYyNDItYjRmMS0z OTY1LTg2ZGMtYTg1ZDA5ZWFiNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmVlN2I2N2UtNWU0Zi00YTA1LWE1 OWUtOWU4MjBjODk4ZmNkL2ZlZTdiNjdlLTVlNGYtNGEwNS1hNTllLTllODIwYzg5 OGZjZC5jcmwwHwYDVR0jBBgwFoAUyUCeXczprJIdAfK0l1qNJ/cvAbIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgy MGM4OThmY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERyYfEcEiAyMnURrwHKGhM4gPSSzMbf9wPivDQZZAq9UP1UQnmWrJuO HYBB0hbATo6se4DlqMXXlPgQz1kDIfygVYfc0WPJYd7ywxrT081BZZvkPA17+7VO zmpHQ1fYUM6sALZceLMo1MPN1DtqRen0Uoe73NYNNeInDIhCAl4pgSGM5GbDwaDe KgsLKiinVobOjH64I5Cc6elalSKR0bshXJdFemotayiWTDhAKWZtatwP3b1cCcmU 8h5CqwI4BHqVXmWHJCTfShxAxt7jO4xWGCmBcRlciBXaytIV8J0nqlLPtqP937h/ dx0SP8DGknF4jAxNTrEsAX4myxTXYMg= -----END CERTIFICATE-----Generated at Mon Jun 30 10:21:17 2025 by rpki-client