$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa File: b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa (raw, json) Hash identifier: cMphIVSGXV3b2Z9IzzW98vPuXhr6gVpmtT0+6bxI+XA= Subject key identifier: AD:06:19:E8:0B:51:15:34:45:90:1B:64:86:25:C4:9E:18:37:EE:31 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285849B9A9FFBF58F7A0F67BBFF600 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 397422 IP address blocks: 192.95.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:ff:bf:58:f7:a0:f6:7b:bf:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=74b6140b-b96e-43fd-bb1c-0c84e8f5764a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:06:f3:df:6d:06:70:b5:6f:fd:a9:58:06:92: 3c:03:96:63:ff:9d:fe:41:bb:f4:3a:69:0e:5a:68: aa:02:76:4a:e0:e8:d4:eb:40:58:ee:93:48:20:9f: 08:61:f1:b4:ec:90:06:47:3a:25:e8:a8:a8:ed:33: 80:28:2e:b5:6d:7e:82:a9:1f:f3:2d:84:31:c3:3d: bb:0f:ad:a1:4b:e5:3d:7f:33:22:8f:a6:31:3a:d2: cd:80:01:df:2c:84:24:af:fd:1f:6b:98:32:bb:b2: 63:73:1e:db:48:ab:5b:05:e7:90:b4:34:00:44:7f: eb:3b:07:5d:db:43:1f:87:3e:ab:10:10:37:d3:f1: 39:dc:78:4d:76:a5:fd:1b:a6:d5:05:71:10:99:56: 0c:13:bd:e6:3a:65:cf:63:17:10:5b:11:7c:38:d9: 88:ae:6a:5f:f8:9a:72:20:d0:9c:bd:69:96:cd:c4: b7:99:88:4a:42:c1:3d:d8:97:e0:18:f3:5f:66:f1: 6b:b1:c6:64:6c:e3:0e:1b:78:75:8a:a1:4d:4f:d2: b3:af:1a:28:cc:48:95:72:23:70:49:f7:8c:3c:ee: 3f:f4:17:d5:d9:59:b5:f8:54:fa:00:0b:2d:01:58: bf:75:1e:36:b8:c1:ad:8b:57:f5:13:8d:16:d8:52: de:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:06:19:E8:0B:51:15:34:45:90:1B:64:86:25:C4:9E:18:37:EE:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 192.95.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:4e:b7:a9:51:1b:f7:34:cf:dd:f2:64:59:78:13:fa:22:92: a5:3c:73:52:81:93:97:a1:47:81:83:e0:c0:7e:4a:60:08:36: fd:2b:50:f2:8a:bc:ad:a2:06:3e:ad:34:0b:89:c7:ea:64:1a: ef:81:50:20:09:1d:b3:41:57:c9:2d:08:c0:08:89:e4:77:39: de:3e:dd:ae:f9:13:25:7d:a4:c3:43:8f:92:30:5f:0a:f8:15: b9:f6:cd:f4:cd:45:2b:35:77:4f:c6:19:3c:07:36:20:6c:38: ac:8c:0c:20:e1:d7:93:50:f3:2d:89:3d:e7:d8:85:c4:b5:1a: 1e:ce:9a:e8:1b:21:b9:f5:91:39:25:2a:b8:c9:8f:be:34:9b: 4e:4b:09:0a:43:de:ff:cf:ed:4a:f1:cd:74:17:0d:08:b7:0b: 7b:e2:ae:1d:b1:ad:12:75:a9:49:9d:6d:9b:78:f2:54:8e:d6: 70:17:b5:e2:60:a7:0a:60:86:55:4b:02:b2:a2:e6:2b:32:7d: 3a:4a:71:3b:d8:e8:e3:d0:3c:0f:0f:6a:c7:c2:8b:8b:5b:15: 95:6d:f2:e3:b6:38:c4:f7:4a:08:22:88:7b:47:ce:a3:5b:a5: 2d:19:99:f4:38:f2:b8:7c:4f:cd:35:f3:e3:1f:c7:dd:3e:d6: c2:77:ce:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qf+/WPeg9nu/9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk NzRiNjE0MGItYjk2ZS00M2ZkLWJiMWMtMGM4NGU4ZjU3NjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggbz320GcLVv/alYBpI8A5Zj/53+Qbv0OmkO WmiqAnZK4OjU60BY7pNIIJ8IYfG07JAGRzol6Kio7TOAKC61bX6CqR/zLYQxwz27 D62hS+U9fzMij6YxOtLNgAHfLIQkr/0fa5gyu7Jjcx7bSKtbBeeQtDQARH/rOwdd 20Mfhz6rEBA30/E53HhNdqX9G6bVBXEQmVYME73mOmXPYxcQWxF8ONmIrmpf+Jpy INCcvWmWzcS3mYhKQsE92JfgGPNfZvFrscZkbOMOG3h1iqFNT9KzrxoozEiVciNw SfeMPO4/9BfV2Vm1+FT6AAstAVi/dR42uMGti1f1E40W2FLeXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0GGegLURU0RZAbZIYlxJ4YN+4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYjdlNTA0YTQtZThiMC0z OGYzLTljY2YtZTcwZmE0OGFjMWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwF9EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5Ot6lRG/c0z93yZFl4E/oikqU8c1KBk5ehR4GD4MB+SmAINv0rUPKK vK2iBj6tNAuJx+pkGu+BUCAJHbNBV8ktCMAIieR3Od4+3a75EyV9pMNDj5IwXwr4 Fbn2zfTNRSs1d0/GGTwHNiBsOKyMDCDh15NQ8y2JPefYhcS1Gh7OmugbIbn1kTkl KrjJj740m05LCQpD3v/P7UrxzXQXDQi3C3virh2xrRJ1qUmdbZt48lSO1nAXteJg pwpghlVLArKi5isyfTpKcTvY6OPQPA8PasfCi4tbFZVt8uO2OMT3SggiiHtHzqNb pS0ZmfQ48rh8T8018+Mfx90+1sJ3zmc= -----END CERTIFICATE-----Generated at Mon Jun 30 00:45:18 2025 by rpki-client