$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/64bbaefe-121e-3227-8c64-63eb0383f20d.roa File: 64bbaefe-121e-3227-8c64-63eb0383f20d.roa (raw, json) Hash identifier: FCK10wmNrPPXlG8+LqHUQ8PLU7PtT2Kk3TF2Il5cJLw= Subject key identifier: 00:72:82:52:55:D6:AB:AB:36:09:EE:16:43:EC:DE:13:7E:94:14:0F Certificate issuer: /CN=f8b0cb92-fb04-41d4-b39f-43c745f21faf Certificate serial: 010D0C9F4328584A374AD046D6F685EDD9946F80 Authority key identifier: 18:29:B3:63:61:A7:54:DB:72:0C:B3:00:F5:31:20:17:95:8D:5D:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/64bbaefe-121e-3227-8c64-63eb0383f20d.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 25950 IP address blocks: 192.169.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/f8b0cb92-fb04-41d4-b39f-43c745f21faf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/f8b0cb92-fb04-41d4-b39f-43c745f21faf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:d0:46:d6:f6:85:ed:d9:94:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b0cb92-fb04-41d4-b39f-43c745f21faf Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=9c8b9094-0410-43e2-b1fa-0de56b4aafb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9c:fd:87:a4:16:04:26:70:0c:f1:1b:ac:2f: 18:24:f3:4c:1d:ee:d6:b4:44:24:66:c7:1a:0f:12: 18:b7:cf:8d:2c:42:38:19:4f:86:e5:b5:f2:40:45: 1d:42:36:07:fa:65:91:3a:a0:b2:ad:ae:b8:e9:d6: e2:0f:42:5b:cd:fa:a0:30:b8:be:79:74:e6:2f:58: 2b:f2:a3:1b:07:c5:4b:43:05:a5:c9:b8:c2:b3:49: 22:13:84:7e:c6:8e:91:23:f7:87:c9:fd:c1:c9:6c: 6c:6a:88:f1:71:8f:4b:a6:11:dc:a0:c8:9f:6a:4d: 2e:35:26:1f:1a:39:5b:60:bc:1b:08:0c:74:09:d6: 49:74:70:94:1d:af:4a:7e:93:1f:20:ad:05:c6:cc: ac:c7:0b:b4:b6:4d:07:d7:30:b2:59:9f:e8:01:39: ce:75:f4:01:4e:75:0e:49:46:4f:fa:68:be:b9:d3: f1:44:7d:0c:89:6b:b9:c3:22:e0:f8:44:bc:49:2b: 5f:39:6e:b8:74:4a:0b:90:a0:39:ca:fd:6d:a7:70: a6:1c:87:35:5f:1c:46:3c:10:a1:4b:e2:5b:77:b2: ce:87:c2:76:63:9c:a2:f3:88:79:c1:dd:c4:68:75: 7a:25:c5:81:65:25:bb:26:22:f7:73:d1:71:e6:e1: e2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:72:82:52:55:D6:AB:AB:36:09:EE:16:43:EC:DE:13:7E:94:14:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/64bbaefe-121e-3227-8c64-63eb0383f20d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/f8b0cb92-fb04-41d4-b39f-43c745f21faf.crl X509v3 Authority Key Identifier: keyid:18:29:B3:63:61:A7:54:DB:72:0C:B3:00:F5:31:20:17:95:8D:5D:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf.cer sbgp-ipAddrBlock: critical IPv4: 192.169.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:89:9f:b5:91:ac:21:63:7c:e3:24:8f:14:b6:41:e1:b3:92: 8a:e3:7d:b6:02:aa:48:de:71:77:53:cb:86:e4:83:2a:ae:58: 50:4b:90:ef:c4:42:ff:52:6d:90:e1:e0:ac:7d:e1:30:3a:ec: 13:ee:6d:6a:e1:f2:0e:a6:ba:b8:ec:0d:1b:de:3e:82:d4:df: fb:4f:41:d8:bb:1c:c2:e0:a8:76:c6:1e:ad:6a:28:a4:03:42: 18:4c:59:4a:53:3b:a4:94:fe:5e:d4:6f:d0:da:b1:30:17:79: 2f:45:ef:02:b0:1a:de:0a:e5:f1:09:7f:0a:8b:50:1a:6c:ee: 55:0d:38:95:17:bc:12:d2:89:5c:f7:b1:47:86:7b:1d:84:68: 7a:40:11:35:72:33:39:a0:65:f1:29:8c:ab:7f:9f:7b:e4:7e: e8:b9:88:70:c7:43:39:59:00:58:2b:f3:bf:af:bc:d4:aa:12: f1:fd:50:b5:75:5c:a6:8c:a4:57:3e:ce:a7:e6:30:39:e2:7e: 02:04:39:fd:01:af:ba:90:0c:a4:79:2e:5b:fe:ef:33:c0:de: 69:9e:bc:f9:94:ff:5b:09:29:b1:9f:49:4f:7d:14:1b:eb:d7: 63:dd:21:ce:dd:75:82:b1:f0:70:77:eb:5d:62:d1:ff:35:a1: a6:ef:dc:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3StBG1vaF7dmUb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhiMGNiOTItZmIwNC00MWQ0LWIzOWYtNDNjNzQ1ZjIx ZmFmMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk OWM4YjkwOTQtMDQxMC00M2UyLWIxZmEtMGRlNTZiNGFhZmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZz9h6QWBCZwDPEbrC8YJPNMHe7WtEQkZsca DxIYt8+NLEI4GU+G5bXyQEUdQjYH+mWROqCyra646dbiD0JbzfqgMLi+eXTmL1gr 8qMbB8VLQwWlybjCs0kiE4R+xo6RI/eHyf3ByWxsaojxcY9LphHcoMifak0uNSYf GjlbYLwbCAx0CdZJdHCUHa9KfpMfIK0Fxsysxwu0tk0H1zCyWZ/oATnOdfQBTnUO SUZP+mi+udPxRH0MiWu5wyLg+ES8SStfOW64dEoLkKA5yv1tp3CmHIc1XxxGPBCh S+Jbd7LOh8J2Y5yi84h5wd3EaHV6JcWBZSW7JiL3c9Fx5uHiEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAByglJV1qurNgnuFkPs3hN+lBQPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mOGIw Y2I5Mi1mYjA0LTQxZDQtYjM5Zi00M2M3NDVmMjFmYWYvNjRiYmFlZmUtMTIxZS0z MjI3LThjNjQtNjNlYjAzODNmMjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjhiMGNiOTItZmIwNC00MWQ0LWIz OWYtNDNjNzQ1ZjIxZmFmL2Y4YjBjYjkyLWZiMDQtNDFkNC1iMzlmLTQzYzc0NWYy MWZhZi5jcmwwHwYDVR0jBBgwFoAUGCmzY2GnVNtyDLMA9TEgF5WNXcswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mOGIwY2I5Mi1mYjA0LTQxZDQtYjM5Zi00M2M3 NDVmMjFmYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwKkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+Jn7WRrCFjfOMkjxS2QeGzkorjfbYCqkjecXdTy4bkgyquWFBLkO/E Qv9SbZDh4Kx94TA67BPubWrh8g6murjsDRvePoLU3/tPQdi7HMLgqHbGHq1qKKQD QhhMWUpTO6SU/l7Ub9DasTAXeS9F7wKwGt4K5fEJfwqLUBps7lUNOJUXvBLSiVz3 sUeGex2EaHpAETVyMzmgZfEpjKt/n3vkfui5iHDHQzlZAFgr87+vvNSqEvH9ULV1 XKaMpFc+zqfmMDnifgIEOf0Br7qQDKR5Llv+7zPA3mmevPmU/1sJKbGfSU99FBvr 12PdIc7ddYKx8HB3611i0f81oabv3Ow= -----END CERTIFICATE-----Generated at Mon Jun 30 08:30:54 2025 by rpki-client