$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6f0ab6f1-cd0e-3429-9fc0-8fcda9a96382.roa File: 6f0ab6f1-cd0e-3429-9fc0-8fcda9a96382.roa (raw, json) Hash identifier: 9/sqRkxxbmrg2s+sA819nIIJlbXCuOmwEYb59ESvQ1E= Subject key identifier: 70:C7:10:B0:E8:AC:DE:08:20:E8:6F:0E:98:44:10:AC:34:24:F7:76 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584A3E45941E4A00F5C5C35C44C0 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6f0ab6f1-cd0e-3429-9fc0-8fcda9a96382.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 26658 IP address blocks: 192.119.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:94:1e:4a:00:f5:c5:c3:5c:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=60aefc2f-6983-45de-8f6e-1b6175256543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e0:42:d8:76:e3:56:c7:62:d1:58:33:c3:46: 8f:ed:cf:f3:8b:8b:92:b0:d8:df:b5:de:d0:ae:10: 3d:b3:f1:fc:37:12:d7:bf:5c:dc:76:f5:91:2e:fc: 6c:c6:5e:6f:07:32:dc:c6:1a:ef:d2:6a:54:46:5f: 0e:b2:1d:4f:17:64:a7:29:cf:80:ee:97:20:d9:45: 24:db:d3:29:83:73:9e:90:16:08:b2:0d:2a:de:1e: 68:ab:7d:b7:c0:06:81:cd:52:39:fd:ea:9f:cd:70: 8e:24:b1:bc:96:87:50:0c:d0:49:92:58:6f:da:1d: 23:af:76:55:5c:04:2a:9f:0a:84:e6:92:8a:5d:1e: ab:1f:4c:70:85:67:85:8b:9a:3b:65:97:2b:bf:20: 1f:13:00:0d:94:c8:97:cf:57:4a:78:fd:53:d4:48: 4d:93:b5:0b:05:b3:2b:95:72:1d:26:f7:8d:f5:d4: cb:0e:86:91:25:72:29:9d:7f:bb:a1:63:ee:28:cb: f9:ef:79:7b:4e:73:22:48:47:37:30:c7:f7:3e:ee: e3:41:01:77:69:80:c4:ad:4d:ae:29:4e:7b:85:00: 39:ff:d1:0d:bb:dc:88:6c:02:3a:2a:59:2c:b1:9b: d7:c2:64:e2:58:ae:9b:5e:f1:62:f4:30:51:e9:a3: 06:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C7:10:B0:E8:AC:DE:08:20:E8:6F:0E:98:44:10:AC:34:24:F7:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6f0ab6f1-cd0e-3429-9fc0-8fcda9a96382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 192.119.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:20:fa:8e:16:24:65:d6:5e:4d:b5:fc:a9:32:68:4c:8d:be: 02:dc:f7:c7:36:8f:cc:60:d4:7d:ab:ea:4c:ab:1f:09:bf:dc: 4c:5a:6c:87:a0:52:9d:a9:1e:29:d7:3e:a4:d6:f8:d4:b4:60: 65:d0:5c:b5:fb:50:19:93:1a:fe:09:fc:d5:85:8f:77:3e:16: b3:73:23:14:cf:1d:9e:8d:a4:e3:90:2c:07:d6:df:cb:f1:f1: 97:32:c7:7c:03:98:86:76:a2:e9:f4:59:9b:3a:49:ab:96:f3: e2:c8:42:76:06:2e:94:1d:96:3b:24:9c:6b:5f:3e:8e:7b:38: 94:d5:8c:c3:70:08:fa:b7:1b:4b:60:9f:9c:68:4e:f2:c9:ff: a7:0f:5a:c0:83:b7:fb:1c:1e:26:14:4e:3f:d2:e0:8b:ef:63: 63:cb:b7:62:34:8b:6c:f9:16:1b:58:a0:63:96:9b:ae:8e:2b: bf:d7:fe:06:1a:8e:2d:89:04:de:dd:d1:a1:d6:1b:1f:5e:e9: a7:a5:84:fa:d3:f4:f2:ff:d8:4d:3b:0e:e6:9c:6c:10:8c:f0: a2:6c:b4:7b:7c:95:f3:d7:af:d7:96:93:b7:6b:58:16:a2:02: 82:ca:e1:dc:98:53:44:85:58:03:8f:f5:69:37:38:96:a5:99: a0:8e:96:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RZQeSgD1xcNcRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk NjBhZWZjMmYtNjk4My00NWRlLThmNmUtMWI2MTc1MjU2NTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuBC2HbjVsdi0Vgzw0aP7c/zi4uSsNjftd7Q rhA9s/H8NxLXv1zcdvWRLvxsxl5vBzLcxhrv0mpURl8Osh1PF2SnKc+A7pcg2UUk 29Mpg3OekBYIsg0q3h5oq323wAaBzVI5/eqfzXCOJLG8lodQDNBJklhv2h0jr3ZV XAQqnwqE5pKKXR6rH0xwhWeFi5o7ZZcrvyAfEwANlMiXz1dKeP1T1EhNk7ULBbMr lXIdJveN9dTLDoaRJXIpnX+7oWPuKMv573l7TnMiSEc3MMf3Pu7jQQF3aYDErU2u KU57hQA5/9ENu9yIbAI6KlkssZvXwmTiWK6bXvFi9DBR6aMGYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDHELDorN4IIOhvDphEEKw0JPd2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNmYwYWI2ZjEtY2QwZS0z NDI5LTlmYzAtOGZjZGE5YTk2MzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwHeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEg+o4WJGXWXk21/KkyaEyNvgLc98c2j8xg1H2r6kyrHwm/3ExabIeg Up2pHinXPqTW+NS0YGXQXLX7UBmTGv4J/NWFj3c+FrNzIxTPHZ6NpOOQLAfW38vx 8Zcyx3wDmIZ2oun0WZs6SauW8+LIQnYGLpQdljsknGtfPo57OJTVjMNwCPq3G0tg n5xoTvLJ/6cPWsCDt/scHiYUTj/S4IvvY2PLt2I0i2z5FhtYoGOWm66OK7/X/gYa ji2JBN7d0aHWGx9e6aelhPrT9PL/2E07DuacbBCM8KJstHt8lfPXr9eWk7drWBai AoLK4dyYU0SFWAOP9Wk3OJalmaCOlv0= -----END CERTIFICATE-----Generated at Sun Jun 29 13:57:21 2025 by rpki-client