$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa File: 509e4ddf-df6f-34cc-83d4-959041c0d418.roa (raw, json) Hash identifier: t9LVa7V4sZ0zq8QDNmuM2v2UkbduYGIUtMZJhk+bgIw= Subject key identifier: 87:50:6F:37:4F:BE:ED:D3:C7:C3:2F:7C:C5:BD:20:54:39:C3:F3:DD Certificate issuer: /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Certificate serial: 010D0C9F4328584A2ABADF7FC5A0A4F2F38EE880 Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 16575 IP address blocks: 192.200.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:df:7f:c5:a0:a4:f2:f3:8e:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=37e9f628-818a-40df-8b5d-1e0bd4ddb944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a7:36:8a:b0:36:c3:86:ad:66:6c:53:ee:cf: 03:74:95:5e:21:96:63:81:86:b1:0d:a3:ed:d5:38: e6:6e:17:30:5e:8d:0f:6e:f9:85:b4:ac:3a:be:c7: 9b:74:bb:3d:c9:81:23:18:bc:98:cd:73:e3:86:48: 23:db:09:43:23:79:b6:f3:a2:a0:df:b7:45:fa:98: 74:17:71:a7:34:e2:a2:d0:d4:05:53:43:df:3e:90: 23:1a:82:f4:75:8f:f4:57:fd:4a:04:01:ba:03:38: fd:f0:f8:66:51:ef:c6:95:93:55:18:9f:55:ce:cf: 1f:b7:9a:10:29:4d:5d:d4:f8:97:20:28:c6:8c:5e: 98:b8:07:eb:ea:e1:fe:08:58:57:41:65:2a:56:a9: 7e:0e:f9:57:9b:9a:94:90:28:2f:d2:49:40:7f:63: d7:11:5f:94:ee:d6:a5:65:d8:7e:74:e1:cf:0c:a5: 52:0a:46:82:aa:41:2b:81:47:2a:d7:7d:0c:91:82: ad:a5:bb:68:85:1b:42:78:39:0e:ef:27:cc:38:3f: f6:8d:46:bd:78:a9:86:33:57:8d:f7:e7:ac:74:ce: f9:79:6e:77:61:73:0c:c4:dd:fa:eb:f1:fa:7d:1e: 67:93:63:25:78:17:51:86:f9:2d:0d:47:fc:b3:3c: 14:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:50:6F:37:4F:BE:ED:D3:C7:C3:2F:7C:C5:BD:20:54:39:C3:F3:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl X509v3 Authority Key Identifier: keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer sbgp-ipAddrBlock: critical IPv4: 192.200.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:03:dd:46:cc:0a:52:4b:2e:a2:13:08:3d:fd:c1:b3:c5:b3: b3:4e:7f:fc:0c:bc:73:d5:ea:0f:90:a6:64:78:4e:fc:da:2a: bc:a0:1f:02:fb:cb:47:aa:7a:89:08:7c:5e:6d:04:82:c6:fb: 6e:91:0c:92:36:4d:65:fa:fc:4a:7a:11:0e:c2:02:3c:63:60: e9:cd:db:c1:6c:f1:85:e7:46:63:89:9a:56:ed:35:9f:57:3a: b0:8f:a2:97:a0:51:d7:33:9a:84:22:c9:0a:42:88:b3:f6:de: 7e:19:eb:70:da:3c:3b:a0:6d:d3:cc:bc:cc:f3:ea:e3:41:cf: 73:c2:04:e8:4b:03:bb:71:e3:92:52:17:77:3e:bf:9e:2e:99: 7d:48:4c:4a:82:b9:e8:22:69:6b:d4:b9:be:be:35:49:af:6d: fd:00:90:b3:7c:56:24:b3:2f:22:be:ac:e5:95:99:f2:4a:b4: 3e:69:03:e9:d6:56:20:4a:80:20:cd:0b:78:1d:19:82:f2:e0: 4b:85:18:86:9a:e6:94:36:f2:60:85:55:72:b6:1f:d9:9f:a4: 2d:8f:00:0c:d5:08:43:5a:20:af:f3:d7:2d:00:fc:82:fb:7f: 15:f9:61:62:d3:1b:66:f3:17:0a:dd:34:6e:60:db:1e:3d:a3: b5:c2:48:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqut9/xaCk8vOO6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQyMWZmZDgtMzZlNi00YTZiLTkwMzQtNDY3MTU5MmM1 YTRmMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MzdlOWY2MjgtODE4YS00MGRmLThiNWQtMWUwYmQ0ZGRiOTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKc2irA2w4atZmxT7s8DdJVeIZZjgYaxDaPt 1TjmbhcwXo0PbvmFtKw6vsebdLs9yYEjGLyYzXPjhkgj2wlDI3m286Kg37dF+ph0 F3GnNOKi0NQFU0PfPpAjGoL0dY/0V/1KBAG6Azj98PhmUe/GlZNVGJ9Vzs8ft5oQ KU1d1PiXICjGjF6YuAfr6uH+CFhXQWUqVql+DvlXm5qUkCgv0klAf2PXEV+U7tal Zdh+dOHPDKVSCkaCqkErgUcq130MkYKtpbtohRtCeDkO7yfMOD/2jUa9eKmGM1eN 9+esdM75eW53YXMMxN366/H6fR5nk2MleBdRhvktDUf8szwUNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdQbzdPvu3Tx8MvfMW9IFQ5w/PdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDIx ZmZkOC0zNmU2LTRhNmItOTAzNC00NjcxNTkyYzVhNGYvNTA5ZTRkZGYtZGY2Zi0z NGNjLTgzZDQtOTU5MDQxYzBkNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQyMWZmZDgtMzZlNi00YTZiLTkw MzQtNDY3MTU5MmM1YTRmLzU0MjFmZmQ4LTM2ZTYtNGE2Yi05MDM0LTQ2NzE1OTJj NWE0Zi5jcmwwHwYDVR0jBBgwFoAUVBKTOoHmICO96AuZwkVU3VkRZm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDIxZmZkOC0zNmU2LTRhNmItOTAzNC00Njcx NTkyYzVhNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwMiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYD3UbMClJLLqITCD39wbPFs7NOf/wMvHPV6g+QpmR4TvzaKrygHwL7 y0eqeokIfF5tBILG+26RDJI2TWX6/Ep6EQ7CAjxjYOnN28Fs8YXnRmOJmlbtNZ9X OrCPopegUdczmoQiyQpCiLP23n4Z63DaPDugbdPMvMzz6uNBz3PCBOhLA7tx45JS F3c+v54umX1ITEqCuegiaWvUub6+NUmvbf0AkLN8ViSzLyK+rOWVmfJKtD5pA+nW ViBKgCDNC3gdGYLy4EuFGIaa5pQ28mCFVXK2H9mfpC2PAAzVCENaIK/z1y0A/IL7 fxX5YWLTG2bzFwrdNG5g2x49o7XCSEQ= -----END CERTIFICATE-----Generated at Fri Jul 4 17:38:47 2025 by rpki-client