$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/9d8b4a39-d907-3704-bc98-36248d887277.roa File: 9d8b4a39-d907-3704-bc98-36248d887277.roa (raw, json) Hash identifier: 7OdVtgIHLFvza2nXX7MqMSHPVAuiaYU7jaWjmWj2kXU= Subject key identifier: EB:1E:14:93:C0:28:3D:93:F6:E1:74:F7:9F:C4:0A:89:03:AB:FD:97 Certificate issuer: /CN=868a77c4-49cd-4821-b1f2-58d35028b0ed Certificate serial: 010D0C9F4328584A5E605B5421406C5196F79400 Authority key identifier: A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/9d8b4a39-d907-3704-bc98-36248d887277.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 46970 IP address blocks: 192.189.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5b:54:21:40:6c:51:96:f7:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=868a77c4-49cd-4821-b1f2-58d35028b0ed Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=e04f55f0-778f-494b-9062-5751b4c0ce75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ce:c0:4e:39:d0:ec:97:76:d3:db:0a:f8:97: 13:71:8e:50:01:59:6c:23:6b:91:3f:4f:90:b0:07: d3:84:32:0d:a4:1f:04:e3:ae:de:4f:88:83:c3:de: 8e:45:29:1a:95:a5:ef:d4:5f:cc:a2:9d:02:9d:aa: 5e:58:b3:fe:20:1b:34:1a:6e:09:09:52:3a:9c:e4: 19:c4:57:55:6a:61:3a:bf:df:0c:a7:ee:11:72:15: e8:1a:47:04:05:15:6b:0e:7c:7e:d9:29:54:66:ca: 92:f5:f0:73:f6:99:53:3c:ca:4a:52:a3:8b:8d:af: 3f:2a:9e:26:94:0c:80:5e:a2:ad:08:51:71:c4:12: 05:51:db:5d:61:17:78:84:29:93:00:0d:e9:a6:8b: 63:e1:43:fa:16:97:ba:85:a2:04:1e:7f:c3:b8:84: 8b:c5:2d:d0:fa:cf:ba:0f:ed:67:71:ac:d3:81:df: a1:cf:25:e4:df:aa:e5:b1:d2:17:75:4a:24:ef:0e: 0b:ee:28:73:d6:e2:4f:07:f3:60:c5:fc:ca:2f:26: 72:4a:87:39:29:38:97:56:7a:ed:0d:4b:df:f5:4e: fb:79:62:2b:27:9a:b0:78:da:08:63:d2:ee:d2:8d: e0:1f:40:1f:f7:db:1b:76:dd:ab:3c:09:37:c6:77: ef:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1E:14:93:C0:28:3D:93:F6:E1:74:F7:9F:C4:0A:89:03:AB:FD:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/9d8b4a39-d907-3704-bc98-36248d887277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl X509v3 Authority Key Identifier: keyid:A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer sbgp-ipAddrBlock: critical IPv4: 192.189.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:8e:8a:dd:2d:9e:54:3d:1f:1a:71:be:8d:70:ac:c6:9d:3b: c3:fa:44:84:39:71:2e:c0:0f:2f:dd:11:7f:25:4d:61:eb:d6: 59:ab:e5:a3:1b:4a:ec:13:53:81:63:eb:9b:98:7b:5e:5c:ca: 95:12:3f:83:b2:7f:5f:f6:d8:6a:20:ab:55:70:f1:3f:e4:6f: d4:a7:14:d6:1c:7f:bb:a1:99:7b:13:6c:28:6c:7e:3f:7e:6d: 34:50:f1:33:6e:ae:8d:d4:99:49:13:87:2a:80:25:9d:a4:d9: 5e:47:b1:5c:48:49:68:52:40:c8:5f:9f:a1:80:15:6b:13:1b: 22:b6:8d:d0:75:12:02:6d:ea:a4:14:c4:97:2c:00:f8:3d:79: 0c:8a:7b:07:75:fc:8b:0e:68:62:b3:fa:89:4e:12:06:53:de: 12:e5:1a:6d:26:d0:5a:82:a2:04:08:c0:1b:55:18:e1:9d:96: dd:8d:96:2d:2a:ce:03:73:ba:6b:43:47:59:e6:7b:30:c0:b9: 79:06:74:e1:0c:d2:58:5f:4e:ed:c0:e0:70:da:22:1a:26:fc: ac:a4:03:93:b3:d2:d7:38:1d:d2:b6:f1:a6:27:14:24:28:ac: 0d:26:63:74:ad:04:47:89:92:17:3d:1e:a4:52:5d:3e:24:ef: a4:f2:b1:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYFtUIUBsUZb3lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY4YTc3YzQtNDljZC00ODIxLWIxZjItNThkMzUwMjhi MGVkMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk ZTA0ZjU1ZjAtNzc4Zi00OTRiLTkwNjItNTc1MWI0YzBjZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq87ATjnQ7Jd209sK+JcTcY5QAVlsI2uRP0+Q sAfThDINpB8E467eT4iDw96ORSkalaXv1F/Mop0CnapeWLP+IBs0Gm4JCVI6nOQZ xFdVamE6v98Mp+4RchXoGkcEBRVrDnx+2SlUZsqS9fBz9plTPMpKUqOLja8/Kp4m lAyAXqKtCFFxxBIFUdtdYRd4hCmTAA3ppotj4UP6Fpe6haIEHn/DuISLxS3Q+s+6 D+1ncazTgd+hzyXk36rlsdIXdUok7w4L7ihz1uJPB/NgxfzKLyZySoc5KTiXVnrt DUvf9U77eWIrJ5qweNoIY9Lu0o3gH0Af99sbdt2rPAk3xnfvrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOseFJPAKD2T9uF095/ECokDq/2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84Njhh NzdjNC00OWNkLTQ4MjEtYjFmMi01OGQzNTAyOGIwZWQvOWQ4YjRhMzktZDkwNy0z NzA0LWJjOTgtMzYyNDhkODg3Mjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODY4YTc3YzQtNDljZC00ODIxLWIx ZjItNThkMzUwMjhiMGVkLzg2OGE3N2M0LTQ5Y2QtNDgyMS1iMWYyLTU4ZDM1MDI4 YjBlZC5jcmwwHwYDVR0jBBgwFoAUohnw63pfJLsgWQPIq44oAMhWrAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NjhhNzdjNC00OWNkLTQ4MjEtYjFmMi01OGQz NTAyOGIwZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqOit0tnlQ9Hxpxvo1wrMadO8P6RIQ5cS7ADy/dEX8lTWHr1lmr5aMb SuwTU4Fj65uYe15cypUSP4Oyf1/22Gogq1Vw8T/kb9SnFNYcf7uhmXsTbChsfj9+ bTRQ8TNuro3UmUkThyqAJZ2k2V5HsVxISWhSQMhfn6GAFWsTGyK2jdB1EgJt6qQU xJcsAPg9eQyKewd1/IsOaGKz+olOEgZT3hLlGm0m0FqCogQIwBtVGOGdlt2Nli0q zgNzumtDR1nmezDAuXkGdOEM0lhfTu3A4HDaIhom/KykA5Oz0tc4HdK28aYnFCQo rA0mY3StBEeJkhc9HqRSXT4k76Tysaw= -----END CERTIFICATE-----Generated at Sat Jul 5 14:36:01 2025 by rpki-client