$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/4bf7477f-d0a1-3f5d-8a88-28d9561ad4f0.roa File: 4bf7477f-d0a1-3f5d-8a88-28d9561ad4f0.roa (raw, json) Hash identifier: NnKOeEPFCBube0TQIOUbcQEz4OJbyKv3nq7zYIaWxBo= Subject key identifier: D4:98:9E:30:15:D3:94:24:C9:2B:E9:BD:16:86:C9:C8:28:68:16:1B Certificate issuer: /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b Certificate serial: 010D0C9F4328584A17300B0073DECACCB4B420C0 Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/4bf7477f-d0a1-3f5d-8a88-28d9561ad4f0.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 30045 IP address blocks: 192.219.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:0b:00:73:de:ca:cc:b4:b4:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=f15c7043-9ea7-42e0-9f30-c02164cafbb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b0:77:33:cd:28:c3:0d:71:f6:41:1b:75:b1: 80:01:48:da:9b:a9:60:08:c9:22:a7:a5:e1:b2:2e: c4:fb:aa:59:fa:21:e1:5e:5d:17:c6:a4:2f:76:04: d1:d7:9d:08:59:58:c7:1f:e1:d7:de:17:87:53:f3: bf:c4:71:93:76:99:16:e6:62:2a:6b:45:d5:a1:09: 5d:ba:30:39:f5:ef:99:bf:7d:24:5a:5f:4e:ab:dc: eb:e4:fb:d4:b4:09:56:76:15:59:07:62:23:f0:82: 07:9e:d8:32:c1:2a:0c:2b:a6:07:11:9d:5b:e3:87: 29:95:dd:57:f2:de:88:7c:7e:cb:37:f3:61:0a:4c: 4d:e3:26:0d:42:a3:ac:25:f3:c7:74:c1:22:f9:e2: 95:17:5c:dc:e8:33:aa:f3:c1:de:38:a4:3e:60:3e: 65:ad:f4:35:d1:7f:61:9b:3b:8c:2d:d2:20:0a:7f: 7a:31:98:57:60:ac:99:06:c2:4e:17:41:9a:9e:c2: ad:a2:28:41:79:41:91:19:5f:7d:bd:17:76:a0:4f: ff:88:5e:1d:01:82:00:1a:ec:e3:04:1c:a1:91:44: 40:c9:68:a9:c9:e1:65:08:5d:02:75:ab:d7:5d:a9: 0c:29:2b:b7:31:44:06:d8:b2:ed:b4:4d:f1:dc:99: 6a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:98:9E:30:15:D3:94:24:C9:2B:E9:BD:16:86:C9:C8:28:68:16:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/4bf7477f-d0a1-3f5d-8a88-28d9561ad4f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl X509v3 Authority Key Identifier: keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer sbgp-ipAddrBlock: critical IPv4: 192.219.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:cd:25:a4:c9:e3:f3:1e:54:36:af:12:bd:3d:41:da:a9:ad: af:4a:b4:14:02:4d:b4:df:61:3c:1c:d8:32:0c:18:84:63:18: 3d:b1:1f:53:c2:a9:a4:10:ec:c8:61:82:95:b9:b5:32:8c:e9: 9a:fa:91:d7:47:6f:7a:81:da:3f:7e:7a:d2:73:4c:fe:25:c8: 63:8a:0b:66:09:9e:f8:89:36:85:22:7e:c0:3b:90:e0:0b:4d: 51:48:ff:cb:2e:15:4c:70:71:7e:77:bd:cc:21:cc:dd:11:6a: 85:f2:26:24:da:fc:9e:8b:33:5d:c1:c7:9f:b7:96:b5:5e:d2: 92:71:70:03:43:22:63:93:cf:11:77:43:c5:8f:fe:17:c8:e8: a6:fc:c4:74:11:14:2b:67:c8:85:7d:1e:80:7d:c9:fe:dc:f9: 22:c4:9d:6f:75:8c:90:5d:cd:c2:b5:a5:04:53:1a:33:7a:b0: c6:ee:87:93:ff:ee:fc:23:49:0e:ce:52:62:1a:03:e8:84:47: 9e:30:02:02:74:9f:d9:8d:81:e0:2d:5a:2f:d5:62:93:48:05: ca:82:56:6d:f9:80:54:43:e3:3c:c9:ba:28:2d:dc:e2:90:b8: c1:d2:5e:49:78:c1:b6:9b:d3:e7:50:25:61:f9:34:f9:a9:0f: fc:76:4b:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAsAc97KzLS0IMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMWE1NmItZWEzMy00YmQ2LTlkM2UtMDA4OTZhOTFk YjZiMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk ZjE1YzcwNDMtOWVhNy00MmUwLTlmMzAtYzAyMTY0Y2FmYmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrB3M80oww1x9kEbdbGAAUjam6lgCMkip6Xh si7E+6pZ+iHhXl0XxqQvdgTR150IWVjHH+HX3heHU/O/xHGTdpkW5mIqa0XVoQld ujA59e+Zv30kWl9Oq9zr5PvUtAlWdhVZB2Ij8IIHntgywSoMK6YHEZ1b44cpld1X 8t6IfH7LN/NhCkxN4yYNQqOsJfPHdMEi+eKVF1zc6DOq88HeOKQ+YD5lrfQ10X9h mzuMLdIgCn96MZhXYKyZBsJOF0GansKtoihBeUGRGV99vRd2oE//iF4dAYIAGuzj BByhkURAyWipyeFlCF0CdavXXakMKSu3MUQG2LLttE3x3JlqSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSYnjAV05QkySvpvRaGycgoaBYbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YWMx YTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5NmE5MWRiNmIvNGJmNzQ3N2YtZDBhMS0z ZjVkLThhODgtMjhkOTU2MWFkNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGFjMWE1NmItZWEzMy00YmQ2LTlk M2UtMDA4OTZhOTFkYjZiLzhhYzFhNTZiLWVhMzMtNGJkNi05ZDNlLTAwODk2YTkx ZGI2Yi5jcmwwHwYDVR0jBBgwFoAUg3U6Yyir4o99wKc7TDozymMHEyUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YWMxYTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5 NmE5MWRiNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwNsCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnNJaTJ4/MeVDavEr09Qdqpra9KtBQCTbTfYTwc2DIMGIRjGD2xH1PC qaQQ7MhhgpW5tTKM6Zr6kddHb3qB2j9+etJzTP4lyGOKC2YJnviJNoUifsA7kOAL TVFI/8suFUxwcX53vcwhzN0RaoXyJiTa/J6LM13Bx5+3lrVe0pJxcANDImOTzxF3 Q8WP/hfI6Kb8xHQRFCtnyIV9HoB9yf7c+SLEnW91jJBdzcK1pQRTGjN6sMbuh5P/ 7vwjSQ7OUmIaA+iER54wAgJ0n9mNgeAtWi/VYpNIBcqCVm35gFRD4zzJuigt3OKQ uMHSXkl4wbab0+dQJWH5NPmpD/x2S2U= -----END CERTIFICATE-----Generated at Wed Jul 2 10:44:28 2025 by rpki-client