$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/9ce597f6-b093-3c3d-b115-eebeaf02c756.roa File: 9ce597f6-b093-3c3d-b115-eebeaf02c756.roa (raw, json) Hash identifier: g3Cs2x4835V18NyBjv8yjmEz9n/5ZmMxhxxJJm7dZfc= Subject key identifier: 7A:AA:46:74:98:9A:EC:09:05:06:57:C2:DF:77:57:91:C4:E2:42:24 Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Certificate serial: 010D0C9F4328584A1B6006F8EB264E6E22CA7000 Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/9ce597f6-b093-3c3d-b115-eebeaf02c756.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 59 IP address blocks: 192.12.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:06:f8:eb:26:4e:6e:22:ca:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=ac8489bd-5484-49d5-bb80-ebdfd954c250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3f:a2:69:6a:55:30:45:2d:24:b2:77:9a:ce: b8:2e:b2:98:36:91:93:86:d9:d5:55:ef:81:90:a3: dc:27:c2:67:44:02:50:f3:90:50:80:f7:b5:13:0b: 61:43:a9:1a:a4:af:03:f7:b6:b5:25:cd:0f:b0:89: 2f:52:63:83:52:0b:85:68:0f:fa:e4:63:9d:39:37: cc:67:e6:e3:a4:4e:a3:93:46:71:dd:21:1a:65:05: 45:72:09:ea:cd:04:bc:5a:60:62:0a:10:5f:ee:b9: a2:ec:ee:af:b4:34:dc:54:7a:80:89:11:3e:50:64: 87:8e:83:ec:de:43:c3:e7:13:50:1b:23:87:ef:7b: 8d:9d:72:ea:45:fe:3d:33:5d:57:b6:d6:dc:87:10: 1c:2a:8b:26:aa:69:b4:2d:65:13:75:ef:14:97:e0: 32:79:90:5e:bf:f7:39:c1:36:df:0d:24:e9:f5:11: 11:d1:cd:51:5a:5a:f8:db:27:82:bb:0f:49:db:53: 89:5f:b9:8f:02:1c:56:1e:6c:19:0d:61:b1:e7:3b: c6:88:2d:5d:d2:36:85:a8:d6:61:5e:e0:b0:c0:7f: 62:d8:6a:e8:75:5d:78:f0:4e:a3:5a:60:f5:a7:8c: b2:36:46:38:68:2a:f1:8b:ba:1a:e2:19:6a:04:55: 96:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AA:46:74:98:9A:EC:09:05:06:57:C2:DF:77:57:91:C4:E2:42:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/9ce597f6-b093-3c3d-b115-eebeaf02c756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl X509v3 Authority Key Identifier: keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer sbgp-ipAddrBlock: critical IPv4: 192.12.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:7c:7d:f9:2e:87:e4:69:d5:5f:a5:9c:95:3d:08:94:08:b5: 70:72:2a:e2:a0:bf:ac:ea:37:74:19:e7:5a:1d:c1:33:31:9a: 53:07:cc:df:44:b8:1a:23:d5:f9:e0:e5:02:eb:83:34:83:c1: 6c:bd:43:d4:4e:d8:6e:f8:74:1a:b0:ed:c6:0f:dc:2d:58:8a: 0f:75:bd:71:28:7b:57:90:06:36:16:bd:af:5e:35:9e:2a:f0: 04:0a:9b:89:fe:81:9e:50:f8:ba:53:fb:97:db:c9:20:d1:05: 60:e0:e3:8d:a9:fe:01:10:a6:ca:8f:2b:79:90:bb:fe:97:bd: 09:76:f2:5a:2c:96:df:21:ff:47:5c:24:87:0d:19:25:66:ae: 03:59:de:bf:30:a2:b3:76:1c:e4:db:aa:07:10:69:d6:4e:35: 2e:bf:a1:20:73:cc:6a:0e:ed:42:dc:82:98:b8:56:64:5c:09: c0:a0:7b:fe:b7:04:80:16:b9:6d:3f:d1:b2:9f:df:0a:ac:43: 84:5d:bb:66:bc:fd:7c:18:23:29:1c:e6:42:5d:ff:8f:66:da: e1:14:6f:74:8a:0e:35:42:f5:a0:a3:41:72:26:94:ad:cf:60: 82:5f:80:8c:d6:1e:fd:73:a7:a8:79:c0:42:81:00:cf:7e:f9: 5d:3b:91:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYAb46yZObiLKcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE4OTk2MzItYWVmNi00YTNiLWI4MDctZWRjMWNhNDMw M2I2MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk YWM4NDg5YmQtNTQ4NC00OWQ1LWJiODAtZWJkZmQ5NTRjMjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz+iaWpVMEUtJLJ3ms64LrKYNpGThtnVVe+B kKPcJ8JnRAJQ85BQgPe1EwthQ6kapK8D97a1Jc0PsIkvUmODUguFaA/65GOdOTfM Z+bjpE6jk0Zx3SEaZQVFcgnqzQS8WmBiChBf7rmi7O6vtDTcVHqAiRE+UGSHjoPs 3kPD5xNQGyOH73uNnXLqRf49M11XttbchxAcKosmqmm0LWUTde8Ul+AyeZBev/c5 wTbfDSTp9RER0c1RWlr42yeCuw9J21OJX7mPAhxWHmwZDWGx5zvGiC1d0jaFqNZh XuCwwH9i2GrodV148E6jWmD1p4yyNkY4aCrxi7oa4hlqBFWWmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqqRnSYmuwJBQZXwt93V5HE4kIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5 OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMxY2E0MzAzYjYvOWNlNTk3ZjYtYjA5My0z YzNkLWIxMTUtZWViZWFmMDJjNzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWE4OTk2MzItYWVmNi00YTNiLWI4 MDctZWRjMWNhNDMwM2I2L2FhODk5NjMyLWFlZjYtNGEzYi1iODA3LWVkYzFjYTQz MDNiNi5jcmwwHwYDVR0jBBgwFoAUo8AqY6J4VLbQ5FBNiWjuunsNV40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMx Y2E0MzAzYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJ8ffkuh+Rp1V+lnJU9CJQItXByKuKgv6zqN3QZ51odwTMxmlMHzN9E uBoj1fng5QLrgzSDwWy9Q9RO2G74dBqw7cYP3C1Yig91vXEoe1eQBjYWva9eNZ4q 8AQKm4n+gZ5Q+LpT+5fbySDRBWDg442p/gEQpsqPK3mQu/6XvQl28loslt8h/0dc JIcNGSVmrgNZ3r8worN2HOTbqgcQadZONS6/oSBzzGoO7ULcgpi4VmRcCcCge/63 BIAWuW0/0bKf3wqsQ4Rdu2a8/XwYIykc5kJd/49m2uEUb3SKDjVC9aCjQXImlK3P YIJfgIzWHv1zp6h5wEKBAM9++V07kQQ= -----END CERTIFICATE-----Generated at Wed Jul 2 05:38:11 2025 by rpki-client