$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa File: 2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa (raw, json) Hash identifier: 3XCFMlWb1O7lMOX0ccjnXM1YI4GwFh8DHc/J84pdE1s= Subject key identifier: 6D:8F:ED:3F:C8:CD:66:11:A5:73:EC:CB:7D:B8:4B:31:EE:05:19:16 Certificate issuer: /CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc Certificate serial: 010D0C9F43285849CE9A4A6CE8BE0794F692D9C0 Authority key identifier: 9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 192.58.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:4a:6c:e8:be:07:94:f6:92:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=79c5280a-3ce9-4e77-8e0a-9c4435bc8059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:37:97:8e:22:8b:da:70:fb:e8:c1:0f:e9:17: 14:9e:e9:9f:59:a1:7b:d0:bb:91:e2:8f:4b:82:0e: 78:99:c2:f6:1c:d7:28:51:6b:2f:a1:84:30:32:d9: 07:c0:a1:74:c4:55:7c:2b:ac:ff:5c:dc:b5:c8:f2: 58:13:1b:04:03:32:2e:1f:bd:4f:27:60:25:8d:87: 6f:b5:53:a1:a6:a9:f2:69:70:43:73:5e:7d:8f:59: 24:b3:51:6b:4b:40:0c:78:12:47:48:f4:c0:f7:4d: 26:f3:fa:81:3f:9e:15:f6:68:30:16:98:59:f3:d8: 02:4a:3c:33:57:fd:01:d1:fc:b2:0b:1a:48:38:68: 8e:3c:a6:09:40:54:26:cf:0d:8d:35:7f:92:77:53: 51:56:00:5e:3b:82:a7:99:53:73:01:4b:b9:04:81: 9c:aa:26:3a:43:a4:31:96:34:d3:0e:ae:c5:ef:a8: b6:5f:42:c8:2e:8d:9b:0e:9c:11:e5:56:5e:b1:25: 2d:a7:d3:4b:7a:1f:19:26:60:59:bf:14:0a:fa:f8: 83:1c:98:a1:a6:c4:9a:a6:ad:99:11:ec:e2:62:0d: 4c:d8:bd:7d:37:85:ef:47:2e:bd:d4:ec:f9:1d:21: 52:ff:fe:95:1b:62:e9:2e:45:f0:cb:c1:39:03:e6: 16:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8F:ED:3F:C8:CD:66:11:A5:73:EC:CB:7D:B8:4B:31:EE:05:19:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.crl X509v3 Authority Key Identifier: keyid:9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer sbgp-ipAddrBlock: critical IPv4: 192.58.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:c1:45:f8:83:c1:3b:55:f9:2b:fe:32:95:00:c9:54:bc:fd: 7a:db:af:df:0b:21:8e:62:fe:7a:fe:f5:cd:6a:4c:78:fb:a1: 54:52:73:99:b6:3c:02:e0:08:f5:7b:0e:a7:8e:a2:e0:6e:14: fc:66:ad:7d:1d:0b:6e:b2:89:ed:09:d5:9f:b4:37:dd:87:d4: fd:2d:00:53:33:05:cd:ae:bc:95:98:05:39:8a:62:d2:93:ed: 2d:17:b8:17:37:33:ec:81:76:55:81:4e:b3:9b:79:4c:0d:27: 64:53:7b:4a:d0:82:78:71:24:9e:50:d5:2f:c3:6c:cf:21:5e: f6:be:87:57:e7:5c:fe:49:ea:24:25:54:3e:f2:5a:78:2b:44: 3c:49:59:47:d0:f2:e7:7a:98:fd:fc:b6:96:c3:7c:27:48:62: 76:9e:f8:a8:c6:e8:09:84:7c:d6:9d:fa:0d:52:54:9f:e4:93: a1:db:9f:e3:99:b0:6e:37:d2:25:70:12:2b:dd:99:62:33:fe: 64:dc:01:c6:43:33:32:51:eb:2c:ab:45:13:bd:78:bd:9c:00: a7:63:e5:6c:ef:3b:66:62:c1:99:53:e6:a6:40:18:b4:7f:d1: 50:f3:95:79:8f:20:d3:55:90:4d:13:61:2b:a5:b6:d2:f4:43: 6e:61:91:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmkps6L4HlPaS2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmNjgwOWYtMGI0NS00N2Q1LWI3Y2MtN2Y4OTJkZGRh MGRjMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NzljNTI4MGEtM2NlOS00ZTc3LThlMGEtOWM0NDM1YmM4MDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDeXjiKL2nD76MEP6RcUnumfWaF70LuR4o9L gg54mcL2HNcoUWsvoYQwMtkHwKF0xFV8K6z/XNy1yPJYExsEAzIuH71PJ2AljYdv tVOhpqnyaXBDc159j1kks1FrS0AMeBJHSPTA900m8/qBP54V9mgwFphZ89gCSjwz V/0B0fyyCxpIOGiOPKYJQFQmzw2NNX+Sd1NRVgBeO4KnmVNzAUu5BIGcqiY6Q6Qx ljTTDq7F76i2X0LILo2bDpwR5VZesSUtp9NLeh8ZJmBZvxQK+viDHJihpsSapq2Z EeziYg1M2L19N4XvRy691Oz5HSFS//6VG2LpLkXwy8E5A+YWaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2P7T/IzWYRpXPsy324SzHuBRkWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYmY2 ODA5Zi0wYjQ1LTQ3ZDUtYjdjYy03Zjg5MmRkZGEwZGMvMmFlNDBjOTUtNGNjNS0z M2E1LThhYTMtMDU0YzkyMGQ1YjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2JmNjgwOWYtMGI0NS00N2Q1LWI3 Y2MtN2Y4OTJkZGRhMGRjL2NiZjY4MDlmLTBiNDUtNDdkNS1iN2NjLTdmODkyZGRk YTBkYy5jcmwwHwYDVR0jBBgwFoAUmwap4jKSLvGtTIQEPijY3xF1DZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYmY2ODA5Zi0wYjQ1LTQ3ZDUtYjdjYy03Zjg5 MmRkZGEwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDBRfiDwTtV+Sv+MpUAyVS8/Xrbr98LIY5i/nr+9c1qTHj7oVRSc5m2 PALgCPV7DqeOouBuFPxmrX0dC26yie0J1Z+0N92H1P0tAFMzBc2uvJWYBTmKYtKT 7S0XuBc3M+yBdlWBTrObeUwNJ2RTe0rQgnhxJJ5Q1S/DbM8hXva+h1fnXP5J6iQl VD7yWngrRDxJWUfQ8ud6mP38tpbDfCdIYnae+KjG6AmEfNad+g1SVJ/kk6Hbn+OZ sG430iVwEivdmWIz/mTcAcZDMzJR6yyrRRO9eL2cAKdj5WzvO2ZiwZlT5qZAGLR/ 0VDzlXmPINNVkE0TYSulttL0Q25hkYU= -----END CERTIFICATE-----Generated at Sun Jun 29 11:17:43 2025 by rpki-client