$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/37c1cf0b-3fed-37d6-a145-a63cec7302e4.roa File: 37c1cf0b-3fed-37d6-a145-a63cec7302e4.roa (raw, json) Hash identifier: O5h2w6vEeCPdPwGhXANjQmKuTnZ64rHI6xxl0S/5E18= Subject key identifier: 6E:73:30:90:7C:69:72:0F:A2:BD:0A:E3:AB:FF:43:69:D5:C0:5C:20 Certificate issuer: /CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1 Certificate serial: 010D0C9F4328584ACB40E245D5E85FDDC953E1A0 Authority key identifier: F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/37c1cf0b-3fed-37d6-a145-a63cec7302e4.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 62659 IP address blocks: 192.0.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:e2:45:d5:e8:5f:dd:c9:53:e1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=34a4c62d-a6cd-42f9-b6a7-9c3f909034da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:20:64:3a:07:7e:ed:82:5a:b5:ba:42:30:76: c1:20:d6:59:e9:95:ae:90:14:d9:c3:6d:08:a1:0b: ed:83:6b:8b:b9:f2:f7:30:7b:37:21:b5:2a:c1:cb: 7d:f5:45:1c:4b:3f:61:96:4a:b3:94:02:fa:07:56: a1:72:a0:59:9e:eb:e5:e4:3c:d6:d7:bc:22:97:9c: 86:2b:ab:10:1c:90:86:85:79:cc:f9:69:c3:81:da: ed:d9:96:30:e8:a0:94:33:b4:19:2e:aa:2b:03:ba: bd:4a:f3:ff:fc:e6:9c:94:6a:db:be:54:60:07:fe: 16:69:6b:01:9a:ec:e7:c3:b1:2b:19:20:df:ea:b1: 62:df:d1:f3:a6:c0:e7:de:5c:70:8b:b2:a7:be:ed: 15:ae:da:bb:a8:f8:c7:69:53:c8:25:97:25:95:fe: fd:8b:4c:e1:23:9a:5f:87:9f:58:36:3c:95:20:49: 55:7d:5c:be:76:ec:3d:6e:eb:58:60:7e:11:94:08: 05:94:0c:3b:33:f8:a3:ab:c3:18:a7:28:b4:a0:b2: 26:67:36:b3:6a:91:3d:5e:73:16:85:3c:b7:f0:0f: 45:bb:dc:fc:47:f9:48:34:07:f6:49:f3:46:c8:a3: c1:89:ac:e8:b9:16:5f:43:ad:72:73:d3:96:90:9c: 2e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:73:30:90:7C:69:72:0F:A2:BD:0A:E3:AB:FF:43:69:D5:C0:5C:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/37c1cf0b-3fed-37d6-a145-a63cec7302e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl X509v3 Authority Key Identifier: keyid:F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer sbgp-ipAddrBlock: critical IPv4: 192.0.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f2:89:d8:e5:0d:bf:75:81:26:1a:7f:c1:6e:99:13:f3:30: b5:6c:6d:d5:15:32:68:1e:cc:64:44:a5:ea:e3:a5:c2:57:d0: bd:b0:7f:6c:1b:fb:48:39:a1:78:fc:7a:c8:6a:ed:76:93:4e: aa:a5:55:e0:8a:f2:dc:fb:6b:02:24:47:15:24:eb:90:b0:57: 26:92:2c:01:e5:ca:78:75:ae:61:0d:b0:a8:0e:55:3a:dc:6f: 7e:0c:03:d3:19:8a:6a:e2:43:ce:92:80:76:9a:e2:cb:90:4f: f9:e3:be:37:85:40:43:f7:b6:03:9e:cd:a5:7f:e9:56:59:c6: 96:a3:24:46:c5:5b:8c:91:8b:c9:11:22:83:01:77:b5:1c:c9: 44:76:0f:45:db:6c:9c:af:3b:c9:dc:c8:56:ec:1b:82:b7:c3: 4f:45:59:56:7c:d1:41:17:04:22:47:74:50:fc:38:a3:c4:f3: 09:c3:24:9a:3e:4d:3b:bf:59:fa:1d:4e:06:25:cc:cb:23:ac: 8f:3e:4b:ce:de:20:d8:6b:e7:95:2b:0b:c6:10:c4:88:78:5e: 68:e9:b1:7e:e3:cc:e1:ad:aa:62:8b:ae:14:0a:26:be:96:26: a4:69:61:f6:4c:c9:04:0a:69:40:24:27:c2:90:fd:2f:c6:32: 5a:c5:01:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQOJF1ehf3clT4aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAxOGJmZTktNTY0My00ODhhLWE5Y2QtMzljYjc4Y2Fk ZmExMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MzRhNGM2MmQtYTZjZC00MmY5LWI2YTctOWMzZjkwOTAzNGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiBkOgd+7YJatbpCMHbBINZZ6ZWukBTZw20I oQvtg2uLufL3MHs3IbUqwct99UUcSz9hlkqzlAL6B1ahcqBZnuvl5DzW17wil5yG K6sQHJCGhXnM+WnDgdrt2ZYw6KCUM7QZLqorA7q9SvP//OaclGrbvlRgB/4WaWsB muznw7ErGSDf6rFi39HzpsDn3lxwi7Knvu0Vrtq7qPjHaVPIJZcllf79i0zhI5pf h59YNjyVIElVfVy+duw9butYYH4RlAgFlAw7M/ijq8MYpyi0oLImZzazapE9XnMW hTy38A9Fu9z8R/lINAf2SfNGyKPBiazouRZfQ61yc9OWkJwuMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5zMJB8aXIPor0K46v/Q2nVwFwgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MDE4 YmZlOS01NjQzLTQ4OGEtYTljZC0zOWNiNzhjYWRmYTEvMzdjMWNmMGItM2ZlZC0z N2Q2LWExNDUtYTYzY2VjNzMwMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDAxOGJmZTktNTY0My00ODhhLWE5 Y2QtMzljYjc4Y2FkZmExLzQwMThiZmU5LTU2NDMtNDg4YS1hOWNkLTM5Y2I3OGNh ZGZhMS5jcmwwHwYDVR0jBBgwFoAU92gYKDUvn3LcLDIzRMtSiNLHGm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80MDE4YmZlOS01NjQzLTQ4OGEtYTljZC0zOWNi NzhjYWRmYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwAAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHyidjlDb91gSYaf8FumRPzMLVsbdUVMmgezGREperjpcJX0L2wf2wb +0g5oXj8eshq7XaTTqqlVeCK8tz7awIkRxUk65CwVyaSLAHlynh1rmENsKgOVTrc b34MA9MZimriQ86SgHaa4suQT/njvjeFQEP3tgOezaV/6VZZxpajJEbFW4yRi8kR IoMBd7UcyUR2D0XbbJyvO8ncyFbsG4K3w09FWVZ80UEXBCJHdFD8OKPE8wnDJJo+ TTu/WfodTgYlzMsjrI8+S87eINhr55UrC8YQxIh4XmjpsX7jzOGtqmKLrhQKJr6W JqRpYfZMyQQKaUAkJ8KQ/S/GMlrFAZE= -----END CERTIFICATE-----Generated at Sat Aug 23 17:56:05 2025 by rpki-client