$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/3dec3551-0bf3-3375-88e1-4193eace0ec4.roa File: 3dec3551-0bf3-3375-88e1-4193eace0ec4.roa (raw, json) Hash identifier: cyucWApD8EvJdsnN9oVzh9y02Rz9AVWXtxL/gFX/dbs= Subject key identifier: D1:93:97:E6:ED:4E:5E:42:E5:D4:33:F5:A4:27:99:D3:75:25:14:EB Certificate issuer: /CN=66eb90e9-650a-4afa-9238-5bcf4de38c9d Certificate serial: 010D0C9F4328584A0C05743504CC939FC43BE3C0 Authority key identifier: 92:A9:EB:71:63:D7:30:A1:9C:1D:0F:36:CD:9D:62:3F:9B:33:3A:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/3dec3551-0bf3-3375-88e1-4193eace0ec4.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 16509 IP address blocks: 192.245.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:74:35:04:cc:93:9f:c4:3b:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66eb90e9-650a-4afa-9238-5bcf4de38c9d Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=06e26c72-bbbf-4b7a-96cd-d17790099763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7e:b1:cd:fb:f9:97:99:a9:f5:b2:0a:b1:e5: c8:fe:62:58:b1:58:33:8e:8d:2b:87:19:52:91:9a: 6d:5c:da:04:69:e9:97:31:3f:dd:eb:e9:b7:ed:90: 34:81:50:73:c2:7a:82:7a:13:5a:94:a7:41:8f:a6: 8e:d5:51:62:3a:ab:88:61:df:b3:eb:98:07:a8:92: 1a:b5:2d:e0:a1:f8:0d:0b:7c:bf:81:61:e2:47:7b: 4e:02:c1:1e:7f:66:1c:7f:53:62:1f:79:9a:25:c6: f3:52:75:53:82:12:08:2f:32:25:a5:4d:21:66:56: 77:20:24:41:a2:7b:ef:6f:dc:53:d1:b3:e8:d2:d7: 7f:9b:60:44:c6:26:bd:34:d3:11:f7:49:c0:64:cb: 21:90:ab:97:ce:16:ab:7e:a8:7c:5e:e5:ea:f5:5e: 60:a4:e9:77:f0:f2:d0:17:2b:a3:a0:0b:28:e8:a8: c4:f7:46:aa:16:b5:d5:3b:37:48:c7:b5:7f:e7:3a: 8f:d0:22:64:f9:cb:26:33:54:b7:e0:78:47:f1:ca: cd:20:6a:64:15:c7:f7:58:2d:a1:a1:82:97:70:0c: 8b:2f:c7:9f:04:08:c0:30:83:25:84:55:11:48:10: f0:b4:31:36:6a:80:2b:3b:9b:4e:12:c3:6e:f2:44: b9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:93:97:E6:ED:4E:5E:42:E5:D4:33:F5:A4:27:99:D3:75:25:14:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/3dec3551-0bf3-3375-88e1-4193eace0ec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.crl X509v3 Authority Key Identifier: keyid:92:A9:EB:71:63:D7:30:A1:9C:1D:0F:36:CD:9D:62:3F:9B:33:3A:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer sbgp-ipAddrBlock: critical IPv4: 192.245.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:01:05:8b:74:19:6f:68:70:3d:1f:7c:b4:70:f6:7d:fb:85: 41:53:51:ab:d1:84:8c:d8:1e:1e:c5:c7:10:c2:a0:b7:86:2e: d1:0e:89:a8:56:41:f3:00:09:c3:9c:ca:27:10:de:6d:a3:66: 1d:47:f7:d2:26:f6:38:6e:2e:85:3c:b6:c5:d4:0d:10:2a:9f: 1d:99:b1:62:43:77:9c:a1:11:8e:52:81:01:85:bf:7b:29:1a: c0:a9:49:40:29:07:af:2e:42:9f:ec:ad:ad:cd:5b:e6:ac:d9: f8:b1:a4:a9:1b:51:b5:e5:58:1d:58:ee:1e:c4:ad:4f:0c:28: 26:e5:be:42:d8:ef:62:60:f4:92:4c:19:da:11:d5:56:6e:6a: 48:4d:96:43:04:f9:17:5c:8e:09:37:ea:27:8c:6d:56:88:67: 59:29:01:26:69:0e:e6:98:74:bd:40:b3:2c:90:0b:22:43:34: a2:f0:c2:12:7b:39:b6:53:a3:23:27:e9:6c:57:ac:e1:a0:3d: 60:3e:12:43:98:5d:08:0b:81:0b:17:bf:94:ce:3b:01:9d:70: 4e:2d:ec:10:e8:04:1d:64:58:74:a4:f4:a7:27:70:19:f3:c4: 77:e1:e0:20:39:46:27:c7:b8:27:a7:bf:bf:ea:cb:b0:a0:76: 34:37:cb:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBXQ1BMyTn8Q748AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlYjkwZTktNjUwYS00YWZhLTkyMzgtNWJjZjRkZTM4 YzlkMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MDZlMjZjNzItYmJiZi00YjdhLTk2Y2QtZDE3NzkwMDk5NzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr36xzfv5l5mp9bIKseXI/mJYsVgzjo0rhxlS kZptXNoEaemXMT/d6+m37ZA0gVBzwnqCehNalKdBj6aO1VFiOquIYd+z65gHqJIa tS3gofgNC3y/gWHiR3tOAsEef2Ycf1NiH3maJcbzUnVTghIILzIlpU0hZlZ3ICRB onvvb9xT0bPo0td/m2BExia9NNMR90nAZMshkKuXzharfqh8XuXq9V5gpOl38PLQ FyujoAso6KjE90aqFrXVOzdIx7V/5zqP0CJk+csmM1S34HhH8crNIGpkFcf3WC2h oYKXcAyLL8efBAjAMIMlhFURSBDwtDE2aoArO5tOEsNu8kS5lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGTl+btTl5C5dQz9aQnmdN1JRTrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82NmVi OTBlOS02NTBhLTRhZmEtOTIzOC01YmNmNGRlMzhjOWQvM2RlYzM1NTEtMGJmMy0z Mzc1LTg4ZTEtNDE5M2VhY2UwZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjZlYjkwZTktNjUwYS00YWZhLTky MzgtNWJjZjRkZTM4YzlkLzY2ZWI5MGU5LTY1MGEtNGFmYS05MjM4LTViY2Y0ZGUz OGM5ZC5jcmwwHwYDVR0jBBgwFoAUkqnrcWPXMKGcHQ82zZ1iP5szOgAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82NmViOTBlOS02NTBhLTRhZmEtOTIzOC01YmNm NGRlMzhjOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcBBYt0GW9ocD0ffLRw9n37hUFTUavRhIzYHh7FxxDCoLeGLtEOiahW QfMACcOcyicQ3m2jZh1H99Im9jhuLoU8tsXUDRAqnx2ZsWJDd5yhEY5SgQGFv3sp GsCpSUApB68uQp/sra3NW+as2fixpKkbUbXlWB1Y7h7ErU8MKCblvkLY72Jg9JJM GdoR1VZuakhNlkME+Rdcjgk36ieMbVaIZ1kpASZpDuaYdL1AsyyQCyJDNKLwwhJ7 ObZToyMn6WxXrOGgPWA+EkOYXQgLgQsXv5TOOwGdcE4t7BDoBB1kWHSk9KcncBnz xHfh4CA5RifHuCenv7/qy7CgdjQ3y5I= -----END CERTIFICATE-----Generated at Tue Jul 1 14:29:10 2025 by rpki-client