$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/c7c3c608-5015-3d96-b863-386a0ca13f96.roa File: c7c3c608-5015-3d96-b863-386a0ca13f96.roa (raw, json) Hash identifier: saVOHg58+n3q+bbb49iPg7Oi6iI+THCv8uy6iSeTEm8= Subject key identifier: 91:1B:A1:7E:23:E6:79:F4:31:5F:2E:6C:BE:91:F8:74:2F:2B:FB:A4 Certificate issuer: /CN=66eb90e9-650a-4afa-9238-5bcf4de38c9d Certificate serial: 010D0C9F4328584A0C057443ABFAD5A47BB5C080 Authority key identifier: 92:A9:EB:71:63:D7:30:A1:9C:1D:0F:36:CD:9D:62:3F:9B:33:3A:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/c7c3c608-5015-3d96-b863-386a0ca13f96.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 14618 IP address blocks: 192.245.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:74:43:ab:fa:d5:a4:7b:b5:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66eb90e9-650a-4afa-9238-5bcf4de38c9d Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=d5348f93-4690-43d4-a7d8-159db7cccbbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:55:77:ba:29:82:5b:bc:df:f1:a1:ad:1d:9d: 33:cc:b2:b2:2e:cc:f7:1b:56:2f:9d:0c:89:57:b7: 45:7b:ff:72:40:68:70:d3:12:bb:fa:e5:32:f8:1f: 92:a0:5e:31:9f:c4:2e:f0:ef:d0:2a:78:24:29:10: 7d:d1:1a:93:27:bb:86:eb:dc:d1:c2:4c:ae:8c:f9: a7:35:b9:28:f3:ed:2f:5e:48:d6:6a:08:4b:a6:f6: 52:2b:f2:41:ff:28:cc:b2:11:3f:56:07:fc:ba:aa: de:c4:7f:26:c3:8b:6c:3e:ed:6d:7b:8a:a5:cc:7f: 08:ca:29:4b:d7:6c:03:77:24:e3:1f:04:33:43:c9: 66:b6:96:7b:d2:cf:05:5c:6f:fb:33:d7:1d:cc:1c: cb:be:1f:65:5a:bd:06:12:b3:33:54:90:a7:61:9c: 4e:48:5b:82:15:22:51:fb:62:12:29:69:03:22:a3: fe:1b:e7:3e:24:47:16:78:75:6f:c8:c6:72:ca:c4: ef:5d:6b:6b:1a:04:67:71:9c:77:de:84:29:9d:b3: 6b:d9:99:60:d4:db:e8:41:e0:2d:a1:70:4b:06:28: 52:52:64:4c:38:80:42:c3:72:f9:6e:95:80:1d:2e: 2f:5c:ac:08:8c:e2:5b:62:79:ec:2e:e7:98:c7:65: 35:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1B:A1:7E:23:E6:79:F4:31:5F:2E:6C:BE:91:F8:74:2F:2B:FB:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/c7c3c608-5015-3d96-b863-386a0ca13f96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.crl X509v3 Authority Key Identifier: keyid:92:A9:EB:71:63:D7:30:A1:9C:1D:0F:36:CD:9D:62:3F:9B:33:3A:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer sbgp-ipAddrBlock: critical IPv4: 192.245.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:3f:78:22:02:19:08:eb:14:d8:79:ce:6b:a8:39:8c:8a:56: c3:c5:65:ea:5e:f3:c2:6d:bc:4b:77:81:2b:d1:0c:b5:ab:75: 87:a0:81:e3:0d:a4:ab:67:68:15:3e:fc:e6:6d:ec:a4:da:4b: 7a:cc:99:3e:b1:28:35:af:18:01:01:33:bb:bf:f6:1c:fc:72: 66:bd:d6:f1:45:2e:8c:74:b2:25:20:bc:1d:1b:05:1f:b2:46: 54:90:9d:15:6a:78:b7:47:18:49:93:ff:dc:d0:03:2d:79:1d: 5e:81:d8:a3:7e:cd:4b:5d:65:95:d8:17:a8:18:1f:b6:60:30: 40:bc:3b:97:b6:d9:c3:2b:4b:58:5e:8a:75:e0:3d:49:b9:a2: 9d:47:bb:93:a0:9f:bf:42:d3:e0:99:7d:ed:7d:06:62:a1:44: d9:58:9b:9c:f4:4d:23:8c:a3:d6:de:71:89:29:42:00:98:bd: ae:d2:eb:5c:a5:d4:bd:b7:2e:d0:21:de:0b:6f:9e:0d:d7:78: b1:11:f0:c1:33:f5:5b:e2:19:64:39:92:6e:64:f2:5b:56:27: 74:18:1d:fc:d0:0f:32:7a:2a:63:1b:9e:79:3b:b5:f6:f5:d5: d3:d5:f2:0c:be:0c:d2:b1:4e:a3:ce:93:ae:f4:e4:6f:63:08: a7:b1:9b:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBXRDq/rVpHu1wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlYjkwZTktNjUwYS00YWZhLTkyMzgtNWJjZjRkZTM4 YzlkMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZDUzNDhmOTMtNDY5MC00M2Q0LWE3ZDgtMTU5ZGI3Y2NjYmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVV3uimCW7zf8aGtHZ0zzLKyLsz3G1YvnQyJ V7dFe/9yQGhw0xK7+uUy+B+SoF4xn8Qu8O/QKngkKRB90RqTJ7uG69zRwkyujPmn Nbko8+0vXkjWaghLpvZSK/JB/yjMshE/Vgf8uqrexH8mw4tsPu1te4qlzH8IyilL 12wDdyTjHwQzQ8lmtpZ70s8FXG/7M9cdzBzLvh9lWr0GErMzVJCnYZxOSFuCFSJR +2ISKWkDIqP+G+c+JEcWeHVvyMZyysTvXWtrGgRncZx33oQpnbNr2Zlg1NvoQeAt oXBLBihSUmRMOIBCw3L5bpWAHS4vXKwIjOJbYnnsLueYx2U1zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEboX4j5nn0MV8ubL6R+HQvK/ukMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82NmVi OTBlOS02NTBhLTRhZmEtOTIzOC01YmNmNGRlMzhjOWQvYzdjM2M2MDgtNTAxNS0z ZDk2LWI4NjMtMzg2YTBjYTEzZjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjZlYjkwZTktNjUwYS00YWZhLTky MzgtNWJjZjRkZTM4YzlkLzY2ZWI5MGU5LTY1MGEtNGFmYS05MjM4LTViY2Y0ZGUz OGM5ZC5jcmwwHwYDVR0jBBgwFoAUkqnrcWPXMKGcHQ82zZ1iP5szOgAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82NmViOTBlOS02NTBhLTRhZmEtOTIzOC01YmNm NGRlMzhjOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAg/eCICGQjrFNh5zmuoOYyKVsPFZepe88JtvEt3gSvRDLWrdYeggeMN pKtnaBU+/OZt7KTaS3rMmT6xKDWvGAEBM7u/9hz8cma91vFFLox0siUgvB0bBR+y RlSQnRVqeLdHGEmT/9zQAy15HV6B2KN+zUtdZZXYF6gYH7ZgMEC8O5e22cMrS1he inXgPUm5op1Hu5Ogn79C0+CZfe19BmKhRNlYm5z0TSOMo9becYkpQgCYva7S61yl 1L23LtAh3gtvng3XeLER8MEz9VviGWQ5km5k8ltWJ3QYHfzQDzJ6KmMbnnk7tfb1 1dPV8gy+DNKxTqPOk6705G9jCKexmz0= -----END CERTIFICATE-----Generated at Tue Jul 1 16:54:25 2025 by rpki-client