$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/d3a3f524-d194-33cd-a5b9-49d4b272b875.roa File: d3a3f524-d194-33cd-a5b9-49d4b272b875.roa (raw, json) Hash identifier: UAChMBtlJYiXWLuue1fNETBoV26HFUxWJ5NzRGc+odM= Subject key identifier: 33:23:FD:E3:CB:41:31:4D:DB:43:98:C3:D3:BF:36:10:FF:1E:41:68 Certificate issuer: /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Certificate serial: 010D0C9F4328584A4C3B0B66ACA7F21C0B147D80 Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/d3a3f524-d194-33cd-a5b9-49d4b272b875.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 18994 IP address blocks: 162.134.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:0b:66:ac:a7:f2:1c:0b:14:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=2fae7caa-e41a-4927-8bc5-ebb789655cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5e:e0:3d:28:0f:11:f0:ab:f6:d5:b4:62:57: 8b:59:16:55:e1:ca:c1:e8:ed:71:f6:96:c4:7e:a0: 7f:a1:1e:5f:4e:6e:de:e9:66:16:23:91:fa:47:6e: c3:c2:4c:e1:de:49:27:26:d3:f7:45:6e:63:ad:72: 38:d9:d3:fc:e9:49:f7:f0:33:57:05:64:2f:d5:83: ee:51:59:09:f4:95:4d:41:6c:a7:b9:61:6b:b6:5a: f6:f0:33:a2:6e:71:54:9a:b3:c4:e9:a1:0a:10:18: 90:74:90:7c:d1:7a:b4:2a:5e:bf:7c:1f:cb:62:2d: 2a:6a:8d:04:07:5d:33:7f:03:f3:f1:0f:6f:fb:35: aa:eb:0a:0b:37:e7:6a:13:e7:78:30:d0:ad:68:cf: 82:86:03:d8:a6:3a:c2:47:70:25:19:c5:8e:46:c3: 6e:e5:46:de:af:84:8e:f4:1a:ad:0f:45:a4:c9:23: 4b:17:8d:ee:ac:c3:97:6e:03:86:59:95:e8:32:a0: c2:41:6c:08:81:6b:35:98:11:cb:4e:2c:e0:41:70: 78:67:36:d7:de:f4:54:95:62:c5:1d:e0:49:6e:1a: bb:4a:77:66:bd:86:0c:de:15:92:39:0f:2f:f7:50: 3c:5d:50:e1:b6:0b:25:21:9e:31:60:20:34:0f:cb: e0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:23:FD:E3:CB:41:31:4D:DB:43:98:C3:D3:BF:36:10:FF:1E:41:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/d3a3f524-d194-33cd-a5b9-49d4b272b875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl X509v3 Authority Key Identifier: keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer sbgp-ipAddrBlock: critical IPv4: 162.134.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:3c:1c:5e:36:7c:65:42:2d:1a:d5:12:84:00:6a:e0:8a:be: 84:3a:2c:bc:66:bc:e5:e0:55:1e:6d:f4:7a:82:fb:43:d3:c8: c6:bd:23:93:ff:ee:e4:31:f9:2c:d4:a4:df:44:b4:83:d6:9b: ce:e1:a3:31:da:ea:c9:64:94:1c:7c:34:fc:94:36:a4:d5:5a: a6:1f:63:da:81:41:4a:f8:13:25:b5:02:83:f9:4f:d6:cf:04: 42:5a:7f:9c:8a:0a:b8:f1:08:81:ea:5c:9a:e8:6f:c9:73:49: 94:2f:f6:45:1a:d3:3e:92:fe:ad:a5:ff:eb:6b:b5:54:31:54: 91:39:e1:e4:64:e6:27:1e:69:b2:ab:a1:5a:ac:1d:7f:8d:a5: 9b:0c:c8:c2:5e:ee:da:d4:0d:62:08:4c:ef:7f:fe:6a:66:c9: e1:54:3c:30:2c:c1:66:55:55:24:75:1e:e9:ed:d7:cd:09:2e: 62:74:d6:52:29:93:76:f0:46:ce:76:4a:eb:d9:02:88:51:70: 1a:16:03:63:ff:12:e8:3e:5c:de:6b:af:ef:53:dc:8f:c2:cf: 3e:62:88:62:80:44:e3:96:e9:ef:36:a4:48:c5:90:23:49:21: 8d:3b:12:d6:f3:b5:f3:de:a2:9a:b3:d6:25:01:0a:f7:c3:2b: e3:70:7c:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOwtmrKfyHAsUfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTBmOWFjZjItNWExMS00OTJmLTkzZTEtMWUyMjFhNmY0 YTkyMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MmZhZTdjYWEtZTQxYS00OTI3LThiYzUtZWJiNzg5NjU1Y2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm17gPSgPEfCr9tW0YleLWRZV4crB6O1x9pbE fqB/oR5fTm7e6WYWI5H6R27Dwkzh3kknJtP3RW5jrXI42dP86Un38DNXBWQv1YPu UVkJ9JVNQWynuWFrtlr28DOibnFUmrPE6aEKEBiQdJB80Xq0Kl6/fB/LYi0qao0E B10zfwPz8Q9v+zWq6woLN+dqE+d4MNCtaM+ChgPYpjrCR3AlGcWORsNu5Uber4SO 9BqtD0WkySNLF43urMOXbgOGWZXoMqDCQWwIgWs1mBHLTizgQXB4ZzbX3vRUlWLF HeBJbhq7SndmvYYM3hWSOQ8v91A8XVDhtgslIZ4xYCA0D8vg7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMj/ePLQTFN20OYw9O/NhD/HkFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5 YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIyMWE2ZjRhOTIvZDNhM2Y1MjQtZDE5NC0z M2NkLWE1YjktNDlkNGIyNzJiODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTBmOWFjZjItNWExMS00OTJmLTkz ZTEtMWUyMjFhNmY0YTkyL2EwZjlhY2YyLTVhMTEtNDkyZi05M2UxLTFlMjIxYTZm NGE5Mi5jcmwwHwYDVR0jBBgwFoAU/4vCxbqVi6kRyVwnWnCARvtLmYgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIy MWE2ZjRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAooaRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC08HF42fGVCLRrVEoQAauCKvoQ6LLxmvOXgVR5t9HqC+0PTyMa9I5P/ 7uQx+SzUpN9EtIPWm87hozHa6slklBx8NPyUNqTVWqYfY9qBQUr4EyW1AoP5T9bP BEJaf5yKCrjxCIHqXJrob8lzSZQv9kUa0z6S/q2l/+trtVQxVJE54eRk5iceabKr oVqsHX+NpZsMyMJe7trUDWIITO9//mpmyeFUPDAswWZVVSR1Hunt180JLmJ01lIp k3bwRs52SuvZAohRcBoWA2P/Eug+XN5rr+9T3I/Czz5iiGKAROOW6e82pEjFkCNJ IY07EtbztfPeopqz1iUBCvfDK+NwfM0= -----END CERTIFICATE-----Generated at Sun Jun 29 13:25:13 2025 by rpki-client