$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/9ca3f638-13cd-3df2-9782-f3c67073a360.roa File: 9ca3f638-13cd-3df2-9782-f3c67073a360.roa (raw, json) Hash identifier: GHMXTh6dGxESg+zvJmPqmafLdl78Tb6y1ChF54dofXw= Subject key identifier: 44:AA:D8:4A:77:4D:36:27:75:78:DD:48:8B:F6:9C:48:79:51:7D:22 Certificate issuer: /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0 Certificate serial: 010D0C9F4328584AC2E0DF9DEB0549B851EF8700 Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/9ca3f638-13cd-3df2-9782-f3c67073a360.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 10929 IP address blocks: 192.154.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:df:9d:eb:05:49:b8:51:ef:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=9b926181-c315-42f6-aee5-51a063e22223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5c:18:d0:6a:ee:fd:f5:ef:dd:72:be:0e:ed: 42:59:88:8b:05:a3:8f:f7:b9:4d:f0:14:59:42:3c: f4:02:dd:64:77:1a:b7:82:69:d1:4e:0b:d6:04:71: 74:20:c7:99:62:61:2a:ef:85:a4:52:d4:c3:0e:8f: 85:1e:ca:8a:42:b0:99:2b:70:29:d9:26:4e:cc:04: 11:57:b4:17:1c:77:cf:35:f2:17:25:39:76:cb:d1: a4:16:bf:c6:08:d4:db:57:22:75:27:eb:47:d5:39: 3f:18:31:c1:8e:f3:da:eb:0d:78:df:2d:ba:7b:13: cc:bc:0a:e8:83:8f:d2:16:96:19:04:f4:a6:5c:f2: 4d:4b:b2:b2:3e:fc:e0:74:75:4b:74:3d:b7:fd:04: c4:fd:7d:ac:9c:00:c7:e4:b5:cf:40:c8:6e:a0:f2: e0:f4:b7:f2:64:81:26:04:fc:36:c1:a2:06:ca:55: 46:db:52:0c:42:a0:00:a7:9f:18:77:a0:7d:4e:e8: ba:17:16:6f:6f:0a:6f:c1:08:ea:5d:af:b3:6c:c9: f4:9c:82:4c:5d:a1:63:db:d1:c0:56:6a:13:6b:1e: 62:c3:32:a2:f8:d4:10:82:b4:e1:0b:f6:16:51:0d: ca:77:d7:44:c3:91:da:4f:5e:39:2a:91:e4:9e:d2: 1a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AA:D8:4A:77:4D:36:27:75:78:DD:48:8B:F6:9C:48:79:51:7D:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/9ca3f638-13cd-3df2-9782-f3c67073a360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl X509v3 Authority Key Identifier: keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer sbgp-ipAddrBlock: critical IPv4: 192.154.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:98:52:e8:19:84:d0:92:97:f6:fb:e5:33:ff:54:1a:08:84: d0:af:6a:91:da:11:32:21:f8:04:64:bd:1a:f2:b5:d4:36:89: 97:23:f5:17:81:22:62:21:a2:39:dc:88:90:d4:95:5a:8d:5c: 64:58:b5:1f:b1:5c:0d:aa:32:3f:83:78:1a:5f:ca:64:a0:a3: 6a:21:df:19:3e:5f:63:d6:6b:df:89:f3:6d:f0:cf:fc:99:d6: 35:08:2d:de:1d:06:89:c1:cb:b3:6b:68:57:46:4e:2d:e2:c7: f0:54:f2:55:48:a5:ae:3b:bc:2a:4d:2e:0f:11:0e:c6:8f:4b: b4:20:2b:69:fb:30:75:4b:cb:f4:30:76:ac:2a:13:82:de:fc: 69:ce:db:cc:d1:6f:37:9e:06:ed:19:28:16:02:03:8c:3d:c0: d4:7e:8c:ec:57:5a:b2:f0:a1:18:c2:5f:35:36:d6:b8:d8:9e: 66:b5:5f:2e:9d:d9:c4:3a:01:8e:bd:90:c8:86:61:68:44:8e: a8:66:9e:32:6c:b2:d3:bb:04:fc:f0:72:b0:b6:ce:e8:45:d2: 48:d5:43:62:f3:90:2d:27:3c:d6:e4:d3:fb:b9:14:ea:c1:ef: a4:1c:0a:9f:68:6c:67:57:a5:35:ae:ea:4b:b9:d2:d0:1a:54: b6:16:ec:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4N+d6wVJuFHvhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI2N2Q4MzItY2IwNS00YzY4LWE1Y2UtYmE0NjQ1ZGIz NWUwMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OWI5MjYxODEtYzMxNS00MmY2LWFlZTUtNTFhMDYzZTIyMjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFwY0Gru/fXv3XK+Du1CWYiLBaOP97lN8BRZ Qjz0At1kdxq3gmnRTgvWBHF0IMeZYmEq74WkUtTDDo+FHsqKQrCZK3Ap2SZOzAQR V7QXHHfPNfIXJTl2y9GkFr/GCNTbVyJ1J+tH1Tk/GDHBjvPa6w143y26exPMvAro g4/SFpYZBPSmXPJNS7KyPvzgdHVLdD23/QTE/X2snADH5LXPQMhuoPLg9LfyZIEm BPw2waIGylVG21IMQqAAp58Yd6B9Tui6FxZvbwpvwQjqXa+zbMn0nIJMXaFj29HA VmoTax5iwzKi+NQQgrThC/YWUQ3Kd9dEw5HaT145KpHkntIaDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESq2Ep3TTYndXjdSIv2nEh5UX0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMjY3 ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2NDVkYjM1ZTAvOWNhM2Y2MzgtMTNjZC0z ZGYyLTk3ODItZjNjNjcwNzNhMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjI2N2Q4MzItY2IwNS00YzY4LWE1 Y2UtYmE0NjQ1ZGIzNWUwL2IyNjdkODMyLWNiMDUtNGM2OC1hNWNlLWJhNDY0NWRi MzVlMC5jcmwwHwYDVR0jBBgwFoAU2rliA1hIhy/TMsdQmyxxCC9eqCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMjY3ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2 NDVkYjM1ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwJqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuYUugZhNCSl/b75TP/VBoIhNCvapHaETIh+ARkvRrytdQ2iZcj9ReB ImIhojnciJDUlVqNXGRYtR+xXA2qMj+DeBpfymSgo2oh3xk+X2PWa9+J823wz/yZ 1jUILd4dBonBy7NraFdGTi3ix/BU8lVIpa47vCpNLg8RDsaPS7QgK2n7MHVLy/Qw dqwqE4Le/GnO28zRbzeeBu0ZKBYCA4w9wNR+jOxXWrLwoRjCXzU21rjYnma1Xy6d 2cQ6AY69kMiGYWhEjqhmnjJsstO7BPzwcrC2zuhF0kjVQ2LzkC0nPNbk0/u5FOrB 76QcCp9obGdXpTWu6ku50tAaVLYW7Mg= -----END CERTIFICATE-----Generated at Sun Aug 24 01:09:13 2025 by rpki-client