$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/a903e824-1b66-364f-8ea4-9393ef2de488.roa File: a903e824-1b66-364f-8ea4-9393ef2de488.roa (raw, json) Hash identifier: swWHRJz5B4cChwvhgiEuzoizkLV72cUwsO4bj6/wGrU= Subject key identifier: 9E:0A:35:AB:1F:61:AE:39:65:B4:0E:07:32:FD:B2:6B:DD:8D:89:B1 Certificate issuer: /CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2 Certificate serial: 010D0C9F4328584A225AC06543209C906ABC1E00 Authority key identifier: 0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/a903e824-1b66-364f-8ea4-9393ef2de488.roa Signing time: Mon 09 Jun 2025 13:01:01 +0000 ROA not before: Mon 09 Jun 2025 13:01:01 +0000 ROA not after: Sun 07 Sep 2025 13:01:01 +0000 asID: 198949 IP address blocks: 192.245.221.0/24 maxlen: 24 192.245.222.0/23 maxlen: 24 192.245.224.0/24 maxlen: 24 199.33.130.0/23 maxlen: 24 199.33.132.0/23 maxlen: 24 199.33.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:5a:c0:65:43:20:9c:90:6a:bc:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2 Validity Not Before: Jun 9 13:01:01 2025 GMT Not After : Sep 7 13:01:01 2025 GMT Subject: CN=614ae16f-7176-4091-935d-75b004a60978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f7:2e:b5:6a:bf:94:e6:d1:03:44:e9:22:1f: 57:66:d6:9b:f2:d4:c1:de:ed:38:01:b4:e3:e3:43: 41:1e:cc:0c:07:7f:4b:d5:74:2d:e5:d1:66:f4:6a: cc:38:83:f9:fc:06:f0:ba:a6:31:43:b8:6b:2e:6b: 8b:3c:1a:38:19:0f:bc:39:d9:ab:86:64:e1:e5:84: 53:76:fe:b2:af:22:74:2a:c1:d1:3a:34:a0:93:d5: 12:87:99:75:a1:25:21:d0:20:14:6a:42:72:c8:1b: 87:cb:1b:ae:b0:0f:9b:00:81:8e:fe:15:a6:91:ad: c1:5f:57:e0:db:d3:29:70:1a:df:b4:bf:ee:6f:10: 61:48:ed:85:b7:67:96:e9:22:b1:a9:e2:9c:a4:c3: 98:b2:10:c9:32:79:a3:e1:07:3e:c5:6a:8b:e0:70: 03:a8:cb:92:80:af:da:5c:62:c7:f7:22:59:c2:80: c5:b1:02:58:1c:d9:e3:1a:b9:58:2c:12:2f:53:62: 3e:1c:2a:8d:20:06:98:96:5d:c2:b9:6e:89:a9:23: e5:f3:f1:83:70:a6:52:e0:38:83:34:d2:51:5f:12: eb:cc:97:26:1d:40:31:51:e9:17:f1:4a:d2:41:44: c3:32:ca:9a:91:82:f2:66:1d:af:3e:e8:4c:4f:84: 9a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0A:35:AB:1F:61:AE:39:65:B4:0E:07:32:FD:B2:6B:DD:8D:89:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/a903e824-1b66-364f-8ea4-9393ef2de488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl X509v3 Authority Key Identifier: keyid:0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer sbgp-ipAddrBlock: critical IPv4: 192.245.221.0-192.245.224.255 199.33.130.0-199.33.134.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:3c:5d:6d:93:30:68:02:cd:76:25:b4:d8:f5:3a:aa:75:ce: 6b:cf:7a:44:e6:a9:17:70:08:e1:b2:c8:ef:cd:ff:27:cc:a7: 38:47:a6:db:a6:d9:46:45:d3:da:6a:a8:f0:69:76:a6:e4:93: 77:32:3d:44:89:a5:4a:1b:2f:25:c5:42:b4:26:1a:82:fd:e9: 6b:7f:8f:9e:22:c1:7f:47:59:58:07:c6:7b:5b:81:83:70:46: d0:25:7b:8b:2e:bc:73:87:70:ce:43:26:39:42:25:4c:5f:b8: f9:e9:c3:dd:9b:b2:b2:5d:10:e7:1e:6e:0d:ae:31:80:a1:c1: fe:f7:fe:e2:55:05:ad:d2:00:3c:c5:69:1f:6c:5c:17:c4:aa: ec:f4:13:1a:38:0b:91:58:c6:2d:41:b3:1f:e3:df:61:78:bf: 75:23:44:de:8a:a0:b6:49:1b:a6:52:f3:1a:35:1d:ed:da:1a: d2:0f:54:9e:ab:7c:fa:8c:ca:a6:8c:7c:94:b7:5f:2f:e4:fa: 11:e4:fc:39:d2:ec:96:e4:19:0d:34:c7:61:47:92:c7:7f:e6: 7a:de:76:b8:9a:55:ab:fc:87:5c:80:50:3b:87:29:98:89:ad: e7:0a:89:8d:24:e9:14:3e:50:2b:1a:ff:d7:fb:d0:a0:df:c9: df:89:17:27 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEoiWsBlQyCckGq8HgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q1NGU1YmItMzBjZC00NjBhLWEzYWUtNGFiODNjMmY2 MmEyMB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk NjE0YWUxNmYtNzE3Ni00MDkxLTkzNWQtNzViMDA0YTYwOTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/cutWq/lObRA0TpIh9XZtab8tTB3u04AbTj 40NBHswMB39L1XQt5dFm9GrMOIP5/AbwuqYxQ7hrLmuLPBo4GQ+8OdmrhmTh5YRT dv6yryJ0KsHROjSgk9USh5l1oSUh0CAUakJyyBuHyxuusA+bAIGO/hWmka3BX1fg 29MpcBrftL/ubxBhSO2Ft2eW6SKxqeKcpMOYshDJMnmj4Qc+xWqL4HADqMuSgK/a XGLH9yJZwoDFsQJYHNnjGrlYLBIvU2I+HCqNIAaYll3CuW6JqSPl8/GDcKZS4DiD NNJRXxLrzJcmHUAxUekX8UrSQUTDMsqakYLyZh2vPuhMT4SaKQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFJ4KNasfYa45ZbQOBzL9smvdjYmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDU0 ZTViYi0zMGNkLTQ2MGEtYTNhZS00YWI4M2MyZjYyYTIvYTkwM2U4MjQtMWI2Ni0z NjRmLThlYTQtOTM5M2VmMmRlNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2Q1NGU1YmItMzBjZC00NjBhLWEz YWUtNGFiODNjMmY2MmEyL2NkNTRlNWJiLTMwY2QtNDYwYS1hM2FlLTRhYjgzYzJm NjJhMi5jcmwwHwYDVR0jBBgwFoAUDLC//MqdO5Z3qxRusYBcCS+cp0EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDU0ZTViYi0zMGNkLTQ2MGEtYTNhZS00YWI4 M2MyZjYyYTIuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBADA9d0D BADA9eAwDAMEAcchggMEAMchhjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkPF1tkzBoAs12JbTY9Tqqdc5r z3pE5qkXcAjhssjvzf8nzKc4R6bbptlGRdPaaqjwaXam5JN3Mj1EiaVKGy8lxUK0 JhqC/elrf4+eIsF/R1lYB8Z7W4GDcEbQJXuLLrxzh3DOQyY5QiVMX7j56cPdm7Ky XRDnHm4NrjGAocH+9/7iVQWt0gA8xWkfbFwXxKrs9BMaOAuRWMYtQbMf499heL91 I0TeiqC2SRumUvMaNR3t2hrSD1Seq3z6jMqmjHyUt18v5PoR5Pw50uyW5BkNNMdh R5LHf+Z63na4mlWr/IdcgFA7hymYia3nComNJOkUPlArGv/X+9Cg38nfiRcn -----END CERTIFICATE-----Generated at Mon Jun 30 00:16:42 2025 by rpki-client