$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b654fd10-88c8-3281-aca6-2f8d7da12ccc.roa File: b654fd10-88c8-3281-aca6-2f8d7da12ccc.roa (raw, json) Hash identifier: lwaiipbHuVI7GaoOgJr3/m28K18yOswN97bg8hZWaOQ= Subject key identifier: 86:D1:EC:90:B4:07:47:CA:8F:DC:BB:23:DE:9E:93:38:16:7B:71:4B Certificate issuer: /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963 Certificate serial: 010D0C9F4328584AD23BBD8C2FB558B4A13F3A00 Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b654fd10-88c8-3281-aca6-2f8d7da12ccc.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 4476 IP address blocks: 192.68.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:bd:8c:2f:b5:58:b4:a1:3f:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=cdd6445d-267f-4740-80ff-bc13bb475e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1a:c5:de:1c:14:16:b8:3a:e8:2d:71:42:98: dd:a6:3e:bf:d5:a3:bc:9b:7e:f3:e9:ff:fe:55:f5: 12:cf:8d:ef:84:b1:51:a7:09:8b:11:be:85:b7:d1: 44:28:69:31:11:3f:01:0e:ac:8c:c1:54:dc:37:c7: c6:a6:07:81:65:e7:07:c1:94:d8:67:6a:94:22:b3: 03:72:f8:c6:64:e8:eb:fe:cf:f7:32:6c:10:7e:f8: a4:57:dd:dd:0b:f1:70:0c:41:ce:cf:5c:12:3c:91: e3:7a:33:30:66:73:b8:4a:d1:13:b2:85:c2:80:54: 01:04:91:df:1b:f1:73:e9:16:56:bc:bd:1b:f1:c0: 27:16:07:3f:66:bd:cb:d2:71:61:5c:04:1a:99:8b: 3e:33:97:e6:31:d5:39:18:7f:56:f3:0e:73:92:e0: ce:d7:ac:a6:14:94:3e:dc:c4:03:95:6b:a8:67:9c: 4d:4a:62:f1:6c:e9:2a:ac:7b:65:97:d0:1b:40:7a: b7:d7:bb:68:46:fd:ab:5f:00:7a:f0:be:97:3b:45: b6:d0:9f:0d:8c:a3:d0:a1:c6:9d:20:89:0e:93:96: fe:69:a3:f7:02:28:64:97:42:62:90:46:1e:19:86: c7:ee:35:49:0a:92:42:10:25:79:5d:d0:f4:77:e5: 76:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D1:EC:90:B4:07:47:CA:8F:DC:BB:23:DE:9E:93:38:16:7B:71:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b654fd10-88c8-3281-aca6-2f8d7da12ccc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl X509v3 Authority Key Identifier: keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer sbgp-ipAddrBlock: critical IPv4: 192.68.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:a5:67:3b:66:1f:92:1f:6b:c0:5f:33:94:67:b3:77:4c:e0: a9:34:af:93:61:43:65:82:cc:3d:8e:fb:0b:5d:41:ad:24:4d: c6:d5:2a:59:3d:6c:aa:ea:80:be:5c:57:56:43:23:b0:38:1a: 10:e9:32:70:07:e7:ec:27:7e:76:f8:e5:f9:12:ab:87:1b:b6: df:c6:9b:95:2d:f6:ef:27:f7:01:ca:e3:64:4b:17:b6:12:b9: fc:96:c7:23:7f:9e:e9:8a:d8:65:a8:3e:70:6b:60:89:11:da: 57:e5:51:82:36:dd:a2:cc:c1:99:55:9f:9b:01:d1:5c:1a:ea: 8a:bc:29:8c:4c:10:8a:e6:78:c1:36:8b:9f:a4:bf:bc:2f:03: 24:9b:36:c8:5e:29:2e:62:b7:a2:ed:83:37:af:5a:64:8f:97: bb:8b:57:d6:45:2e:39:17:74:54:38:1c:b6:41:0a:2c:fb:3b: 5f:67:00:6b:d6:78:1f:88:2b:3c:97:a2:35:3f:b6:c2:ca:d3: 58:59:65:b7:17:43:59:27:ae:ed:d2:36:7a:e7:88:6d:b9:5e: e9:24:88:bc:37:0a:b6:c4:cb:9e:7f:24:00:d9:9f:42:23:31: c8:7c:e9:26:87:c1:10:3c:e2:f0:5d:5b:57:3d:56:1d:2c:5a: 41:46:74:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO72ML7VYtKE/OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzOWE5NzMtY2YyZS00NGIxLTk4NGEtNjU5NmRjMGI2 OTYzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk Y2RkNjQ0NWQtMjY3Zi00NzQwLTgwZmYtYmMxM2JiNDc1ZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihrF3hwUFrg66C1xQpjdpj6/1aO8m37z6f/+ VfUSz43vhLFRpwmLEb6Ft9FEKGkxET8BDqyMwVTcN8fGpgeBZecHwZTYZ2qUIrMD cvjGZOjr/s/3MmwQfvikV93dC/FwDEHOz1wSPJHjejMwZnO4StETsoXCgFQBBJHf G/Fz6RZWvL0b8cAnFgc/Zr3L0nFhXAQamYs+M5fmMdU5GH9W8w5zkuDO16ymFJQ+ 3MQDlWuoZ5xNSmLxbOkqrHtll9AbQHq317toRv2rXwB68L6XO0W20J8NjKPQocad IIkOk5b+aaP3Aihkl0JikEYeGYbH7jVJCpJCECV5XdD0d+V2awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbR7JC0B0fKj9y7I96ekzgWe3FLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jYzM5 YTk3My1jZjJlLTQ0YjEtOTg0YS02NTk2ZGMwYjY5NjMvYjY1NGZkMTAtODhjOC0z MjgxLWFjYTYtMmY4ZDdkYTEyY2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2MzOWE5NzMtY2YyZS00NGIxLTk4 NGEtNjU5NmRjMGI2OTYzL2NjMzlhOTczLWNmMmUtNDRiMS05ODRhLTY1OTZkYzBi Njk2My5jcmwwHwYDVR0jBBgwFoAURaGd2u0urqKIyrHJ+roNx0DS2I8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jYzM5YTk3My1jZjJlLTQ0YjEtOTg0YS02NTk2 ZGMwYjY5NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwERIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWlZztmH5Ifa8BfM5Rns3dM4Kk0r5NhQ2WCzD2O+wtdQa0kTcbVKlk9 bKrqgL5cV1ZDI7A4GhDpMnAH5+wnfnb45fkSq4cbtt/Gm5Ut9u8n9wHK42RLF7YS ufyWxyN/numK2GWoPnBrYIkR2lflUYI23aLMwZlVn5sB0Vwa6oq8KYxMEIrmeME2 i5+kv7wvAySbNsheKS5it6LtgzevWmSPl7uLV9ZFLjkXdFQ4HLZBCiz7O19nAGvW eB+IKzyXojU/tsLK01hZZbcXQ1knru3SNnrniG25XukkiLw3CrbEy55/JADZn0Ij Mch86SaHwRA84vBdW1c9Vh0sWkFGdGo= -----END CERTIFICATE-----Generated at Sun Aug 24 04:22:39 2025 by rpki-client