$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa File: 3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa (raw, json) Hash identifier: fMNMvFKfrZMwnj1lObbPmWVfu7D7Qzhr0FAIR578DEU= Subject key identifier: AB:6E:D8:DF:A9:AE:11:1A:0B:0E:2B:1E:FC:94:9A:39:91:48:55:61 Certificate issuer: /CN=1078e419-f0dc-430f-89c0-345af0a135f9 Certificate serial: 010D0C9F4328584A5A307199E6CC450D9DB8E180 Authority key identifier: 8C:D1:AC:38:B2:5D:EF:AE:4A:1B:42:7B:D0:58:94:A5:F3:B2:AA:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa Signing time: Sun 29 Jun 2025 13:01:03 +0000 ROA not before: Sun 29 Jun 2025 13:01:03 +0000 ROA not after: Sat 27 Sep 2025 13:01:03 +0000 asID: 17298 IP address blocks: 192.91.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/1078e419-f0dc-430f-89c0-345af0a135f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/1078e419-f0dc-430f-89c0-345af0a135f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:30:71:99:e6:cc:45:0d:9d:b8:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1078e419-f0dc-430f-89c0-345af0a135f9 Validity Not Before: Jun 29 13:01:03 2025 GMT Not After : Sep 27 13:01:03 2025 GMT Subject: CN=0740f030-91ba-4ba7-8b85-b67b855794e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:90:1b:c5:ee:05:7c:f4:36:bd:be:c1:2b:66: 71:8c:43:5e:8c:70:42:b9:7d:c0:5c:f6:9a:ba:5d: 06:64:5a:5c:10:10:4e:dc:13:68:1f:d3:e0:1c:f8: 0b:c8:62:ac:f7:5d:d2:55:ba:da:78:bd:b1:7b:e5: 83:6a:b9:a5:d9:3a:ac:55:0e:1d:a2:63:81:c1:2c: 30:6a:ac:c5:44:8d:9f:0a:c3:b3:1a:5a:28:e3:d7: 75:05:0c:cc:52:8e:e7:d8:33:2a:b5:47:63:5c:f7: 99:f3:ff:c1:18:47:af:9b:0b:89:ef:ab:b9:1e:fa: 3a:6b:c5:3a:6f:d0:3c:66:52:5b:b8:6d:9e:9f:bd: 4b:2a:d0:c6:2f:ac:a6:57:0c:d1:0e:66:d7:ba:c9: 0a:1d:f9:c7:8c:4e:29:30:b2:58:81:1b:93:2c:bb: 15:32:f9:05:35:73:07:30:e8:89:52:e4:64:5d:33: 9c:98:c7:b1:ae:e1:7f:d0:18:6e:3d:1d:60:f6:39: 12:1e:5e:ad:8b:83:19:f1:44:d7:18:82:50:91:df: f0:b9:7d:3a:67:9d:f9:de:12:01:67:13:b4:54:1c: 9a:7f:22:fd:eb:52:f8:e0:47:d7:42:74:ff:f7:5d: e8:2b:21:4a:14:ca:3b:30:a5:b3:b0:54:55:26:db: 32:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6E:D8:DF:A9:AE:11:1A:0B:0E:2B:1E:FC:94:9A:39:91:48:55:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/1078e419-f0dc-430f-89c0-345af0a135f9.crl X509v3 Authority Key Identifier: keyid:8C:D1:AC:38:B2:5D:EF:AE:4A:1B:42:7B:D0:58:94:A5:F3:B2:AA:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9.cer sbgp-ipAddrBlock: critical IPv4: 192.91.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:dc:59:e7:84:63:87:a5:56:ff:ef:65:8a:e4:b2:1b:44:93: 56:e7:18:41:d0:4c:77:df:81:29:7f:79:b5:93:2a:8a:f4:43: 23:5c:7c:bf:9b:80:ad:8a:8f:7f:82:af:8e:41:2d:5a:1e:fc: 9c:5f:26:10:38:58:97:3b:34:17:e8:01:cd:85:5e:aa:f7:9e: c8:44:e8:63:19:ab:78:01:91:18:0d:38:7f:bc:81:0a:8b:83: 38:e8:8c:5d:04:e6:e9:4d:f4:b7:d7:3a:f4:31:e8:94:15:34: 4f:30:8e:d7:d2:48:ef:c4:aa:7b:46:74:b1:66:ad:ed:5f:2d: 00:80:a8:bc:8b:27:6b:0b:69:c1:e9:00:48:4b:33:c2:05:6b: ca:44:df:8c:21:8a:3a:6a:dd:fd:7f:6d:b4:bb:9f:2f:39:86: 18:5b:1e:dd:37:ec:09:00:20:a2:05:ea:38:9c:f7:97:a3:1b: 0b:94:dc:83:7c:1a:42:ba:b8:c1:5a:61:fb:a1:7e:57:00:c7: b0:14:6c:74:0c:9f:98:c3:41:23:8f:23:7e:a8:42:fb:8e:38: 8d:60:47:98:aa:c5:a3:15:ab:7b:51:10:31:3c:2d:fe:a2:1f: 7d:72:24:f7:1c:ee:3b:d4:28:74:a9:73:9a:d8:53:b3:fd:3e: e5:c8:39:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpaMHGZ5sxFDZ244YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA3OGU0MTktZjBkYy00MzBmLTg5YzAtMzQ1YWYwYTEz NWY5MB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk MDc0MGYwMzAtOTFiYS00YmE3LThiODUtYjY3Yjg1NTc5NGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJAbxe4FfPQ2vb7BK2ZxjENejHBCuX3AXPaa ul0GZFpcEBBO3BNoH9PgHPgLyGKs913SVbraeL2xe+WDarml2TqsVQ4domOBwSww aqzFRI2fCsOzGloo49d1BQzMUo7n2DMqtUdjXPeZ8//BGEevmwuJ76u5Hvo6a8U6 b9A8ZlJbuG2en71LKtDGL6ymVwzRDmbXuskKHfnHjE4pMLJYgRuTLLsVMvkFNXMH MOiJUuRkXTOcmMexruF/0BhuPR1g9jkSHl6ti4MZ8UTXGIJQkd/wuX06Z5353hIB ZxO0VByafyL961L44EfXQnT/913oKyFKFMo7MKWzsFRVJtsynQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtu2N+prhEaCw4rHvyUmjmRSFVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMDc4 ZTQxOS1mMGRjLTQzMGYtODljMC0zNDVhZjBhMTM1ZjkvM2IxNWE1NGEtMjAxYi0z MWY1LWJmMDktOWM1ZjU1YjY1YTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTA3OGU0MTktZjBkYy00MzBmLTg5 YzAtMzQ1YWYwYTEzNWY5LzEwNzhlNDE5LWYwZGMtNDMwZi04OWMwLTM0NWFmMGEx MzVmOS5jcmwwHwYDVR0jBBgwFoAUjNGsOLJd765KG0J70FiUpfOyqiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMDc4ZTQxOS1mMGRjLTQzMGYtODljMC0zNDVh ZjBhMTM1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFv5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLcWeeEY4elVv/vZYrkshtEk1bnGEHQTHffgSl/ebWTKor0QyNcfL+b gK2Kj3+Cr45BLVoe/JxfJhA4WJc7NBfoAc2FXqr3nshE6GMZq3gBkRgNOH+8gQqL gzjojF0E5ulN9LfXOvQx6JQVNE8wjtfSSO/EqntGdLFmre1fLQCAqLyLJ2sLacHp AEhLM8IFa8pE34whijpq3f1/bbS7ny85hhhbHt037AkAIKIF6jic95ejGwuU3IN8 GkK6uMFaYfuhflcAx7AUbHQMn5jDQSOPI36oQvuOOI1gR5iqxaMVq3tREDE8Lf6i H31yJPcc7jvUKHSpc5rYU7P9PuXIOXI= -----END CERTIFICATE-----Generated at Tue Jul 1 11:40:34 2025 by rpki-client