$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa File: 787c0dea-fa35-351f-9bf6-45a7b33af696.roa (raw, json) Hash identifier: N6iqNYI3i/S1oewKB/6CE6TAeJmXTAJcZ5aO2MLRfbA= Subject key identifier: 79:D6:2D:C8:5B:31:E0:79:1B:26:43:6D:DA:F6:5A:0D:B1:28:AD:99 Certificate issuer: /CN=47c38599-11bd-476a-9b98-d0fb43b76d60 Certificate serial: 010D0C9F4328584A51D069DE8B7865E306FF3500 Authority key identifier: 69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 19845 IP address blocks: 192.131.151.0/24 maxlen: 24 192.131.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:69:de:8b:78:65:e3:06:ff:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47c38599-11bd-476a-9b98-d0fb43b76d60 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=c5b46e2a-7c01-44a1-99c9-3fcfea31f4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f8:a4:d2:b4:af:16:6c:a7:fa:d6:2b:92:01: 37:55:c7:b7:b6:41:ac:a9:08:dd:00:95:a2:0c:f4: a6:5f:37:c7:de:76:4f:80:09:e7:9c:1b:10:66:3d: 3c:53:ad:ca:a1:5e:b5:a2:26:f5:4e:28:f5:f2:f1: 35:7e:23:a2:ce:c0:96:ca:67:db:65:a8:f3:97:ae: 5c:60:63:58:2f:72:28:cb:a9:89:0f:a9:c9:01:aa: 2e:65:11:97:b5:4d:eb:b6:be:5e:b2:af:9e:ed:65: 3c:69:f3:87:c7:71:f2:10:d9:ef:a8:9a:cb:d0:4a: 76:32:61:0b:69:c7:ca:0b:13:9a:1e:07:25:db:93: 75:d6:43:c4:89:bb:28:86:5a:4a:34:a8:db:0d:63: e1:09:00:d4:a4:b5:cc:db:25:c1:51:77:9a:9c:d0: f3:79:5e:d9:5d:a1:65:e0:db:7c:e5:1c:2c:11:09: 19:25:41:f9:25:fa:3b:a1:52:89:09:f2:54:e5:f5: a0:8e:e7:9f:47:67:dc:b7:4c:6a:5e:f8:d8:38:e8: 0d:9c:d2:48:4d:58:99:1a:c3:f1:1f:fd:56:54:98: e0:93:2f:d4:17:4e:07:c5:d4:a9:a3:99:75:a1:c1: 17:09:5a:70:74:c0:b4:4a:98:c7:75:b3:cf:c2:05: 02:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D6:2D:C8:5B:31:E0:79:1B:26:43:6D:DA:F6:5A:0D:B1:28:AD:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.crl X509v3 Authority Key Identifier: keyid:69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer sbgp-ipAddrBlock: critical IPv4: 192.131.151.0/24 192.131.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:38:5d:b7:fa:5f:20:e8:63:81:62:ee:ae:08:c2:cc:b2:00: 54:b5:8d:51:16:cb:fb:cd:ca:37:ce:f7:8b:df:d3:af:e1:3a: 89:d3:b4:55:e4:fb:2b:ed:d5:f1:6f:a0:64:67:63:ab:4b:59: a6:35:07:34:8f:ec:72:9c:27:58:df:f1:ff:96:29:1f:01:57: 6f:22:87:0f:d6:c1:76:bf:c4:ab:ce:c1:70:88:84:12:a7:80: 5f:53:41:47:ae:fd:11:91:20:83:d3:91:91:85:ca:8a:0d:ef: fd:51:0e:c6:5b:c3:58:a3:02:21:ac:1c:48:08:35:62:49:36: cc:2b:62:dc:52:5c:9a:8a:9a:c8:1c:f2:55:87:f2:fe:cc:cd: e0:0f:60:4f:ce:1d:84:b2:3f:0c:6f:8e:f6:f5:19:06:d0:2e: d2:56:2a:eb:5e:9b:a9:35:df:4e:79:b2:05:33:62:1d:f2:f8: 10:cb:a8:74:3e:ce:02:c1:b2:09:a2:20:22:7b:2c:58:56:5c: 87:7d:c0:f0:e5:b7:88:70:f4:32:1c:db:cb:3f:a0:d9:09:f3: a9:83:dd:6f:46:a2:a0:21:2c:86:c7:93:de:44:b7:77:ef:47: 4d:3f:9d:e8:d3:89:5b:bb:d6:bb:83:b5:62:4f:3c:35:2a:f2: c8:79:6c:3c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpR0Gnei3hl4wb/NQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdjMzg1OTktMTFiZC00NzZhLTliOTgtZDBmYjQzYjc2 ZDYwMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk YzViNDZlMmEtN2MwMS00NGExLTk5YzktM2ZjZmVhMzFmNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfik0rSvFmyn+tYrkgE3Vce3tkGsqQjdAJWi DPSmXzfH3nZPgAnnnBsQZj08U63KoV61oib1Tij18vE1fiOizsCWymfbZajzl65c YGNYL3Ioy6mJD6nJAaouZRGXtU3rtr5esq+e7WU8afOHx3HyENnvqJrL0Ep2MmEL acfKCxOaHgcl25N11kPEibsohlpKNKjbDWPhCQDUpLXM2yXBUXeanNDzeV7ZXaFl 4Nt85RwsEQkZJUH5Jfo7oVKJCfJU5fWgjuefR2fct0xqXvjYOOgNnNJITViZGsPx H/1WVJjgky/UF04HxdSpo5l1ocEXCVpwdMC0SpjHdbPPwgUC6QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHnWLchbMeB5GyZDbdr2Wg2xKK2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80N2Mz ODU5OS0xMWJkLTQ3NmEtOWI5OC1kMGZiNDNiNzZkNjAvNzg3YzBkZWEtZmEzNS0z NTFmLTliZjYtNDVhN2IzM2FmNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDdjMzg1OTktMTFiZC00NzZhLTli OTgtZDBmYjQzYjc2ZDYwLzQ3YzM4NTk5LTExYmQtNDc2YS05Yjk4LWQwZmI0M2I3 NmQ2MC5jcmwwHwYDVR0jBBgwFoAUaUYj7LbDyji488TmIagK6RkFgVIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80N2MzODU5OS0xMWJkLTQ3NmEtOWI5OC1kMGZi NDNiNzZkNjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwIOXAwQA wIOZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEk4Xbf6XyDoY4Fi7q4IwsyyAFS1jVEWy/vNyjfO94vf06/h OonTtFXk+yvt1fFvoGRnY6tLWaY1BzSP7HKcJ1jf8f+WKR8BV28ihw/WwXa/xKvO wXCIhBKngF9TQUeu/RGRIIPTkZGFyooN7/1RDsZbw1ijAiGsHEgINWJJNswrYtxS XJqKmsgc8lWH8v7MzeAPYE/OHYSyPwxvjvb1GQbQLtJWKutem6k13055sgUzYh3y +BDLqHQ+zgLBsgmiICJ7LFhWXId9wPDlt4hw9DIc28s/oNkJ86mD3W9GoqAhLIbH k95Et3fvR00/nejTiVu71ruDtWJPPDUq8sh5bDw= -----END CERTIFICATE-----Generated at Tue Jul 1 10:22:07 2025 by rpki-client