$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa File: 4065f43f-ee36-3824-890b-4696c8253f7f.roa (raw, json) Hash identifier: XTIFqxAfPMxF8f/MTitCMK2EM6drMdkkL5bu7Az+NYQ= Subject key identifier: 94:65:52:10:16:99:6E:83:73:6C:71:1E:B5:4E:D3:50:85:30:84:2F Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F4328584A51D06EFBB99A71B8B369CD80 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 91 IP address blocks: 192.12.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:6e:fb:b9:9a:71:b8:b3:69:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=cdde132f-90e8-417b-8c9c-8b7c7f591b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cb:49:4b:dd:c1:b9:0c:4d:26:e0:69:e3:f4: 81:a2:94:74:4d:b5:34:fb:83:cd:46:68:66:ed:01: 71:8b:e7:63:59:62:2b:61:af:e7:0e:4c:44:74:73: be:6d:a7:94:08:ef:49:ff:6b:09:94:b0:ea:b8:0d: 2a:8d:dd:9e:77:7a:27:ca:44:56:65:8a:22:f9:3f: a0:0f:d5:7a:1c:13:62:da:66:7f:c9:b2:5b:c6:37: 12:0c:b1:10:03:1e:43:a7:62:ed:65:68:b8:4a:26: 75:8e:4c:6d:a3:66:ca:4a:31:1f:7b:f0:77:e4:19: 1c:c0:57:94:7b:67:d6:a8:3b:4b:89:14:0a:f2:01: 51:26:99:e2:ac:db:0f:e4:4d:aa:4c:d9:fd:70:ae: b2:a8:2b:3c:98:b7:ee:0a:16:ff:d2:16:24:22:91: a4:31:59:5d:83:f6:4b:cc:33:cb:fd:b7:a6:c9:7a: e1:3c:23:52:9c:46:21:83:fc:eb:7d:17:88:e8:97: 80:7e:f2:91:1c:22:b5:53:f7:00:b4:bf:47:67:23: 5f:ec:94:dd:80:50:68:a7:4f:aa:5c:b9:1c:d6:f4: b2:d9:6c:34:37:55:24:88:76:5e:0f:c1:60:dc:4d: 77:af:39:5d:1c:64:22:f3:fe:ee:65:ab:df:8a:ef: e0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:65:52:10:16:99:6E:83:73:6C:71:1E:B5:4E:D3:50:85:30:84:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 192.12.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:4b:50:28:51:c8:6b:f0:d8:29:4f:d3:23:f4:c3:7d:1a:3b: 39:b8:3b:81:ec:b1:c1:c4:ad:3f:25:c7:c5:fe:b4:38:46:91: 76:47:dc:5e:21:06:48:fb:f3:0f:14:c3:3e:50:90:4f:be:96: d8:1c:9b:3d:90:e5:43:58:ea:b7:fb:18:2e:91:29:89:b6:89: 89:f1:f1:93:fa:3e:46:a0:3d:52:d2:b3:b8:28:c2:8c:0c:fa: 1f:61:32:d3:90:6e:ee:79:7d:3d:59:81:a5:42:19:ef:8d:04: 94:24:43:21:45:7c:b5:43:2c:28:a8:20:af:d4:24:7f:e2:e7: c1:4e:62:f5:93:0d:25:de:95:46:d6:f1:19:1f:0a:8e:7b:92: 30:0c:f8:8f:26:af:85:f2:58:d0:5d:5e:8c:cb:79:e1:fb:10: e7:85:c1:75:74:c5:25:23:d8:0c:4e:f7:98:32:54:42:43:9c: e2:c1:93:9e:7f:ff:56:5d:7c:32:42:2e:1d:ac:94:44:92:71: f6:fa:6c:1b:01:63:57:99:15:48:78:87:c3:be:0f:73:02:3c: 5b:10:50:01:14:d4:97:26:60:4c:76:44:9a:ea:66:02:2b:e2: 4e:1c:92:74:2e:d4:2d:ba:e8:f0:98:49:8a:09:c4:6f:d0:66: 44:19:4f:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0G77uZpxuLNpzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk Y2RkZTEzMmYtOTBlOC00MTdiLThjOWMtOGI3YzdmNTkxYjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMtJS93BuQxNJuBp4/SBopR0TbU0+4PNRmhm 7QFxi+djWWIrYa/nDkxEdHO+baeUCO9J/2sJlLDquA0qjd2ed3onykRWZYoi+T+g D9V6HBNi2mZ/ybJbxjcSDLEQAx5Dp2LtZWi4SiZ1jkxto2bKSjEfe/B35BkcwFeU e2fWqDtLiRQK8gFRJpnirNsP5E2qTNn9cK6yqCs8mLfuChb/0hYkIpGkMVldg/ZL zDPL/bemyXrhPCNSnEYhg/zrfReI6JeAfvKRHCK1U/cAtL9HZyNf7JTdgFBop0+q XLkc1vSy2Ww0N1UkiHZeD8Fg3E13rzldHGQi8/7uZavfiu/gFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRlUhAWmW6Dc2xxHrVO01CFMIQvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvNDA2NWY0M2YtZWUzNi0z ODI0LTg5MGItNDY5NmM4MjUzZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1LUChRyGvw2ClP0yP0w30aOzm4O4HsscHErT8lx8X+tDhGkXZH3F4h Bkj78w8Uwz5QkE++ltgcmz2Q5UNY6rf7GC6RKYm2iYnx8ZP6PkagPVLSs7gowowM +h9hMtOQbu55fT1ZgaVCGe+NBJQkQyFFfLVDLCioIK/UJH/i58FOYvWTDSXelUbW 8RkfCo57kjAM+I8mr4XyWNBdXozLeeH7EOeFwXV0xSUj2AxO95gyVEJDnOLBk55/ /1ZdfDJCLh2slESScfb6bBsBY1eZFUh4h8O+D3MCPFsQUAEU1JcmYEx2RJrqZgIr 4k4cknQu1C266PCYSYoJxG/QZkQZT/Y= -----END CERTIFICATE-----Generated at Mon Jun 30 13:42:01 2025 by rpki-client