$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/28672e34-254b-302f-ac9d-f40e9c2fe7e6.roa File: 28672e34-254b-302f-ac9d-f40e9c2fe7e6.roa (raw, json) Hash identifier: hL3jrq9UxBo5KRQO6OA0DKfChCoYohUConVrZUO68mo= Subject key identifier: AD:78:F3:1E:99:F8:95:71:E2:2A:7F:8B:9B:87:31:7D:ED:11:F3:B0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A3B7B2D91B0D12DA00186B540 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/28672e34-254b-302f-ac9d-f40e9c2fe7e6.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 12008 IP address blocks: 192.100.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:2d:91:b0:d1:2d:a0:01:86:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=95bfbfce-9dee-4b8a-82e0-dddd4ce7f996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ff:4e:ae:9b:ae:14:2a:e6:96:ce:39:27:ef: 4a:a7:4e:d0:18:0a:2c:12:f7:fb:c1:1d:e0:77:50: 7f:4a:c0:83:f6:96:15:16:17:db:11:54:7a:8a:22: 3b:90:8f:25:1b:45:25:c2:ce:d0:95:be:da:84:5c: 1c:d3:db:ba:42:46:36:9a:8e:c0:0e:91:e9:69:6a: 1c:43:a2:eb:5b:ec:f6:10:d1:f9:7f:cc:b0:61:a2: 56:ea:c4:b6:19:b5:f5:fb:55:60:5b:3a:e3:dc:a4: ad:81:c0:f8:76:51:99:70:da:fe:a2:29:53:0b:5b: cb:b3:ef:b3:c7:c9:69:06:9a:58:83:4f:1c:1e:04: 29:bf:d2:54:8e:23:e2:da:ed:a5:57:bd:d7:2e:0b: c6:a5:28:62:7f:5a:40:6e:28:53:fe:00:4f:3a:a6: a5:a5:60:9f:d0:42:22:77:08:3f:81:b9:13:ba:e6: 86:83:a9:5c:6d:9e:57:19:4d:1a:0a:53:7c:4c:1f: 22:eb:30:52:55:e9:d0:d4:9e:53:7c:e6:72:b9:70: ee:63:41:e3:76:8d:b3:b4:0e:c0:bf:9f:17:16:99: 35:e7:77:36:62:db:13:0f:68:b4:6f:8f:e9:be:8c: a0:da:2a:dc:e6:f8:04:c2:2f:b5:aa:d7:3d:dc:64: d3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:78:F3:1E:99:F8:95:71:E2:2A:7F:8B:9B:87:31:7D:ED:11:F3:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/28672e34-254b-302f-ac9d-f40e9c2fe7e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 192.100.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d6:0e:71:45:6b:dd:d9:ef:8f:a0:7e:99:59:2f:39:4a:03: 6e:82:bc:00:98:ff:a8:cb:57:5b:f3:3c:df:60:e7:7b:1b:2c: 6e:53:df:93:aa:6a:33:26:1c:1b:77:b4:48:a3:8b:f1:f4:3a: de:c7:6d:9a:08:b6:4d:26:25:b8:ae:91:13:b4:37:1b:75:1e: 9d:7b:5b:09:14:89:f9:17:48:25:67:a7:2b:20:e4:ea:ea:7d: 38:82:a4:cb:33:d2:39:bb:e2:6b:97:fc:1b:dd:ae:a3:17:b7: 2a:ec:40:42:b5:77:57:1c:2d:d7:1d:a0:86:1d:b6:92:ad:b9: 07:c2:90:20:9d:27:e8:9f:b4:92:7f:3e:e0:cc:e0:af:df:de: 3d:34:17:a0:98:e9:7c:96:b2:96:41:0d:3b:f1:a6:75:b0:db: 5d:4e:5a:17:b1:81:76:0a:79:63:2c:83:f9:5e:d7:7c:01:b1: c2:08:95:9c:5d:0a:93:82:02:f6:bf:ff:02:ca:70:3c:6e:5d: c6:85:34:a0:da:24:7b:76:cb:68:a0:67:8b:1e:e1:7f:81:bc: 4e:dd:22:ed:7c:7a:24:c0:f9:29:77:2a:30:3c:21:29:95:50: 87:0a:9d:ac:fc:af:88:6b:c5:cb:43:6f:64:91:35:cd:13:52: 26:bc:a7:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ey2RsNEtoAGGtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk OTViZmJmY2UtOWRlZS00YjhhLTgyZTAtZGRkZDRjZTdmOTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP9OrpuuFCrmls45J+9Kp07QGAosEvf7wR3g d1B/SsCD9pYVFhfbEVR6iiI7kI8lG0Ulws7Qlb7ahFwc09u6QkY2mo7ADpHpaWoc Q6LrW+z2ENH5f8ywYaJW6sS2GbX1+1VgWzrj3KStgcD4dlGZcNr+oilTC1vLs++z x8lpBppYg08cHgQpv9JUjiPi2u2lV73XLgvGpShif1pAbihT/gBPOqalpWCf0EIi dwg/gbkTuuaGg6lcbZ5XGU0aClN8TB8i6zBSVenQ1J5TfOZyuXDuY0Hjdo2ztA7A v58XFpk153c2YtsTD2i0b4/pvoyg2irc5vgEwi+1qtc93GTTPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK148x6Z+JVx4ip/i5uHMX3tEfOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjg2NzJlMzQtMjU0Yi0z MDJmLWFjOWQtZjQwZTljMmZlN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGQ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnWDnFFa93Z74+gfplZLzlKA26CvACY/6jLV1vzPN9g53sbLG5T35Oq ajMmHBt3tEiji/H0Ot7HbZoItk0mJbiukRO0Nxt1Hp17WwkUifkXSCVnpysg5Orq fTiCpMsz0jm74muX/BvdrqMXtyrsQEK1d1ccLdcdoIYdtpKtuQfCkCCdJ+iftJJ/ PuDM4K/f3j00F6CY6XyWspZBDTvxpnWw211OWhexgXYKeWMsg/le13wBscIIlZxd CpOCAva//wLKcDxuXcaFNKDaJHt2y2igZ4se4X+BvE7dIu18eiTA+Sl3KjA8ISmV UIcKnaz8r4hrxctDb2SRNc0TUia8p4I= -----END CERTIFICATE-----Generated at Mon Jun 30 10:45:49 2025 by rpki-client