$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/3d949512-7b04-3f33-90eb-ef865d41a75f.roa File: 3d949512-7b04-3f33-90eb-ef865d41a75f.roa (raw, json) Hash identifier: F58zZt8PK4z98Ut+tvTGZZUY/an5byT6wpLOW/1soLk= Subject key identifier: F0:E2:7D:A0:34:56:E9:80:3E:DC:7F:7C:DE:C2:62:08:A8:6B:E9:C6 Certificate issuer: /CN=e179ce28-23c7-45e1-9b0e-d90358c94f57 Certificate serial: 010D0C9F4328584A480AE0802EC50826AB7A1000 Authority key identifier: D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/3d949512-7b04-3f33-90eb-ef865d41a75f.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 46539 IP address blocks: 192.187.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:e0:80:2e:c5:08:26:ab:7a:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e179ce28-23c7-45e1-9b0e-d90358c94f57 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=98e20c32-4182-4429-b0d1-8e1f73f211d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e9:67:2e:52:f8:91:0c:35:b1:69:dc:f1:6a: ea:2e:75:46:b6:b8:c7:c3:26:92:1a:53:29:fb:3a: 1c:c6:62:f4:13:94:b0:cd:16:58:1a:7c:fd:d7:b7: f3:e4:50:76:1e:ed:63:3b:e7:ed:7e:eb:48:ea:17: ac:c5:d1:03:ad:cf:f2:a8:1b:cc:a7:f4:54:56:88: 2f:65:c8:d9:2c:a6:51:57:1a:01:7a:8b:2d:b5:04: b1:ea:be:43:f9:a7:22:a1:48:99:2f:88:ac:77:df: a8:8a:16:6e:57:cb:8a:d1:72:81:ab:95:0a:b3:54: 84:fa:d8:2e:f7:7b:67:46:4e:c4:92:e8:32:1e:35: 51:78:62:fa:20:d0:4d:32:53:9d:d5:98:8b:35:7e: a3:bc:9b:cd:39:20:39:54:54:db:e2:37:44:fd:74: d3:94:0f:0e:7e:e1:45:11:b2:d0:24:80:86:45:93: d8:ba:4a:7a:33:0a:a3:10:ff:00:f3:b6:0f:80:b5: 21:15:d5:50:ef:35:82:62:8d:34:c3:1b:a0:7f:58: d1:6c:34:ad:4f:9e:b2:3b:e6:fa:3c:c9:18:46:f5: 7b:3b:1a:e5:d8:3f:70:b4:e6:a6:b8:cf:97:b9:85: 44:fa:e2:88:9c:3f:82:75:38:43:3a:cb:33:cd:b7: e7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E2:7D:A0:34:56:E9:80:3E:DC:7F:7C:DE:C2:62:08:A8:6B:E9:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/3d949512-7b04-3f33-90eb-ef865d41a75f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl X509v3 Authority Key Identifier: keyid:D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer sbgp-ipAddrBlock: critical IPv4: 192.187.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:04:75:58:d3:e9:46:8d:3f:b2:ab:52:17:33:94:fb:00:b4: de:09:02:8b:6c:4a:fa:2c:c4:ef:e4:e4:d9:71:ed:db:13:18: ce:c4:f3:98:9b:fd:db:fc:7f:de:92:54:ed:98:ed:85:c6:67: 6c:d1:ac:d5:34:90:66:38:cb:32:3a:4b:85:8e:1b:dd:55:1e: 53:43:87:f6:9b:2f:0b:14:59:f4:0f:4e:ad:7b:80:7f:a5:b4: cf:03:ab:27:24:4b:b3:92:82:a8:c1:65:41:2c:57:bc:2b:ce: 96:f7:f6:65:55:d0:56:1a:8d:5a:8d:74:e4:2c:7a:26:00:f9: 5c:9a:a7:a2:88:36:46:97:a6:f2:e8:42:47:0d:26:59:0b:31: 45:03:70:1e:c0:54:7b:35:94:24:8a:ab:39:5f:9a:26:0a:a8: f0:d6:d3:fd:e4:9e:0f:f9:0f:f5:b6:f9:f4:97:2e:61:8c:0a: c2:ac:a3:7b:6c:13:bb:de:77:d1:1b:9c:35:fe:e4:f3:1b:9d: c2:61:a3:3b:93:cd:fd:1b:1d:7f:66:b4:e5:01:e0:dc:10:d5: fe:6d:34:e6:22:7b:fc:cd:54:84:05:a9:ea:8a:4f:c8:ee:db: 79:86:10:5c:5d:71:03:b8:a4:57:9c:0e:a4:32:12:fb:bd:37: 52:cf:13:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICuCALsUIJqt6EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE3OWNlMjgtMjNjNy00NWUxLTliMGUtZDkwMzU4Yzk0 ZjU3MB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk OThlMjBjMzItNDE4Mi00NDI5LWIwZDEtOGUxZjczZjIxMWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+lnLlL4kQw1sWnc8WrqLnVGtrjHwyaSGlMp +zocxmL0E5SwzRZYGnz917fz5FB2Hu1jO+ftfutI6hesxdEDrc/yqBvMp/RUVogv ZcjZLKZRVxoBeosttQSx6r5D+acioUiZL4isd9+oihZuV8uK0XKBq5UKs1SE+tgu 93tnRk7EkugyHjVReGL6INBNMlOd1ZiLNX6jvJvNOSA5VFTb4jdE/XTTlA8OfuFF EbLQJICGRZPYukp6MwqjEP8A87YPgLUhFdVQ7zWCYo00wxugf1jRbDStT56yO+b6 PMkYRvV7Oxrl2D9wtOamuM+XuYVE+uKInD+CdThDOsszzbfnyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDifaA0VumAPtx/fN7CYgioa+nGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTc5 Y2UyOC0yM2M3LTQ1ZTEtOWIwZS1kOTAzNThjOTRmNTcvM2Q5NDk1MTItN2IwNC0z ZjMzLTkwZWItZWY4NjVkNDFhNzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE3OWNlMjgtMjNjNy00NWUxLTli MGUtZDkwMzU4Yzk0ZjU3L2UxNzljZTI4LTIzYzctNDVlMS05YjBlLWQ5MDM1OGM5 NGY1Ny5jcmwwHwYDVR0jBBgwFoAU2AXHLiY/2rj1Q+/5UZWEQBye9GAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMTc5Y2UyOC0yM2M3LTQ1ZTEtOWIwZS1kOTAz NThjOTRmNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLuKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgEdVjT6UaNP7KrUhczlPsAtN4JAotsSvosxO/k5Nlx7dsTGM7E85ib /dv8f96SVO2Y7YXGZ2zRrNU0kGY4yzI6S4WOG91VHlNDh/abLwsUWfQPTq17gH+l tM8DqyckS7OSgqjBZUEsV7wrzpb39mVV0FYajVqNdOQseiYA+Vyap6KINkaXpvLo QkcNJlkLMUUDcB7AVHs1lCSKqzlfmiYKqPDW0/3kng/5D/W2+fSXLmGMCsKso3ts E7ved9EbnDX+5PMbncJhozuTzf0bHX9mtOUB4NwQ1f5tNOYie/zNVIQFqeqKT8ju 23mGEFxdcQO4pFecDqQyEvu9N1LPE8M= -----END CERTIFICATE-----Generated at Tue Jul 1 15:43:14 2025 by rpki-client