$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/a54f8a7c-05a0-3e72-be1d-d06dcb7838b7.roa File: a54f8a7c-05a0-3e72-be1d-d06dcb7838b7.roa (raw, json) Hash identifier: I5JDJole0SI3S2lC1EMt4YWIRR2Ki4hCJ5p+NT2DHVw= Subject key identifier: 62:A7:BD:1F:5D:97:1E:45:D9:C1:12:D8:0F:D1:26:0A:66:C8:1D:95 Certificate issuer: /CN=61249665-c04a-42df-b2a8-e643b7fab80e Certificate serial: 010D0C9F4328584AEF8BC75DE57BE9E1F3CCC140 Authority key identifier: EA:D6:D6:64:7F:34:36:5A:F1:25:D1:20:C8:39:6A:43:C7:F6:7C:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/a54f8a7c-05a0-3e72-be1d-d06dcb7838b7.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 40674 IP address blocks: 192.33.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/61249665-c04a-42df-b2a8-e643b7fab80e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/61249665-c04a-42df-b2a8-e643b7fab80e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:c7:5d:e5:7b:e9:e1:f3:cc:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61249665-c04a-42df-b2a8-e643b7fab80e Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=071eeb18-0df1-4e09-86d6-dfdae44a16a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8a:83:2f:34:e2:ac:b3:6e:64:3a:f3:7e:8f: 19:e0:10:5a:85:77:c6:a7:88:3a:41:9d:7f:2b:54: c6:8a:21:36:9a:70:fa:e5:17:f0:7f:93:cb:dc:4d: 03:4f:1e:94:da:e4:eb:05:5d:66:59:67:e1:d0:d9: 42:25:07:fc:da:7c:96:37:fd:4c:50:fa:49:97:06: 9b:66:12:77:c1:7c:2f:99:23:24:95:21:32:d4:a8: f6:39:00:74:37:f0:e2:c0:6f:f0:18:1f:b2:7c:c5: cd:ff:b2:6c:58:c6:3e:6d:19:80:f5:4d:a0:dd:78: c8:e4:be:05:c2:e4:bb:c5:7b:6b:fc:20:1e:c7:fb: ad:82:e8:ca:11:2c:fb:29:80:c7:7b:90:e0:d2:a1: 8d:d2:65:d8:9e:26:39:9b:8c:c7:9a:6b:ff:0b:14: b8:8a:8d:b4:3c:93:04:4e:74:20:b3:ff:56:4e:c8: aa:ec:be:1e:57:af:af:50:c2:40:00:bd:5c:99:36: 8f:c4:77:76:83:8d:17:e5:b8:47:da:99:04:2d:9c: 64:64:c7:b3:77:de:76:5b:8e:49:bf:2b:0c:8b:50: 26:c8:7e:36:a1:1c:3c:c1:0b:a3:86:d4:8a:ef:60: 75:d4:1b:7b:fb:04:90:23:12:21:31:d7:fe:01:ba: d2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A7:BD:1F:5D:97:1E:45:D9:C1:12:D8:0F:D1:26:0A:66:C8:1D:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/a54f8a7c-05a0-3e72-be1d-d06dcb7838b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e/61249665-c04a-42df-b2a8-e643b7fab80e.crl X509v3 Authority Key Identifier: keyid:EA:D6:D6:64:7F:34:36:5A:F1:25:D1:20:C8:39:6A:43:C7:F6:7C:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/61249665-c04a-42df-b2a8-e643b7fab80e.cer sbgp-ipAddrBlock: critical IPv4: 192.33.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ca:40:84:63:c8:af:b9:c9:e8:a2:96:c6:3b:07:20:1f:cd: a9:fe:4f:62:a3:70:d5:a7:c7:06:1f:ce:27:f1:cb:97:b7:b0: a3:17:24:91:16:a9:84:88:2c:50:fa:a9:be:37:3d:60:4e:3c: ee:4f:18:c4:28:ef:81:e5:24:2a:ea:93:22:08:05:af:82:0d: 9b:e7:09:79:f6:72:d9:a6:d1:f3:28:99:8f:5f:c1:15:d5:e8: 81:a9:06:cd:11:ce:fa:3a:eb:4f:f9:fd:55:c5:40:aa:18:17: 07:36:eb:d2:6f:d2:e9:98:d4:e5:78:35:02:61:e3:c0:3f:c2: 46:93:f4:5f:59:e8:b0:d4:84:d6:22:8c:68:da:5b:f6:16:e0: eb:da:ea:67:af:58:17:23:4c:d1:1d:f6:c0:04:4e:c7:83:9b: b6:06:24:20:39:4f:0d:cc:e9:94:32:29:09:74:0b:7c:82:66: 16:ea:8a:31:51:f1:82:dd:a0:58:14:c5:9f:8a:29:03:bb:f6: 57:52:90:a0:db:04:93:88:81:a1:86:9c:f3:02:8b:9d:e7:b0: 83:98:79:bb:29:da:33:ab:3e:73:8a:bc:d5:e9:8f:f8:cd:d3: 4f:8d:d4:c5:8f:eb:27:bf:61:34:14:9a:ed:27:79:53:e7:6b: a5:b4:00:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvi8dd5Xvp4fPMwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEyNDk2NjUtYzA0YS00MmRmLWIyYTgtZTY0M2I3ZmFi ODBlMB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk MDcxZWViMTgtMGRmMS00ZTA5LTg2ZDYtZGZkYWU0NGExNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioqDLzTirLNuZDrzfo8Z4BBahXfGp4g6QZ1/ K1TGiiE2mnD65Rfwf5PL3E0DTx6U2uTrBV1mWWfh0NlCJQf82nyWN/1MUPpJlwab ZhJ3wXwvmSMklSEy1Kj2OQB0N/DiwG/wGB+yfMXN/7JsWMY+bRmA9U2g3XjI5L4F wuS7xXtr/CAex/utgujKESz7KYDHe5Dg0qGN0mXYniY5m4zHmmv/CxS4io20PJME TnQgs/9WTsiq7L4eV6+vUMJAAL1cmTaPxHd2g40X5bhH2pkELZxkZMezd952W45J vysMi1AmyH42oRw8wQujhtSK72B11Bt7+wSQIxIhMdf+AbrSjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKnvR9dlx5F2cES2A/RJgpmyB2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82MTI0 OTY2NS1jMDRhLTQyZGYtYjJhOC1lNjQzYjdmYWI4MGUvYTU0ZjhhN2MtMDVhMC0z ZTcyLWJlMWQtZDA2ZGNiNzgzOGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjEyNDk2NjUtYzA0YS00MmRmLWIy YTgtZTY0M2I3ZmFiODBlLzYxMjQ5NjY1LWMwNGEtNDJkZi1iMmE4LWU2NDNiN2Zh YjgwZS5jcmwwHwYDVR0jBBgwFoAU6tbWZH80NlrxJdEgyDlqQ8f2fOMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82MTI0OTY2NS1jMDRhLTQyZGYtYjJhOC1lNjQz YjdmYWI4MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbKQIRjyK+5yeiilsY7ByAfzan+T2KjcNWnxwYfzifxy5e3sKMXJJEW qYSILFD6qb43PWBOPO5PGMQo74HlJCrqkyIIBa+CDZvnCXn2ctmm0fMomY9fwRXV 6IGpBs0Rzvo660/5/VXFQKoYFwc269Jv0umY1OV4NQJh48A/wkaT9F9Z6LDUhNYi jGjaW/YW4Ova6mevWBcjTNEd9sAETseDm7YGJCA5Tw3M6ZQyKQl0C3yCZhbqijFR 8YLdoFgUxZ+KKQO79ldSkKDbBJOIgaGGnPMCi53nsIOYebsp2jOrPnOKvNXpj/jN 00+N1MWP6ye/YTQUmu0neVPna6W0AHU= -----END CERTIFICATE-----Generated at Sat Aug 23 21:54:24 2025 by rpki-client