$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/52823a9b-61d5-38a1-8207-fbf196df3766.roa File: 52823a9b-61d5-38a1-8207-fbf196df3766.roa (raw, json) Hash identifier: j0oE7z1faZCuW83VcHhsW4stAE5volhtgHSVbr4mbS4= Subject key identifier: 63:73:A8:DB:4D:4A:A3:6B:DD:FC:EE:C0:D1:61:E2:8F:3C:78:87:A7 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584A31B56321AA5F548325BD9D00 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/52823a9b-61d5-38a1-8207-fbf196df3766.roa Signing time: Sun 15 Jun 2025 01:00:49 +0000 ROA not before: Sun 15 Jun 2025 01:00:49 +0000 ROA not after: Sat 13 Sep 2025 01:00:49 +0000 asID: 21947 IP address blocks: 192.225.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:31:b5:63:21:aa:5f:54:83:25:bd:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Jun 15 01:00:49 2025 GMT Not After : Sep 13 01:00:49 2025 GMT Subject: CN=6ee1f847-4030-4390-855e-6507ee625efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:3c:3a:3f:b4:eb:bd:ea:43:f4:04:62:5f: e1:b2:b7:6d:43:8e:47:aa:f8:1c:c4:2b:88:58:f4: f8:00:cd:d7:c5:e8:7e:af:48:a2:40:e0:94:90:2d: 53:33:a5:92:ea:f0:e8:9e:af:87:15:4b:e2:16:94: 4b:aa:cc:f7:12:67:9d:99:1e:f8:f8:44:a3:3b:ec: 48:70:8a:ca:8b:08:44:c5:e1:bc:e6:73:2d:04:90: 5b:1b:37:bb:00:44:c2:fe:a6:6b:4d:69:71:98:56: e4:d9:c5:d7:42:04:d2:7e:8e:04:73:a0:ce:df:d8: 43:73:41:d6:8d:72:78:49:ff:3f:af:24:cf:41:60: 77:ad:84:bb:4b:15:63:c2:4b:2a:ab:68:a4:ef:1f: 65:2e:10:34:07:0c:4e:e3:08:a3:f1:66:0c:2a:9d: 37:59:87:53:1d:94:b3:76:de:95:66:81:46:39:1f: 42:59:19:d2:c3:80:a3:9f:cb:bc:98:e1:52:d3:58: d6:b9:ac:82:42:b6:ab:77:9a:c5:b2:5e:04:39:5d: 6d:d3:39:46:68:79:81:4d:03:b5:31:95:8e:09:43: 36:4a:4f:be:d0:df:76:dc:a9:9a:70:5f:e3:fb:ed: a9:8a:9a:85:66:31:e7:38:60:1d:59:5d:a2:6c:a3: 9c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:73:A8:DB:4D:4A:A3:6B:DD:FC:EE:C0:D1:61:E2:8F:3C:78:87:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/52823a9b-61d5-38a1-8207-fbf196df3766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 192.225.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:3c:13:27:81:0b:82:e8:bd:47:ea:c4:f7:cc:a2:36:3a:c1: 57:4c:76:c4:61:30:61:ca:c1:b8:b1:a2:28:fa:43:d7:c7:bf: 5a:94:0a:b0:18:32:59:4d:c2:23:a7:14:1b:d2:35:6f:8a:69: be:66:30:4d:4d:33:49:16:2a:12:e9:5e:57:07:f7:77:04:24: b2:1d:98:ef:1e:e7:a5:0a:76:da:03:f4:6d:1a:25:9f:22:6a: c9:b6:fe:93:d7:aa:91:99:49:77:33:42:94:5f:34:a9:45:32: 59:0a:4b:a2:d3:2b:cc:45:b5:71:c2:ee:aa:85:52:dd:f5:37: d7:54:3a:1c:0e:15:73:07:95:0c:86:7d:10:d9:28:81:92:c4: a0:fb:e5:e4:9f:e8:1f:78:54:40:bd:7f:65:cb:44:d1:b3:2d: 8d:0e:82:15:f9:c9:70:b4:b2:5a:6c:56:85:46:a3:f7:cb:49: 09:d8:ae:59:60:8e:cc:c7:1f:9e:23:30:3c:73:56:5a:af:c4: 63:88:d1:98:e6:4c:ab:6c:54:50:7b:d0:03:b5:6a:6d:67:ed: 8c:83:93:6e:b6:2b:3d:e9:2b:d4:43:c3:b0:80:95:78:09:11: 22:8d:6c:21:dd:5a:dc:d0:d6:ff:d4:14:be:83:59:cc:ad:98: 8c:2c:ff:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoxtWMhql9UgyW9nQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDYxNTAxMDA0OVoXDTI1MDkxMzAxMDA0OVowLzEtMCsGA1UEAxMk NmVlMWY4NDctNDAzMC00MzkwLTg1NWUtNjUwN2VlNjI1ZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAros8Oj+0673qQ/QEYl/hsrdtQ45HqvgcxCuI WPT4AM3Xxeh+r0iiQOCUkC1TM6WS6vDonq+HFUviFpRLqsz3EmedmR74+ESjO+xI cIrKiwhExeG85nMtBJBbGze7AETC/qZrTWlxmFbk2cXXQgTSfo4Ec6DO39hDc0HW jXJ4Sf8/ryTPQWB3rYS7SxVjwksqq2ik7x9lLhA0BwxO4wij8WYMKp03WYdTHZSz dt6VZoFGOR9CWRnSw4Cjn8u8mOFS01jWuayCQrard5rFsl4EOV1t0zlGaHmBTQO1 MZWOCUM2Sk++0N923KmacF/j++2pipqFZjHnOGAdWV2ibKOciwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNzqNtNSqNr3fzuwNFh4o88eIenMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvNTI4MjNhOWItNjFkNS0z OGExLTgyMDctZmJmMTk2ZGYzNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwOGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHI8EyeBC4LovUfqxPfMojY6wVdMdsRhMGHKwbixoij6Q9fHv1qUCrAY MllNwiOnFBvSNW+Kab5mME1NM0kWKhLpXlcH93cEJLIdmO8e56UKdtoD9G0aJZ8i asm2/pPXqpGZSXczQpRfNKlFMlkKS6LTK8xFtXHC7qqFUt31N9dUOhwOFXMHlQyG fRDZKIGSxKD75eSf6B94VEC9f2XLRNGzLY0OghX5yXC0slpsVoVGo/fLSQnYrllg jszHH54jMDxzVlqvxGOI0ZjmTKtsVFB70AO1am1n7YyDk262Kz3pK9RDw7CAlXgJ ESKNbCHdWtzQ1v/UFL6DWcytmIws/1I= -----END CERTIFICATE-----Generated at Tue Jul 1 05:30:17 2025 by rpki-client