$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/a64b1106-fd98-3a3f-ba6f-9ea11f2e9e9a.roa File: a64b1106-fd98-3a3f-ba6f-9ea11f2e9e9a.roa (raw, json) Hash identifier: xOghr8NSXHhiXnDVxNTWl4wezEGN84iyguSh6SzU+xo= Subject key identifier: 00:C6:43:7C:C1:B7:98:D3:68:31:0B:0A:3E:EF:DC:17:36:E6:CD:88 Certificate issuer: /CN=d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3 Certificate serial: 010D0C9F4328584AEE2693FC3C072AED6F00E780 Authority key identifier: 7E:0D:96:EF:17:17:25:BA:E9:9C:22:B4:DE:7D:3F:B6:46:F8:09:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/a64b1106-fd98-3a3f-ba6f-9ea11f2e9e9a.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 54014 IP address blocks: 192.245.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:93:fc:3c:07:2a:ed:6f:00:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=93e04077-9389-49e2-a335-12f9a6412faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e2:29:ec:6f:b9:31:21:52:48:b1:11:21:b2: ef:10:ee:c3:e2:41:c9:a8:c4:75:9a:e4:a1:e4:b1: 45:22:e0:0f:44:07:5e:48:78:5a:f7:13:1f:6e:cc: b7:13:67:95:48:7d:18:d2:31:13:ca:c6:a2:3f:17: b8:8b:71:d4:b8:76:31:e6:a3:c5:aa:7c:90:63:2e: b9:d3:0d:77:a9:b3:f7:cf:94:99:47:28:1f:ca:be: 32:f1:bd:aa:39:b3:51:94:1b:81:0f:6d:00:9c:b3: 28:71:5d:b6:7e:52:ac:75:6d:94:ae:7d:17:2f:76: 01:20:32:b5:46:d3:9c:83:2d:76:a0:3a:df:40:df: d9:c7:90:55:76:2a:ed:f5:a9:a7:1b:a4:f5:3f:d3: 4d:76:96:2b:da:48:f5:ce:53:9a:32:01:35:1d:8e: 17:9a:e3:11:19:bf:64:32:3b:65:3f:cf:71:03:dd: 5e:5c:af:c3:74:fc:bb:cf:1b:b2:4e:44:85:d7:7e: d7:21:4b:98:a2:4e:8e:be:7c:6d:0a:5a:66:e2:3e: c7:cf:78:56:d7:b1:4a:79:23:c4:b6:ba:f8:40:44: 83:82:04:8a:dd:92:89:62:cc:16:45:a4:79:11:e6: b3:a6:b4:89:3d:bc:d4:09:6b:f7:5a:51:9c:39:41: f3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C6:43:7C:C1:B7:98:D3:68:31:0B:0A:3E:EF:DC:17:36:E6:CD:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/a64b1106-fd98-3a3f-ba6f-9ea11f2e9e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.crl X509v3 Authority Key Identifier: keyid:7E:0D:96:EF:17:17:25:BA:E9:9C:22:B4:DE:7D:3F:B6:46:F8:09:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.cer sbgp-ipAddrBlock: critical IPv4: 192.245.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:48:f0:d6:73:e9:a9:3f:e1:7d:19:56:cf:d2:b4:69:25:ff: 11:0e:f5:c6:5f:a8:50:0c:33:8c:eb:b5:f6:d6:9c:ee:2b:44: 47:04:c1:e1:c6:dc:b9:45:7c:1b:22:cd:2c:9f:0d:db:17:89: f3:5d:52:35:51:05:6b:a6:61:9f:73:4f:4d:b1:b3:a4:15:f5: 89:7c:44:66:4b:43:91:32:0e:02:3b:c8:e8:04:d3:59:9a:39: 36:8a:6e:0e:03:61:fb:4c:f0:af:7b:08:4c:9e:a0:2f:3b:dc: 96:2a:a0:7c:a0:70:90:96:06:7e:b8:cc:f0:8a:3f:e8:5e:88: 1c:7c:d8:b1:f3:d7:4d:a5:62:01:15:cb:62:19:7d:0d:dc:e9: 8c:43:77:81:88:23:8f:21:7f:98:37:8f:27:09:22:eb:44:31: fa:df:08:b8:13:30:8c:2a:d0:0d:bc:2a:87:b7:30:c1:10:f4: 49:56:a7:a7:b2:c2:04:fa:ae:35:53:5e:05:32:07:b6:3d:10: e9:05:d0:64:0e:d3:d8:7e:80:be:32:f3:dc:6a:d9:79:20:10: 6c:21:2f:9d:3b:fa:5c:b4:2d:fd:05:a9:fe:0b:16:0e:ad:97: bf:4a:2e:29:cd:9e:02:35:bc:d0:29:8d:14:54:bc:75:1a:80: 90:58:9e:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJpP8PAcq7W8A54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMGNmMWEtY2NlZi00Njg4LThiNDgtNTVlYjBlZjVk MmUzMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk OTNlMDQwNzctOTM4OS00OWUyLWEzMzUtMTJmOWE2NDEyZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuIp7G+5MSFSSLERIbLvEO7D4kHJqMR1muSh 5LFFIuAPRAdeSHha9xMfbsy3E2eVSH0Y0jETysaiPxe4i3HUuHYx5qPFqnyQYy65 0w13qbP3z5SZRygfyr4y8b2qObNRlBuBD20AnLMocV22flKsdW2Urn0XL3YBIDK1 RtOcgy12oDrfQN/Zx5BVdirt9amnG6T1P9NNdpYr2kj1zlOaMgE1HY4XmuMRGb9k MjtlP89xA91eXK/DdPy7zxuyTkSF137XIUuYok6OvnxtClpm4j7Hz3hW17FKeSPE trr4QESDggSK3ZKJYswWRaR5EeazprSJPbzUCWv3WlGcOUHz2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADGQ3zBt5jTaDELCj7v3Bc25s2IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQw Y2YxYS1jY2VmLTQ2ODgtOGI0OC01NWViMGVmNWQyZTMvYTY0YjExMDYtZmQ5OC0z YTNmLWJhNmYtOWVhMTFmMmU5ZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDlkMGNmMWEtY2NlZi00Njg4LThi NDgtNTVlYjBlZjVkMmUzL2Q5ZDBjZjFhLWNjZWYtNDY4OC04YjQ4LTU1ZWIwZWY1 ZDJlMy5jcmwwHwYDVR0jBBgwFoAUfg2W7xcXJbrpnCK03n0/tkb4CYswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kOWQwY2YxYS1jY2VmLTQ2ODgtOGI0OC01NWVi MGVmNWQyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPXmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBI8NZz6ak/4X0ZVs/StGkl/xEO9cZfqFAMM4zrtfbWnO4rREcEweHG 3LlFfBsizSyfDdsXifNdUjVRBWumYZ9zT02xs6QV9Yl8RGZLQ5EyDgI7yOgE01ma OTaKbg4DYftM8K97CEyeoC873JYqoHygcJCWBn64zPCKP+heiBx82LHz102lYgEV y2IZfQ3c6YxDd4GII48hf5g3jycJIutEMfrfCLgTMIwq0A28Koe3MMEQ9ElWp6ey wgT6rjVTXgUyB7Y9EOkF0GQO09h+gL4y89xq2XkgEGwhL507+ly0Lf0Fqf4LFg6t l79KLinNngI1vNApjRRUvHUagJBYntk= -----END CERTIFICATE-----Generated at Sat Aug 23 20:51:47 2025 by rpki-client