$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4075d6f0-6747-3705-bcd1-320a5d5683a1.roa File: 4075d6f0-6747-3705-bcd1-320a5d5683a1.roa (raw, json) Hash identifier: Fb3V/f4w0XE2v5EGmtzHsZhuBGmW5ktPN2bpcEhrQb8= Subject key identifier: 9C:FA:ED:97:55:93:BD:33:3A:BF:0E:A7:AD:8C:8B:31:DE:0A:AB:93 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F43285849F71527A584259C51C01F4180 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4075d6f0-6747-3705-bcd1-320a5d5683a1.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 19637 IP address blocks: 192.19.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:27:a5:84:25:9c:51:c0:1f:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=a5f13c75-a97a-4e21-82b3-9291a2e01615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fc:bb:8a:31:03:89:07:ed:dc:f3:78:b7:bc: aa:3a:b4:ed:76:b9:35:a2:ca:a5:a8:81:f4:cd:33: 13:6e:f3:ae:45:a0:51:e5:a2:70:d7:db:3d:2d:7e: ef:d3:c5:ee:19:19:6e:b5:b8:f8:21:b7:db:fb:0f: 23:8a:18:9e:32:4c:a9:4e:44:64:d0:1f:b0:db:cf: 0a:23:8f:cc:b9:b1:c1:d7:91:00:41:1b:e5:52:90: 4d:3b:16:1d:9a:ec:b0:d4:d5:d2:e8:d5:6e:85:f3: b1:7e:70:ad:6d:59:58:c1:2b:ed:eb:93:60:be:b7: 1e:e6:52:fd:3e:c1:f5:d7:f6:0b:df:f9:7f:32:3a: 5d:06:bb:f9:53:33:d6:ca:9a:1a:d8:cc:cb:f9:02: 78:ca:a8:62:d3:dc:61:de:3d:40:94:ab:9e:45:b7: bf:5e:f9:a3:51:68:42:60:58:7b:49:cf:6f:ab:4b: 34:63:01:9d:72:98:31:28:de:4b:ec:77:9b:2d:8c: 43:f0:e0:76:bd:c9:59:b5:6c:05:d3:56:79:e2:f4: 2d:61:8a:e5:21:d5:f0:64:82:b2:cb:b8:79:fc:0d: 5c:82:aa:de:c9:c0:80:3d:52:1a:23:af:58:aa:28: be:8f:87:2f:2e:91:43:1d:ba:ca:3c:91:87:ab:ce: 71:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FA:ED:97:55:93:BD:33:3A:BF:0E:A7:AD:8C:8B:31:DE:0A:AB:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4075d6f0-6747-3705-bcd1-320a5d5683a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 192.19.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:74:74:b1:60:a4:b1:08:bf:18:72:ae:70:8f:64:05:8f:e5: 74:06:c9:67:89:1f:2f:30:50:d6:3c:d2:61:c6:1c:c5:6e:de: f2:b3:67:6c:e0:af:2e:f7:fb:e0:9f:e7:b1:87:74:ad:f2:3a: bc:9d:ae:31:fa:ef:aa:d4:53:ab:5a:b6:ce:83:96:50:51:68: ee:9a:0c:b1:2f:10:85:18:84:ca:7a:83:4a:ad:12:89:97:17: 08:df:94:59:51:83:ec:ef:32:32:9f:99:79:df:f3:6a:54:3b: 6d:cd:0c:a8:d9:34:fb:5b:5a:cb:5a:41:57:24:68:7f:2a:ac: 65:8f:94:17:1e:e6:d8:93:68:72:7f:d7:fa:a3:f8:2c:d6:0d: 5e:11:f4:a2:8f:78:fc:ef:67:25:87:91:c4:45:66:ae:93:57: 83:05:85:70:22:9b:61:93:11:20:e8:dd:02:d5:fb:da:c5:4c: 17:bc:8c:ae:31:08:3d:31:4a:9c:f3:15:72:35:bb:3d:22:9b: 2f:19:d3:f3:e5:e2:62:12:46:60:9a:f0:23:db:06:95:ee:91: 0e:93:60:c7:45:af:6c:29:4d:1e:c4:19:6b:ca:b7:fd:52:fa: d1:b5:28:84:e4:cb:c5:63:5d:99:e8:08:48:81:87:0f:a4:0f: d8:d7:b1:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FSelhCWcUcAfQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk YTVmMTNjNzUtYTk3YS00ZTIxLTgyYjMtOTI5MWEyZTAxNjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vy7ijEDiQft3PN4t7yqOrTtdrk1osqlqIH0 zTMTbvOuRaBR5aJw19s9LX7v08XuGRlutbj4Ibfb+w8jihieMkypTkRk0B+w288K I4/MubHB15EAQRvlUpBNOxYdmuyw1NXS6NVuhfOxfnCtbVlYwSvt65Ngvrce5lL9 PsH11/YL3/l/MjpdBrv5UzPWypoa2MzL+QJ4yqhi09xh3j1AlKueRbe/XvmjUWhC YFh7Sc9vq0s0YwGdcpgxKN5L7HebLYxD8OB2vclZtWwF01Z54vQtYYrlIdXwZIKy y7h5/A1cgqreycCAPVIaI69Yqii+j4cvLpFDHbrKPJGHq85xrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz67ZdVk70zOr8Op62MizHeCquTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvNDA3NWQ2ZjAtNjc0Ny0z NzA1LWJjZDEtMzIwYTVkNTY4M2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBM7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl0dLFgpLEIvxhyrnCPZAWP5XQGyWeJHy8wUNY80mHGHMVu3vKzZ2zg ry73++Cf57GHdK3yOrydrjH676rUU6tats6DllBRaO6aDLEvEIUYhMp6g0qtEomX FwjflFlRg+zvMjKfmXnf82pUO23NDKjZNPtbWstaQVckaH8qrGWPlBce5tiTaHJ/ 1/qj+CzWDV4R9KKPePzvZyWHkcRFZq6TV4MFhXAim2GTESDo3QLV+9rFTBe8jK4x CD0xSpzzFXI1uz0imy8Z0/Pl4mISRmCa8CPbBpXukQ6TYMdFr2wpTR7EGWvKt/1S +tG1KITky8VjXZnoCEiBhw+kD9jXscA= -----END CERTIFICATE-----Generated at Tue Jul 1 06:13:43 2025 by rpki-client