$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/7a1d4876-3def-3187-938f-10513510e226.roa File: 7a1d4876-3def-3187-938f-10513510e226.roa (raw, json) Hash identifier: QNEbGN8fEjQBnBukiiLn48AyMwWx93OL9Ofez1X6Ul8= Subject key identifier: 70:8E:09:0F:9B:74:25:27:01:1C:1D:30:BA:CB:04:2E:58:3D:E0:5E Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584A3A1578C475B4B086705F7780 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/7a1d4876-3def-3187-938f-10513510e226.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 396982 IP address blocks: 192.19.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:78:c4:75:b4:b0:86:70:5f:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=ae0dfba9-e775-4487-b4bd-bd4c125795e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:63:22:ba:eb:3c:62:46:95:1f:48:34:4c: 9e:52:91:5b:23:9d:54:95:c0:2c:54:39:0a:85:93: 6d:ee:e3:4b:33:46:64:ce:63:d9:aa:8a:b9:da:5a: c0:65:fb:79:0e:0f:e6:11:3b:ca:46:5d:62:b8:69: cd:a4:9d:21:53:f0:8d:9f:97:24:72:92:b7:4a:88: 4c:bc:92:33:ca:6a:97:fa:6c:b4:3e:4b:53:59:e4: d8:53:46:c5:56:08:d8:4e:86:5f:d9:80:2d:de:dc: cb:d7:20:f7:2a:ce:ac:2b:f3:cb:89:52:e3:47:4a: 61:fe:42:d8:22:19:f8:bc:08:9a:1d:07:4c:18:80: 46:65:b5:12:48:00:d0:34:68:0c:7e:f3:77:00:48: 3d:04:2b:7a:36:94:cb:4e:fc:91:cf:6c:fb:82:23: 22:e6:2f:3b:e7:e7:58:3b:13:74:ef:92:14:cc:fa: 63:96:16:2f:ac:7b:57:69:26:9b:22:40:51:ce:ef: 8b:4d:37:8b:99:c5:4b:6d:97:e4:3f:e5:bd:ac:13: 33:0d:b9:15:c4:77:6f:65:a5:24:d0:09:a4:32:78: 40:cc:6d:6f:4f:c7:43:06:93:bd:80:06:4f:a6:e2: a9:27:93:be:57:fc:bf:68:96:62:88:2b:df:1a:db: 4f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8E:09:0F:9B:74:25:27:01:1C:1D:30:BA:CB:04:2E:58:3D:E0:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/7a1d4876-3def-3187-938f-10513510e226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 192.19.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:8f:1e:ae:e3:60:4a:3a:c1:97:0d:35:c9:0f:8f:a4:94:70: 5e:eb:78:18:8d:9e:79:ab:f1:46:3b:5c:c1:35:d6:57:8a:cb: 0f:06:1e:53:ea:00:83:72:11:82:14:6d:25:fc:b0:c0:96:e0: c3:b5:65:df:11:ef:7e:f3:5b:ae:92:c1:2f:98:e4:b8:31:4e: 9c:5d:7f:98:1e:4d:63:96:96:6d:7a:15:d3:ee:5c:18:5b:f2: fb:69:dc:dc:cc:60:15:d7:69:93:a8:97:72:01:d8:6e:cc:ba: d3:35:c3:59:20:c9:b8:bf:f5:68:97:2f:52:f9:09:93:23:16: fe:64:64:cc:b5:30:35:ed:3c:49:9f:79:8f:90:13:5c:81:7c: d8:4f:c7:f1:5d:af:e4:62:08:1b:5c:2b:f7:b2:8d:24:2d:6c: be:02:d1:10:7e:6b:ec:0a:57:1e:8f:9e:c5:07:3e:1a:d5:47: b4:41:81:ed:2b:71:ee:b9:d9:f1:3d:f4:9f:8f:7b:ea:ff:c3: f3:bb:0b:ed:f0:b2:9f:d1:c4:16:05:d7:f6:71:1f:57:03:40: 1e:39:b2:4a:7e:cd:cf:b1:19:73:fb:2a:03:8b:61:2c:eb:00: d3:0e:3d:37:5c:dd:4a:a0:81:65:15:c2:12:82:82:3b:1c:d5: 55:d3:66:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXjEdbSwhnBfd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk YWUwZGZiYTktZTc3NS00NDg3LWI0YmQtYmQ0YzEyNTc5NWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHJjIrrrPGJGlR9INEyeUpFbI51UlcAsVDkK hZNt7uNLM0ZkzmPZqoq52lrAZft5Dg/mETvKRl1iuGnNpJ0hU/CNn5ckcpK3SohM vJIzymqX+my0PktTWeTYU0bFVgjYToZf2YAt3tzL1yD3Ks6sK/PLiVLjR0ph/kLY Ihn4vAiaHQdMGIBGZbUSSADQNGgMfvN3AEg9BCt6NpTLTvyRz2z7giMi5i875+dY OxN075IUzPpjlhYvrHtXaSabIkBRzu+LTTeLmcVLbZfkP+W9rBMzDbkVxHdvZaUk 0AmkMnhAzG1vT8dDBpO9gAZPpuKpJ5O+V/y/aJZiiCvfGttP+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCOCQ+bdCUnARwdMLrLBC5YPeBeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvN2ExZDQ4NzYtM2RlZi0z MTg3LTkzOGYtMTA1MTM1MTBlMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuPHq7jYEo6wZcNNckPj6SUcF7reBiNnnmr8UY7XME11leKyw8GHlPq AINyEYIUbSX8sMCW4MO1Zd8R737zW66SwS+Y5LgxTpxdf5geTWOWlm16FdPuXBhb 8vtp3NzMYBXXaZOol3IB2G7MutM1w1kgybi/9WiXL1L5CZMjFv5kZMy1MDXtPEmf eY+QE1yBfNhPx/Fdr+RiCBtcK/eyjSQtbL4C0RB+a+wKVx6PnsUHPhrVR7RBge0r ce652fE99J+Pe+r/w/O7C+3wsp/RxBYF1/ZxH1cDQB45skp+zc+xGXP7KgOLYSzr ANMOPTdc3UqggWUVwhKCgjsc1VXTZvs= -----END CERTIFICATE-----Generated at Mon Jun 30 14:55:08 2025 by rpki-client