$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/897e4c8a-6510-34a5-95e3-d46ea71d3005.roa File: 897e4c8a-6510-34a5-95e3-d46ea71d3005.roa (raw, json) Hash identifier: kqyFzOwuvdlzAQIzTMXGel4mhxwaNcSA6SNh0ta/wNs= Subject key identifier: 99:A1:86:9D:38:12:87:B7:F0:39:83:96:54:AE:6B:FA:02:29:7C:0C Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584AEF8BC62404CAF9E35B557FC0 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/897e4c8a-6510-34a5-95e3-d46ea71d3005.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 19637 IP address blocks: 192.19.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:c6:24:04:ca:f9:e3:5b:55:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=187b2496-199e-47e8-9006-d1c122edc584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3d:9d:d3:82:92:32:33:cf:e4:e6:0f:71:d6: b7:f3:74:a3:db:71:a2:0a:aa:ac:fc:44:ab:e7:62: 21:82:c9:80:42:62:60:da:e1:53:16:cf:ee:2a:c7: 0e:f3:ca:03:5b:85:08:e7:c0:ae:0e:d0:6f:f2:67: 5e:4c:31:e3:47:88:d1:13:a4:a5:a3:be:71:b6:97: 30:d1:b3:b0:48:2e:20:eb:8d:e4:0c:ef:7d:00:91: d6:35:f1:61:48:b8:40:07:09:1f:3c:f9:40:e2:e7: f8:55:34:55:a3:96:5b:5b:56:71:0d:eb:a6:af:e6: 19:f4:0a:00:b4:fe:6b:75:98:fb:62:39:40:71:f6: a2:76:9f:b5:32:82:cc:93:2e:46:21:e5:3a:6d:c3: 55:18:b2:64:3e:1e:cd:d0:c7:66:09:0e:85:95:20: 7f:23:92:d8:44:96:1f:5e:fd:6c:56:b8:6c:8e:88: 33:d6:cb:36:80:48:1b:f6:cf:02:31:47:4c:21:a1: 96:93:ea:20:45:02:7e:b1:d8:4c:a8:dd:e4:e1:1d: 37:25:d0:22:f6:4c:0b:83:12:16:34:65:c2:f5:32: 54:5d:b9:b2:23:b7:29:bc:6e:8d:f6:6d:b9:7d:a4: 28:89:ac:5f:19:6a:b1:14:7d:11:78:47:55:12:54: 7c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A1:86:9D:38:12:87:B7:F0:39:83:96:54:AE:6B:FA:02:29:7C:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/897e4c8a-6510-34a5-95e3-d46ea71d3005.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 192.19.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c0:c0:08:f5:20:ac:f0:37:eb:42:5b:c5:6b:11:50:48:26: a5:57:b4:0a:bb:dc:7f:91:08:e3:a3:cf:14:61:45:d1:74:71: de:8b:a8:c5:98:e7:f5:c9:08:eb:dd:86:1f:88:2f:9c:b3:f1: 37:21:52:66:62:c8:ca:ac:f5:3b:7e:6f:6a:b5:db:e9:57:0d: ac:26:3b:0e:ab:e2:26:33:d2:60:ad:9e:57:2b:30:61:5d:1e: 4e:19:d6:cb:b8:96:da:06:1e:ed:ed:03:0c:5c:99:76:a2:a3: 5b:ff:4c:25:30:bc:ed:06:fc:94:f3:2d:52:ed:39:72:75:b3: db:27:b5:5b:86:ea:30:c2:8f:76:e4:d2:fe:40:e9:7c:f6:e9: 66:15:73:f9:2e:3e:11:18:24:22:98:2b:50:95:49:4b:f9:1e: 09:bd:09:18:ec:d7:17:eb:ad:7e:6b:57:6e:c6:a7:df:dc:2d: 07:40:73:60:4c:d3:2c:b5:b2:2d:f8:85:8b:2f:11:fa:d0:e0: 68:a4:1a:04:b7:85:31:5b:58:0b:f4:d7:41:23:fe:a9:c7:97: f6:c3:e3:c5:1d:38:27:5f:33:15:18:a7:fb:b8:4e:c3:ec:e5: 5e:8c:0c:f3:bf:14:43:67:50:61:7c:28:8d:5c:b5:8a:f0:c7: cd:d0:e8:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvi8YkBMr541tVf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk MTg3YjI0OTYtMTk5ZS00N2U4LTkwMDYtZDFjMTIyZWRjNTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz2d04KSMjPP5OYPcda383Sj23GiCqqs/ESr 52IhgsmAQmJg2uFTFs/uKscO88oDW4UI58CuDtBv8mdeTDHjR4jRE6Slo75xtpcw 0bOwSC4g643kDO99AJHWNfFhSLhABwkfPPlA4uf4VTRVo5ZbW1ZxDeumr+YZ9AoA tP5rdZj7YjlAcfaidp+1MoLMky5GIeU6bcNVGLJkPh7N0MdmCQ6FlSB/I5LYRJYf Xv1sVrhsjogz1ss2gEgb9s8CMUdMIaGWk+ogRQJ+sdhMqN3k4R03JdAi9kwLgxIW NGXC9TJUXbmyI7cpvG6N9m25faQoiaxfGWqxFH0ReEdVElR8kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmhhp04Eoe38DmDllSua/oCKXwMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvODk3ZTRjOGEtNjUxMC0z NGE1LTk1ZTMtZDQ2ZWE3MWQzMDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBMYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7AwAj1IKzwN+tCW8VrEVBIJqVXtAq73H+RCOOjzxRhRdF0cd6LqMWY 5/XJCOvdhh+IL5yz8TchUmZiyMqs9Tt+b2q12+lXDawmOw6r4iYz0mCtnlcrMGFd Hk4Z1su4ltoGHu3tAwxcmXaio1v/TCUwvO0G/JTzLVLtOXJ1s9sntVuG6jDCj3bk 0v5A6Xz26WYVc/kuPhEYJCKYK1CVSUv5Hgm9CRjs1xfrrX5rV27Gp9/cLQdAc2BM 0yy1si34hYsvEfrQ4GikGgS3hTFbWAv010Ej/qnHl/bD48UdOCdfMxUYp/u4TsPs 5V6MDPO/FENnUGF8KI1ctYrwx83Q6K0= -----END CERTIFICATE-----Generated at Sat Aug 23 19:52:41 2025 by rpki-client