$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b25afc6e-65f8-30df-b098-3a2395986d3e.roa File: b25afc6e-65f8-30df-b098-3a2395986d3e.roa (raw, json) Hash identifier: 0LcZ5vSQDdWCmAAI0dNeKDQSVQGSbD+vr9QLGoGY56Q= Subject key identifier: 11:D7:83:34:EB:23:CD:32:A2:9D:6F:AA:BD:8E:13:24:78:F2:8E:8F Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584AD23BADB4BF369177FFC93AC0 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b25afc6e-65f8-30df-b098-3a2395986d3e.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 27281 IP address blocks: 192.184.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ad:b4:bf:36:91:77:ff:c9:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=9c457b38-9075-4957-8b88-25e50faefcef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:dd:bc:78:bf:3c:ab:55:80:9e:ee:7c:e0:95: c6:9a:fa:7d:ba:c2:36:d6:fe:7c:ef:62:ea:60:7e: 44:92:5b:4b:c6:74:76:b5:e5:cc:f5:6d:c1:0e:49: 2d:49:6c:b2:f2:0e:a3:3b:53:52:9a:92:7c:3c:ab: cd:b7:1a:f8:80:5b:7e:11:cc:46:2b:f0:a4:08:c1: fe:76:79:5b:85:bd:02:7b:15:79:83:40:42:91:30: f2:ff:c9:6d:f5:d4:ec:8a:0c:16:a3:5b:19:9b:06: 36:dd:2b:73:77:6c:28:cc:a2:89:68:ae:ae:04:a3: 7f:f7:af:1e:48:43:7e:44:b5:f7:bf:93:06:af:91: f3:b6:51:ca:a9:72:dc:1a:31:31:12:8e:49:f2:0b: 3e:d4:77:44:00:2a:1d:d0:3c:bb:85:89:d2:92:a3: 01:95:09:9d:49:2f:d2:ee:8a:65:1e:16:c3:30:35: ef:f1:28:80:3a:69:7a:06:f4:bc:ca:42:2b:d1:38: 78:68:38:60:9a:2f:7e:95:0c:3e:69:74:7e:30:9e: ff:d5:72:d1:c3:36:66:98:28:cc:1b:20:56:10:8f: fc:42:ee:a0:4c:d7:42:8e:67:76:78:a1:51:7d:5c: 5d:62:2c:60:9b:91:9e:78:c5:07:b7:e7:bb:f5:f0: e2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D7:83:34:EB:23:CD:32:A2:9D:6F:AA:BD:8E:13:24:78:F2:8E:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b25afc6e-65f8-30df-b098-3a2395986d3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv4: 192.184.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:a4:f2:34:fc:b4:19:24:aa:ca:0d:70:b8:b5:1f:aa:63:37: 39:5e:5e:a8:ea:52:f8:32:fd:64:d9:67:78:54:bd:5c:6e:82: c6:70:ef:d4:91:2a:61:20:76:1b:32:b1:d9:39:fd:72:97:ed: ba:05:65:3a:d2:2b:ca:1e:b6:6e:26:70:64:fc:9d:12:32:85: 08:8b:58:13:f7:bf:6b:2e:5d:0a:60:aa:ca:f2:c1:58:f6:79: c2:55:d2:83:96:ac:da:be:58:90:d8:a0:d0:a6:96:5d:02:7c: 42:7b:ad:9b:52:07:35:63:cf:6e:99:7e:ef:25:dc:72:3a:5a: 4b:cd:e2:b3:f8:e0:d9:c3:01:c5:c7:c8:03:f2:2d:0b:66:63: ca:d5:62:b1:fc:bf:32:08:36:7a:f9:46:3e:cf:e7:5f:4a:a3: 38:10:08:3d:25:2e:ad:b3:ca:2d:92:b0:ec:de:f5:37:85:5d: 85:9a:78:a4:cb:cd:4f:6a:9f:3d:40:0e:8b:07:22:a2:78:55: 66:06:72:c5:09:2b:8f:2b:dd:7a:a7:80:b1:d8:3b:fc:f5:ca: 2b:e0:52:e0:2c:07:a8:38:00:ba:ab:a4:35:1f:f3:0f:16:ed: 1a:18:59:ef:29:6f:72:f5:ac:e7:9b:d4:fa:f8:96:5c:91:30: c8:ff:85:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO620vzaRd//JOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk OWM0NTdiMzgtOTA3NS00OTU3LThiODgtMjVlNTBmYWVmY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6N28eL88q1WAnu584JXGmvp9usI21v5872Lq YH5EkltLxnR2teXM9W3BDkktSWyy8g6jO1NSmpJ8PKvNtxr4gFt+EcxGK/CkCMH+ dnlbhb0CexV5g0BCkTDy/8lt9dTsigwWo1sZmwY23Stzd2wozKKJaK6uBKN/968e SEN+RLX3v5MGr5HztlHKqXLcGjExEo5J8gs+1HdEACod0Dy7hYnSkqMBlQmdSS/S 7oplHhbDMDXv8SiAOml6BvS8ykIr0Th4aDhgmi9+lQw+aXR+MJ7/1XLRwzZmmCjM GyBWEI/8Qu6gTNdCjmd2eKFRfVxdYixgm5GeeMUHt+e79fDitwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHXgzTrI80yop1vqr2OEyR48o6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvYjI1YWZjNmUtNjVmOC0z MGRmLWIwOTgtM2EyMzk1OTg2ZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+k8jT8tBkkqsoNcLi1H6pjNzleXqjqUvgy/WTZZ3hUvVxugsZw79SR KmEgdhsysdk5/XKX7boFZTrSK8oetm4mcGT8nRIyhQiLWBP3v2suXQpgqsrywVj2 ecJV0oOWrNq+WJDYoNCmll0CfEJ7rZtSBzVjz26Zfu8l3HI6WkvN4rP44NnDAcXH yAPyLQtmY8rVYrH8vzIINnr5Rj7P519KozgQCD0lLq2zyi2SsOze9TeFXYWaeKTL zU9qnz1ADosHIqJ4VWYGcsUJK48r3XqngLHYO/z1yivgUuAsB6g4ALqrpDUf8w8W 7RoYWe8pb3L1rOeb1Pr4llyRMMj/hRM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:46:45 2025 by rpki-client