$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/cafabcb4-1733-380b-a238-a258e12b6734.roa File: cafabcb4-1733-380b-a238-a258e12b6734.roa (raw, json) Hash identifier: n0/w6TNk/axbpbcUj0ZAIIN6HwX9c9fF8mr8oscPGSY= Subject key identifier: 92:F3:53:77:83:82:E7:4F:9E:97:C3:8D:5B:B7:1B:BE:37:39:C5:1E Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A374ACF3A8255D3F2EC606D00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/cafabcb4-1733-380b-a238-a258e12b6734.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 16509 IP address blocks: 192.156.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:cf:3a:82:55:d3:f2:ec:60:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=672a60da-b34a-4954-9dda-c407347d7ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1e:e5:e3:c9:12:01:9c:25:79:04:6a:50:38: 84:48:29:1c:6b:40:47:89:20:8a:17:bd:b3:de:27: 79:f0:b8:e9:3c:f2:7e:95:0c:55:68:98:17:e4:72: 51:fa:24:10:8f:45:58:6e:73:92:b6:47:a6:aa:a7: dc:b8:92:f5:0a:06:e0:dc:fb:0b:29:14:fb:f2:6b: fd:10:ed:0e:74:ee:2c:5e:00:cc:10:e1:11:ac:9e: 45:92:49:9b:ea:bb:64:40:11:8f:7e:c2:33:52:f5: fd:f5:6c:e3:e6:ad:80:13:50:9b:07:af:ef:09:8c: b2:a1:9c:ef:c6:12:4e:f9:03:6e:aa:64:07:72:6c: 68:6d:29:d7:6d:4d:fe:51:b8:4d:e7:33:cd:ff:62: 4c:72:bf:67:50:1d:9f:06:25:3a:a3:69:6a:02:6f: d0:8f:34:39:b4:5d:b2:b9:1e:bf:be:c7:59:96:b4: a4:ee:f4:3c:7f:e8:64:c0:28:65:39:a2:c6:5e:23: aa:c1:fe:57:e0:60:31:26:ae:42:f0:da:8b:75:56: a9:df:de:6b:1c:f2:1e:f2:e2:c6:8f:e5:44:89:a2: 94:0a:a6:1f:86:a9:ec:75:b0:e7:2e:7e:00:7e:ae: d3:99:53:6e:9c:24:c3:f1:11:1c:81:0f:38:eb:ac: a0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F3:53:77:83:82:E7:4F:9E:97:C3:8D:5B:B7:1B:BE:37:39:C5:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/cafabcb4-1733-380b-a238-a258e12b6734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 192.156.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:7e:db:97:af:1e:c8:b8:ae:71:48:bb:3f:2c:9a:09:e3:13: 75:46:c5:d3:32:88:7a:ae:5b:7e:6a:0c:84:89:9e:d4:ec:9e: 42:93:4d:fd:09:fb:1d:11:25:61:8c:ea:86:0b:55:a5:c2:0d: d8:0a:50:57:73:a0:a4:83:8c:6a:bb:08:f0:45:a1:b8:d9:a0: 74:13:ff:4d:89:8f:e6:70:44:09:a8:8d:61:6e:1c:ad:6d:b3: a6:7a:2d:2e:66:22:74:fd:0d:3e:5f:91:53:20:28:da:12:67: 94:e6:c7:7f:a3:ef:5f:58:27:86:44:a8:bc:ca:8d:17:a3:de: 26:34:e6:c5:a5:f2:c1:cf:06:b2:ee:ea:14:82:09:4f:1f:c0: a9:1d:8f:d0:d7:d6:20:91:1e:38:7c:e2:81:c8:c8:50:ae:6f: 26:07:69:b4:2a:f7:41:23:e1:42:af:ba:65:c9:23:e5:eb:cb: 64:53:fc:cd:21:21:f1:36:20:12:e3:13:2c:08:a9:2b:1a:24: 6c:f7:d8:70:dc:7f:e0:8b:3b:e9:e3:bd:b3:ce:ff:37:dc:c3: c6:78:58:0e:0d:b5:7e:45:a4:19:fd:66:61:c4:0d:2c:73:f5: 2d:68:cd:f0:3f:4c:61:87:da:ce:61:e1:0e:5d:c7:0c:72:95: b1:e8:2f:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3Ss86glXT8uxgbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk NjcyYTYwZGEtYjM0YS00OTU0LTlkZGEtYzQwNzM0N2Q3YWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB7l48kSAZwleQRqUDiESCkca0BHiSCKF72z 3id58LjpPPJ+lQxVaJgX5HJR+iQQj0VYbnOStkemqqfcuJL1Cgbg3PsLKRT78mv9 EO0OdO4sXgDMEOERrJ5Fkkmb6rtkQBGPfsIzUvX99Wzj5q2AE1CbB6/vCYyyoZzv xhJO+QNuqmQHcmxobSnXbU3+UbhN5zPN/2JMcr9nUB2fBiU6o2lqAm/QjzQ5tF2y uR6/vsdZlrSk7vQ8f+hkwChlOaLGXiOqwf5X4GAxJq5C8NqLdVap395rHPIe8uLG j+VEiaKUCqYfhqnsdbDnLn4Afq7TmVNunCTD8REcgQ8466ygjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLzU3eDgudPnpfDjVu3G743OcUeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvY2FmYWJjYjQtMTczMy0z ODBiLWEyMzgtYTI1OGUxMmI2NzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJzbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADx+25evHsi4rnFIuz8smgnjE3VGxdMyiHquW35qDISJntTsnkKTTf0J +x0RJWGM6oYLVaXCDdgKUFdzoKSDjGq7CPBFobjZoHQT/02Jj+ZwRAmojWFuHK1t s6Z6LS5mInT9DT5fkVMgKNoSZ5Tmx3+j719YJ4ZEqLzKjRej3iY05sWl8sHPBrLu 6hSCCU8fwKkdj9DX1iCRHjh84oHIyFCubyYHabQq90Ej4UKvumXJI+Xry2RT/M0h IfE2IBLjEywIqSsaJGz32HDcf+CLO+njvbPO/zfcw8Z4WA4NtX5FpBn9ZmHEDSxz 9S1ozfA/TGGH2s5h4Q5dxwxylbHoL+k= -----END CERTIFICATE-----Generated at Sun Jun 29 04:31:30 2025 by rpki-client