$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/f1a5d8f6-d36b-3291-8055-f88d64057ee3.roa File: f1a5d8f6-d36b-3291-8055-f88d64057ee3.roa (raw, json) Hash identifier: BysywMxC+dvQO4EhoCfnOHuRDzBuW72/b6YsgG4dEpY= Subject key identifier: E7:44:ED:CB:91:BD:66:75:93:ED:E3:02:BB:6C:79:3A:81:AD:31:D8 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A374ACA2B66830603AE5E43C0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/f1a5d8f6-d36b-3291-8055-f88d64057ee3.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 14618 IP address blocks: 192.156.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:ca:2b:66:83:06:03:ae:5e:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=3ad57559-9eff-4ff9-85f5-5ab795fe1224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b4:b4:f0:e5:44:c3:f4:e2:22:c0:eb:14:09: b1:3a:8f:4e:85:7d:c5:81:9f:f2:d8:e5:24:b0:d7: e9:d8:25:6d:a1:5e:41:89:cd:39:c3:94:e7:b6:44: 15:ce:7f:f3:bf:54:33:7d:0c:70:5b:7d:37:53:16: 19:51:92:22:b9:c5:4d:12:f9:5a:a3:83:3c:a0:67: c8:d7:68:6e:62:51:0a:d4:13:c1:52:e1:05:53:52: 6f:b0:58:d1:77:d7:39:0b:bc:57:2c:02:a1:d7:67: be:52:74:66:42:8b:90:ef:61:04:de:6e:79:e6:79: dc:55:a2:ed:de:c8:ac:56:a6:b3:6e:4c:ed:14:65: 2e:88:e5:2b:4e:32:08:07:85:7e:9c:a1:f8:e2:e2: 09:63:81:34:9a:10:1c:65:b3:68:e7:e0:d5:71:a0: da:f2:08:36:18:b5:b8:40:9a:4d:29:b7:64:6a:fa: a2:b5:3b:e2:8b:5b:ff:05:d9:d9:b2:32:c7:3c:ec: c4:7c:fa:ee:8b:81:b4:72:ea:6b:da:23:de:e9:18: a1:f8:10:2b:c4:45:64:f3:9a:97:6a:e4:81:02:f9: b3:5f:5d:92:2e:d6:a5:51:35:1a:d2:ee:fd:1a:04: e2:c7:27:c0:20:fb:6c:11:a0:68:9f:e3:e1:45:e0: 97:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:44:ED:CB:91:BD:66:75:93:ED:E3:02:BB:6C:79:3A:81:AD:31:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/f1a5d8f6-d36b-3291-8055-f88d64057ee3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 192.156.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:d4:6e:20:9a:f0:4b:b6:f9:21:52:ca:8d:96:8b:66:f0:9e: a4:ac:76:5f:68:9f:ad:7b:c0:40:79:8a:a1:5f:e8:9f:d9:49: 3b:23:29:bd:f5:6d:2c:ea:eb:03:b4:42:4a:c5:5e:5e:16:79: 31:79:ae:55:c9:f3:25:f7:a7:ea:1b:c5:78:d8:ea:b4:26:26: e6:13:b6:ea:d3:fc:8e:57:f4:e7:70:65:f2:17:66:b1:f6:54: 1d:73:db:c8:4e:a2:db:12:49:a1:df:96:eb:15:36:d7:82:fa: d8:4b:d8:45:20:7b:7f:fe:ee:05:36:44:40:08:81:c0:da:35: 65:b1:2d:cf:56:cb:94:0d:eb:68:b2:c4:a0:68:c9:cd:29:2e: 49:f5:ad:80:4e:e9:ea:04:a3:4e:93:29:33:46:63:ea:6e:85: 84:6c:20:bc:4f:16:8c:3d:68:d9:58:dd:ee:1f:71:4e:87:3b: e9:74:14:7e:01:63:f0:91:39:d1:14:9b:fd:41:a8:d0:ea:a8: 00:ca:90:3f:58:00:04:55:81:d7:7f:d6:b4:16:86:73:a0:ff: c2:3e:9c:81:d5:85:37:a8:f0:7e:45:12:a5:97:a4:3f:0d:03: 25:89:cb:46:3d:9e:ba:67:d6:f1:d3:d8:0f:2d:7f:dc:7a:fb: 44:bb:02:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SsorZoMGA65eQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk M2FkNTc1NTktOWVmZi00ZmY5LTg1ZjUtNWFiNzk1ZmUxMjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bS08OVEw/TiIsDrFAmxOo9OhX3FgZ/y2OUk sNfp2CVtoV5Bic05w5TntkQVzn/zv1QzfQxwW303UxYZUZIiucVNEvlao4M8oGfI 12huYlEK1BPBUuEFU1JvsFjRd9c5C7xXLAKh12e+UnRmQouQ72EE3m555nncVaLt 3sisVqazbkztFGUuiOUrTjIIB4V+nKH44uIJY4E0mhAcZbNo5+DVcaDa8gg2GLW4 QJpNKbdkavqitTvii1v/BdnZsjLHPOzEfPrui4G0cupr2iPe6Rih+BArxEVk85qX auSBAvmzX12SLtalUTUa0u79GgTixyfAIPtsEaBon+PhReCXvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdE7cuRvWZ1k+3jArtseTqBrTHYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZjFhNWQ4ZjYtZDM2Yi0z MjkxLTgwNTUtZjg4ZDY0MDU3ZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJzbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDUbiCa8Eu2+SFSyo2Wi2bwnqSsdl9on617wEB5iqFf6J/ZSTsjKb31 bSzq6wO0QkrFXl4WeTF5rlXJ8yX3p+obxXjY6rQmJuYTturT/I5X9OdwZfIXZrH2 VB1z28hOotsSSaHflusVNteC+thL2EUge3/+7gU2REAIgcDaNWWxLc9Wy5QN62iy xKBoyc0pLkn1rYBO6eoEo06TKTNGY+puhYRsILxPFow9aNlY3e4fcU6HO+l0FH4B Y/CROdEUm/1BqNDqqADKkD9YAARVgdd/1rQWhnOg/8I+nIHVhTeo8H5FEqWXpD8N AyWJy0Y9nrpn1vHT2A8tf9x6+0S7AkA= -----END CERTIFICATE-----Generated at Sun Jun 29 14:21:19 2025 by rpki-client