$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa File: 6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa (raw, json) Hash identifier: CEWn0UeIzJZNxauJyuCmtpz69vOtEUi++RTXBOOMowI= Subject key identifier: F9:B6:D0:3A:BA:DE:6C:8B:E9:82:65:F1:DC:40:D9:18:46:8C:91:2E Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584AF0F1306DDBDD8B261B63F300 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 192.175.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:30:6d:db:dd:8b:26:1b:63:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=ae08661a-bcdd-4e29-873a-0075282c9f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6a:16:7a:6a:f5:6d:fc:88:e8:7a:c3:98:0c: 77:78:b1:e3:26:00:70:53:3b:89:9b:ed:79:b3:e3: 7c:e5:b8:d4:5c:b1:b2:0a:5e:14:3e:b8:ea:f8:4a: 4a:65:d7:ff:1d:b4:95:5c:2e:d8:c3:ee:d4:1d:dd: 80:2f:23:0d:89:29:4b:7e:87:cb:d3:4a:e5:13:15: c7:14:dd:44:b4:c6:56:44:88:44:58:39:6f:08:70: b9:e3:2e:74:9d:a8:50:42:58:a8:a7:4a:09:f9:b1: 71:c3:8f:7b:6d:1c:c6:7f:88:c5:78:2f:c7:81:e4: 9d:fe:ad:6d:4d:81:9e:7d:23:2f:ef:0f:bb:f3:b4: 94:81:dd:f5:9f:2f:15:c7:df:ed:27:97:26:53:16: dd:6f:26:61:cd:b8:e1:89:ab:be:66:4c:6d:1e:45: a9:53:2c:9a:e3:f7:a7:a0:f3:23:68:e4:f4:12:3e: a5:92:f8:0f:87:d3:67:0a:5d:bf:56:5d:b5:b5:f3: d5:73:fb:bc:e0:68:58:c5:85:9d:52:2d:82:ae:55: b0:d1:62:ba:a5:f1:1e:05:ba:34:98:2f:35:27:79: c8:a0:c6:60:dc:ea:ef:66:4d:f1:03:5e:98:72:66: 0d:fe:db:f3:ac:78:28:81:d9:ba:89:d8:c8:65:d3: 8f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B6:D0:3A:BA:DE:6C:8B:E9:82:65:F1:DC:40:D9:18:46:8C:91:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 192.175.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:1e:4c:af:d9:54:12:fd:07:8e:e2:dd:3e:b0:c6:e4:41:55: 60:45:6a:c3:7c:29:e5:f7:f0:e8:69:b0:00:ad:e3:cc:2e:4b: 35:e7:73:10:2a:2b:08:0f:03:2c:06:ad:5f:23:4f:c4:9d:08: f8:ce:39:ee:aa:54:85:4e:a8:b9:01:a1:24:47:a0:99:6e:0d: 23:b6:c6:78:92:f9:a1:b0:13:23:10:82:c7:e5:bd:16:45:c5: 8e:6a:96:6b:33:1e:fa:38:2c:42:ad:c5:1a:86:71:b2:6e:0a: 50:2f:09:23:da:6d:d1:a1:f5:ef:fb:54:81:ec:16:4f:b2:2b: fa:65:82:f2:57:5c:70:c6:66:9b:3c:4a:d7:75:8a:c0:a4:36: 59:af:6f:fc:bd:5a:6f:e8:fa:95:0e:0e:59:3d:30:c3:3d:87: ee:66:f5:dd:ce:25:ba:48:f9:98:4f:ad:e7:96:61:7f:9d:e3: da:b4:95:13:4c:a5:09:31:53:e4:bc:2a:5f:0c:73:ef:71:b3: c1:f7:74:ac:52:64:93:13:ac:af:ea:f6:56:d9:95:13:fa:29: 03:e0:52:e6:65:be:18:f4:45:5a:ba:17:52:c6:9c:f1:77:e4: 6b:c8:5a:87:c6:32:c4:66:ae:a9:d3:98:97:fa:83:6a:02:74: 59:2d:5e:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TBt292LJhtj8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YWUwODY2MWEtYmNkZC00ZTI5LTg3M2EtMDA3NTI4MmM5ZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmoWemr1bfyI6HrDmAx3eLHjJgBwUzuJm+15 s+N85bjUXLGyCl4UPrjq+EpKZdf/HbSVXC7Yw+7UHd2ALyMNiSlLfofL00rlExXH FN1EtMZWRIhEWDlvCHC54y50nahQQliop0oJ+bFxw497bRzGf4jFeC/HgeSd/q1t TYGefSMv7w+787SUgd31ny8Vx9/tJ5cmUxbdbyZhzbjhiau+ZkxtHkWpUyya4/en oPMjaOT0Ej6lkvgPh9NnCl2/Vl21tfPVc/u84GhYxYWdUi2CrlWw0WK6pfEeBbo0 mC81J3nIoMZg3OrvZk3xA16YcmYN/tvzrHgogdm6idjIZdOP9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPm20Dq63myL6YJl8dxA2RhGjJEuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNmUyZTZhZGMtYzk3OS0z ZTlhLWI1ZjUtNThjOWEzYzU4NDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwK8DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIeTK/ZVBL9B47i3T6wxuRBVWBFasN8KeX38OhpsACt48wuSzXncxAq KwgPAywGrV8jT8SdCPjOOe6qVIVOqLkBoSRHoJluDSO2xniS+aGwEyMQgsflvRZF xY5qlmszHvo4LEKtxRqGcbJuClAvCSPabdGh9e/7VIHsFk+yK/plgvJXXHDGZps8 Std1isCkNlmvb/y9Wm/o+pUODlk9MMM9h+5m9d3OJbpI+ZhPreeWYX+d49q0lRNM pQkxU+S8Kl8Mc+9xs8H3dKxSZJMTrK/q9lbZlRP6KQPgUuZlvhj0RVq6F1LGnPF3 5GvIWofGMsRmrqnTmJf6g2oCdFktXmA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:04:53 2025 by rpki-client