$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/62a90f96-8aec-3e12-b7ac-38e78f13a34c.roa File: 62a90f96-8aec-3e12-b7ac-38e78f13a34c.roa (raw, json) Hash identifier: J6dFkJ15gGk5bSJTWWv+NnPU2mwxkSCWxAnpSVapU9k= Subject key identifier: BB:9E:44:D5:80:EC:BF:7A:F8:3D:6F:D1:9F:15:7C:D0:3C:6F:B9:63 Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F43285849CE9A3F6C2A68617AE1602E40 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/62a90f96-8aec-3e12-b7ac-38e78f13a34c.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 6639 IP address blocks: 192.0.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:3f:6c:2a:68:61:7a:e1:60:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=5f4e6006-3dac-4057-a866-cca4d61846bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2c:66:34:fa:72:fd:b1:d4:ba:02:cc:d0:a0: 0a:23:80:6a:0a:0f:0e:4e:30:6f:ca:b9:27:91:d7: 1a:f0:81:41:dc:a6:8b:a8:d4:e7:2a:29:d4:e9:49: c4:6f:7e:f9:9a:c4:41:0c:75:c7:60:71:87:cf:bc: f4:a6:6b:6b:ba:e8:5f:df:b9:8e:75:74:50:8f:e6: 0b:10:6e:cc:99:44:49:03:7f:2f:c6:c2:b5:cb:1f: 02:b3:18:16:04:3a:68:b1:98:ac:24:e6:de:5e:14: 39:7b:36:b2:b0:8f:a3:99:c7:fe:2a:91:1e:c2:ff: 43:3d:c0:62:08:7d:db:e1:e2:74:d6:83:11:68:fd: 2d:cb:be:57:72:9d:91:d4:ce:f4:40:ed:ea:a6:24: 7b:d8:27:f7:77:02:4a:4c:e9:fb:3f:38:c2:d0:31: ab:b6:6d:a4:aa:69:b4:04:80:4f:4b:ee:b1:c4:f0: 0d:36:9a:38:3a:18:55:0a:5b:62:f6:a7:bb:1a:04: e8:a2:87:71:a2:08:55:91:05:6a:14:11:a5:b1:50: 8b:cd:13:17:aa:5c:53:d9:bd:f9:3e:0b:f6:fb:22: 31:2d:54:2b:fc:43:cf:79:e2:e0:6d:37:05:da:32: 28:a2:9d:e5:42:83:6d:79:a5:06:75:18:61:2d:8d: 9d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9E:44:D5:80:EC:BF:7A:F8:3D:6F:D1:9F:15:7C:D0:3C:6F:B9:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/62a90f96-8aec-3e12-b7ac-38e78f13a34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv4: 192.0.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:e1:9a:cf:51:51:59:e6:52:5a:25:f1:f4:5d:ee:f3:31:97: c8:93:61:60:05:1e:3d:96:00:93:3a:77:45:c9:98:2c:89:b4: 56:e0:ef:0d:f0:93:5e:25:65:91:04:17:89:97:c6:4a:5a:cd: 93:5e:f0:22:b9:03:5d:f9:09:bb:ad:20:33:54:de:ab:14:08: 4a:b3:ce:e5:36:11:76:96:02:b4:4c:74:93:8b:05:ee:36:ef: d5:30:7d:85:c3:72:b5:fd:82:98:8a:5d:89:ed:7a:93:b8:97: 11:5c:a6:7b:a5:c7:69:89:e7:53:b1:c3:e4:ab:ed:3c:db:7b: 6c:13:56:83:3f:69:3a:07:11:ae:53:26:e3:9f:e7:9f:60:bf: 7b:de:bc:9a:d2:f3:ed:97:fa:fb:31:00:b1:56:3b:ba:84:04: 6c:5e:b6:36:1b:75:f4:2e:83:20:f7:50:26:5e:cc:0d:41:26: c0:84:08:4c:dc:0a:d2:92:07:c4:ea:0c:29:1a:19:79:e3:2a: 27:7e:ad:68:70:c6:68:16:ae:26:78:0a:09:a3:d6:75:ab:78: d4:61:dd:d9:61:94:9c:39:cb:3c:7c:3a:dc:43:a6:8f:c7:b7: 2e:43:3f:5b:a9:fd:97:91:b7:fe:b6:13:74:a8:3e:e0:90:2c: e3:99:91:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmj9sKmhheuFgLkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NWY0ZTYwMDYtM2RhYy00MDU3LWE4NjYtY2NhNGQ2MTg0NmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCxmNPpy/bHUugLM0KAKI4BqCg8OTjBvyrkn kdca8IFB3KaLqNTnKinU6UnEb375msRBDHXHYHGHz7z0pmtruuhf37mOdXRQj+YL EG7MmURJA38vxsK1yx8CsxgWBDposZisJObeXhQ5ezaysI+jmcf+KpEewv9DPcBi CH3b4eJ01oMRaP0ty75Xcp2R1M70QO3qpiR72Cf3dwJKTOn7PzjC0DGrtm2kqmm0 BIBPS+6xxPANNpo4OhhVClti9qe7GgTooodxoghVkQVqFBGlsVCLzRMXqlxT2b35 Pgv2+yIxLVQr/EPPeeLgbTcF2jIoop3lQoNteaUGdRhhLY2dTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLueRNWA7L96+D1v0Z8VfNA8b7ljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvNjJhOTBmOTYtOGFlYy0z ZTEyLWI3YWMtMzhlNzhmMTNhMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwAAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3hms9RUVnmUlol8fRd7vMxl8iTYWAFHj2WAJM6d0XJmCyJtFbg7w3w k14lZZEEF4mXxkpazZNe8CK5A135CbutIDNU3qsUCEqzzuU2EXaWArRMdJOLBe42 79UwfYXDcrX9gpiKXYntepO4lxFcpnulx2mJ51Oxw+Sr7Tzbe2wTVoM/aToHEa5T JuOf559gv3vevJrS8+2X+vsxALFWO7qEBGxetjYbdfQugyD3UCZezA1BJsCECEzc CtKSB8TqDCkaGXnjKid+rWhwxmgWriZ4Cgmj1nWreNRh3dlhlJw5yzx8OtxDpo/H ty5DP1up/ZeRt/62E3SoPuCQLOOZkew= -----END CERTIFICATE-----Generated at Mon Jun 30 10:24:34 2025 by rpki-client