$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/41387a42-8a00-3750-bed6-58a6e3fafc54.roa File: 41387a42-8a00-3750-bed6-58a6e3fafc54.roa (raw, json) Hash identifier: ZbTchwNX8Wfla4YGheHBQ4xyHDzusgmm3T4zM4VmISI= Subject key identifier: 66:BA:AC:45:A2:DA:99:BC:CD:50:72:AD:8B:EC:51:FC:FA:17:38:19 Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584AEC55D81C7BAB11A5817149F8 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/41387a42-8a00-3750-bed6-58a6e3fafc54.roa Signing time: Wed 20 Aug 2025 21:24:30 +0000 ROA not before: Wed 20 Aug 2025 21:24:30 +0000 ROA not after: Tue 18 Nov 2025 22:24:30 +0000 asID: 136806 IP address blocks: 192.163.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:55:d8:1c:7b:ab:11:a5:81:71:49:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Aug 20 21:24:30 2025 GMT Not After : Nov 18 22:24:30 2025 GMT Subject: CN=d0468513-e6d9-4a0a-8964-8eb96475a70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:e6:4a:9c:ea:75:41:a1:73:dc:19:9d:48: 3a:55:d1:47:29:48:d5:00:65:73:8e:79:d0:7a:9a: fb:96:6f:42:de:77:b5:49:72:39:df:10:c1:e9:a7: 31:df:53:0f:ca:84:c5:ef:7a:30:36:e5:d5:cc:1e: 45:a7:2d:1c:c8:e1:32:0d:96:19:de:b2:34:62:0a: 37:bb:60:24:66:04:93:c8:ae:17:aa:ce:7d:7a:cb: 9b:82:4c:41:61:d4:5d:31:81:9b:ef:16:e8:93:a9: 14:7d:42:9b:51:54:3c:dc:48:16:a6:4b:8d:ad:ad: 1e:a4:c9:e1:2f:63:ae:08:67:9e:23:46:cf:7f:13: 71:76:2b:ed:8d:0d:12:f9:e3:e5:cb:80:5d:05:a3: d0:d4:e7:b1:07:c3:04:41:5e:31:83:49:b8:44:03: a5:47:ed:df:66:a8:97:70:0b:74:58:5b:93:98:16: 91:b2:80:57:30:7a:d9:14:ad:4c:05:d9:56:c1:78: 34:2f:d9:67:58:34:10:a6:33:09:89:76:4d:03:34: 6e:04:e8:a5:9a:c9:58:92:f5:a2:ea:49:fb:be:00: f1:89:6b:43:d0:d6:6e:f7:17:08:98:bb:bd:d1:51: 5e:0e:ce:3e:c8:6e:56:2e:57:db:32:6f:61:06:fb: d9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BA:AC:45:A2:DA:99:BC:CD:50:72:AD:8B:EC:51:FC:FA:17:38:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/41387a42-8a00-3750-bed6-58a6e3fafc54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 192.163.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:48:04:76:53:f3:ab:ab:ae:24:42:23:31:5a:19:a9:5b:95: 0f:37:76:35:d6:f7:26:8b:32:b3:69:1e:81:59:d1:5d:88:1a: 2e:59:70:e9:31:24:95:01:86:f3:d3:2b:e3:d3:e7:09:dc:e1: ff:f4:38:9f:c3:2b:23:43:5c:2d:b8:56:cb:36:5b:56:fa:4a: a3:46:88:92:69:12:ad:98:23:74:bd:fb:ac:7b:21:c0:d8:c2: 53:0d:40:a2:c4:b1:08:11:e1:f4:22:94:64:21:2d:20:60:79: 38:df:5e:45:a6:e1:81:4f:33:f6:c9:d9:6e:a3:91:68:26:8a: 7f:de:0c:c3:0e:54:b3:66:67:ac:ed:3e:01:bd:e3:6c:2a:d5: 0e:20:fc:87:96:4f:56:c1:27:0a:f5:94:87:91:e5:d6:15:3a: 9f:0f:35:af:d1:b5:da:f4:1c:88:66:29:56:80:65:ba:67:46: 30:98:ef:b3:92:eb:c4:f3:ab:4d:34:5d:c3:d2:2b:2e:ab:81: a5:4a:e0:17:7a:da:f7:7f:26:9a:aa:ca:c5:75:bd:76:d6:26: a3:5a:7a:90:d7:17:89:c6:f2:30:44:ac:eb:88:f3:55:fc:1f: f4:9a:c9:57:e6:12:30:65:5c:c6:6b:fd:a2:66:07:7e:f8:83: 85:a9:e1:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsVdgce6sRpYFxSfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI1MDgyMDIxMjQzMFoXDTI1MTExODIyMjQzMFowLzEtMCsGA1UEAxMk ZDA0Njg1MTMtZTZkOS00YTBhLTg5NjQtOGViOTY0NzVhNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsTmSpzqdUGhc9wZnUg6VdFHKUjVAGVzjnnQ epr7lm9C3ne1SXI53xDB6acx31MPyoTF73owNuXVzB5Fpy0cyOEyDZYZ3rI0Ygo3 u2AkZgSTyK4Xqs59esubgkxBYdRdMYGb7xbok6kUfUKbUVQ83EgWpkuNra0epMnh L2OuCGeeI0bPfxNxdivtjQ0S+ePly4BdBaPQ1OexB8MEQV4xg0m4RAOlR+3fZqiX cAt0WFuTmBaRsoBXMHrZFK1MBdlWwXg0L9lnWDQQpjMJiXZNAzRuBOilmslYkvWi 6kn7vgDxiWtD0NZu9xcImLu90VFeDs4+yG5WLlfbMm9hBvvZ8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGa6rEWi2pm8zVByrYvsUfz6FzgZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvNDEzODdhNDItOGEwMC0z NzUwLWJlZDYtNThhNmUzZmFmYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKMFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRIBHZT86urriRCIzFaGalblQ83djXW9yaLMrNpHoFZ0V2IGi5ZcOkx JJUBhvPTK+PT5wnc4f/0OJ/DKyNDXC24Vss2W1b6SqNGiJJpEq2YI3S9+6x7IcDY wlMNQKLEsQgR4fQilGQhLSBgeTjfXkWm4YFPM/bJ2W6jkWgmin/eDMMOVLNmZ6zt PgG942wq1Q4g/IeWT1bBJwr1lIeR5dYVOp8PNa/Rtdr0HIhmKVaAZbpnRjCY77OS 68Tzq000XcPSKy6rgaVK4Bd62vd/JpqqysV1vXbWJqNaepDXF4nG8jBErOuI81X8 H/SayVfmEjBlXMZr/aJmB374g4Wp4Ss= -----END CERTIFICATE-----Generated at Sat Aug 23 22:13:24 2025 by rpki-client