$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/325cb34e-8352-302e-ba3f-983df261f21c.roa File: 325cb34e-8352-302e-ba3f-983df261f21c.roa (raw, json) Hash identifier: 3ZELapl5WMyChrkxa0TBth0rMkvw3TAl+hFK72UYPcU= Subject key identifier: 04:B8:1E:2F:44:F1:17:9B:95:A8:59:51:17:A1:0F:2A:8F:F3:36:C5 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584AE19676D71BAC9BB93FB5F280 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/325cb34e-8352-302e-ba3f-983df261f21c.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 21724 IP address blocks: 204.101.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:76:d7:1b:ac:9b:b9:3f:b5:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=fd499f59-7e1d-438c-86e7-bb668a5fcb69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:30:09:39:2d:17:86:4c:f1:35:85:7c:fe:94: 5f:de:1d:36:21:8b:25:36:2f:96:45:b4:32:97:4c: bc:f5:06:6d:b5:d1:14:0a:ca:cd:ba:20:b1:e6:56: aa:0f:8d:3b:f1:49:4b:8a:06:5f:03:b6:b6:9f:40: 33:53:c7:84:fd:6a:29:a3:d7:03:43:26:9b:3f:96: 93:0f:d8:68:09:d0:d2:c6:55:0e:31:86:91:40:f6: d6:71:31:ef:a3:bb:3b:26:71:4b:12:a6:fd:b6:3b: d4:17:d7:eb:88:59:58:01:4e:69:3e:84:86:a2:f4: f4:d5:e4:b7:cd:10:77:2c:ea:5f:03:04:4d:c1:8e: e4:b5:4a:11:eb:e1:70:68:df:04:28:00:c1:62:8c: 64:3e:1a:2b:7d:47:65:cd:f1:da:22:8a:83:11:54: 68:20:12:e2:f0:38:53:8a:91:bc:81:30:67:29:58: 30:21:e9:cb:1c:28:ae:d2:e3:7c:0d:8d:71:85:57: b7:05:9a:16:9c:50:f9:29:3e:c5:e8:18:e4:43:1b: c3:25:cd:f7:ab:81:cc:44:8c:26:27:8f:1d:aa:01: a1:ec:ba:7e:59:7b:2d:ac:a7:3a:4b:61:69:26:78: 6c:e1:75:95:f2:79:09:6f:3d:10:12:d2:c1:ea:79: e9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B8:1E:2F:44:F1:17:9B:95:A8:59:51:17:A1:0F:2A:8F:F3:36:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/325cb34e-8352-302e-ba3f-983df261f21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 204.101.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:19:2a:fc:10:d1:e5:03:b2:f1:a9:1e:74:36:4f:07:cd:5c: 7e:35:6b:84:59:f2:cf:de:9f:ab:18:3d:e8:ad:26:19:24:cc: 82:0a:be:9c:6c:a9:05:6f:9c:07:71:6b:a8:aa:a2:78:e0:a4: 3f:99:97:bd:ed:8a:83:35:42:94:0b:9f:e3:f2:9f:97:2f:7f: 5c:e4:a4:de:b6:d6:bd:65:d5:22:f3:48:61:8b:33:b3:ce:1d: 97:91:ef:2f:15:44:34:a6:02:3b:ab:fd:aa:e6:e2:18:e1:0e: c7:f8:ef:f0:26:09:8f:2b:33:c9:b4:d5:b8:7d:23:2d:83:b4: 17:29:14:32:90:28:55:cc:2e:7a:5d:bd:4d:c0:4e:6d:f4:51: 30:a7:96:14:a5:f1:00:5b:97:a1:8d:a7:a5:78:08:c9:59:ae: c2:a3:11:40:43:ae:fb:f1:6b:3b:c6:a7:7a:a6:54:27:3d:75: 36:53:87:8a:76:0a:88:f0:f5:b5:37:12:13:4a:7c:84:b0:a1: 3a:8a:8d:56:d0:59:ac:83:79:38:04:ef:7e:56:cd:01:8d:e9: 8a:d1:e7:b4:bc:81:5d:8d:36:74:70:50:8c:55:f7:90:8f:28: 92:e2:3b:95:ed:db:62:83:f0:3b:42:f9:14:fa:a7:87:68:43: 80:a5:9d:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlnbXG6ybuT+18oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk ZmQ0OTlmNTktN2UxZC00MzhjLTg2ZTctYmI2NjhhNWZjYjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTAJOS0XhkzxNYV8/pRf3h02IYslNi+WRbQy l0y89QZttdEUCsrNuiCx5laqD4078UlLigZfA7a2n0AzU8eE/Wopo9cDQyabP5aT D9hoCdDSxlUOMYaRQPbWcTHvo7s7JnFLEqb9tjvUF9friFlYAU5pPoSGovT01eS3 zRB3LOpfAwRNwY7ktUoR6+FwaN8EKADBYoxkPhorfUdlzfHaIoqDEVRoIBLi8DhT ipG8gTBnKVgwIenLHCiu0uN8DY1xhVe3BZoWnFD5KT7F6BjkQxvDJc33q4HMRIwm J48dqgGh7Lp+WXstrKc6S2FpJnhs4XWV8nkJbz0QEtLB6nnpYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAS4Hi9E8ReblahZURehDyqP8zbFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMzI1Y2IzNGUtODM1Mi0z MDJlLWJhM2YtOTgzZGYyNjFmMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzGUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoZKvwQ0eUDsvGpHnQ2TwfNXH41a4RZ8s/en6sYPeitJhkkzIIKvpxs qQVvnAdxa6iqonjgpD+Zl73tioM1QpQLn+Pyn5cvf1zkpN621r1l1SLzSGGLM7PO HZeR7y8VRDSmAjur/arm4hjhDsf47/AmCY8rM8m01bh9Iy2DtBcpFDKQKFXMLnpd vU3ATm30UTCnlhSl8QBbl6GNp6V4CMlZrsKjEUBDrvvxazvGp3qmVCc9dTZTh4p2 Cojw9bU3EhNKfISwoTqKjVbQWayDeTgE735WzQGN6YrR57S8gV2NNnRwUIxV95CP KJLiO5Xt22KD8DtC+RT6p4doQ4ClnXg= -----END CERTIFICATE-----Generated at Sun Aug 24 10:59:42 2025 by rpki-client