$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/df8863a9-c9c2-395a-99c9-7f033d9b17cb.roa File: df8863a9-c9c2-395a-99c9-7f033d9b17cb.roa (raw, json) Hash identifier: YCjsoWZs8COOr5xSDlJSnQbe0/vC2rpYDBM4BfIzqgY= Subject key identifier: A7:4D:0F:AB:EE:F8:71:9B:1C:F0:9E:53:81:D3:55:CD:B5:F6:82:A4 Certificate issuer: /CN=37d983de-280d-4374-a056-b21eb13451dd Certificate serial: 010D0C9F4328584AE19671C889C5DC222B1A4880 Authority key identifier: A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/df8863a9-c9c2-395a-99c9-7f033d9b17cb.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 33604 IP address blocks: 204.13.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:71:c8:89:c5:dc:22:2b:1a:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37d983de-280d-4374-a056-b21eb13451dd Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=7ea2cd25-9d03-4d76-ab6d-53543555d4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4e:53:ab:0e:ba:71:a5:8e:f1:6d:d8:a4:8e: d8:e9:9c:00:75:25:c6:c2:b6:07:ce:ef:e3:ff:d0: 64:15:55:1f:f4:3a:e7:18:c8:f6:20:81:03:7b:d8: 9b:c9:9d:e0:39:85:7e:cd:ae:d2:45:db:e7:ed:e7: 6e:3a:ce:a9:13:fd:91:10:5f:5d:df:86:47:35:ad: c1:c4:f6:1f:34:69:b6:af:58:e0:b1:b6:8d:7f:b5: ca:03:b9:4c:98:3f:4a:f4:ef:5c:0f:f0:f5:9e:26: 7b:4e:32:82:82:ae:1e:ff:50:3c:17:f3:bf:a2:c6: 43:51:c6:9c:a7:57:5a:c8:27:f0:f4:8c:6e:65:c1: 75:41:bc:ca:cd:e9:43:1a:4e:d0:7d:f7:db:89:84: e4:c3:b7:a0:2d:fb:1b:12:86:39:04:d6:0e:3d:76: 83:41:31:ef:8f:c8:92:f1:8e:f3:cd:e9:31:60:2d: ee:a4:4f:7e:7f:76:8f:b5:de:ba:6d:ec:8e:ea:f9: 6c:71:11:b0:9e:d2:31:d5:9c:1b:3f:ae:31:01:ee: d4:21:53:f4:1c:f4:1c:94:2b:a3:0b:4b:85:34:e5: 57:e6:42:e4:b5:67:97:f8:5d:c8:de:04:71:f4:ba: ce:48:9c:c4:69:3f:29:01:a9:85:df:22:b4:12:f8: f9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4D:0F:AB:EE:F8:71:9B:1C:F0:9E:53:81:D3:55:CD:B5:F6:82:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/df8863a9-c9c2-395a-99c9-7f033d9b17cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.crl X509v3 Authority Key Identifier: keyid:A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer sbgp-ipAddrBlock: critical IPv4: 204.13.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:12:c4:40:5c:4b:db:db:ff:c2:77:5e:a4:1a:f1:77:5c:08: 97:1b:0b:a3:13:bd:63:4b:63:50:c1:02:b6:e4:0a:be:fe:0c: 76:90:60:02:65:ac:90:7a:9e:1d:5b:66:fd:b7:82:7a:b6:31: 33:cd:3d:54:14:29:d6:d6:8a:7d:f5:e4:46:67:11:59:32:8e: ac:10:e2:62:77:88:7e:1d:a5:cb:b9:ae:06:7a:9b:3d:ae:bc: 34:67:d8:f2:9a:76:b6:aa:5b:14:49:2b:f9:6a:57:22:2e:fd: 51:f3:35:d2:bd:c6:c6:96:dd:e6:67:04:c2:99:08:2b:c1:f0: 9e:e7:9e:45:39:ca:92:ef:07:36:bd:67:af:da:81:99:c5:4d: ef:ce:d8:d1:af:ce:ab:e1:98:de:24:98:7e:b4:d9:f4:86:14: 73:8b:44:31:50:4b:5c:be:26:84:ed:fa:72:a6:93:e5:ba:da: b3:8a:a9:42:c0:c5:58:01:9f:2a:ff:27:2f:a4:08:ae:e5:0e: 97:9a:7f:8d:7b:04:e4:53:77:f1:66:6b:c7:a4:dd:bf:50:73: 4a:58:ff:3f:05:29:9a:05:6e:87:67:ed:db:8c:dc:01:9e:51: 89:92:ca:ae:69:75:38:9c:30:67:0a:11:00:52:85:25:9f:83: 38:58:bb:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlnHIicXcIisaSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdkOTgzZGUtMjgwZC00Mzc0LWEwNTYtYjIxZWIxMzQ1 MWRkMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk N2VhMmNkMjUtOWQwMy00ZDc2LWFiNmQtNTM1NDM1NTVkNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj05Tqw66caWO8W3YpI7Y6ZwAdSXGwrYHzu/j /9BkFVUf9DrnGMj2IIEDe9ibyZ3gOYV+za7SRdvn7eduOs6pE/2REF9d34ZHNa3B xPYfNGm2r1jgsbaNf7XKA7lMmD9K9O9cD/D1niZ7TjKCgq4e/1A8F/O/osZDUcac p1dayCfw9IxuZcF1QbzKzelDGk7QfffbiYTkw7egLfsbEoY5BNYOPXaDQTHvj8iS 8Y7zzekxYC3upE9+f3aPtd66beyO6vlscRGwntIx1ZwbP64xAe7UIVP0HPQclCuj C0uFNOVX5kLktWeX+F3I3gRx9LrOSJzEaT8pAamF3yK0Evj5nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdND6vu+HGbHPCeU4HTVc219oKkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zN2Q5 ODNkZS0yODBkLTQzNzQtYTA1Ni1iMjFlYjEzNDUxZGQvZGY4ODYzYTktYzljMi0z OTVhLTk5YzktN2YwMzNkOWIxN2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzdkOTgzZGUtMjgwZC00Mzc0LWEw NTYtYjIxZWIxMzQ1MWRkLzM3ZDk4M2RlLTI4MGQtNDM3NC1hMDU2LWIyMWViMTM0 NTFkZC5jcmwwHwYDVR0jBBgwFoAUpe6pxbt2LCB+w6LvNsi5JtK1B7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zN2Q5ODNkZS0yODBkLTQzNzQtYTA1Ni1iMjFl YjEzNDUxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzA0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQSxEBcS9vb/8J3XqQa8XdcCJcbC6MTvWNLY1DBArbkCr7+DHaQYAJl rJB6nh1bZv23gnq2MTPNPVQUKdbWin315EZnEVkyjqwQ4mJ3iH4dpcu5rgZ6mz2u vDRn2PKadraqWxRJK/lqVyIu/VHzNdK9xsaW3eZnBMKZCCvB8J7nnkU5ypLvBza9 Z6/agZnFTe/O2NGvzqvhmN4kmH602fSGFHOLRDFQS1y+JoTt+nKmk+W62rOKqULA xVgBnyr/Jy+kCK7lDpeaf417BORTd/Fma8ek3b9Qc0pY/z8FKZoFbodn7duM3AGe UYmSyq5pdTicMGcKEQBShSWfgzhYuzQ= -----END CERTIFICATE-----Generated at Sun Aug 24 08:47:50 2025 by rpki-client