$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f73e40b8-69f0-335d-8119-fd699381e1cc.roa File: f73e40b8-69f0-335d-8119-fd699381e1cc.roa (raw, json) Hash identifier: wmfTZNSVvoNYvKcQZxGPSCr5jv2ryUZZdMqusZPRtOs= Subject key identifier: F0:46:F7:6A:B8:28:42:D1:BE:BC:F3:4D:42:44:B9:B9:1B:72:08:39 Certificate issuer: /CN=f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b Certificate serial: 010D0C9F4328584B004BE94AA52EBA04DBB488F0 Authority key identifier: B0:45:5A:47:7F:BD:57:A1:D1:B9:26:DF:C1:61:94:52:E0:2F:26:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f73e40b8-69f0-335d-8119-fd699381e1cc.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 393256 IP address blocks: 204.124.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:e9:4a:a5:2e:ba:04:db:b4:88:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=f386b9a8-86c6-4bab-84a2-a13d5f7d61be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3b:bb:5e:3e:35:a9:f9:fc:5f:00:cd:94:8f: 3a:21:bb:3f:c8:58:47:70:fa:7f:1f:df:57:04:be: d7:ff:cb:9b:a7:93:28:c7:ad:0e:05:27:1f:a6:c9: c6:c5:52:54:73:02:a1:38:f3:04:31:fe:6a:71:5c: 74:2d:ad:4f:29:9d:8a:7a:9e:12:cf:44:ed:be:0c: 78:e5:62:38:dd:25:c7:fe:ef:76:f8:0a:ff:d2:4f: 52:60:04:81:a9:d8:f5:f1:a5:fb:dd:83:b1:8c:3e: ac:17:45:2a:81:9b:b4:df:99:06:0b:06:93:07:f5: 4b:05:14:2e:19:ef:41:8a:2e:a1:fd:2f:9a:c9:90: 03:ab:66:e8:a1:db:52:fd:d3:4f:22:8a:5f:b7:0e: f0:60:0a:d9:e8:f8:ce:1d:16:ef:6f:38:8b:8a:08: 86:80:34:54:fa:04:1a:3b:9b:14:ea:2a:fd:6d:d2: b3:42:fa:0f:9a:b8:7a:0f:51:56:e7:a9:8f:91:42: b5:c6:94:4f:97:21:ad:48:40:9f:81:d8:e0:fa:0a: 27:65:b2:3f:44:2d:af:a9:b3:c8:d6:7b:cc:b0:dc: bd:11:c1:c7:04:23:dd:ee:9a:7c:3d:1d:d9:0d:da: 23:1a:58:ce:4f:3e:7f:3b:eb:9f:c5:cf:7f:4f:ee: 04:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:46:F7:6A:B8:28:42:D1:BE:BC:F3:4D:42:44:B9:B9:1B:72:08:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f73e40b8-69f0-335d-8119-fd699381e1cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.crl X509v3 Authority Key Identifier: keyid:B0:45:5A:47:7F:BD:57:A1:D1:B9:26:DF:C1:61:94:52:E0:2F:26:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.cer sbgp-ipAddrBlock: critical IPv4: 204.124.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:69:18:86:35:be:be:ce:89:bc:ab:8e:d3:37:85:c9:18:e2: ed:d4:8e:5c:b3:d6:72:95:bb:3e:f6:5c:4c:d1:2b:45:7b:01: 84:4f:19:d2:09:05:42:a5:12:dd:24:a6:56:55:2f:95:0c:c8: f7:b7:0b:d6:93:c8:0b:18:89:45:68:c7:cf:56:e5:bb:d7:b3: 0b:59:87:47:d1:13:90:c9:cb:c6:74:3b:0e:2c:32:0f:ef:f3: 0d:10:92:5b:05:02:fd:3e:9d:58:67:aa:aa:c2:41:75:da:f9: cc:a9:ff:8e:18:df:a5:fd:a5:97:94:d7:5a:03:64:ed:6f:4b: 0d:23:43:02:04:95:5a:aa:9b:ea:c2:d6:74:ce:64:16:b9:9f: 5c:ac:51:7f:39:d9:af:99:df:8d:2e:2b:04:c9:b3:89:de:c1: 0f:af:c0:7f:e4:06:ae:47:c6:0b:00:7f:1a:33:4a:31:1f:11: 14:3d:c1:f6:c4:6e:b5:fa:5d:17:c8:fa:fc:04:2d:c6:47:96: 70:b5:c9:7b:ec:1a:20:2e:c3:d5:c7:6d:cb:ea:1e:3b:79:7e: d2:92:ba:48:b0:b7:c6:af:96:66:b0:46:77:c4:9a:01:c3:5f: 8b:c0:39:31:d3:dc:b1:9e:de:a4:0e:fe:da:5f:71:c8:2c:a4: 38:82:19:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+lKpS66BNu0iPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU3ZGI1ZDUtZDBkYS00ZWI2LTkzYTQtZTRjMWEzM2Rk MjNiMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZjM4NmI5YTgtODZjNi00YmFiLTg0YTItYTEzZDVmN2Q2MWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiju7Xj41qfn8XwDNlI86Ibs/yFhHcPp/H99X BL7X/8ubp5Mox60OBScfpsnGxVJUcwKhOPMEMf5qcVx0La1PKZ2Kep4Sz0Ttvgx4 5WI43SXH/u92+Ar/0k9SYASBqdj18aX73YOxjD6sF0UqgZu035kGCwaTB/VLBRQu Ge9Bii6h/S+ayZADq2boodtS/dNPIopftw7wYArZ6PjOHRbvbziLigiGgDRU+gQa O5sU6ir9bdKzQvoPmrh6D1FW56mPkUK1xpRPlyGtSECfgdjg+gonZbI/RC2vqbPI 1nvMsNy9EcHHBCPd7pp8PR3ZDdojGljOTz5/O+ufxc9/T+4EowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBG92q4KELRvrzzTUJEubkbcgg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNTdk YjVkNS1kMGRhLTRlYjYtOTNhNC1lNGMxYTMzZGQyM2IvZjczZTQwYjgtNjlmMC0z MzVkLTgxMTktZmQ2OTkzODFlMWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjU3ZGI1ZDUtZDBkYS00ZWI2LTkz YTQtZTRjMWEzM2RkMjNiL2Y1N2RiNWQ1LWQwZGEtNGViNi05M2E0LWU0YzFhMzNk ZDIzYi5jcmwwHwYDVR0jBBgwFoAUsEVaR3+9V6HRuSbfwWGUUuAvJi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNTdkYjVkNS1kMGRhLTRlYjYtOTNhNC1lNGMx YTMzZGQyM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzHyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFpGIY1vr7OibyrjtM3hckY4u3Ujlyz1nKVuz72XEzRK0V7AYRPGdIJ BUKlEt0kplZVL5UMyPe3C9aTyAsYiUVox89W5bvXswtZh0fRE5DJy8Z0Ow4sMg/v 8w0QklsFAv0+nVhnqqrCQXXa+cyp/44Y36X9pZeU11oDZO1vSw0jQwIElVqqm+rC 1nTOZBa5n1ysUX852a+Z340uKwTJs4newQ+vwH/kBq5HxgsAfxozSjEfERQ9wfbE brX6XRfI+vwELcZHlnC1yXvsGiAuw9XHbcvqHjt5ftKSukiwt8avlmawRnfEmgHD X4vAOTHT3LGe3qQO/tpfccgspDiCGcY= -----END CERTIFICATE-----Generated at Mon Oct 20 20:40:43 2025 by rpki-client