$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/1b665078-97d3-3b44-911e-af654cfb98a0.roa File: 1b665078-97d3-3b44-911e-af654cfb98a0.roa (raw, json) Hash identifier: qT+Bdm/9SOb9wDY9i7mnkT+YCBELN9VVF1d89wiHAro= Subject key identifier: 54:24:C5:7E:B7:CA:CC:6E:63:1D:A0:D5:86:FC:E8:12:D5:21:02:03 Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Certificate serial: 010D0C9F4328584ADA9BC0CAD81ECABDD8AB1DA0 Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/1b665078-97d3-3b44-911e-af654cfb98a0.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 23158 IP address blocks: 67.216.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c0:ca:d8:1e:ca:bd:d8:ab:1d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=739d080d-a3bc-44f8-b9f3-607fdec28e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:27:7b:28:5a:37:53:8c:52:fa:b8:69:74: fa:c5:96:50:63:0f:c9:f9:e3:fe:59:eb:12:98:7e: ab:db:7c:d9:c2:dc:8d:1b:33:eb:26:a9:75:3a:c4: 53:4f:4e:f4:2e:7b:b7:16:3c:ae:f4:4c:ab:0e:ad: 4c:3e:ac:fb:2b:b8:52:dc:99:cf:11:dc:ee:94:92: 36:4b:31:4b:3e:7c:68:aa:7c:48:b1:44:de:bc:c8: e6:e9:12:b7:ea:5c:6a:4f:25:56:12:78:29:0f:a8: 2f:ea:3d:04:1a:e8:c0:21:9f:f9:3c:94:98:5e:90: 2f:0a:4f:46:a2:83:c0:de:40:f6:c7:e3:11:97:e0: 49:4b:b6:ac:ff:83:c7:f1:c6:1d:5a:fa:87:7b:b7: 2b:4f:39:a5:d9:31:ca:0f:75:80:7d:6a:10:ac:16: 0d:82:c5:02:61:0d:72:00:38:e7:21:4c:05:d6:52: 4a:c6:aa:75:3f:7f:d6:eb:f7:c9:e7:45:ec:e4:c4: 2c:c5:f0:b8:a4:ca:ce:fb:85:76:5e:33:b0:f5:df: 51:b1:ef:58:e3:c5:82:20:d5:3c:23:9b:9d:b6:e0: 75:c2:70:bc:ab:1f:64:f6:24:f8:79:68:93:7d:09: f1:43:c3:8e:89:35:4d:a3:71:77:0d:71:68:08:ec: c4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:24:C5:7E:B7:CA:CC:6E:63:1D:A0:D5:86:FC:E8:12:D5:21:02:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/1b665078-97d3-3b44-911e-af654cfb98a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl X509v3 Authority Key Identifier: keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer sbgp-ipAddrBlock: critical IPv4: 67.216.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:1e:4c:1c:bd:88:85:f8:a8:45:e8:ba:dd:ce:34:93:2d:4f: 05:ff:55:83:50:15:20:6f:36:ce:64:2d:f7:27:1d:63:5a:aa: b7:43:ff:36:0b:2f:58:00:b7:1a:1b:f2:f9:35:cc:b3:46:db: 8c:3e:f4:9a:bd:97:8a:2b:73:e0:78:30:b4:89:13:7f:21:96: bf:0b:bb:da:5d:22:e0:9c:6d:50:54:c8:64:08:27:d6:f6:f7: 3c:e6:31:40:74:e0:72:fa:8e:35:9d:b0:77:24:9d:3c:f6:38: b0:5b:43:88:45:6a:fe:38:0f:a7:6f:c3:48:f0:9a:67:95:c7: df:6c:72:e6:93:fa:30:f3:2d:79:29:36:36:18:9a:c2:ce:41: 1b:e0:ff:4c:92:94:18:c3:41:ee:55:6e:bc:41:a3:91:5f:bb: 91:dd:2c:0b:d7:36:3e:ae:30:ef:3a:b3:51:b7:68:b1:0b:c2: 3b:32:06:ed:5b:34:34:5f:7a:7e:96:b2:17:9d:e8:71:43:f0: 80:e2:7f:67:85:bf:5b:8f:08:f1:4a:01:e6:de:eb:24:92:6f: de:82:50:72:9c:1b:28:b3:bb:01:a7:02:e3:55:2c:6d:b6:67: 11:18:f1:fb:57:b6:d4:cd:60:b7:9e:fa:5c:15:a3:72:48:76: 04:16:e2:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8DK2B7KvdirHaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy ZDUyMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk NzM5ZDA4MGQtYTNiYy00NGY4LWI5ZjMtNjA3ZmRlYzI4ZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIMneyhaN1OMUvq4aXT6xZZQYw/J+eP+WesS mH6r23zZwtyNGzPrJql1OsRTT070Lnu3Fjyu9EyrDq1MPqz7K7hS3JnPEdzulJI2 SzFLPnxoqnxIsUTevMjm6RK36lxqTyVWEngpD6gv6j0EGujAIZ/5PJSYXpAvCk9G ooPA3kD2x+MRl+BJS7as/4PH8cYdWvqHe7crTzml2THKD3WAfWoQrBYNgsUCYQ1y ADjnIUwF1lJKxqp1P3/W6/fJ50Xs5MQsxfC4pMrO+4V2XjOw9d9Rse9Y48WCINU8 I5udtuB1wnC8qx9k9iT4eWiTfQnxQ8OOiTVNo3F3DXFoCOzELwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQkxX63ysxuYx2g1Yb86BLVIQIDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvMWI2NjUwNzgtOTdkMy0z YjQ0LTkxMWUtYWY2NTRjZmI5OGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0 MTNmYjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9jwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEseTBy9iIX4qEXout3ONJMtTwX/VYNQFSBvNs5kLfcnHWNaqrdD/zYL L1gAtxob8vk1zLNG24w+9Jq9l4orc+B4MLSJE38hlr8Lu9pdIuCcbVBUyGQIJ9b2 9zzmMUB04HL6jjWdsHcknTz2OLBbQ4hFav44D6dvw0jwmmeVx99scuaT+jDzLXkp NjYYmsLOQRvg/0ySlBjDQe5VbrxBo5Ffu5HdLAvXNj6uMO86s1G3aLELwjsyBu1b NDRfen6Wshed6HFD8IDif2eFv1uPCPFKAebe6ySSb96CUHKcGyizuwGnAuNVLG22 ZxEY8ftXttTNYLee+lwVo3JIdgQW4mE= -----END CERTIFICATE-----Generated at Sun Aug 24 03:18:27 2025 by rpki-client