$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/7281ae23-867a-34c7-a504-aa8437b8e969.roa File: 7281ae23-867a-34c7-a504-aa8437b8e969.roa (raw, json) Hash identifier: Ed7/4+gU+xS4laAF0Pg3fqEX9DsBF/F6FEYlAD2SmHM= Subject key identifier: 10:1A:83:FA:10:BC:98:3B:42:F9:96:09:35:CD:29:05:77:70:E1:8C Certificate issuer: /CN=874e86b5-586f-43d7-be6f-cf21e434b31a Certificate serial: 010D0C9F4328584AF0F141A5A941EDD64ED9F6C0 Authority key identifier: 79:4D:42:84:C9:BB:D7:67:10:53:9F:15:75:82:DC:D4:12:C4:FE:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/7281ae23-867a-34c7-a504-aa8437b8e969.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 55270 IP address blocks: 204.154.142.0/23 maxlen: 23 2602:ff43::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:41:a5:a9:41:ed:d6:4e:d9:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874e86b5-586f-43d7-be6f-cf21e434b31a Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=76833343-96a5-474e-a473-f00ee6ba1bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e9:5d:08:be:76:5b:dd:b0:9a:aa:92:77:7a: b1:5c:55:58:d7:73:1b:56:c6:b9:79:39:3b:f9:50: 1b:9a:51:dc:4b:de:e4:be:c0:f0:e9:ac:63:1c:68: 95:cd:24:32:95:e0:24:f1:84:3b:b2:cb:6d:00:0b: 50:3c:03:9c:d3:91:52:72:21:8a:a4:38:71:72:58: 93:5d:d7:3a:73:9e:82:29:9e:9e:c8:25:19:40:8b: 57:7d:0c:d9:38:72:bb:f6:58:aa:6e:73:a1:97:eb: 25:ec:a7:e5:fb:06:5a:97:01:ee:c7:11:24:ce:e4: c8:17:a1:80:c8:4b:4a:89:98:ec:bd:96:d4:53:8b: eb:1e:f1:00:ee:0a:01:8e:08:ec:4e:20:95:d9:53: e5:a6:6e:50:eb:0f:66:70:46:d6:af:e0:f7:40:7e: fe:3a:b9:d3:18:e7:39:5b:2f:48:dc:47:e0:28:8d: 91:e8:d0:8f:ed:65:6e:24:53:fa:4a:9e:53:5e:63: a5:04:7b:94:73:8f:19:13:37:bc:ed:6a:bb:b3:9b: 98:2d:ba:9f:83:9f:71:a6:49:99:eb:90:c1:18:d3: a1:f8:9b:f8:10:c2:43:b2:ba:12:4f:e5:ad:fa:e5: 91:93:36:dd:9f:b7:65:47:1a:b4:d0:aa:9b:26:d5: d7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1A:83:FA:10:BC:98:3B:42:F9:96:09:35:CD:29:05:77:70:E1:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/7281ae23-867a-34c7-a504-aa8437b8e969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.crl X509v3 Authority Key Identifier: keyid:79:4D:42:84:C9:BB:D7:67:10:53:9F:15:75:82:DC:D4:12:C4:FE:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer sbgp-ipAddrBlock: critical IPv4: 204.154.142.0/23 IPv6: 2602:ff43::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:e9:76:e5:0a:9e:f7:f9:1a:db:3a:da:41:fc:ca:0e:b4:c0: 92:23:32:be:17:0d:90:70:fa:5f:4d:e8:33:56:34:57:e4:41: c0:fd:a6:52:57:4d:02:b6:23:2a:fc:cb:c2:94:2e:7d:85:14: 45:c2:21:4f:d0:94:84:f8:ec:47:8e:39:66:d3:bc:ed:58:30: 0d:1b:7d:04:58:e9:e8:ff:0f:b3:ec:3e:b2:4d:ff:25:39:bd: f9:f3:00:a6:fd:2b:90:70:d1:20:b9:9d:17:ab:28:77:0b:ae: 7a:29:1b:b7:9f:df:31:a4:a7:34:fb:96:92:e1:ae:09:4a:41: 55:e6:3c:b4:f8:9f:76:4c:0d:ee:d7:ce:45:33:93:8b:1a:d2: 96:c9:8e:f1:87:34:e4:f8:d7:c2:93:6d:45:92:89:e2:49:f3: e5:1e:c5:44:10:52:d9:0a:fb:41:48:0a:0a:f4:fe:5c:f0:59: ae:fa:46:bb:84:ac:3c:86:72:74:cc:73:af:47:f2:6d:01:3b: 21:84:a2:bd:94:79:4c:98:68:6b:57:8d:ca:ee:75:a2:b2:bb: c4:c2:b2:52:d2:98:94:40:9d:7e:af:74:a3:0a:6c:9d:58:bd: be:c3:49:8d:ce:ab:cf:3e:2b:58:b7:6f:99:1f:8f:21:7f:06: 4c:e9:2f:35 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWErw8UGlqUHt1k7Z9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc0ZTg2YjUtNTg2Zi00M2Q3LWJlNmYtY2YyMWU0MzRi MzFhMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NzY4MzMzNDMtOTZhNS00NzRlLWE0NzMtZjAwZWU2YmExYmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeldCL52W92wmqqSd3qxXFVY13MbVsa5eTk7 +VAbmlHcS97kvsDw6axjHGiVzSQyleAk8YQ7ssttAAtQPAOc05FSciGKpDhxcliT Xdc6c56CKZ6eyCUZQItXfQzZOHK79liqbnOhl+sl7Kfl+wZalwHuxxEkzuTIF6GA yEtKiZjsvZbUU4vrHvEA7goBjgjsTiCV2VPlpm5Q6w9mcEbWr+D3QH7+OrnTGOc5 Wy9I3EfgKI2R6NCP7WVuJFP6Sp5TXmOlBHuUc48ZEze87Wq7s5uYLbqfg59xpkmZ 65DBGNOh+Jv4EMJDsroST+Wt+uWRkzbdn7dlRxq00KqbJtXX1wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBAag/oQvJg7QvmWCTXNKQV3cOGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84NzRl ODZiNS01ODZmLTQzZDctYmU2Zi1jZjIxZTQzNGIzMWEvNzI4MWFlMjMtODY3YS0z NGM3LWE1MDQtYWE4NDM3YjhlOTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvODc0ZTg2YjUtNTg2Zi00M2Q3LWJl NmYtY2YyMWU0MzRiMzFhLzg3NGU4NmI1LTU4NmYtNDNkNy1iZTZmLWNmMjFlNDM0 YjMxYS5jcmwwHwYDVR0jBBgwFoAUeU1ChMm712cQU58VdYLc1BLE/u0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84NzRlODZiNS01ODZmLTQzZDctYmU2Zi1jZjIx ZTQzNGIzMWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBzJqOMA4E AgACMAgDBgQmAv9DADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBT6XblCp73+RrbOtpB/MoOtMCSIzK+Fw2Q cPpfTegzVjRX5EHA/aZSV00CtiMq/MvClC59hRRFwiFP0JSE+OxHjjlm07ztWDAN G30EWOno/w+z7D6yTf8lOb358wCm/SuQcNEguZ0Xqyh3C656KRu3n98xpKc0+5aS 4a4JSkFV5jy0+J92TA3u185FM5OLGtKWyY7xhzTk+NfCk21FkoniSfPlHsVEEFLZ CvtBSAoK9P5c8Fmu+ka7hKw8hnJ0zHOvR/JtATshhKK9lHlMmGhrV43K7nWisrvE wrJS0piUQJ1+r3SjCmydWL2+w0mNzqvPPitYt2+ZH48hfwZM6S81 -----END CERTIFICATE-----Generated at Sun Aug 24 03:52:16 2025 by rpki-client