$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/036de617-e76d-30ec-9b98-0b9dba94ed13.roa File: 036de617-e76d-30ec-9b98-0b9dba94ed13.roa (raw, json) Hash identifier: RiIUpzb/7vpsJ+vz9hyrYXe4CyTwp1n0hp/UVb2Uiww= Subject key identifier: 2E:B8:B7:A2:2B:88:34:92:1D:F5:D1:B2:83:F5:D5:81:1C:A4:7D:BB Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584ACE0B91D8C602D7B2A03703B0 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/036de617-e76d-30ec-9b98-0b9dba94ed13.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 36050 IP address blocks: 205.243.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:91:d8:c6:02:d7:b2:a0:37:03:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=5c42552c-9dc5-41bc-bab6-2f311f66b1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4d:b7:b6:2b:a1:a9:57:97:a7:63:17:be:7a: ce:1e:32:99:da:c4:46:0a:18:92:e3:40:1c:6e:63: b0:d5:ce:4f:93:39:76:38:06:eb:c0:58:31:97:ea: 03:c6:66:6b:de:4a:f6:82:f9:88:19:b2:51:2e:84: 4c:2a:89:ca:e0:a9:85:df:88:c1:d9:b3:a6:5c:f9: 41:53:a4:b3:1c:30:61:7c:66:a2:ea:06:12:d6:d5: 69:65:c7:4d:94:db:16:bf:5a:a9:84:5b:44:9e:55: 86:b5:55:1d:a4:f3:bd:08:4d:a9:26:1a:c8:d4:5a: 01:d2:8f:4b:8c:05:f0:a2:c0:a5:be:8d:8b:96:4a: 71:44:d4:67:6f:ad:b6:d4:84:73:8e:b7:a1:19:d8: 2f:f5:80:24:03:db:02:b9:bf:0d:3e:5b:97:39:1a: 6d:24:22:2a:33:e6:91:45:a0:36:5d:cf:b8:00:da: 97:16:e8:cc:1d:51:a0:cc:ef:86:e4:74:9e:88:00: ab:bd:49:58:40:74:e1:f4:b6:3d:ce:1b:c2:ea:c0: bc:66:28:02:b4:4a:a8:0a:37:42:19:17:63:8b:f8: 14:13:d5:3f:c1:6f:8a:84:c8:84:44:e1:74:29:3c: f6:ee:ec:d3:d0:de:bc:14:a0:b1:96:35:36:b1:35: 34:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B8:B7:A2:2B:88:34:92:1D:F5:D1:B2:83:F5:D5:81:1C:A4:7D:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/036de617-e76d-30ec-9b98-0b9dba94ed13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 205.243.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:97:0c:86:5c:55:56:86:2d:73:34:c1:51:6f:25:42:9c:bb: 39:0f:c2:eb:0b:80:7a:3b:f0:e6:6b:b5:84:36:ae:12:84:ec: a2:11:74:0b:94:e7:f2:ad:34:d5:fb:29:d8:89:88:d5:4d:3f: c8:97:1b:08:11:78:de:17:b3:76:90:9d:f5:89:6e:ab:01:fa: a0:04:ca:2b:b5:53:79:a6:2c:9f:03:a0:23:77:f8:3b:be:25: 85:33:22:fa:b2:3e:d6:fa:29:34:53:f0:f8:04:4d:45:e7:e0: 05:64:2d:59:eb:c5:93:c0:9e:5f:99:57:b4:2b:35:da:4a:17: ab:66:ae:a7:6f:1e:31:48:63:e7:a7:52:ce:bd:47:f4:ad:82: 37:54:4e:da:27:ee:58:3d:b4:7e:2c:e8:9d:d2:e5:30:01:ff: f3:6e:7d:7b:87:26:75:d0:5b:64:39:f2:94:8d:47:fd:4b:50: 43:79:43:4a:40:20:f9:a5:12:4a:1d:db:ad:09:4a:64:c4:b2: 2d:a9:6e:fc:fb:ae:f5:76:02:c0:fc:dd:8c:9d:16:bd:e2:a9: 19:33:4e:45:27:70:b2:43:23:39:43:9e:86:69:d2:1f:82:b8: 24:c1:21:89:8b:78:21:06:e6:72:97:f4:30:24:15:cd:5d:13: 1c:66:80:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5HYxgLXsqA3A7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk NWM0MjU1MmMtOWRjNS00MWJjLWJhYjYtMmYzMTFmNjZiMWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi023tiuhqVeXp2MXvnrOHjKZ2sRGChiS40Ac bmOw1c5Pkzl2OAbrwFgxl+oDxmZr3kr2gvmIGbJRLoRMKonK4KmF34jB2bOmXPlB U6SzHDBhfGai6gYS1tVpZcdNlNsWv1qphFtEnlWGtVUdpPO9CE2pJhrI1FoB0o9L jAXwosClvo2LlkpxRNRnb6221IRzjrehGdgv9YAkA9sCub8NPluXORptJCIqM+aR RaA2Xc+4ANqXFujMHVGgzO+G5HSeiACrvUlYQHTh9LY9zhvC6sC8ZigCtEqoCjdC GRdji/gUE9U/wW+KhMiEROF0KTz27uzT0N68FKCxljU2sTU0ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC64t6IriDSSHfXRsoP11YEcpH27MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMDM2ZGU2MTctZTc2ZC0z MGVjLTliOTgtMGI5ZGJhOTRlZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzfNPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+XDIZcVVaGLXM0wVFvJUKcuzkPwusLgHo78OZrtYQ2rhKE7KIRdAuU 5/KtNNX7KdiJiNVNP8iXGwgReN4Xs3aQnfWJbqsB+qAEyiu1U3mmLJ8DoCN3+Du+ JYUzIvqyPtb6KTRT8PgETUXn4AVkLVnrxZPAnl+ZV7QrNdpKF6tmrqdvHjFIY+en Us69R/StgjdUTton7lg9tH4s6J3S5TAB//NufXuHJnXQW2Q58pSNR/1LUEN5Q0pA IPmlEkod260JSmTEsi2pbvz7rvV2AsD83YydFr3iqRkzTkUncLJDIzlDnoZp0h+C uCTBIYmLeCEG5nKX9DAkFc1dExxmgE0= -----END CERTIFICATE-----Generated at Sat Aug 23 14:41:11 2025 by rpki-client