$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/be1d82ad-92ed-344f-a01e-a8a8a392094f.roa File: be1d82ad-92ed-344f-a01e-a8a8a392094f.roa (raw, json) Hash identifier: CDYXc5xOhJTrsAkxM71joXn0AqMvn0ZF4y9/YNsqebc= Subject key identifier: 20:1B:84:DB:D1:EB:4E:FA:8F:C1:AE:76:0C:AF:5C:6C:C3:85:0A:0E Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584AEE268687B9FCE7A365277DC0 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/be1d82ad-92ed-344f-a01e-a8a8a392094f.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 7810 IP address blocks: 204.214.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:86:87:b9:fc:e7:a3:65:27:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=7311314b-2b01-4b4a-866b-9da80321da3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:98:09:25:28:32:81:13:71:8c:6a:36:5e:30: 1d:b2:1a:3e:4f:2e:27:69:a7:b1:ad:49:89:fd:8b: 4f:f2:0e:9d:f9:fd:e8:3d:ce:ef:0f:01:a9:e2:1e: 15:b5:6b:34:d6:27:1d:e2:68:eb:54:52:64:b2:94: 1c:4c:34:31:f0:2a:bc:3b:69:3c:cf:44:fd:6c:be: 52:49:29:69:57:47:e3:d8:fc:24:32:16:28:6d:86: 8f:33:c6:f6:b6:b2:2a:6b:5f:9b:0e:00:6f:9d:20: e5:b6:2e:2c:94:b3:f4:f7:11:37:17:86:69:53:5c: 20:43:5f:10:14:9e:5a:63:0d:77:f5:37:79:e1:e1: e1:c9:f2:e8:9e:24:a8:c4:6b:56:9f:b1:30:6e:eb: 6d:8c:6f:1d:67:e3:00:3f:02:77:06:0a:68:80:80: c9:f5:a4:42:29:21:b6:4c:2b:cd:45:34:da:c8:88: aa:61:08:bb:70:66:cc:51:b7:7f:e0:f4:9f:67:2d: c0:6c:d0:8b:a1:22:cd:88:4a:dc:bb:4e:12:ae:f4: 43:c6:26:c9:f7:27:38:82:4b:94:25:ee:6f:e5:d7: 89:aa:46:27:62:22:e8:cb:a9:e5:46:47:87:14:8f: 6a:22:71:04:93:04:9e:d2:4e:05:c3:aa:f9:82:89: aa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1B:84:DB:D1:EB:4E:FA:8F:C1:AE:76:0C:AF:5C:6C:C3:85:0A:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/be1d82ad-92ed-344f-a01e-a8a8a392094f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.214.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ee:95:04:f7:6d:0c:7d:8a:c4:58:7f:4b:1e:9d:a2:0d:de: 18:07:f7:f3:90:68:dd:8d:53:4e:14:41:64:01:bb:95:c0:7d: 62:60:11:7e:3d:4a:03:de:5e:ac:fa:df:2b:dc:83:dd:67:4c: d8:8d:b3:ac:28:4a:00:6d:17:1b:6a:d3:11:f4:09:e3:8f:80: 64:ea:09:45:31:65:6e:76:32:4c:e3:16:e7:db:c3:7f:06:cd: 58:26:ee:d8:eb:f6:51:18:ef:e4:2b:da:c4:bf:0f:12:f8:7a: 35:72:e3:14:b3:a5:10:87:2f:d2:36:ac:e5:0b:df:31:e5:82: e0:f6:17:f1:9b:b1:d8:2b:12:e5:fa:49:54:60:4f:f3:60:24: cb:ec:0f:bf:a1:ad:5e:a5:60:e5:10:3b:26:64:e0:a1:d0:7d: f5:a7:55:6a:3b:35:ae:0a:48:0a:97:dd:0b:4c:c8:c8:22:4a: 8a:28:0e:65:33:a9:78:25:ff:09:dd:40:a5:92:e5:ed:d2:e8: 2f:96:53:5c:42:85:1b:da:48:fa:5b:1c:5d:b3:ef:80:51:4b: 1e:a6:e7:9d:28:13:b4:4c:3e:da:e2:77:fd:97:2c:7a:b7:b3: 6e:c6:78:a3:f7:cd:10:76:82:8d:67:69:07:65:e8:37:9a:4b: c6:f1:49:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJoaHufzno2UnfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk NzMxMTMxNGItMmIwMS00YjRhLTg2NmItOWRhODAzMjFkYTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5gJJSgygRNxjGo2XjAdsho+Ty4naaexrUmJ /YtP8g6d+f3oPc7vDwGp4h4VtWs01icd4mjrVFJkspQcTDQx8Cq8O2k8z0T9bL5S SSlpV0fj2PwkMhYobYaPM8b2trIqa1+bDgBvnSDlti4slLP09xE3F4ZpU1wgQ18Q FJ5aYw139Td54eHhyfLoniSoxGtWn7EwbuttjG8dZ+MAPwJ3BgpogIDJ9aRCKSG2 TCvNRTTayIiqYQi7cGbMUbd/4PSfZy3AbNCLoSLNiErcu04SrvRDxibJ9yc4gkuU Je5v5deJqkYnYiLoy6nlRkeHFI9qInEEkwSe0k4Fw6r5gomqVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAbhNvR6076j8GudgyvXGzDhQoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvYmUxZDgyYWQtOTJlZC0z NDRmLWEwMWUtYThhOGEzOTIwOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzNaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjulQT3bQx9isRYf0senaIN3hgH9/OQaN2NU04UQWQBu5XAfWJgEX49 SgPeXqz63yvcg91nTNiNs6woSgBtFxtq0xH0CeOPgGTqCUUxZW52MkzjFufbw38G zVgm7tjr9lEY7+Qr2sS/DxL4ejVy4xSzpRCHL9I2rOUL3zHlguD2F/GbsdgrEuX6 SVRgT/NgJMvsD7+hrV6lYOUQOyZk4KHQffWnVWo7Na4KSAqX3QtMyMgiSoooDmUz qXgl/wndQKWS5e3S6C+WU1xChRvaSPpbHF2z74BRSx6m550oE7RMPtrid/2XLHq3 s27GeKP3zRB2go1naQdl6DeaS8bxSXk= -----END CERTIFICATE-----Generated at Sat Aug 23 20:50:34 2025 by rpki-client