$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/42054cda-212d-33df-8dc9-e1e9747eddb1.roa File: 42054cda-212d-33df-8dc9-e1e9747eddb1.roa (raw, json) Hash identifier: dKaLWXZGghTtIJ9F+oAPkGhWagU5qyfRIzp6GTrDEAk= Subject key identifier: 01:BB:EC:F3:DE:D3:E2:D6:1F:1E:C2:12:D3:60:74:9F:19:FE:88:9B Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584AF256789E2F76B2887474F4A0 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/42054cda-212d-33df-8dc9-e1e9747eddb1.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 88 IP address blocks: 204.153.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:78:9e:2f:76:b2:88:74:74:f4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=f9436da2-c450-4268-ab6a-6184e8002a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:55:3b:63:6b:15:d4:04:6f:be:e2:d7:e8:73: f9:0b:d1:93:0a:6c:1a:08:72:e4:70:29:e9:a7:87: df:c2:33:42:a2:12:60:c2:19:27:41:4b:45:cf:f9: b1:c5:e9:5e:6a:5d:f0:0e:25:6e:30:fd:36:da:35: b0:b5:6d:a7:d3:86:e3:b4:87:fe:2a:d8:ac:89:0f: 6f:b5:29:5f:de:4f:94:ae:1f:ed:3a:14:62:2e:cf: bd:12:a5:33:b9:eb:16:20:f9:20:78:39:59:3f:8d: d5:2a:87:32:c8:e0:bb:c1:10:92:d8:f6:f8:19:38: c9:e2:78:9a:1c:84:fa:c1:ef:05:8c:e9:ec:5b:1d: ce:3a:03:c3:4b:2b:ec:22:c4:4a:e4:a6:75:09:d5: ee:17:7e:a9:c1:38:02:5c:40:72:3e:d9:c9:5a:18: 92:5f:2a:26:1d:aa:f4:26:43:ee:ea:3a:54:1a:a2: 4e:81:15:0f:45:62:a8:85:a6:31:31:5c:5b:71:93: 01:3e:1e:ee:bb:91:ec:dd:5f:c2:02:7f:d0:e2:b7: 59:de:0c:74:f2:df:d5:3e:3a:9d:59:fc:50:0a:45: 56:bb:84:36:9c:f6:57:d1:77:c8:d3:f9:dd:5f:81: 87:55:be:24:ce:c1:a4:35:25:19:75:86:14:25:5d: 09:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BB:EC:F3:DE:D3:E2:D6:1F:1E:C2:12:D3:60:74:9F:19:FE:88:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/42054cda-212d-33df-8dc9-e1e9747eddb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 204.153.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:11:47:cc:42:31:4c:ec:47:44:60:bc:3c:11:68:e7:54:3e: f7:30:5c:c6:7e:c2:28:1a:d1:60:db:87:ab:14:6a:54:b7:7d: 79:a7:b5:9a:8d:e7:fe:55:e6:03:bf:0c:12:27:b1:e5:0e:6d: e8:3f:ea:96:2b:37:94:7e:cb:fb:d3:e5:e9:db:cf:b2:14:ff: 0b:3b:06:c0:ec:12:80:c5:60:db:fa:a7:c7:58:a2:89:92:54: c6:fc:06:4d:d1:0f:e4:d1:4b:d6:8f:58:89:71:71:06:61:f1: 70:68:86:ae:7f:4f:5d:dc:f8:88:1b:fe:05:51:cb:cf:a8:57: 2f:ec:13:49:bf:97:26:23:e3:37:9b:16:ff:62:bd:48:e6:bb: 19:f5:ff:23:c0:78:49:18:2e:f5:5d:94:c9:16:6a:23:75:2e: 6b:28:51:39:72:5f:5f:50:c6:47:78:3b:75:5d:ff:b0:9c:ff: bd:6b:7e:8b:dc:56:7a:a0:ad:79:4f:75:28:af:eb:c9:b1:69: 06:8a:ab:c3:c9:40:6a:6e:57:8d:af:30:4a:46:e9:c3:33:66: f4:84:8d:e4:c6:2e:3f:e1:30:40:e7:d4:26:66:21:36:22:08: 28:6d:5d:f3:70:81:1e:13:1d:7b:d0:54:b1:f9:17:c3:d8:8c: f9:50:3b:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnieL3ayiHR09KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk Zjk0MzZkYTItYzQ1MC00MjY4LWFiNmEtNjE4NGU4MDAyYTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71U7Y2sV1ARvvuLX6HP5C9GTCmwaCHLkcCnp p4ffwjNCohJgwhknQUtFz/mxxeleal3wDiVuMP022jWwtW2n04bjtIf+KtisiQ9v tSlf3k+Urh/tOhRiLs+9EqUzuesWIPkgeDlZP43VKocyyOC7wRCS2Pb4GTjJ4nia HIT6we8FjOnsWx3OOgPDSyvsIsRK5KZ1CdXuF36pwTgCXEByPtnJWhiSXyomHar0 JkPu6jpUGqJOgRUPRWKohaYxMVxbcZMBPh7uu5Hs3V/CAn/Q4rdZ3gx08t/VPjqd WfxQCkVWu4Q2nPZX0XfI0/ndX4GHVb4kzsGkNSUZdYYUJV0JPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAG77PPe0+LWHx7CEtNgdJ8Z/oibMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvNDIwNTRjZGEtMjEyZC0z M2RmLThkYzktZTFlOTc0N2VkZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgRR8xCMUzsR0RgvDwRaOdUPvcwXMZ+wiga0WDbh6sUalS3fXmntZqN 5/5V5gO/DBInseUObeg/6pYrN5R+y/vT5enbz7IU/ws7BsDsEoDFYNv6p8dYoomS VMb8Bk3RD+TRS9aPWIlxcQZh8XBohq5/T13c+Igb/gVRy8+oVy/sE0m/lyYj4zeb Fv9ivUjmuxn1/yPAeEkYLvVdlMkWaiN1LmsoUTlyX19Qxkd4O3Vd/7Cc/71rfovc VnqgrXlPdSiv68mxaQaKq8PJQGpuV42vMEpG6cMzZvSEjeTGLj/hMEDn1CZmITYi CChtXfNwgR4THXvQVLH5F8PYjPlQOxk= -----END CERTIFICATE-----Generated at Sat Aug 23 21:15:24 2025 by rpki-client