$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/235cefab-f003-344e-a29e-ed3307aa2358.roa File: 235cefab-f003-344e-a29e-ed3307aa2358.roa (raw, json) Hash identifier: nAs1+d24+5qjuDZB+tV585nX+gehygxC7iI+s56bjTg= Subject key identifier: 5F:07:DF:BB:25:F7:FA:44:43:83:8E:48:45:60:F1:DF:3B:D1:76:E7 Certificate issuer: /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c Certificate serial: 010D0C9F4328584AEB5BCF2697D397F759833A00 Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/235cefab-f003-344e-a29e-ed3307aa2358.roa Signing time: Wed 20 Aug 2025 13:00:41 +0000 ROA not before: Wed 20 Aug 2025 13:00:41 +0000 ROA not after: Tue 18 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 204.57.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:5b:cf:26:97:d3:97:f7:59:83:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c Validity Not Before: Aug 20 13:00:41 2025 GMT Not After : Nov 18 14:00:41 2025 GMT Subject: CN=dee3fd78-c80a-4c7b-953d-acae729abe25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:81:0c:fe:81:c4:22:29:67:57:7a:95:3a:ff: b6:94:aa:d9:72:ee:ef:ad:a1:97:94:d8:b0:09:ef: 54:65:26:f2:27:ac:96:6a:1b:77:2d:54:4e:3b:70: ae:7e:bb:25:c2:e2:59:cb:01:f6:58:f2:41:77:55: f0:ed:8a:58:5e:d9:09:ea:68:af:68:34:bd:3e:5b: d0:c4:92:e7:e4:b6:db:57:25:f6:fa:bd:83:58:88: 31:66:6b:59:7c:84:b5:dd:62:fd:3a:b0:25:cd:08: a3:3a:9e:14:ff:9c:3d:97:84:4c:db:18:34:67:27: 90:cd:8b:63:38:a0:77:ee:3e:0f:ba:00:0c:d9:6e: af:f9:43:c5:7e:d1:06:a5:8a:f0:14:0e:ea:57:c0: 68:85:4a:d2:21:93:28:dd:73:3b:b6:7b:ae:e4:34: be:9f:63:ff:a0:06:7f:85:52:e7:c7:ee:c6:b2:08: b2:c6:5f:9c:0f:59:ac:ab:fa:e9:bf:14:8d:b6:54: b0:28:60:e4:75:fe:f0:75:5c:b5:f9:c0:4e:f9:26: fb:fb:3a:1d:be:cf:54:e8:c3:0b:ef:0c:be:4e:e8: 55:14:41:4f:97:ce:3e:a3:f4:25:1b:21:0c:e1:5e: 93:96:33:3a:b2:d3:ab:23:6f:ca:21:29:a7:28:6e: ff:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:07:DF:BB:25:F7:FA:44:43:83:8E:48:45:60:F1:DF:3B:D1:76:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/235cefab-f003-344e-a29e-ed3307aa2358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl X509v3 Authority Key Identifier: keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer sbgp-ipAddrBlock: critical IPv4: 204.57.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a2:ff:42:46:a8:3c:5f:43:b5:07:90:2f:56:1c:29:d9:d6: e4:90:f3:73:e8:73:18:71:19:0c:40:ca:18:86:5d:c3:23:7b: ea:d9:22:03:41:c4:71:a0:2c:b1:52:da:b7:53:9b:ac:2f:1d: 12:c7:55:53:0b:a4:94:de:27:1e:4b:0c:11:46:78:e6:d0:34: 32:37:b9:fb:92:e2:68:11:be:57:6c:9d:b9:df:ea:72:71:ef: e8:08:55:41:f0:ed:89:d4:b5:0e:22:b3:5a:2c:bc:be:76:e1: 07:8c:8b:55:b2:87:8b:b5:41:ed:bd:c3:4e:9f:ed:70:65:ba: dd:0d:37:f3:52:d6:42:89:90:76:1c:9c:56:df:e1:cb:6d:f7: 53:b7:c8:b0:a2:14:c3:41:84:c6:82:ea:45:07:43:45:b7:2b: 9f:09:a2:ca:4c:5c:ad:85:ec:fb:63:fb:ac:6c:92:3d:41:0a: c5:5f:46:e4:cf:5c:fa:cc:58:c9:df:f8:65:8a:d2:79:fa:54: 4b:47:76:09:f8:ae:e4:47:41:40:4e:b2:b0:d4:c0:98:63:86: cc:a4:3c:49:44:1d:ad:62:f8:b4:97:ce:d3:f7:18:eb:45:31: af:9a:de:1b:ae:92:8b:c2:7b:ed:dd:21:1d:bd:1f:05:cd:1f: 96:13:b8:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrW88ml9OX91mDOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ4MGRhYTUtNzlkYy00YzJhLTg4NzktMjQ4YTNmM2Uz MzljMB4XDTI1MDgyMDEzMDA0MVoXDTI1MTExODE0MDA0MVowLzEtMCsGA1UEAxMk ZGVlM2ZkNzgtYzgwYS00YzdiLTk1M2QtYWNhZTcyOWFiZTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIEM/oHEIilnV3qVOv+2lKrZcu7vraGXlNiw Ce9UZSbyJ6yWaht3LVROO3CufrslwuJZywH2WPJBd1Xw7YpYXtkJ6mivaDS9PlvQ xJLn5LbbVyX2+r2DWIgxZmtZfIS13WL9OrAlzQijOp4U/5w9l4RM2xg0ZyeQzYtj OKB37j4PugAM2W6v+UPFftEGpYrwFA7qV8BohUrSIZMo3XM7tnuu5DS+n2P/oAZ/ hVLnx+7Gsgiyxl+cD1msq/rpvxSNtlSwKGDkdf7wdVy1+cBO+Sb7+zodvs9U6MML 7wy+TuhVFEFPl84+o/QlGyEM4V6TljM6stOrI2/KISmnKG7/bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8H37sl9/pEQ4OOSEVg8d870XbnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80ZDgw ZGFhNS03OWRjLTRjMmEtODg3OS0yNDhhM2YzZTMzOWMvMjM1Y2VmYWItZjAwMy0z NDRlLWEyOWUtZWQzMzA3YWEyMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGQ4MGRhYTUtNzlkYy00YzJhLTg4 NzktMjQ4YTNmM2UzMzljLzRkODBkYWE1LTc5ZGMtNGMyYS04ODc5LTI0OGEzZjNl MzM5Yy5jcmwwHwYDVR0jBBgwFoAURSS0Po4TMO3Vlg05oMUNPZbAVvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80ZDgwZGFhNS03OWRjLTRjMmEtODg3OS0yNDhh M2YzZTMzOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzDnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHai/0JGqDxfQ7UHkC9WHCnZ1uSQ83PocxhxGQxAyhiGXcMje+rZIgNB xHGgLLFS2rdTm6wvHRLHVVMLpJTeJx5LDBFGeObQNDI3ufuS4mgRvldsnbnf6nJx 7+gIVUHw7YnUtQ4is1osvL524QeMi1Wyh4u1Qe29w06f7XBlut0NN/NS1kKJkHYc nFbf4ctt91O3yLCiFMNBhMaC6kUHQ0W3K58JospMXK2F7Ptj+6xskj1BCsVfRuTP XPrMWMnf+GWK0nn6VEtHdgn4ruRHQUBOsrDUwJhjhsykPElEHa1i+LSXztP3GOtF Ma+a3huukovCe+3dIR29HwXNH5YTuCg= -----END CERTIFICATE-----Generated at Sat Aug 23 06:41:01 2025 by rpki-client