$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/25ab92f9-f211-33f5-b5e3-a16b9792576c.roa File: 25ab92f9-f211-33f5-b5e3-a16b9792576c.roa (raw, json) Hash identifier: uhJS66Ov7p+CUqEBI4UPHFyniuRYV8yE5Qw2W4GOQZE= Subject key identifier: 38:8D:5B:A8:A6:74:85:E6:80:87:BF:55:45:49:51:87:68:24:AA:EC Certificate issuer: /CN=644bdcac-05fd-4dd5-adbd-9dbd2fb295c4 Certificate serial: 010D0C9F4328584ADA9BCE44CFF016C65FB99D80 Authority key identifier: 60:17:08:15:3B:F0:7A:BA:18:96:C4:50:13:84:C4:35:25:52:F0:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/25ab92f9-f211-33f5-b5e3-a16b9792576c.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 20467 IP address blocks: 205.203.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:ce:44:cf:f0:16:c6:5f:b9:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644bdcac-05fd-4dd5-adbd-9dbd2fb295c4 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=8fdf2ac5-a9e8-4ddd-a6fa-389e60e8275a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e0:bd:c9:f6:27:8b:5a:7e:0a:c3:b0:57:73: 14:0c:22:c1:3a:ca:45:70:09:43:c8:51:97:04:97: 2c:55:3a:09:e4:be:eb:12:a3:be:fd:9e:55:5a:3c: e3:5d:89:ff:fc:63:b8:37:9f:82:a2:b8:84:10:a2: 8c:dc:34:f6:3a:7c:92:2b:94:fc:40:b8:75:4e:6d: d2:c4:11:86:40:7e:50:08:2b:73:b8:91:84:2a:b4: de:12:de:85:15:66:5b:b3:42:f2:ae:09:0e:6a:64: 58:0d:e5:8d:87:13:99:2d:7e:f0:04:8c:98:ef:ab: 84:44:0c:d5:b9:8c:eb:3d:c0:8e:a7:c7:c2:2f:e2: 48:b4:59:84:37:5c:83:a2:1e:25:d9:58:75:17:da: 9c:8e:1d:ca:cc:04:ce:4b:32:df:90:bc:66:09:8b: d6:cd:9e:ac:7e:36:65:4e:69:d7:fc:cd:3d:dd:2c: 95:1d:9e:2a:d5:5d:31:89:53:c8:cf:66:01:29:ea: dd:32:58:99:21:db:35:b7:9a:b1:47:2e:03:b4:cb: 3a:f9:74:3d:28:bd:17:74:91:4e:f4:5e:19:d8:42: bb:04:ed:5f:ce:28:ff:b5:6c:2d:da:bb:ff:dc:72: df:63:40:7d:cd:c1:af:1b:8d:91:32:6b:98:30:87: 8c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8D:5B:A8:A6:74:85:E6:80:87:BF:55:45:49:51:87:68:24:AA:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/25ab92f9-f211-33f5-b5e3-a16b9792576c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.crl X509v3 Authority Key Identifier: keyid:60:17:08:15:3B:F0:7A:BA:18:96:C4:50:13:84:C4:35:25:52:F0:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.cer sbgp-ipAddrBlock: critical IPv4: 205.203.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:f7:b9:d5:22:fa:16:4d:44:4d:c4:52:3c:7c:8c:58:7d:98: c6:25:6f:f9:06:a8:6e:cf:dd:19:d2:3d:b7:4f:fb:87:ce:c9: 8c:f1:86:fa:90:e7:87:e2:0f:74:43:c0:f9:4d:39:82:38:34: 6c:e2:fb:cf:ec:c0:23:8a:ee:01:7b:b2:89:ee:32:9d:82:71: 02:77:8e:2c:4d:9c:6b:5f:85:72:de:f1:be:3f:a6:33:0c:80: 9b:a7:dc:b9:11:11:7e:0a:6f:58:fb:0a:dc:80:d1:7d:11:50: 41:9a:0c:d8:07:ff:cb:ca:5a:1f:d6:4b:eb:45:44:5c:c4:9e: 84:05:13:d2:f2:a9:71:db:c8:40:fd:ee:60:33:8a:d5:bc:66: 45:ed:77:f3:8f:60:bb:a3:fb:ca:24:fa:3a:a0:10:a3:fa:6c: ba:81:fe:ee:21:e2:f7:7d:cb:20:89:20:86:01:9b:94:95:1a: 1a:5c:9b:b7:16:7c:57:5e:2e:41:9a:32:ca:e3:68:c2:1a:e6: 53:42:81:d8:8f:ab:6b:1e:5d:d4:65:b3:4a:e5:32:58:82:62: 9c:7c:08:0d:b9:e5:98:d0:4d:19:f5:41:c5:ba:0f:c5:b6:5f: 3b:7c:cc:d6:c5:31:8b:35:6b:fb:3c:0b:9a:39:e8:bc:a3:48: bd:9d:bb:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram85Ez/AWxl+5nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ0YmRjYWMtMDVmZC00ZGQ1LWFkYmQtOWRiZDJmYjI5 NWM0MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk OGZkZjJhYzUtYTllOC00ZGRkLWE2ZmEtMzg5ZTYwZTgyNzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+C9yfYni1p+CsOwV3MUDCLBOspFcAlDyFGX BJcsVToJ5L7rEqO+/Z5VWjzjXYn//GO4N5+CoriEEKKM3DT2OnySK5T8QLh1Tm3S xBGGQH5QCCtzuJGEKrTeEt6FFWZbs0LyrgkOamRYDeWNhxOZLX7wBIyY76uERAzV uYzrPcCOp8fCL+JItFmEN1yDoh4l2Vh1F9qcjh3KzATOSzLfkLxmCYvWzZ6sfjZl TmnX/M093SyVHZ4q1V0xiVPIz2YBKerdMliZIds1t5qxRy4DtMs6+XQ9KL0XdJFO 9F4Z2EK7BO1fzij/tWwt2rv/3HLfY0B9zcGvG42RMmuYMIeMaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiNW6imdIXmgIe/VUVJUYdoJKrsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDRi ZGNhYy0wNWZkLTRkZDUtYWRiZC05ZGJkMmZiMjk1YzQvMjVhYjkyZjktZjIxMS0z M2Y1LWI1ZTMtYTE2Yjk3OTI1NzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ0YmRjYWMtMDVmZC00ZGQ1LWFk YmQtOWRiZDJmYjI5NWM0LzY0NGJkY2FjLTA1ZmQtNGRkNS1hZGJkLTlkYmQyZmIy OTVjNC5jcmwwHwYDVR0jBBgwFoAUYBcIFTvweroYlsRQE4TENSVS8BUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDRiZGNhYy0wNWZkLTRkZDUtYWRiZC05ZGJk MmZiMjk1YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzcs+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADD3udUi+hZNRE3EUjx8jFh9mMYlb/kGqG7P3RnSPbdP+4fOyYzxhvqQ 54fiD3RDwPlNOYI4NGzi+8/swCOK7gF7sonuMp2CcQJ3jixNnGtfhXLe8b4/pjMM gJun3LkREX4Kb1j7CtyA0X0RUEGaDNgH/8vKWh/WS+tFRFzEnoQFE9LyqXHbyED9 7mAzitW8ZkXtd/OPYLuj+8ok+jqgEKP6bLqB/u4h4vd9yyCJIIYBm5SVGhpcm7cW fFdeLkGaMsrjaMIa5lNCgdiPq2seXdRls0rlMliCYpx8CA255ZjQTRn1QcW6D8W2 Xzt8zNbFMYs1a/s8C5o56LyjSL2du4I= -----END CERTIFICATE-----Generated at Sat Aug 23 23:46:42 2025 by rpki-client