$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/d5bc8311-f66e-3e05-9b1f-60f302746583.roa File: d5bc8311-f66e-3e05-9b1f-60f302746583.roa (raw, json) Hash identifier: /mxBvUhYkaxVafq65BFGRVGX/Q2xFqRV42+3oe+6TYw= Subject key identifier: CF:53:CD:2B:6B:4A:63:E6:9A:23:2A:77:A3:25:AD:12:E4:01:1B:41 Certificate issuer: /CN=e58dee25-2204-469c-b0eb-da831443b959 Certificate serial: 010D0C9F4328584AEE268B6122FF30EC6A006B80 Authority key identifier: 52:75:10:E7:FD:E6:FD:17:78:27:4B:63:66:9D:69:2E:9F:B1:B6:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/d5bc8311-f66e-3e05-9b1f-60f302746583.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 174 IP address blocks: 198.251.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:8b:61:22:ff:30:ec:6a:00:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58dee25-2204-469c-b0eb-da831443b959 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=c040eade-990a-43e6-bdc4-6e4c595e9074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:17:9b:b4:23:c3:30:bd:f6:2b:ba:9d:67:9e: 59:6c:c4:35:2b:c4:e4:35:9a:a2:c2:7b:0e:cb:f5: ff:54:04:87:cc:26:2b:1a:14:19:4c:34:8b:e9:56: e6:22:d8:e9:01:43:57:11:5c:43:a3:2b:19:73:ef: d2:4e:db:df:05:69:f2:a5:0d:82:e0:0b:50:4d:21: 4a:74:48:5a:af:35:56:1a:d7:e1:7c:e7:b2:6f:d1: d9:cd:a5:72:a6:d4:b6:d6:e7:25:42:4b:6c:73:40: 4b:ce:33:70:cd:e7:32:bb:d5:f2:f1:fd:89:7b:3d: cc:b0:16:a2:fc:04:8f:c5:9b:19:e6:69:f5:0c:33: bd:e6:74:66:a8:dc:c8:93:4c:d6:b5:34:e9:0b:f6: b6:61:a1:97:c7:5a:1a:1d:74:6b:d0:18:14:0f:aa: 0a:b8:22:fa:a8:e8:b7:23:84:d9:9f:2d:1b:57:18: d5:ba:7d:eb:f2:25:10:17:5d:da:a6:ac:ae:e4:53: 6b:ec:0a:48:99:07:75:b5:29:18:f9:79:72:72:8b: 63:94:da:53:db:4d:ca:5c:21:62:6d:a6:87:6e:e6: 17:17:28:55:cd:26:a9:ac:c4:79:c5:66:8c:9e:7c: 69:90:1a:45:81:8a:2f:f3:66:0f:e4:ef:97:77:91: c9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:53:CD:2B:6B:4A:63:E6:9A:23:2A:77:A3:25:AD:12:E4:01:1B:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/d5bc8311-f66e-3e05-9b1f-60f302746583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.crl X509v3 Authority Key Identifier: keyid:52:75:10:E7:FD:E6:FD:17:78:27:4B:63:66:9D:69:2E:9F:B1:B6:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer sbgp-ipAddrBlock: critical IPv4: 198.251.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a9:78:a8:b6:7c:33:f1:16:15:a0:71:36:d5:c6:80:18:e1: 8a:3c:ba:be:6b:69:f0:f0:56:00:4b:4f:da:ff:bc:48:38:a7: ea:6b:16:1b:90:1b:a1:35:df:86:46:94:b0:57:81:f4:17:d4: cd:bb:5c:15:11:3a:e7:8c:bb:9f:89:1c:7b:0b:6a:13:31:9a: f1:d9:19:0c:f4:2f:5a:e0:64:40:23:8c:7c:11:fe:50:78:9a: 14:55:9a:ae:bc:48:69:7d:29:0c:e9:63:de:ce:44:26:e2:da: 7f:4f:c6:7b:2b:17:27:d8:e9:0b:46:33:ca:2c:a7:5d:bb:49: 54:1f:21:c1:4a:59:19:a9:10:ea:7a:df:a2:ba:2e:0e:27:21: d1:c4:e2:a5:77:93:ca:29:53:ab:19:11:9b:d8:1c:30:a2:e6: 32:52:e7:56:2e:48:22:81:2a:ab:e0:ca:82:61:4b:63:2b:c7: 51:df:64:65:67:94:08:3b:d3:14:cc:d2:e0:07:de:ff:da:ae: ae:82:d7:9a:24:33:c4:1a:42:5d:54:db:19:05:4b:49:86:8d: da:a9:3c:07:ac:47:c3:96:78:52:6e:65:25:8a:4f:be:e2:76: 84:25:35:2a:f2:ac:ab:ee:92:27:7e:a6:ad:3f:ab:18:d2:62: 53:b0:3d:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJothIv8w7GoAa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTU4ZGVlMjUtMjIwNC00NjljLWIwZWItZGE4MzE0NDNi OTU5MB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk YzA0MGVhZGUtOTkwYS00M2U2LWJkYzQtNmU0YzU5NWU5MDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxebtCPDML32K7qdZ55ZbMQ1K8TkNZqiwnsO y/X/VASHzCYrGhQZTDSL6VbmItjpAUNXEVxDoysZc+/STtvfBWnypQ2C4AtQTSFK dEharzVWGtfhfOeyb9HZzaVyptS21uclQktsc0BLzjNwzecyu9Xy8f2Jez3MsBai /ASPxZsZ5mn1DDO95nRmqNzIk0zWtTTpC/a2YaGXx1oaHXRr0BgUD6oKuCL6qOi3 I4TZny0bVxjVun3r8iUQF13apqyu5FNr7ApImQd1tSkY+XlycotjlNpT203KXCFi baaHbuYXFyhVzSaprMR5xWaMnnxpkBpFgYov82YP5O+Xd5HJvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9TzStrSmPmmiMqd6MlrRLkARtBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lNThk ZWUyNS0yMjA0LTQ2OWMtYjBlYi1kYTgzMTQ0M2I5NTkvZDViYzgzMTEtZjY2ZS0z ZTA1LTliMWYtNjBmMzAyNzQ2NTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTU4ZGVlMjUtMjIwNC00NjljLWIw ZWItZGE4MzE0NDNiOTU5L2U1OGRlZTI1LTIyMDQtNDY5Yy1iMGViLWRhODMxNDQz Yjk1OS5jcmwwHwYDVR0jBBgwFoAUUnUQ5/3m/Rd4J0tjZp1pLp+xtrYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9lNThkZWUyNS0yMjA0LTQ2OWMtYjBlYi1kYTgz MTQ0M2I5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvsfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqpeKi2fDPxFhWgcTbVxoAY4Yo8ur5rafDwVgBLT9r/vEg4p+prFhuQ G6E134ZGlLBXgfQX1M27XBUROueMu5+JHHsLahMxmvHZGQz0L1rgZEAjjHwR/lB4 mhRVmq68SGl9KQzpY97ORCbi2n9PxnsrFyfY6QtGM8osp127SVQfIcFKWRmpEOp6 36K6Lg4nIdHE4qV3k8opU6sZEZvYHDCi5jJS51YuSCKBKqvgyoJhS2Mrx1HfZGVn lAg70xTM0uAH3v/arq6C15okM8QaQl1U2xkFS0mGjdqpPAesR8OWeFJuZSWKT77i doQlNSryrKvukid+pq0/qxjSYlOwPUU= -----END CERTIFICATE-----Generated at Sat Aug 23 12:15:05 2025 by rpki-client