$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/82c856a3-1a7b-3cf0-a6dd-236a1345191e.roa File: 82c856a3-1a7b-3cf0-a6dd-236a1345191e.roa (raw, json) Hash identifier: 3dpa/MWSRbOQDOZtqSTy4RsX/ae34uEsJcQHC8OKX30= Subject key identifier: 80:B3:31:48:CD:7A:11:D9:0A:66:80:09:37:F7:55:67:37:A6:92:D5 Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1 Certificate serial: 010D0C9F4328584AD7D1510D8DCB4EB8FD971DC0 Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/82c856a3-1a7b-3cf0-a6dd-236a1345191e.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 14618 IP address blocks: 205.201.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:51:0d:8d:cb:4e:b8:fd:97:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=dd76f19f-3a9b-4919-86b2-de6f17ae7c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f3:c8:6b:ef:2b:f9:ec:ab:c3:1b:07:49:45: c3:0a:be:c3:c3:59:10:df:17:76:2b:3a:f6:dc:4a: ac:51:ac:18:46:6c:51:2c:87:3f:48:bd:0d:a5:d1: a0:72:a4:da:54:b6:2c:94:2a:76:7b:22:91:58:e0: e9:94:c8:6e:28:74:a4:04:65:95:2d:d8:d0:50:26: 1b:b5:fe:ba:2b:14:05:db:f8:47:ca:85:3e:c6:e6: 6e:d8:16:2a:de:d8:c5:ff:56:39:18:2e:98:33:8d: 52:e4:6f:43:46:a6:43:ad:66:a9:8d:b0:61:03:26: a8:dc:a0:ab:7d:12:13:b7:86:58:ae:12:04:74:35: f8:cc:d2:09:49:77:92:ff:1e:38:55:42:07:30:f5: 6b:15:e5:93:b0:19:3a:29:dd:22:8a:1d:4e:72:81: a1:17:82:4c:7a:13:d6:26:9c:28:5f:f2:08:94:6a: 2b:0b:c8:4b:28:ac:0a:3a:c2:8e:b7:01:ed:78:8c: cd:f9:b2:8a:bf:b5:d8:d7:46:f1:a3:c6:09:34:f9: bd:68:14:37:1a:41:0e:74:43:f8:12:3f:bd:a8:01: 3a:c5:25:85:93:83:fb:c6:ac:03:b6:d8:80:e3:05: f6:7d:15:9a:d4:af:f3:9a:3c:0d:74:b0:4d:3d:29: e1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B3:31:48:CD:7A:11:D9:0A:66:80:09:37:F7:55:67:37:A6:92:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/82c856a3-1a7b-3cf0-a6dd-236a1345191e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl X509v3 Authority Key Identifier: keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer sbgp-ipAddrBlock: critical IPv4: 205.201.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f5:4a:fe:64:cf:f9:67:c2:3b:14:06:57:91:23:e9:7a:85: 57:19:ce:5a:e2:85:af:b2:c5:c8:fc:cf:33:da:ec:31:d7:1d: e0:8f:6a:9b:af:7c:ca:d3:b0:1d:61:4b:f7:42:4d:8f:98:29: f3:ea:18:5e:1a:85:7f:72:08:2e:b7:bd:9d:a9:57:b5:2f:1c: 33:b0:e0:04:fd:9e:18:7e:33:72:05:07:ca:29:1c:2c:39:96: e1:c8:ec:48:43:3c:ab:f8:68:c2:75:f5:b7:40:bc:be:e7:c8: 7d:ea:27:cc:92:a2:25:db:0d:f1:24:da:31:38:3d:12:82:d9: 7c:27:e7:6b:93:18:e3:da:cb:e8:e8:5e:32:04:ef:e0:c1:8c: f2:5e:20:04:70:83:9c:ec:02:bc:32:a9:49:f1:74:4b:5d:51: 3d:47:14:af:28:bb:b0:39:33:70:4b:19:b8:de:ea:51:ab:48: 20:7e:50:19:83:8d:a7:e6:10:f0:2a:07:98:04:cb:88:c1:41: b1:29:6c:f0:58:1c:23:a6:84:40:49:81:1f:12:6b:06:29:d7: 6c:05:7c:ca:ae:ec:80:bf:26:6e:26:27:79:6d:b9:2c:6b:69: 88:09:6f:13:ab:d2:1b:71:d0:6a:48:51:2b:ed:6b:47:13:a9: 52:28:f3:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0VENjctOuP2XHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTc0MzA5ZGMtMjBmNS00ODk0LTk3MDctZjJlNDQ2NTcz ZWExMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZGQ3NmYxOWYtM2E5Yi00OTE5LTg2YjItZGU2ZjE3YWU3YzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PPIa+8r+eyrwxsHSUXDCr7Dw1kQ3xd2Kzr2 3EqsUawYRmxRLIc/SL0NpdGgcqTaVLYslCp2eyKRWODplMhuKHSkBGWVLdjQUCYb tf66KxQF2/hHyoU+xuZu2BYq3tjF/1Y5GC6YM41S5G9DRqZDrWapjbBhAyao3KCr fRITt4ZYrhIEdDX4zNIJSXeS/x44VUIHMPVrFeWTsBk6Kd0iih1OcoGhF4JMehPW JpwoX/IIlGorC8hLKKwKOsKOtwHteIzN+bKKv7XY10bxo8YJNPm9aBQ3GkEOdEP4 Ej+9qAE6xSWFk4P7xqwDttiA4wX2fRWa1K/zmjwNdLBNPSnhNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICzMUjNehHZCmaACTf3VWc3ppLVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NzQz MDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0NDY1NzNlYTEvODJjODU2YTMtMWE3Yi0z Y2YwLWE2ZGQtMjM2YTEzNDUxOTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTc0MzA5ZGMtMjBmNS00ODk0LTk3 MDctZjJlNDQ2NTczZWExLzk3NDMwOWRjLTIwZjUtNDg5NC05NzA3LWYyZTQ0NjU3 M2VhMS5jcmwwHwYDVR0jBBgwFoAU8wpyK8l5Fe1rdy/fvqwHji6l1eEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NzQzMDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0 NDY1NzNlYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzck7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD1Sv5kz/lnwjsUBleRI+l6hVcZzlriha+yxcj8zzPa7DHXHeCPapuv fMrTsB1hS/dCTY+YKfPqGF4ahX9yCC63vZ2pV7UvHDOw4AT9nhh+M3IFB8opHCw5 luHI7EhDPKv4aMJ19bdAvL7nyH3qJ8ySoiXbDfEk2jE4PRKC2Xwn52uTGOPay+jo XjIE7+DBjPJeIARwg5zsArwyqUnxdEtdUT1HFK8ou7A5M3BLGbje6lGrSCB+UBmD jafmEPAqB5gEy4jBQbEpbPBYHCOmhEBJgR8SawYp12wFfMqu7IC/Jm4mJ3ltuSxr aYgJbxOr0htx0GpIUSvta0cTqVIo86I= -----END CERTIFICATE-----Generated at Sat Aug 23 08:25:01 2025 by rpki-client