$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/1365d043-082e-3ed9-be7d-5ce10bb44eb0.roa File: 1365d043-082e-3ed9-be7d-5ce10bb44eb0.roa (raw, json) Hash identifier: /X4j0qNLIQRVDUGyhiGhZz7sqrB8osQ73u8iWYuC470= Subject key identifier: D9:2A:13:49:30:57:9D:D1:70:C5:3C:02:AD:4C:71:47:FD:47:94:B0 Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F4328584AE9F66873A2165901E8097D40 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/1365d043-082e-3ed9-be7d-5ce10bb44eb0.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 40347 IP address blocks: 205.213.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:68:73:a2:16:59:01:e8:09:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=246efcc6-9643-4986-863e-a31d72b650b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:44:7e:f6:c2:c9:e6:a5:d2:d4:95:63:cc:1d: 57:02:b5:67:2e:ae:81:c6:85:63:04:9b:15:69:54: c5:55:96:4c:4b:7c:0d:9d:2a:b0:aa:42:20:6e:89: cf:12:34:83:f6:10:69:0a:46:f7:b7:5e:a4:d4:46: 18:e9:99:1f:80:b1:60:d6:7e:3b:e7:26:98:c0:54: a0:70:c0:65:4e:79:f3:eb:09:0c:08:3e:a1:b9:bd: 2f:a0:15:7f:6b:69:81:47:03:f6:39:74:e0:bb:4c: 21:a1:2f:80:da:71:56:d1:d2:4d:fa:8e:73:61:73: e6:36:ed:cf:4e:a2:eb:ac:29:5c:fd:45:22:87:cc: dc:35:15:96:bc:98:5e:ee:80:d2:74:39:b7:27:89: d8:0c:fc:dc:5e:3f:55:61:24:b4:00:88:20:53:ef: df:99:76:53:4c:77:85:79:e7:b7:a3:21:7f:51:72: 48:58:18:8a:bf:ad:f7:fc:5b:b1:4b:66:b6:fe:13: 00:9f:57:61:32:57:17:54:ef:77:73:c5:0b:58:02: a6:5c:6d:87:a8:14:91:4a:59:e8:c5:ac:1b:eb:ab: 17:8d:3f:d2:41:ee:fe:11:52:f4:a0:6f:9e:02:f2: d8:c7:b2:74:3f:20:db:d0:dd:ef:62:9f:61:10:f6: 5f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2A:13:49:30:57:9D:D1:70:C5:3C:02:AD:4C:71:47:FD:47:94:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/1365d043-082e-3ed9-be7d-5ce10bb44eb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 205.213.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e7:83:23:de:10:c0:d7:56:56:0e:3a:b5:ed:43:09:ab:ac: 4d:7d:5e:1f:bc:7e:94:45:c9:13:16:8a:15:a4:52:44:2e:c1: 15:72:fc:42:89:f1:2e:18:31:e0:07:aa:62:af:e9:02:c3:3a: 60:47:d2:19:97:ca:55:a0:f9:fd:23:1f:a7:f5:ca:8f:2e:9e: 23:c7:9b:78:77:6a:31:7f:28:69:2e:8e:f9:ae:8f:8d:ef:7c: 93:6b:13:48:a8:2f:38:df:42:22:5a:73:32:e2:eb:64:37:39: 96:81:ec:dc:8b:f2:d7:10:23:9d:ea:e7:ef:6f:8e:a3:57:d7: a2:f3:d4:d1:3a:5b:fb:4f:70:3e:a4:61:7c:a8:21:f9:af:e3: 4b:94:82:df:54:28:45:09:d8:75:78:03:99:b0:a3:55:01:73: 5a:ee:17:c6:5d:ae:8d:29:14:41:4d:b2:02:05:43:db:13:e2: 11:20:f1:2b:47:38:84:ab:ca:44:8b:6f:ad:30:74:29:d3:91: 66:81:04:04:0f:0c:71:db:73:f7:0f:90:9b:ac:83:4f:9a:f0: ad:de:68:4e:6a:c0:47:5a:6a:7d:50:42:a7:af:34:cb:b3:cd: a2:97:c9:34:e3:68:e0:d2:56:88:10:de:d2:37:b9:aa:6f:75: 07:78:ca:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9mhzohZZAegJfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk MjQ2ZWZjYzYtOTY0My00OTg2LTg2M2UtYTMxZDcyYjY1MGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikR+9sLJ5qXS1JVjzB1XArVnLq6BxoVjBJsV aVTFVZZMS3wNnSqwqkIgbonPEjSD9hBpCkb3t16k1EYY6ZkfgLFg1n475yaYwFSg cMBlTnnz6wkMCD6hub0voBV/a2mBRwP2OXTgu0whoS+A2nFW0dJN+o5zYXPmNu3P TqLrrClc/UUih8zcNRWWvJhe7oDSdDm3J4nYDPzcXj9VYSS0AIggU+/fmXZTTHeF eee3oyF/UXJIWBiKv633/FuxS2a2/hMAn1dhMlcXVO93c8ULWAKmXG2HqBSRSlno xawb66sXjT/SQe7+EVL0oG+eAvLYx7J0PyDb0N3vYp9hEPZfmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkqE0kwV53RcMU8Aq1McUf9R5SwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvMTM2NWQwNDMtMDgyZS0z ZWQ5LWJlN2QtNWNlMTBiYjQ0ZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdUaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3ngyPeEMDXVlYOOrXtQwmrrE19Xh+8fpRFyRMWihWkUkQuwRVy/EKJ 8S4YMeAHqmKv6QLDOmBH0hmXylWg+f0jH6f1yo8uniPHm3h3ajF/KGkujvmuj43v fJNrE0ioLzjfQiJaczLi62Q3OZaB7NyL8tcQI53q5+9vjqNX16Lz1NE6W/tPcD6k YXyoIfmv40uUgt9UKEUJ2HV4A5mwo1UBc1ruF8Zdro0pFEFNsgIFQ9sT4hEg8StH OISrykSLb60wdCnTkWaBBAQPDHHbc/cPkJusg0+a8K3eaE5qwEdaan1QQqevNMuz zaKXyTTjaODSVogQ3tI3uapvdQd4ymQ= -----END CERTIFICATE-----Generated at Sat Aug 23 18:38:26 2025 by rpki-client