$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/211939ae-b8ba-4aba-a3aa-2491062ac9b5/70d95197-60d0-3284-831a-e071a08e8c13.roa File: 70d95197-60d0-3284-831a-e071a08e8c13.roa (raw, json) Hash identifier: tRWsGOrn+ZpY5vIH+lwVbzLCA3ln0W+ugYzqtLCjb7E= Subject key identifier: 78:1E:61:FD:56:28:5A:11:8E:CE:48:A4:58:82:F0:4A:D8:21:68:AB Certificate issuer: /CN=211939ae-b8ba-4aba-a3aa-2491062ac9b5 Certificate serial: 010D0C9F4328584AC2E0FE0681A730A2CDDA0500 Authority key identifier: 7D:2F:41:96:29:85:4C:DF:5B:A6:BC:AC:E3:96:FC:EC:D1:26:31:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/211939ae-b8ba-4aba-a3aa-2491062ac9b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/211939ae-b8ba-4aba-a3aa-2491062ac9b5/70d95197-60d0-3284-831a-e071a08e8c13.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 8075 IP address blocks: 204.239.54.0/24 maxlen: 24 204.239.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/211939ae-b8ba-4aba-a3aa-2491062ac9b5/211939ae-b8ba-4aba-a3aa-2491062ac9b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/211939ae-b8ba-4aba-a3aa-2491062ac9b5/211939ae-b8ba-4aba-a3aa-2491062ac9b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/211939ae-b8ba-4aba-a3aa-2491062ac9b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:fe:06:81:a7:30:a2:cd:da:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=211939ae-b8ba-4aba-a3aa-2491062ac9b5 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=12a176e7-6167-4532-a06f-5ec9a9c0284a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:db:e5:fd:e7:94:03:02:0a:a0:32:26:8e:85: 7d:bb:f4:06:e8:8d:d4:53:94:0d:eb:55:9f:c5:81: f8:02:0f:a9:f2:bb:c1:4e:ab:df:24:4b:bf:21:62: 5e:12:cb:ab:75:27:f5:f2:3a:51:c1:e4:c0:ca:84: a7:4d:15:42:d6:7f:97:9c:2c:c4:83:f1:db:45:35: 78:96:21:51:f3:1d:fb:fa:66:13:44:7a:5a:65:70: 40:f2:2d:ae:38:e6:1e:0d:22:51:1e:22:b3:0f:67: 85:5d:1c:00:25:aa:19:f3:f5:18:e4:90:85:0f:03: 13:81:a9:7c:ee:e2:1e:be:cd:50:73:a7:75:eb:97: 19:d7:2f:3a:09:41:3a:45:20:9b:18:09:66:12:4d: 9d:da:0e:9e:3a:27:60:90:d7:16:33:c3:3f:bb:ef: 46:9b:82:60:59:54:d1:6c:31:e7:b9:5d:87:12:aa: 79:35:ee:2d:27:d6:18:03:dd:19:f1:0d:f8:b4:59: c5:7f:91:0f:8b:05:db:98:fc:3b:2d:68:20:29:48: b9:51:02:36:5d:09:50:ce:8c:ea:04:51:61:27:e3: ad:82:d0:7f:1b:85:fb:c6:da:f3:19:b2:09:36:08: 8d:c1:69:b8:91:68:2d:ee:84:22:4c:c4:eb:05:35: ae:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1E:61:FD:56:28:5A:11:8E:CE:48:A4:58:82:F0:4A:D8:21:68:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/211939ae-b8ba-4aba-a3aa-2491062ac9b5/70d95197-60d0-3284-831a-e071a08e8c13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/211939ae-b8ba-4aba-a3aa-2491062ac9b5/211939ae-b8ba-4aba-a3aa-2491062ac9b5.crl X509v3 Authority Key Identifier: keyid:7D:2F:41:96:29:85:4C:DF:5B:A6:BC:AC:E3:96:FC:EC:D1:26:31:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/211939ae-b8ba-4aba-a3aa-2491062ac9b5.cer sbgp-ipAddrBlock: critical IPv4: 204.239.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:5b:8f:dc:65:7a:45:6f:2c:04:07:8c:3b:ca:ba:3c:ef:3f: 11:03:1e:b0:42:73:4d:b9:42:1c:fb:9a:f5:44:ab:9b:98:d8: 85:51:d3:17:96:2e:73:91:e8:93:bc:de:5b:76:d6:54:c5:6d: 0a:fc:fb:92:22:64:1a:a8:e0:40:8d:3b:78:89:b0:14:55:57: f8:3d:69:8b:e3:61:be:64:e1:93:62:6e:87:ee:c3:d4:4d:8f: 0e:f2:4f:f7:56:c4:0b:e1:14:7a:81:1f:fb:50:44:9d:ec:16: cc:61:4c:22:7b:58:4d:84:72:f9:73:1e:15:99:79:30:57:7c: 4f:87:76:b3:af:63:94:3a:ce:1c:08:bb:6c:be:cf:b5:b8:ce: ed:bf:9d:a9:84:90:4c:67:96:5a:52:34:79:f1:33:3c:8a:71: 70:e6:60:de:cf:05:d3:7b:6b:b6:a0:0d:46:0a:ba:03:d5:d6: dd:11:42:be:80:58:85:21:cc:2e:0e:f5:43:91:bd:e0:96:e8: fe:7a:52:73:b1:b7:24:01:7c:7a:c1:0f:2d:26:aa:3e:01:62: 40:7c:db:65:23:8a:34:35:c9:0f:4f:b6:98:1f:2a:d6:fc:85: b8:f6:7b:67:7f:27:e9:1f:54:75:0d:4e:1a:1d:59:22:71:a8: 48:bf:e3:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4P4Ggacwos3aBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjExOTM5YWUtYjhiYS00YWJhLWEzYWEtMjQ5MTA2MmFj OWI1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MTJhMTc2ZTctNjE2Ny00NTMyLWEwNmYtNWVjOWE5YzAyODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtvl/eeUAwIKoDImjoV9u/QG6I3UU5QN61Wf xYH4Ag+p8rvBTqvfJEu/IWJeEsurdSf18jpRweTAyoSnTRVC1n+XnCzEg/HbRTV4 liFR8x37+mYTRHpaZXBA8i2uOOYeDSJRHiKzD2eFXRwAJaoZ8/UY5JCFDwMTgal8 7uIevs1Qc6d165cZ1y86CUE6RSCbGAlmEk2d2g6eOidgkNcWM8M/u+9Gm4JgWVTR bDHnuV2HEqp5Ne4tJ9YYA90Z8Q34tFnFf5EPiwXbmPw7LWggKUi5UQI2XQlQzozq BFFhJ+OtgtB/G4X7xtrzGbIJNgiNwWm4kWgt7oQiTMTrBTWu9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgeYf1WKFoRjs5IpFiC8ErYIWirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMTE5 MzlhZS1iOGJhLTRhYmEtYTNhYS0yNDkxMDYyYWM5YjUvNzBkOTUxOTctNjBkMC0z Mjg0LTgzMWEtZTA3MWEwOGU4YzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjExOTM5YWUtYjhiYS00YWJhLWEz YWEtMjQ5MTA2MmFjOWI1LzIxMTkzOWFlLWI4YmEtNGFiYS1hM2FhLTI0OTEwNjJh YzliNS5jcmwwHwYDVR0jBBgwFoAUfS9BlimFTN9bprys45b87NEmMRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMTE5MzlhZS1iOGJhLTRhYmEtYTNhYS0yNDkx MDYyYWM5YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzO82MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5bj9xlekVvLAQHjDvKujzvPxEDHrBCc025Qhz7mvVEq5uY2IVR0xeW LnOR6JO83lt21lTFbQr8+5IiZBqo4ECNO3iJsBRVV/g9aYvjYb5k4ZNibofuw9RN jw7yT/dWxAvhFHqBH/tQRJ3sFsxhTCJ7WE2EcvlzHhWZeTBXfE+HdrOvY5Q6zhwI u2y+z7W4zu2/namEkExnllpSNHnxMzyKcXDmYN7PBdN7a7agDUYKugPV1t0RQr6A WIUhzC4O9UORveCW6P56UnOxtyQBfHrBDy0mqj4BYkB822UjijQ1yQ9PtpgfKtb8 hbj2e2d/J+kfVHUNThodWSJxqEi/44c= -----END CERTIFICATE-----Generated at Sun Aug 24 00:34:44 2025 by rpki-client