$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/17a77d83-48f7-30d4-8b4b-897c9a83e006.roa File: 17a77d83-48f7-30d4-8b4b-897c9a83e006.roa (raw, json) Hash identifier: 0yxfgHdjpo/5/qIdygYn28kZ6piE3bIg6Ab/z0AZJjM= Subject key identifier: 7F:B0:67:FF:41:AB:BA:53:38:F4:7E:90:C8:B4:9F:42:65:E4:70:71 Certificate issuer: /CN=e94dafbf-328e-40f2-ab0d-4718f1177861 Certificate serial: 010D0C9F4328584AEE2D8C20FBB0648F0953DA58 Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/17a77d83-48f7-30d4-8b4b-897c9a83e006.roa Signing time: Thu 21 Aug 2025 13:14:55 +0000 ROA not before: Thu 21 Aug 2025 13:14:55 +0000 ROA not after: Wed 19 Nov 2025 14:14:55 +0000 asID: 834 IP address blocks: 142.214.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:2d:8c:20:fb:b0:64:8f:09:53:da:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861 Validity Not Before: Aug 21 13:14:55 2025 GMT Not After : Nov 19 14:14:55 2025 GMT Subject: CN=d4172587-3bd9-4405-83ff-0cccd054e3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:94:01:a5:ef:a7:0c:39:18:e2:82:13:68:05: 5c:d9:0f:67:71:0e:41:70:55:51:87:8e:74:38:4e: 93:76:35:fa:5a:a5:86:ca:00:62:08:a4:15:52:c1: 38:d3:ce:e8:a4:b0:e9:cb:55:1b:b7:a8:81:54:d3: 55:89:02:18:05:29:11:30:2d:79:55:1f:55:db:bb: d1:f2:b6:39:65:07:55:fc:d9:59:31:90:5e:f5:27: 26:08:1e:1a:a4:56:23:01:5b:ba:a4:63:28:a0:69: ee:ba:61:91:d0:3f:e7:ad:45:b8:bf:d0:ad:3d:ad: 3b:61:e3:b3:aa:62:53:4e:c6:1f:60:18:ad:ad:04: a5:eb:29:dc:f3:3b:40:30:bc:8c:fe:6e:42:7f:98: ed:f0:31:8b:3e:9b:10:4f:7a:ac:1c:ff:07:7a:7f: 1a:f9:e0:4f:50:4e:5d:9b:f0:12:52:52:11:78:03: 1d:dd:0e:b3:86:b0:be:1b:06:24:95:e1:90:c7:b4: e3:39:db:88:66:3f:a4:33:4d:9d:62:56:b1:d4:9f: e3:09:c8:80:c3:47:82:67:d7:fe:c3:f5:09:0d:41: 40:64:a6:83:64:2c:0e:ad:cb:cc:42:1d:6c:89:11: 70:9d:7a:4d:02:e0:c1:4d:62:35:a6:74:5b:50:48: 0a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B0:67:FF:41:AB:BA:53:38:F4:7E:90:C8:B4:9F:42:65:E4:70:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/17a77d83-48f7-30d4-8b4b-897c9a83e006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl X509v3 Authority Key Identifier: keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer sbgp-ipAddrBlock: critical IPv4: 142.214.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ac:d8:00:c4:6f:09:74:13:39:7e:f9:c7:01:7c:9a:56:6c: b0:cf:0b:b5:22:af:8c:1d:c9:54:e8:06:8f:eb:0c:92:d3:2b: c9:ef:21:6b:87:a1:62:a1:b4:66:25:16:d2:27:20:ab:f9:94: b7:68:07:91:7d:5c:ee:88:c9:a3:7f:69:19:7a:90:98:30:70: 9c:9d:96:14:00:a4:b1:4b:c2:10:d9:d5:28:ce:f7:05:d7:45: 22:a8:7c:10:48:b4:9a:a0:d7:2b:f4:19:c4:72:b0:47:93:f3: 78:e4:e2:76:bb:bb:fb:ad:c3:e2:cd:76:f5:1f:c2:60:d0:69: 4a:8c:58:2d:87:1b:ff:47:66:72:12:12:8b:a1:8b:64:18:e1: f0:e5:fb:10:f7:b6:e1:c4:c8:60:4d:a2:34:98:9c:4a:0d:be: d0:6c:26:b6:a1:43:8e:bf:c3:b8:d7:6e:9b:d8:2e:25:dc:a1: 04:ed:43:d7:98:cd:75:ef:47:a4:c0:f2:b3:aa:95:d2:39:a2: 26:63:26:39:a0:80:9a:c5:8d:12:4a:0f:54:9f:ba:1b:38:54: 56:49:f7:a9:9c:a1:ca:fc:53:ae:eb:d7:68:b8:59:20:a4:ff: 3b:cd:43:5f:b0:65:dd:f5:09:a3:dd:8f:59:0c:c2:9a:fc:fe: 4f:ab:63:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruLYwg+7BkjwlT2lgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk0ZGFmYmYtMzI4ZS00MGYyLWFiMGQtNDcxOGYxMTc3 ODYxMB4XDTI1MDgyMTEzMTQ1NVoXDTI1MTExOTE0MTQ1NVowLzEtMCsGA1UEAxMk ZDQxNzI1ODctM2JkOS00NDA1LTgzZmYtMGNjY2QwNTRlM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppQBpe+nDDkY4oITaAVc2Q9ncQ5BcFVRh450 OE6TdjX6WqWGygBiCKQVUsE4087opLDpy1Ubt6iBVNNViQIYBSkRMC15VR9V27vR 8rY5ZQdV/NlZMZBe9ScmCB4apFYjAVu6pGMooGnuumGR0D/nrUW4v9CtPa07YeOz qmJTTsYfYBitrQSl6ync8ztAMLyM/m5Cf5jt8DGLPpsQT3qsHP8Hen8a+eBPUE5d m/ASUlIReAMd3Q6zhrC+GwYkleGQx7TjOduIZj+kM02dYlax1J/jCciAw0eCZ9f+ w/UJDUFAZKaDZCwOrcvMQh1siRFwnXpNAuDBTWI1pnRbUEgK0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+wZ/9Bq7pTOPR+kMi0n0Jl5HBxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRk YWZiZi0zMjhlLTQwZjItYWIwZC00NzE4ZjExNzc4NjEvMTdhNzdkODMtNDhmNy0z MGQ0LThiNGItODk3YzlhODNlMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTk0ZGFmYmYtMzI4ZS00MGYyLWFi MGQtNDcxOGYxMTc3ODYxL2U5NGRhZmJmLTMyOGUtNDBmMi1hYjBkLTQ3MThmMTE3 Nzg2MS5jcmwwHwYDVR0jBBgwFoAUHpbW+MBWSeEWvtPCmYRooLx45zkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRkYWZiZi0zMjhlLTQwZjItYWIwZC00NzE4 ZjExNzc4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjtaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqs2ADEbwl0Ezl++ccBfJpWbLDPC7Uir4wdyVToBo/rDJLTK8nvIWuH oWKhtGYlFtInIKv5lLdoB5F9XO6IyaN/aRl6kJgwcJydlhQApLFLwhDZ1SjO9wXX RSKofBBItJqg1yv0GcRysEeT83jk4na7u/utw+LNdvUfwmDQaUqMWC2HG/9HZnIS Eouhi2QY4fDl+xD3tuHEyGBNojSYnEoNvtBsJrahQ46/w7jXbpvYLiXcoQTtQ9eY zXXvR6TA8rOqldI5oiZjJjmggJrFjRJKD1Sfuhs4VFZJ96mcocr8U67r12i4WSCk /zvNQ1+wZd31CaPdj1kMwpr8/k+rY6k= -----END CERTIFICATE-----Generated at Sat Aug 23 08:11:23 2025 by rpki-client