$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/55cb20ca-a3eb-341a-ab7b-c818a3ae5a49.roa File: 55cb20ca-a3eb-341a-ab7b-c818a3ae5a49.roa (raw, json) Hash identifier: oneQGsox+riWX89+jF49CJ/w2YrPlrMlVJybFvAvo9k= Subject key identifier: 08:4B:81:2C:8F:9E:77:8E:14:B1:C4:26:53:53:14:F8:BE:8A:1F:B3 Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Certificate serial: 010D0C9F4328584AE03115685BF3FB1EA330A800 Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/55cb20ca-a3eb-341a-ab7b-c818a3ae5a49.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 400238 IP address blocks: 204.8.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:15:68:5b:f3:fb:1e:a3:30:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=7d45dbdb-e226-4063-916e-0a06e8501520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:dc:3d:36:d8:61:7a:14:76:d3:b2:a8:cc:e0: c4:ab:e9:0c:b3:1f:d3:d7:c1:29:8e:62:d0:2e:14: c9:a3:1c:cf:c8:1c:5a:46:16:d3:e1:0c:bd:79:fd: 72:b3:97:ad:84:19:43:6d:43:98:d5:8f:df:a0:f4: 07:aa:87:a9:3f:31:a6:7c:b8:9c:32:a0:d8:ac:f1: a7:54:c2:8c:45:94:aa:c2:3f:ea:9e:ff:0e:cb:96: cd:86:69:b6:7b:37:2c:a2:7f:de:0e:ac:3d:d8:47: 12:b5:41:fc:1f:86:63:64:71:bc:5c:50:4d:af:8e: 96:86:49:49:46:b9:7e:a6:02:d9:00:54:14:c6:9e: 54:3d:19:56:53:46:4e:af:f0:07:ee:cd:24:c9:79: 2d:40:98:f6:12:a4:03:99:f2:6b:48:f6:52:e3:0e: aa:34:69:5a:38:c8:a0:7c:96:6f:5c:08:6d:a0:c4: d4:4f:39:3b:03:cf:ef:59:45:ca:21:28:9b:ad:17: cc:95:5b:dd:72:67:4c:2b:cf:b7:bf:04:cd:d1:da: fc:c0:79:d3:61:a1:f5:ac:06:71:b8:45:29:22:f7: 67:27:30:fd:78:ec:20:5a:75:a3:b3:7d:db:66:ab: d2:d6:97:a1:c8:f7:ad:1a:ca:40:14:c5:b9:e0:38: 5a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4B:81:2C:8F:9E:77:8E:14:B1:C4:26:53:53:14:F8:BE:8A:1F:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/55cb20ca-a3eb-341a-ab7b-c818a3ae5a49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl X509v3 Authority Key Identifier: keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer sbgp-ipAddrBlock: critical IPv4: 204.8.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:91:47:64:d3:ec:e8:1a:14:79:b4:03:48:76:1d:90:c3:19: be:14:6e:13:db:40:f0:66:ce:6a:88:85:5b:c6:69:f4:5f:0d: 4a:4a:03:c4:5e:d8:c7:01:7e:2f:e2:8a:73:24:34:36:97:92: 50:29:66:ba:a5:b8:8a:1d:af:80:9c:0d:bb:f1:a9:72:59:a8: cf:ce:4a:b2:df:a7:19:07:3c:37:b6:86:a0:22:2d:f3:78:18: 39:e1:7a:e7:e0:a6:0e:d0:60:45:98:10:81:6c:14:d8:93:b4: 66:20:02:ef:bc:1a:21:9a:3b:b8:60:7a:86:7f:81:73:df:f7: 0f:b7:9d:3b:00:42:e7:cd:90:5e:30:84:03:ad:b3:90:81:76: 73:b9:dd:cf:bd:7e:9d:1c:db:26:d7:94:07:22:42:87:62:02: 88:d8:64:3e:b5:61:30:22:c2:74:12:b3:27:ff:d4:c6:0e:87: 98:a3:6f:2b:25:1a:eb:1a:36:01:74:3e:ca:13:7a:fb:22:5c: 51:53:b6:b0:db:16:f7:cb:d3:22:79:2a:a6:6d:be:cd:49:16: 2c:c7:9f:2c:f9:93:5f:70:ce:b0:5c:4f:97:b1:f4:30:7f:14: c2:52:dd:1f:d6:4c:bd:ef:d0:a4:71:7c:2b:69:f9:d0:ab:16: 15:84:56:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMRVoW/P7HqMwqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy YWVjMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk N2Q0NWRiZGItZTIyNi00MDYzLTkxNmUtMGEwNmU4NTAxNTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtw9NthhehR207KozODEq+kMsx/T18EpjmLQ LhTJoxzPyBxaRhbT4Qy9ef1ys5ethBlDbUOY1Y/foPQHqoepPzGmfLicMqDYrPGn VMKMRZSqwj/qnv8Oy5bNhmm2ezcson/eDqw92EcStUH8H4ZjZHG8XFBNr46WhklJ Rrl+pgLZAFQUxp5UPRlWU0ZOr/AH7s0kyXktQJj2EqQDmfJrSPZS4w6qNGlaOMig fJZvXAhtoMTUTzk7A8/vWUXKISibrRfMlVvdcmdMK8+3vwTN0dr8wHnTYaH1rAZx uEUpIvdnJzD9eOwgWnWjs33bZqvS1pehyPetGspAFMW54DhamwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhLgSyPnneOFLHEJlNTFPi+ih+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvNTVjYjIwY2EtYTNlYi0z NDFhLWFiN2ItYzgxOGEzYWU1YTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5 ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAhMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuRR2TT7OgaFHm0A0h2HZDDGb4UbhPbQPBmzmqIhVvGafRfDUpKA8Re 2McBfi/iinMkNDaXklApZrqluIodr4CcDbvxqXJZqM/OSrLfpxkHPDe2hqAiLfN4 GDnheufgpg7QYEWYEIFsFNiTtGYgAu+8GiGaO7hgeoZ/gXPf9w+3nTsAQufNkF4w hAOts5CBdnO53c+9fp0c2ybXlAciQodiAojYZD61YTAiwnQSsyf/1MYOh5ijbysl GusaNgF0PsoTevsiXFFTtrDbFvfL0yJ5KqZtvs1JFizHnyz5k19wzrBcT5ex9DB/ FMJS3R/WTL3v0KRxfCtp+dCrFhWEVnU= -----END CERTIFICATE-----Generated at Sat Aug 23 23:15:21 2025 by rpki-client