$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa File: 2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa (raw, json) Hash identifier: xnpe894KwM4jvZuAdX+DnqiI9iMofQfdki0WVSqJHIc= Subject key identifier: 92:DE:51:A7:C9:F7:26:9B:A2:BC:D8:56:ED:CA:53:CA:5B:60:8E:79 Certificate issuer: /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Certificate serial: 010D0C9F4328584AE8912E1F54FFF40AC0C8C360 Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 18587 IP address blocks: 204.209.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:2e:1f:54:ff:f4:0a:c0:c8:c3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=40960c82-19c4-4346-88a2-1e22b2597367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c3:64:65:80:1b:1f:dd:7c:0d:00:f1:ce:f9: da:4d:7d:0b:86:2e:a5:90:f4:f3:54:0c:bf:25:e5: b5:19:5d:51:62:99:fd:ee:6c:b4:11:89:fe:3a:d1: 15:72:5b:af:28:34:6f:fa:00:4f:6f:52:7f:28:5a: f3:f7:26:1d:f3:da:ff:7c:69:01:19:91:b4:53:9d: a2:d0:60:da:18:14:d4:e8:52:15:7d:dc:87:ce:41: 65:d5:0a:aa:de:fc:5a:cf:58:c4:d3:44:61:25:f5: 38:b1:3b:b6:c8:1f:13:94:02:bd:86:71:ae:da:ce: 81:4e:de:46:f6:c9:2b:a3:d3:65:d4:5f:f5:f6:59: 71:d5:f5:13:8b:bb:fc:2f:80:c8:b2:6a:ea:cb:f0: 31:30:02:52:9d:81:65:d2:fc:0a:0a:a7:89:ad:85: ee:19:ba:03:96:bb:06:70:f0:a9:8b:ce:d0:29:5d: 70:23:0d:d2:26:a7:bc:b2:47:39:6c:d6:75:b0:46: 07:a3:a4:e9:83:a5:d9:45:52:69:aa:9c:68:74:50: c0:1a:09:96:06:73:c9:1a:37:06:49:cf:79:21:5e: f2:7b:61:5b:c7:7e:5c:be:79:c2:32:2d:26:bb:6e: fa:c5:08:c2:2c:69:3b:72:63:5d:c4:35:c1:92:f7: 9b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DE:51:A7:C9:F7:26:9B:A2:BC:D8:56:ED:CA:53:CA:5B:60:8E:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl X509v3 Authority Key Identifier: keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer sbgp-ipAddrBlock: critical IPv4: 204.209.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a5:5e:bc:5d:58:77:33:58:38:a5:14:a7:32:06:74:8e:96: 7d:a5:a8:2e:81:ed:15:8a:e5:4e:01:19:53:b4:79:f6:37:54: 69:6e:bf:ae:5d:8c:68:c3:fe:5a:e4:7b:2d:7e:94:ea:35:d5: 1e:56:f0:be:24:71:a5:86:3e:f3:04:42:99:de:12:05:ae:7c: bf:97:4f:08:fd:6c:db:2b:16:b5:87:f5:b0:6d:5a:24:e8:46: 21:1e:ac:1e:b4:e9:15:e4:31:78:36:03:88:b4:0b:e1:b1:86: 84:25:0d:4f:b4:05:4d:90:aa:21:28:25:06:67:0d:7d:86:df: a9:0e:13:3e:34:4d:04:a5:5f:78:0f:83:60:09:6c:6e:46:2a: c5:84:76:35:7b:42:f2:00:ab:88:bf:b9:bc:f5:b2:d0:00:58: 50:9d:27:1f:b8:02:95:13:76:44:a7:ee:f3:ea:e4:3c:b7:70: 70:1c:7e:3a:25:13:16:b6:75:bb:76:60:f3:72:26:01:cb:30: 16:b5:f5:f1:c0:ba:b2:15:0a:49:7f:9b:f6:2f:3d:77:34:b8: 73:ca:30:e1:08:66:f2:83:73:8d:1d:44:45:a1:b6:89:1c:7c: 89:1d:5f:ce:6e:68:99:78:74:3b:25:2e:0c:6f:e4:c8:3a:5e: 63:ce:8a:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokS4fVP/0CsDIw2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlkMzViNWQtYjU2YS00OWVhLWJlMDEtZmNiZmY4ZTAy ZmNmMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NDA5NjBjODItMTljNC00MzQ2LTg4YTItMWUyMmIyNTk3MzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8NkZYAbH918DQDxzvnaTX0Lhi6lkPTzVAy/ JeW1GV1RYpn97my0EYn+OtEVcluvKDRv+gBPb1J/KFrz9yYd89r/fGkBGZG0U52i 0GDaGBTU6FIVfdyHzkFl1Qqq3vxaz1jE00RhJfU4sTu2yB8TlAK9hnGu2s6BTt5G 9skro9Nl1F/19llx1fUTi7v8L4DIsmrqy/AxMAJSnYFl0vwKCqeJrYXuGboDlrsG cPCpi87QKV1wIw3SJqe8skc5bNZ1sEYHo6Tpg6XZRVJpqpxodFDAGgmWBnPJGjcG Sc95IV7ye2Fbx35cvnnCMi0mu276xQjCLGk7cmNdxDXBkvebzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLeUafJ9yaborzYVu3KU8pbYI55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQz NWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2JmZjhlMDJmY2YvMmIyYWMxMWItZTQ4ZS0z ZDdiLWJiNDctNzRiODgyOTg2ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjlkMzViNWQtYjU2YS00OWVhLWJl MDEtZmNiZmY4ZTAyZmNmLzI5ZDM1YjVkLWI1NmEtNDllYS1iZTAxLWZjYmZmOGUw MmZjZi5jcmwwHwYDVR0jBBgwFoAUCuttE9fwYHuK0QB7KKCVi0UQpC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQzNWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2Jm ZjhlMDJmY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACylXrxdWHczWDilFKcyBnSOln2lqC6B7RWK5U4BGVO0efY3VGluv65d jGjD/lrkey1+lOo11R5W8L4kcaWGPvMEQpneEgWufL+XTwj9bNsrFrWH9bBtWiTo RiEerB606RXkMXg2A4i0C+GxhoQlDU+0BU2QqiEoJQZnDX2G36kOEz40TQSlX3gP g2AJbG5GKsWEdjV7QvIAq4i/ubz1stAAWFCdJx+4ApUTdkSn7vPq5Dy3cHAcfjol Exa2dbt2YPNyJgHLMBa19fHAurIVCkl/m/YvPXc0uHPKMOEIZvKDc40dREWhtokc fIkdX85uaJl4dDslLgxv5Mg6XmPOinw= -----END CERTIFICATE-----Generated at Sun Aug 24 07:11:16 2025 by rpki-client