$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa File: a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa (raw, json) Hash identifier: 4u0A0rqbsZzkvDseMJepHNYetb3msaWbu0NmFkeLiOE= Subject key identifier: 4A:C4:3D:C7:34:72:A2:26:30:E8:DC:D7:62:D0:A6:89:6C:71:70:59 Certificate issuer: /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Certificate serial: 010D0C9F4328584AE8912E0898C2E1A711537180 Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 18587 IP address blocks: 204.209.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:2e:08:98:c2:e1:a7:11:53:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=c140259a-eeca-4bf0-becf-e7757435925b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6d:cb:ca:50:82:4c:5c:63:84:b8:49:26:81: 8c:fb:7b:b1:5a:6b:36:bc:25:ec:36:95:29:36:42: 5d:60:f5:30:16:8e:7f:02:4c:bb:e6:f0:6f:68:df: 72:a8:6e:bf:b0:51:89:66:9b:fa:3a:30:4c:2e:a8: 56:f3:68:ff:7d:41:6d:eb:b0:24:5e:b5:41:fd:fc: f9:6e:68:a4:16:3d:d4:19:b2:6b:96:c7:d0:be:74: 92:ee:a3:9b:85:88:8a:14:be:05:0e:35:95:24:c2: 64:8d:09:c3:d9:c8:2d:d5:2e:46:ba:83:6c:88:57: 2e:b9:68:8b:28:04:63:8f:d7:fb:fb:91:97:4e:33: 77:75:c3:a2:30:e9:ee:6a:20:5d:61:c9:98:8b:c8: b4:da:65:28:f0:aa:70:f8:a2:e5:15:5e:f2:ac:0d: 74:31:d1:22:78:38:ab:ca:74:50:75:dd:20:18:9b: c9:e9:f1:8f:b0:fe:6b:0c:f0:eb:0b:15:d6:ce:84: b1:4c:0e:0a:73:f7:a9:25:ea:be:16:30:ec:58:f0: ab:42:e0:a2:53:07:30:3c:8f:4d:b2:88:ac:4f:b0: a2:4e:05:af:bd:d6:d2:05:fc:3b:ad:40:31:ca:64: 3c:77:06:6f:e4:11:4e:d9:f7:0f:bb:5f:3f:88:2a: 26:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C4:3D:C7:34:72:A2:26:30:E8:DC:D7:62:D0:A6:89:6C:71:70:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl X509v3 Authority Key Identifier: keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer sbgp-ipAddrBlock: critical IPv4: 204.209.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:81:ba:f6:85:56:5f:29:aa:ec:44:cb:af:bd:7e:b8:55:99: 02:20:3b:7d:b5:0f:3d:ec:7e:e5:9b:09:af:a2:1f:1a:20:f5: ad:c5:9d:24:45:fc:27:09:8d:b4:33:00:47:84:81:26:4e:62: 75:05:5a:44:36:c2:0d:e0:89:9d:ac:f8:81:de:71:35:58:5d: ab:75:ff:f3:15:ca:90:49:c4:cc:06:7a:fb:7b:b4:a9:6e:67: a9:f7:16:f0:cd:c3:b7:7e:3c:0c:36:01:da:dc:47:e0:37:1e: 25:07:7a:c0:39:15:e5:70:f0:8b:bb:06:3f:5a:2b:2b:ad:62: 59:01:00:65:4c:83:50:1b:c1:cc:9f:b9:4f:5a:00:ca:d7:10: cb:30:79:6b:4e:99:64:29:3f:0d:7e:47:fe:e2:7c:68:91:2a: 43:ba:3f:63:ef:37:1e:39:21:16:36:a1:b8:93:b0:8b:37:bc: c9:e0:52:5a:23:f1:3c:72:aa:e8:da:a8:fe:32:be:63:9c:5a: 8e:e9:12:c9:43:42:07:95:02:74:d4:c4:07:d3:fe:8a:f6:c6: 7b:54:0e:97:12:1c:de:2f:b0:ff:5f:08:3c:6c:42:51:f3:6c: 40:80:cf:0e:43:ae:a2:d8:ae:a0:44:a7:3f:8e:a2:29:1e:26: 8b:5d:e4:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokS4ImMLhpxFTcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlkMzViNWQtYjU2YS00OWVhLWJlMDEtZmNiZmY4ZTAy ZmNmMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk YzE0MDI1OWEtZWVjYS00YmYwLWJlY2YtZTc3NTc0MzU5MjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW3LylCCTFxjhLhJJoGM+3uxWms2vCXsNpUp NkJdYPUwFo5/Aky75vBvaN9yqG6/sFGJZpv6OjBMLqhW82j/fUFt67AkXrVB/fz5 bmikFj3UGbJrlsfQvnSS7qObhYiKFL4FDjWVJMJkjQnD2cgt1S5GuoNsiFcuuWiL KARjj9f7+5GXTjN3dcOiMOnuaiBdYcmYi8i02mUo8Kpw+KLlFV7yrA10MdEieDir ynRQdd0gGJvJ6fGPsP5rDPDrCxXWzoSxTA4Kc/epJeq+FjDsWPCrQuCiUwcwPI9N soisT7CiTgWvvdbSBfw7rUAxymQ8dwZv5BFO2fcPu18/iComWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErEPcc0cqImMOjc12LQpolscXBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQz NWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2JmZjhlMDJmY2YvYTFmNmQ0OTktNGY5Ny0z ZTk2LWIzM2UtYWRiOGJhNzk2ODNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjlkMzViNWQtYjU2YS00OWVhLWJl MDEtZmNiZmY4ZTAyZmNmLzI5ZDM1YjVkLWI1NmEtNDllYS1iZTAxLWZjYmZmOGUw MmZjZi5jcmwwHwYDVR0jBBgwFoAUCuttE9fwYHuK0QB7KKCVi0UQpC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQzNWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2Jm ZjhlMDJmY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGBuvaFVl8pquxEy6+9frhVmQIgO321Dz3sfuWbCa+iHxog9a3FnSRF /CcJjbQzAEeEgSZOYnUFWkQ2wg3giZ2s+IHecTVYXat1//MVypBJxMwGevt7tKlu Z6n3FvDNw7d+PAw2AdrcR+A3HiUHesA5FeVw8Iu7Bj9aKyutYlkBAGVMg1Abwcyf uU9aAMrXEMsweWtOmWQpPw1+R/7ifGiRKkO6P2PvNx45IRY2obiTsIs3vMngUloj 8TxyqujaqP4yvmOcWo7pEslDQgeVAnTUxAfT/or2xntUDpcSHN4vsP9fCDxsQlHz bECAzw5DrqLYrqBEpz+OoikeJotd5Fk= -----END CERTIFICATE-----Generated at Sun Aug 24 07:13:56 2025 by rpki-client