$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa File: 4552c21f-8d05-3fbb-9242-1de377b08109.roa (raw, json) Hash identifier: RB2552h8F58vpW55Hq0Ov9Ctbm/zeZLBaHMWRdvktpo= Subject key identifier: 19:1D:EB:1E:F7:FD:CE:89:66:4C:B4:42:3D:4C:B5:2C:BF:A8:09:8D Certificate issuer: /CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Certificate serial: 010D0C9F4328584AD23BB4DFC39AE0CB8CD108C0 Authority key identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397627 IP address blocks: 192.203.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b4:df:c3:9a:e0:cb:8c:d1:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=14dc2577-4a0f-4d96-83cd-e00cca1b7072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9b:d1:51:40:57:f3:a8:d8:3a:f0:26:4a:db: 68:62:8e:6b:a4:5d:9b:b0:44:c8:4e:93:ad:fb:f3: 47:21:fc:a0:eb:4a:8d:ea:4f:e7:4c:21:80:de:89: 4f:70:2e:ca:41:9b:7b:8f:90:6e:e5:74:65:25:df: 2d:91:fe:fc:ce:52:ed:6c:d9:e0:d5:ec:32:66:5f: 16:85:70:dc:4c:1d:2c:2f:ba:8d:26:22:f6:04:21: 97:2a:01:b1:2f:fa:66:54:09:f7:da:52:6b:31:af: 66:a7:9e:28:7e:34:de:c7:b2:4f:e8:35:47:5b:f2: db:a0:2f:48:a2:4d:1b:b7:61:cf:1b:87:9f:7e:62: 5c:60:41:56:99:ea:f4:7f:f7:b8:d2:2e:ef:f9:bb: 44:c2:b9:b7:48:04:2d:4e:41:b7:cd:07:67:57:a3: 3d:d1:bb:45:91:2b:2b:99:81:bf:64:64:bd:e8:bc: 48:83:48:29:c9:8a:33:d6:a7:56:85:c2:9e:a3:1e: 57:09:b9:04:aa:7c:04:f7:4a:57:b8:6e:39:9a:76: 40:00:8c:f5:54:af:d7:98:8e:f7:fb:59:c1:0f:83: 2d:b3:8d:f4:54:88:d5:6a:bb:4b:da:57:ad:83:72: 3b:bc:fc:2b:97:21:5e:70:4b:bf:b9:c1:55:ba:d5: 48:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1D:EB:1E:F7:FD:CE:89:66:4C:B4:42:3D:4C:B5:2C:BF:A8:09:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/4552c21f-8d05-3fbb-9242-1de377b08109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl X509v3 Authority Key Identifier: keyid:91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer sbgp-ipAddrBlock: critical IPv4: 192.203.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:d6:73:30:70:aa:34:18:b0:fd:26:99:fe:c3:17:7f:b0:cc: 44:dd:55:fa:87:ff:6f:39:1d:9c:64:83:6a:bf:8c:7d:be:74: 50:75:41:84:bd:3f:d5:09:6c:f7:71:4e:ac:ac:c7:88:a1:e6: d8:69:b5:1b:b2:4e:d6:d9:88:a4:2c:a6:da:6e:84:8b:31:1c: 7d:29:12:ff:10:c0:23:e4:2e:ad:69:6b:ad:c9:8a:db:1b:94: db:e7:4c:d9:50:c2:39:51:bd:5b:57:e9:3b:36:dc:37:60:03: 1e:1b:d0:c6:53:9d:36:e7:24:3f:39:97:70:91:c6:bf:47:1d: b9:37:80:ba:d0:26:5d:73:5c:9a:c1:ee:60:8f:e9:90:1f:95: 65:f2:fe:44:1b:6c:1b:fc:d5:c8:f8:db:ed:ec:8d:a5:16:b4: 1f:76:cf:ee:db:22:e8:4f:00:19:3d:96:00:d2:57:06:f0:b4: 8a:dc:96:df:fc:3a:cc:18:3e:be:4e:e2:e7:51:6b:63:13:40: 58:f6:db:9b:e4:6c:e6:7f:d4:fc:61:d6:5a:8a:30:62:e5:d8: 69:70:9b:1a:98:1b:e3:5b:0d:71:9b:bc:11:53:f0:b4:b4:65: cd:cc:63:6c:b4:df:c7:bf:f8:fc:d1:f3:66:03:4c:65:d7:52: 51:28:09:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7Tfw5rgy4zRCMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmMjFkZTAtMmNhZS00NWY3LWI0MmMtOTU5OGM0Mjcx ZWYwMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MTRkYzI1NzctNGEwZi00ZDk2LTgzY2QtZTAwY2NhMWI3MDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5vRUUBX86jYOvAmSttoYo5rpF2bsETITpOt +/NHIfyg60qN6k/nTCGA3olPcC7KQZt7j5Bu5XRlJd8tkf78zlLtbNng1ewyZl8W hXDcTB0sL7qNJiL2BCGXKgGxL/pmVAn32lJrMa9mp54ofjTex7JP6DVHW/LboC9I ok0bt2HPG4effmJcYEFWmer0f/e40i7v+btEwrm3SAQtTkG3zQdnV6M90btFkSsr mYG/ZGS96LxIg0gpyYoz1qdWhcKeox5XCbkEqnwE90pXuG45mnZAAIz1VK/XmI73 +1nBD4Mts430VIjVartL2letg3I7vPwrlyFecEu/ucFVutVIhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkd6x73/c6JZky0Qj1MtSy/qAmNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWYy MWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4YzQyNzFlZjAvNDU1MmMyMWYtOGQwNS0z ZmJiLTkyNDItMWRlMzc3YjA4MTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmMjFkZTAtMmNhZS00NWY3LWI0 MmMtOTU5OGM0MjcxZWYwLzBhZjIxZGUwLTJjYWUtNDVmNy1iNDJjLTk1OThjNDI3 MWVmMC5jcmwwHwYDVR0jBBgwFoAUkUcM29/LGs+5vi+ClwB3jJblLWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWYyMWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4 YzQyNzFlZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzWczBwqjQYsP0mmf7DF3+wzETdVfqH/285HZxkg2q/jH2+dFB1QYS9 P9UJbPdxTqysx4ih5thptRuyTtbZiKQsptpuhIsxHH0pEv8QwCPkLq1pa63Jitsb lNvnTNlQwjlRvVtX6Ts23DdgAx4b0MZTnTbnJD85l3CRxr9HHbk3gLrQJl1zXJrB 7mCP6ZAflWXy/kQbbBv81cj42+3sjaUWtB92z+7bIuhPABk9lgDSVwbwtIrclt/8 OswYPr5O4udRa2MTQFj225vkbOZ/1Pxh1lqKMGLl2GlwmxqYG+NbDXGbvBFT8LS0 Zc3MY2y038e/+PzR82YDTGXXUlEoCeg= -----END CERTIFICATE-----Generated at Sat Aug 23 23:15:29 2025 by rpki-client