$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/dcf1dc10-e375-3848-8c42-a4e8d3a12530.roa File: dcf1dc10-e375-3848-8c42-a4e8d3a12530.roa (raw, json) Hash identifier: WdbgdaAZeONq5ZYyUKUIEBl+Xx3VqJnNlxmzN3qje1E= Subject key identifier: AD:64:B0:28:27:3B:AA:9B:D0:4A:7C:62:0E:85:8F:02:81:C6:AD:CC Certificate issuer: /CN=d4b3e5ee-29c8-495e-98fc-a206c4e14922 Certificate serial: 010D0C9F4328584AECC58F560AB287295C0CC880 Authority key identifier: 26:71:75:5B:09:03:BC:48:BC:2A:1C:D1:7D:CD:BE:95:F5:CB:58:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/dcf1dc10-e375-3848-8c42-a4e8d3a12530.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 18438 IP address blocks: 204.136.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/d4b3e5ee-29c8-495e-98fc-a206c4e14922.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/d4b3e5ee-29c8-495e-98fc-a206c4e14922.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:8f:56:0a:b2:87:29:5c:0c:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b3e5ee-29c8-495e-98fc-a206c4e14922 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=7443071d-e5ba-4f07-8e55-2f63c6adc5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5e:dd:af:a3:c8:04:d7:c6:83:8c:3d:0e:f8: 20:1d:db:09:be:0f:09:b3:c3:f6:23:ca:e3:2b:7a: 47:37:ad:81:d1:ca:dd:d7:6e:d0:4f:42:c8:47:2c: b5:ed:e4:5c:02:80:d1:e5:6b:90:17:05:9d:b2:00: 3a:51:63:d5:11:9f:e6:0b:a5:e2:91:b4:5f:3d:fc: bc:0a:0f:61:d3:dc:5f:86:e2:bc:54:49:a0:23:9d: d6:69:67:e6:3b:b2:96:d3:2c:ab:c3:50:70:83:4c: 86:fd:90:d0:70:6d:62:d9:46:08:cc:b0:2c:bc:3a: c8:91:2f:8e:92:0f:ae:c5:30:f1:f1:9f:80:3e:76: 0e:af:44:e9:f9:d5:93:46:44:1c:98:8e:58:1f:7f: 6b:55:9a:5a:f1:50:ce:3b:27:ea:af:09:b3:5f:04: c7:cd:b6:62:81:5a:3b:d7:50:71:1f:40:c2:22:b5: 95:97:5d:df:3e:7c:57:41:f1:30:bb:55:20:13:b5: 0d:1a:7f:1e:65:01:33:1b:14:c0:92:5f:b1:1f:04: 10:c2:0f:be:9a:31:2f:a2:65:e8:45:76:30:b3:11: 4e:ec:a9:15:1e:77:7b:61:45:9e:8a:2a:73:e8:27: bc:88:42:dd:d2:9f:21:ab:93:3f:f3:fd:83:29:3b: db:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:64:B0:28:27:3B:AA:9B:D0:4A:7C:62:0E:85:8F:02:81:C6:AD:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/dcf1dc10-e375-3848-8c42-a4e8d3a12530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/d4b3e5ee-29c8-495e-98fc-a206c4e14922.crl X509v3 Authority Key Identifier: keyid:26:71:75:5B:09:03:BC:48:BC:2A:1C:D1:7D:CD:BE:95:F5:CB:58:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922.cer sbgp-ipAddrBlock: critical IPv4: 204.136.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f3:34:7e:8f:5d:88:12:86:0f:9e:43:8b:39:47:d4:55:f3: 82:2b:5a:ed:1c:fa:8f:19:3c:a4:a2:3e:93:44:43:93:6f:00: 75:d9:90:d6:5f:99:f6:5b:0a:a2:4d:3f:a6:5d:ac:9f:eb:46: 67:43:a6:f9:aa:b0:e6:65:1d:8f:95:9d:a0:d8:e6:8a:48:71: fb:f8:98:49:a4:be:8e:49:cd:f9:5d:a3:9e:a5:6b:ee:5c:1f: 42:09:7f:be:26:58:83:b4:37:2f:cc:e9:7f:ff:bc:dd:01:02: 4a:b0:3e:16:47:ce:8d:28:50:4d:0d:16:bb:c7:00:a0:08:e0: e4:87:5c:d1:77:ea:89:a4:17:82:e9:6c:48:ec:56:56:c3:12: ee:0a:2a:a2:5c:3a:d8:ac:eb:93:c4:92:21:19:77:0d:77:b3: fd:08:3d:53:77:3a:e9:be:cf:ff:7b:b2:fa:2a:e1:61:21:5c: e0:df:a2:41:ea:f5:6d:81:ba:c0:47:14:69:7d:fb:bf:e4:2c: 44:5b:8e:1e:c6:79:40:80:b9:ce:b2:88:9e:4f:8f:b9:ec:d6: c3:ea:86:cd:bd:9b:33:5b:4b:41:0c:a3:e9:c8:0f:bf:ab:f4: e9:1d:4a:cf:4a:1b:b2:42:33:df:e1:20:3c:dc:6a:cd:80:a2: 4f:a3:4e:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxY9WCrKHKVwMyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRiM2U1ZWUtMjljOC00OTVlLTk4ZmMtYTIwNmM0ZTE0 OTIyMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NzQ0MzA3MWQtZTViYS00ZjA3LThlNTUtMmY2M2M2YWRjNWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil7dr6PIBNfGg4w9DvggHdsJvg8Js8P2I8rj K3pHN62B0crd127QT0LIRyy17eRcAoDR5WuQFwWdsgA6UWPVEZ/mC6XikbRfPfy8 Cg9h09xfhuK8VEmgI53WaWfmO7KW0yyrw1Bwg0yG/ZDQcG1i2UYIzLAsvDrIkS+O kg+uxTDx8Z+APnYOr0Tp+dWTRkQcmI5YH39rVZpa8VDOOyfqrwmzXwTHzbZigVo7 11BxH0DCIrWVl13fPnxXQfEwu1UgE7UNGn8eZQEzGxTAkl+xHwQQwg++mjEvomXo RXYwsxFO7KkVHnd7YUWeiipz6Ce8iELd0p8hq5M/8/2DKTvbrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1ksCgnO6qb0Ep8Yg6FjwKBxq3MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNGIz ZTVlZS0yOWM4LTQ5NWUtOThmYy1hMjA2YzRlMTQ5MjIvZGNmMWRjMTAtZTM3NS0z ODQ4LThjNDItYTRlOGQzYTEyNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDRiM2U1ZWUtMjljOC00OTVlLTk4 ZmMtYTIwNmM0ZTE0OTIyL2Q0YjNlNWVlLTI5YzgtNDk1ZS05OGZjLWEyMDZjNGUx NDkyMi5jcmwwHwYDVR0jBBgwFoAUJnF1WwkDvEi8KhzRfc2+lfXLWPkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNGIzZTVlZS0yOWM4LTQ5NWUtOThmYy1hMjA2 YzRlMTQ5MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzIgcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3zNH6PXYgShg+eQ4s5R9RV84IrWu0c+o8ZPKSiPpNEQ5NvAHXZkNZf mfZbCqJNP6ZdrJ/rRmdDpvmqsOZlHY+VnaDY5opIcfv4mEmkvo5Jzfldo56la+5c H0IJf74mWIO0Ny/M6X//vN0BAkqwPhZHzo0oUE0NFrvHAKAI4OSHXNF36omkF4Lp bEjsVlbDEu4KKqJcOtis65PEkiEZdw13s/0IPVN3Oum+z/97svoq4WEhXODfokHq 9W2BusBHFGl9+7/kLERbjh7GeUCAuc6yiJ5Pj7ns1sPqhs29mzNbS0EMo+nID7+r 9OkdSs9KG7JCM9/hIDzcas2Aok+jTpE= -----END CERTIFICATE-----Generated at Sun Aug 24 03:57:31 2025 by rpki-client