$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a32e6305-de52-3aab-83d3-f8ad059f9a5d.roa File: a32e6305-de52-3aab-83d3-f8ad059f9a5d.roa (raw, json) Hash identifier: YTSN2dBudU6sMZH4RHvmBu/XYgPVs3S3HwPqC0PKOb8= Subject key identifier: DA:74:0A:B8:7A:25:63:3C:D8:CA:A3:E8:B0:02:C2:1C:E6:04:8A:FE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A96368403C3D407374DFCB2A0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a32e6305-de52-3aab-83d3-f8ad059f9a5d.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 0 IP address blocks: 204.254.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:84:03:c3:d4:07:37:4d:fc:b2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=7a785a4e-3899-4ac9-8684-ee2187f69e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e7:4b:4f:e8:64:2b:4f:75:76:4a:16:10:18: 49:30:2f:0c:bf:3f:a8:14:20:35:0f:c8:42:9b:cc: b5:e6:27:0a:f9:b4:43:59:28:80:13:99:da:60:cb: 4d:d7:bc:29:90:83:aa:e5:53:c6:b2:40:73:8f:fc: bc:dd:2f:5b:a6:d1:b9:7b:3b:c1:31:2a:02:4d:90: 9b:f5:f2:c7:9c:49:ea:eb:7b:d4:76:d7:f3:45:96: 93:a1:d5:9b:65:6a:7c:67:94:28:14:a0:3f:b7:e9: 4e:bc:70:d8:27:1d:d1:71:b7:bb:e9:8c:82:9c:a8: 0c:db:da:b8:7b:e7:53:8e:94:39:34:3f:5e:d5:5a: f4:ee:ed:04:65:a2:d6:c5:ee:3c:35:ad:42:2a:62: ac:0c:5a:ae:ee:25:93:7b:1e:48:2c:25:f1:6c:84: 8c:4d:f8:30:83:16:64:63:84:a7:83:e8:c0:d0:a8: 12:03:03:ba:07:e4:e3:f4:1c:37:79:c2:b4:b8:e9: 83:03:d1:bc:bf:38:e4:5a:9d:30:4c:e0:0b:10:1b: 5a:e5:17:a1:d3:c2:9a:1a:4c:29:f2:f0:f5:8f:14: bb:92:bf:32:1e:f3:ce:53:11:1e:08:0e:71:f4:de: ca:9c:fb:1f:14:67:e3:8e:ad:d3:71:9b:99:73:de: 94:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:74:0A:B8:7A:25:63:3C:D8:CA:A3:E8:B0:02:C2:1C:E6:04:8A:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a32e6305-de52-3aab-83d3-f8ad059f9a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 204.254.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:01:31:ba:ea:90:aa:be:23:a6:bc:15:f0:61:43:46:f1:0a: ee:1b:fd:a0:02:ca:b0:bd:c6:fd:9c:69:f7:40:a0:42:ba:28: 24:c8:ba:9d:8b:4a:a7:2e:e5:95:4f:79:25:81:49:a6:5f:ee: e0:2e:02:9c:5f:d3:cc:dc:48:b4:a0:d8:70:ed:e1:67:d1:50: 90:3b:59:50:b4:4a:ec:5c:86:b2:cf:e7:b2:e1:d8:d0:62:c2: 6c:b1:b8:aa:1f:23:74:da:1e:fb:4c:25:89:f9:8d:bf:cd:32: 12:23:3e:c0:70:87:13:e0:67:db:25:7b:80:24:65:de:85:11: f9:2f:80:a8:0a:b8:e0:db:f7:d9:bd:33:68:5d:54:eb:f5:57: cc:98:60:39:db:69:8a:75:3d:40:6c:b3:5c:46:79:c3:1d:30: d8:7f:aa:9e:ba:f3:03:59:26:e8:4e:82:e9:3c:47:9f:1f:ae: b8:c1:86:35:91:c9:f7:75:f5:81:8d:08:fb:a8:9e:4b:42:9d: ef:14:08:a4:32:b3:24:a8:1d:3b:6e:13:47:50:25:8c:62:fc: 7a:76:bb:2f:61:49:b8:cf:64:40:af:c2:53:28:75:16:c8:06: e7:67:b7:c9:a6:dc:fe:16:53:b6:8c:03:ea:37:b9:5a:dc:29: 2d:f4:2b:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNoQDw9QHN038sqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk N2E3ODVhNGUtMzg5OS00YWM5LTg2ODQtZWUyMTg3ZjY5ZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApudLT+hkK091dkoWEBhJMC8Mvz+oFCA1D8hC m8y15icK+bRDWSiAE5naYMtN17wpkIOq5VPGskBzj/y83S9bptG5ezvBMSoCTZCb 9fLHnEnq63vUdtfzRZaTodWbZWp8Z5QoFKA/t+lOvHDYJx3Rcbe76YyCnKgM29q4 e+dTjpQ5ND9e1Vr07u0EZaLWxe48Na1CKmKsDFqu7iWTex5ILCXxbISMTfgwgxZk Y4Sng+jA0KgSAwO6B+Tj9Bw3ecK0uOmDA9G8vzjkWp0wTOALEBta5Reh08KaGkwp 8vD1jxS7kr8yHvPOUxEeCA5x9N7KnPsfFGfjjq3TcZuZc96UIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNp0Crh6JWM82Mqj6LACwhzmBIr+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTMyZTYzMDUtZGU1Mi0z YWFiLTgzZDMtZjhhZDA1OWY5YTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzP5vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8BMbrqkKq+I6a8FfBhQ0bxCu4b/aACyrC9xv2cafdAoEK6KCTIup2L Sqcu5ZVPeSWBSaZf7uAuApxf08zcSLSg2HDt4WfRUJA7WVC0SuxchrLP57Lh2NBi wmyxuKofI3TaHvtMJYn5jb/NMhIjPsBwhxPgZ9sle4AkZd6FEfkvgKgKuODb99m9 M2hdVOv1V8yYYDnbaYp1PUBss1xGecMdMNh/qp668wNZJuhOguk8R58frrjBhjWR yfd19YGNCPuonktCne8UCKQysySoHTtuE0dQJYxi/Hp2uy9hSbjPZECvwlModRbI Budnt8mm3P4WU7aMA+o3uVrcKS30K6I= -----END CERTIFICATE-----Generated at Sat Aug 23 09:01:02 2025 by rpki-client