$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/28c24c1f-8ef8-3334-88d2-dbf93f7ef47c.roa File: 28c24c1f-8ef8-3334-88d2-dbf93f7ef47c.roa (raw, json) Hash identifier: gnunIpGXjcuD8PsA4srR3g2yXufvnXShnT3mXGXcz3s= Subject key identifier: CA:B4:1A:3A:7C:CE:F6:35:AC:8E:B9:1F:A5:A8:48:A8:AF:1B:FE:87 Certificate issuer: /CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d Certificate serial: 010D0C9F4328584AE1966EEC246C73867B036FD0 Authority key identifier: 1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/28c24c1f-8ef8-3334-88d2-dbf93f7ef47c.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 53999 IP address blocks: 173.237.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:6e:ec:24:6c:73:86:7b:03:6f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=174fef1d-4712-434e-840d-d8113f6ba400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:ce:fd:fb:af:df:bc:27:cf:73:70:f4:35: d5:2d:79:41:9c:77:71:7f:de:55:a6:62:a6:9d:7d: e9:d8:18:5e:e3:54:b8:0b:ce:03:67:62:6a:7e:ef: 51:22:cd:2d:26:e4:35:57:4a:07:d5:23:e3:f9:a4: 6e:a4:f9:7e:68:b8:fa:6c:5a:11:b6:7a:1a:69:86: bd:16:c3:52:79:3a:2e:7f:4a:97:39:31:50:36:fa: 20:e7:4d:ec:fa:a4:41:f0:51:a5:9d:e3:5e:49:21: 50:47:33:27:c4:91:7e:b5:76:ef:c4:d8:e4:7f:87: cf:ba:92:a6:a4:e8:de:60:3d:99:97:ae:a5:22:9c: 9c:f1:61:25:1f:a6:88:cb:d8:c4:cd:a2:fb:d8:57: 67:07:8f:02:6a:90:19:41:7f:d5:f1:b4:dc:6f:13: 28:6d:52:9d:f9:e1:63:22:c4:7a:fa:2d:6f:d5:4f: 8d:07:35:94:67:bd:af:c7:e3:8b:cf:95:c3:5f:15: c0:6f:6f:54:52:e2:d7:c1:ed:63:91:33:73:83:ca: 80:4c:c5:c1:b1:2b:68:c3:80:96:38:35:4e:d5:e2: 49:70:c7:de:f3:2d:e5:65:e3:46:c3:eb:6e:3a:fd: 73:0a:78:8c:03:66:79:89:c3:73:44:3f:55:00:4d: d9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B4:1A:3A:7C:CE:F6:35:AC:8E:B9:1F:A5:A8:48:A8:AF:1B:FE:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/28c24c1f-8ef8-3334-88d2-dbf93f7ef47c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl X509v3 Authority Key Identifier: keyid:1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer sbgp-ipAddrBlock: critical IPv4: 173.237.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:61:72:ad:86:27:d5:af:ea:cb:bf:34:63:6f:0c:55:a4:96: 8f:eb:3d:d9:9a:ea:f5:e9:88:2e:01:0f:81:1a:c1:39:4d:03: a3:ce:fc:f9:b5:d0:91:c2:bf:61:e9:71:a3:c3:ef:e2:1a:e6: 32:0d:16:64:dc:0d:4c:8b:1c:d1:21:d5:0d:63:99:2e:c4:f7: 85:74:f0:44:d7:73:0a:0a:e0:dd:0f:c6:af:23:c7:f0:c6:24: 90:24:31:41:31:88:e1:9f:64:de:82:fe:80:22:9f:80:05:97: 88:76:a5:47:8f:48:47:49:04:9a:f0:30:b6:ba:57:64:04:75: 6b:f1:fd:94:7c:21:22:c6:3c:1f:04:cc:ff:b0:46:68:30:ad: b9:05:a2:06:3a:8e:8c:05:01:4b:25:23:43:70:0f:d7:92:a3: 17:a4:00:41:07:79:2d:cb:c2:6c:ca:7c:10:b1:bd:33:3d:95: 36:55:da:57:c8:be:2b:b3:66:44:fd:e0:e0:27:a6:20:a7:06: ad:ec:ca:5c:80:5a:80:36:f3:c6:08:1e:4c:bd:02:b0:40:09: 87:f7:89:18:a0:64:6a:dd:40:d9:a7:a2:80:c8:60:1c:ef:8f: 1a:ac:f3:6b:4e:db:f8:55:29:dc:ae:4e:4e:1c:45:d7:6f:ab: a3:98:63:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlm7sJGxzhnsDb9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgyOTU4MjAtMDNiYy00YTRlLTgwNzItN2NiZjc0OGY0 YzZkMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk MTc0ZmVmMWQtNDcxMi00MzRlLTg0MGQtZDgxMTNmNmJhNDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO7O/fuv37wnz3Nw9DXVLXlBnHdxf95VpmKm nX3p2Bhe41S4C84DZ2Jqfu9RIs0tJuQ1V0oH1SPj+aRupPl+aLj6bFoRtnoaaYa9 FsNSeTouf0qXOTFQNvog503s+qRB8FGlneNeSSFQRzMnxJF+tXbvxNjkf4fPupKm pOjeYD2Zl66lIpyc8WElH6aIy9jEzaL72FdnB48CapAZQX/V8bTcbxMobVKd+eFj IsR6+i1v1U+NBzWUZ72vx+OLz5XDXxXAb29UUuLXwe1jkTNzg8qATMXBsStow4CW ODVO1eJJcMfe8y3lZeNGw+tuOv1zCniMA2Z5icNzRD9VAE3ZmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMq0Gjp8zvY1rI65H6WoSKivG/6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5 NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2JmNzQ4ZjRjNmQvMjhjMjRjMWYtOGVmOC0z MzM0LTg4ZDItZGJmOTNmN2VmNDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTgyOTU4MjAtMDNiYy00YTRlLTgw NzItN2NiZjc0OGY0YzZkL2U4Mjk1ODIwLTAzYmMtNGE0ZS04MDcyLTdjYmY3NDhm NGM2ZC5jcmwwHwYDVR0jBBgwFoAUGt9TWH5SbG/MuhYDvE0QNRjo5qQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2Jm NzQ4ZjRjNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEre3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARhcq2GJ9Wv6su/NGNvDFWklo/rPdma6vXpiC4BD4EawTlNA6PO/Pm1 0JHCv2HpcaPD7+Ia5jINFmTcDUyLHNEh1Q1jmS7E94V08ETXcwoK4N0Pxq8jx/DG JJAkMUExiOGfZN6C/oAin4AFl4h2pUePSEdJBJrwMLa6V2QEdWvx/ZR8ISLGPB8E zP+wRmgwrbkFogY6jowFAUslI0NwD9eSoxekAEEHeS3LwmzKfBCxvTM9lTZV2lfI viuzZkT94OAnpiCnBq3sylyAWoA288YIHky9ArBACYf3iRigZGrdQNmnooDIYBzv jxqs82tO2/hVKdyuTk4cRddvq6OYYwM= -----END CERTIFICATE-----Generated at Sun Aug 24 05:58:18 2025 by rpki-client