$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3ea35b96-597f-3b36-948c-33ee92db08a6.roa File: 3ea35b96-597f-3b36-948c-33ee92db08a6.roa (raw, json) Hash identifier: 0YE8C94JaJ5rHzjzxAiNCCY8bpL7tXjtUMUdlrOsLbs= Subject key identifier: 16:E5:84:5F:B0:E6:46:E6:47:13:84:3E:E0:B8:5D:58:DF:AD:A0:E1 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEC4C94FF436514D77F11AC00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3ea35b96-597f-3b36-948c-33ee92db08a6.roa Signing time: Wed 20 Aug 2025 21:05:50 +0000 ROA not before: Wed 20 Aug 2025 21:05:50 +0000 ROA not after: Tue 18 Nov 2025 22:05:50 +0000 asID: 31898 IP address blocks: 152.69.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:4c:94:ff:43:65:14:d7:7f:11:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 20 21:05:50 2025 GMT Not After : Nov 18 22:05:50 2025 GMT Subject: CN=f185d476-43c5-47c4-89f5-dd2db8d0b580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ff:16:7a:47:d5:74:54:2a:73:53:56:b6:2c: b7:05:bd:1d:07:f0:bb:50:3a:e8:1b:c6:d5:db:1e: 28:c2:02:db:7b:df:13:9f:76:6b:9b:6b:2b:7d:89: ee:09:20:49:06:23:a9:ec:24:ca:b0:ac:c1:da:7d: df:d9:2d:9c:f3:82:1c:d0:8a:5d:43:b6:3e:23:06: 44:04:a8:94:3d:27:ef:fb:99:fe:e7:e9:e6:82:e1: e6:52:ef:f9:34:a2:dc:e3:61:96:51:29:c6:fb:35: b0:16:e4:81:7a:f9:0d:6c:cc:54:ac:04:e9:e7:f3: 08:85:77:33:7c:b9:84:b8:56:cd:1d:77:4c:c9:f8: 90:5a:f2:34:c0:aa:1b:d2:0c:ff:5b:96:02:42:6c: 71:1f:c5:a9:eb:20:74:82:a6:68:a4:a3:33:05:44: 25:4e:a2:1c:96:4b:26:1a:af:e5:58:8b:1e:95:8a: 6c:41:7e:b9:b6:40:a4:7c:8c:fa:a5:1e:80:c6:56: fd:d6:2e:af:01:b6:7d:c7:5d:1f:c4:93:23:e3:64: 79:02:3b:7c:b2:42:c7:4c:78:97:c1:a0:fa:1b:7b: b6:d0:99:3b:f5:0e:7d:66:83:b9:17:0b:78:dd:fd: 83:35:19:07:f7:04:d5:5c:73:b9:e5:81:e5:8f:1b: fb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E5:84:5F:B0:E6:46:E6:47:13:84:3E:E0:B8:5D:58:DF:AD:A0:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3ea35b96-597f-3b36-948c-33ee92db08a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 152.69.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:31:29:92:ba:9d:b0:0c:ec:d9:4f:cf:c8:27:06:97:87:64: 04:2e:60:cd:9c:9e:a3:66:c6:87:15:21:c6:c7:5c:e9:76:a1: 5d:b3:b7:71:f8:7c:54:1d:76:12:94:52:ef:40:41:dd:4c:ae: da:ee:9a:0e:b6:5f:36:c3:f5:88:d3:8d:17:06:e1:c2:4c:a5: 80:95:6b:32:f8:84:58:18:3a:0b:7f:75:bf:6c:aa:6c:69:33: 6b:3f:da:51:d3:e2:06:d3:7b:91:a6:84:e9:42:a8:ae:aa:3b: 96:54:17:0c:41:b3:bd:0a:ea:0a:3d:2d:96:b1:92:e0:66:80: 00:1f:65:76:ef:58:be:0c:3e:21:bf:20:22:bb:8b:92:7c:51: 69:e3:53:5c:8e:42:bf:83:aa:a4:f1:49:78:e3:59:9b:a8:85: 33:58:af:84:d4:4e:9b:83:68:a6:13:0c:e1:0a:ac:d9:e0:01: 81:c9:d2:88:e1:96:0a:c6:62:f1:de:f8:de:14:93:a4:1d:b2: c1:d7:ec:c7:29:b6:af:cf:86:49:ab:1e:98:fd:45:1a:be:12: 5c:fd:12:ab:b5:74:43:1e:3c:3f:b1:9c:33:e9:9c:a2:b5:f1: ea:f9:02:2e:6c:17:6d:8d:51:2e:17:5c:52:74:28:11:d6:bf: 4d:64:66:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsTJT/Q2UU138RrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMDIxMDU1MFoXDTI1MTExODIyMDU1MFowLzEtMCsGA1UEAxMk ZjE4NWQ0NzYtNDNjNS00N2M0LTg5ZjUtZGQyZGI4ZDBiNTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/8WekfVdFQqc1NWtiy3Bb0dB/C7UDroG8bV 2x4owgLbe98Tn3Zrm2srfYnuCSBJBiOp7CTKsKzB2n3f2S2c84Ic0IpdQ7Y+IwZE BKiUPSfv+5n+5+nmguHmUu/5NKLc42GWUSnG+zWwFuSBevkNbMxUrATp5/MIhXcz fLmEuFbNHXdMyfiQWvI0wKob0gz/W5YCQmxxH8Wp6yB0gqZopKMzBUQlTqIclksm Gq/lWIselYpsQX65tkCkfIz6pR6Axlb91i6vAbZ9x10fxJMj42R5Ajt8skLHTHiX waD6G3u20Jk79Q59ZoO5Fwt43f2DNRkH9wTVXHO55YHljxv7vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBblhF+w5kbmRxOEPuC4XVjfraDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvM2VhMzViOTYtNTk3Zi0z YjM2LTk0OGMtMzNlZTkyZGIwOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8xKZK6nbAM7NlPz8gnBpeHZAQuYM2cnqNmxocVIcbHXOl2oV2zt3H4 fFQddhKUUu9AQd1Mrtrumg62XzbD9YjTjRcG4cJMpYCVazL4hFgYOgt/db9sqmxp M2s/2lHT4gbTe5GmhOlCqK6qO5ZUFwxBs70K6go9LZaxkuBmgAAfZXbvWL4MPiG/ ICK7i5J8UWnjU1yOQr+DqqTxSXjjWZuohTNYr4TUTpuDaKYTDOEKrNngAYHJ0ojh lgrGYvHe+N4Uk6QdssHX7Mcptq/PhkmrHpj9RRq+Elz9Equ1dEMePD+xnDPpnKK1 8er5Ai5sF22NUS4XXFJ0KBHWv01kZt8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:48:45 2025 by rpki-client