$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d29f17b0-7a5d-310a-83f6-37c093f206a3.roa File: d29f17b0-7a5d-310a-83f6-37c093f206a3.roa (raw, json) Hash identifier: Ejz8F5KFHDLtGd9MuUvGsolXNXpaA+QXXU3244VVW9Q= Subject key identifier: 92:FA:AE:22:27:E1:C4:8D:ED:2D:1A:80:7E:35:F7:27:E0:C5:94:81 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEF560B38AC6506C83B742EE0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d29f17b0-7a5d-310a-83f6-37c093f206a3.roa Signing time: Thu 21 Aug 2025 23:12:20 +0000 ROA not before: Thu 21 Aug 2025 23:12:20 +0000 ROA not after: Thu 20 Nov 2025 00:12:20 +0000 asID: 31898 IP address blocks: 150.230.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:56:0b:38:ac:65:06:c8:3b:74:2e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 23:12:20 2025 GMT Not After : Nov 20 00:12:20 2025 GMT Subject: CN=36b351a9-feaa-4d34-a569-53fd25c5440c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7c:b5:90:4e:24:ab:af:e1:3d:0b:77:bb:1d: 5d:7a:98:92:83:58:9b:d2:2b:ba:0c:dc:2d:b3:0b: a7:01:68:33:88:16:a6:02:52:6e:98:80:5d:d2:50: a6:34:d0:34:14:6f:bd:a4:7b:7c:38:22:6d:35:64: dc:7d:c5:d1:a7:03:f8:54:cc:c2:86:2c:cb:1b:b8: 88:92:4b:24:1a:72:c2:2c:a2:00:80:20:18:ff:66: 8b:b0:e9:c0:93:fd:33:95:7d:4d:37:6d:da:32:c1: bb:f7:14:cd:dd:e9:4b:40:18:36:f8:cd:e3:4c:4c: ff:5e:91:53:bd:e7:f8:18:4a:18:08:51:6e:ba:3a: 2a:de:13:a5:9a:a6:5a:e8:e3:59:8d:21:48:c7:bc: 45:86:d6:d7:05:29:5e:63:6b:7c:15:5b:5b:5d:3b: 96:c5:5f:48:3f:e4:67:80:54:e0:48:a2:ef:4d:82: 54:b7:32:bf:4e:03:e0:4b:1b:e0:55:76:6e:83:d4: d4:9c:3e:83:62:73:4b:58:a3:ff:c3:86:da:60:38: 72:4f:0b:05:a8:88:ca:92:7c:84:73:24:04:c0:1f: 63:a1:ea:6d:f4:e1:8d:71:8e:23:42:fe:62:e7:f4: 87:36:e2:fe:22:65:e0:91:0a:57:2c:d4:fa:7a:4c: 79:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FA:AE:22:27:E1:C4:8D:ED:2D:1A:80:7E:35:F7:27:E0:C5:94:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d29f17b0-7a5d-310a-83f6-37c093f206a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 150.230.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c2:dc:ae:cf:e9:71:65:c9:1f:01:9e:6f:34:04:c4:c3:84: f3:8c:0f:11:86:6f:3f:50:b8:9d:f8:bd:1c:e3:0f:97:2a:06: ff:d0:1b:23:d5:99:cd:27:38:8e:ff:cb:d3:75:a1:10:d3:86: bd:55:b5:f4:87:ae:26:c6:32:9a:94:04:f4:a5:62:da:2a:77: 65:6f:b7:2c:51:df:9e:4d:8c:d8:07:3f:1a:12:12:42:a3:91: f1:3c:81:0a:a5:b0:13:cf:80:ee:46:97:79:d0:38:d0:6e:19: cc:7e:4e:82:39:74:c3:32:5f:49:14:d9:92:2f:6e:d7:45:7a: 58:3f:df:84:10:4e:cb:47:e8:6d:53:b1:a3:62:5b:84:5b:c4: 9d:41:9d:45:15:9f:5d:05:af:e5:5b:00:86:5c:da:c4:7e:1c: 01:55:72:8e:6f:dc:d8:b9:1a:8a:91:cc:2b:11:24:43:90:b4: 51:26:57:e2:c4:4b:63:ec:62:1c:7a:b8:90:e1:96:03:ac:2b: b6:1b:02:06:66:2a:e1:0a:a8:32:17:0e:29:54:1f:f3:3a:97: c4:c1:7a:9c:b4:dc:69:1a:f2:61:ab:ea:88:16:fe:13:bb:f1: b0:7d:df:58:e1:74:e1:f4:56:72:69:44:9d:f9:cf:0b:1a:8a: 1b:05:0b:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvVgs4rGUGyDt0LuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTIzMTIyMFoXDTI1MTEyMDAwMTIyMFowLzEtMCsGA1UEAxMk MzZiMzUxYTktZmVhYS00ZDM0LWE1NjktNTNmZDI1YzU0NDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXy1kE4kq6/hPQt3ux1depiSg1ib0iu6DNwt swunAWgziBamAlJumIBd0lCmNNA0FG+9pHt8OCJtNWTcfcXRpwP4VMzChizLG7iI kkskGnLCLKIAgCAY/2aLsOnAk/0zlX1NN23aMsG79xTN3elLQBg2+M3jTEz/XpFT vef4GEoYCFFuujoq3hOlmqZa6ONZjSFIx7xFhtbXBSleY2t8FVtbXTuWxV9IP+Rn gFTgSKLvTYJUtzK/TgPgSxvgVXZug9TUnD6DYnNLWKP/w4baYDhyTwsFqIjKknyE cyQEwB9joept9OGNcY4jQv5i5/SHNuL+ImXgkQpXLNT6ekx5gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJL6riIn4cSN7S0agH419yfgxZSBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZDI5ZjE3YjAtN2E1ZC0z MTBhLTgzZjYtMzdjMDkzZjIwNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEluZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnC3K7P6XFlyR8Bnm80BMTDhPOMDxGGbz9QuJ34vRzjD5cqBv/QGyPV mc0nOI7/y9N1oRDThr1VtfSHribGMpqUBPSlYtoqd2VvtyxR355NjNgHPxoSEkKj kfE8gQqlsBPPgO5Gl3nQONBuGcx+ToI5dMMyX0kU2ZIvbtdFelg/34QQTstH6G1T saNiW4RbxJ1BnUUVn10Fr+VbAIZc2sR+HAFVco5v3Ni5GoqRzCsRJEOQtFEmV+LE S2PsYhx6uJDhlgOsK7YbAgZmKuEKqDIXDilUH/M6l8TBepy03Gka8mGr6ogW/hO7 8bB931jhdOH0VnJpRJ35zwsaihsFC+8= -----END CERTIFICATE-----Generated at Sat Aug 23 16:23:46 2025 by rpki-client