$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/dacb8d64-0467-305d-8bc3-2c5336579a32.roa File: dacb8d64-0467-305d-8bc3-2c5336579a32.roa (raw, json) Hash identifier: DOonedVm4iCe+GUI8yNwz6JU2yoZvhXrdmF2ukLaEB4= Subject key identifier: 0B:61:0A:F3:B4:BA:E8:95:06:C8:57:19:DA:6A:EC:51:26:53:65:CA Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584A8BF563DA26B2B0D73B6A9080 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/dacb8d64-0467-305d-8bc3-2c5336579a32.roa Signing time: Thu 17 Jul 2025 08:52:33 +0000 ROA not before: Thu 17 Jul 2025 08:52:33 +0000 ROA not after: Wed 15 Oct 2025 08:52:33 +0000 asID: 29016 IP address blocks: 159.182.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:f5:63:da:26:b2:b0:d7:3b:6a:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Jul 17 08:52:33 2025 GMT Not After : Oct 15 08:52:33 2025 GMT Subject: CN=b14cab9e-253e-4dc4-ad5e-d25abe5895db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fe:52:9c:43:57:13:81:67:45:9d:a7:60:1a: d0:c6:b1:82:63:cd:14:2b:ea:d4:cf:23:b9:21:47: 11:72:f5:9c:74:c1:15:d2:dd:c1:d2:d4:9f:5b:c3: a5:bd:bf:61:4c:e4:5a:98:8d:be:40:45:3e:48:85: 6c:e9:2c:ba:a1:b0:27:5c:4a:5a:0d:5c:1b:3c:a0: ee:6d:c0:92:bc:25:95:1c:8d:07:c6:59:40:66:0d: bd:95:47:e4:5a:83:3b:41:8d:ea:c3:29:5a:52:25: f0:9b:9e:b5:ed:72:08:d5:4c:9b:7c:c8:09:a7:20: 0e:5c:c0:ae:69:21:85:33:ea:47:ff:5a:db:43:e8: 1e:4b:a4:f9:86:61:6d:43:3a:c2:da:81:f6:f4:6d: 3a:51:b7:db:f0:30:a7:73:14:a1:fb:27:99:0c:75: aa:8b:04:01:11:b3:d0:fa:36:04:88:0a:5a:7a:89: 4f:55:f3:65:15:c9:eb:d2:7a:0b:0b:09:37:1d:38: 7a:4d:79:5d:81:a2:f3:c8:97:a9:d1:d5:05:fd:79: 9b:6d:c5:dd:2f:49:78:08:51:24:b6:3c:8d:b7:d9: 37:15:6c:84:44:68:44:e5:2c:d0:5f:45:42:f4:af: dc:4e:18:b9:fe:5e:95:fd:76:b1:16:36:79:0b:4b: 8e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:61:0A:F3:B4:BA:E8:95:06:C8:57:19:DA:6A:EC:51:26:53:65:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/dacb8d64-0467-305d-8bc3-2c5336579a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 159.182.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b2:eb:c3:00:a6:eb:42:48:e1:c3:f4:e0:04:e9:93:12:08: 4f:6b:e9:2d:b2:59:ed:6b:cf:04:be:b6:7d:bd:3c:08:23:84: d1:07:0a:9b:a8:0c:78:25:78:f9:11:66:34:f8:c8:22:9f:62: 4b:de:14:a4:59:b6:b9:0e:eb:08:95:f3:9a:c2:3b:59:5b:ef: 02:ae:09:03:b3:cd:f4:41:d0:9f:83:46:d3:23:18:56:0d:0d: 53:05:41:b2:bb:8e:3f:b7:7a:4a:8e:8a:a5:9d:25:d3:3a:63: b8:65:00:7c:b1:3d:ed:c2:d6:12:5f:9c:9d:42:77:b7:e6:13: a4:5a:7d:1f:a2:c6:11:e6:ac:cd:6b:e1:f5:c5:54:bd:9c:25: 24:5b:93:40:8f:8d:01:f4:cc:70:b0:61:8b:e5:3c:10:17:6b: 54:bd:b4:26:bc:bd:40:39:14:f4:dd:0e:83:f5:d5:ef:5e:8b: 38:79:ef:e8:99:d2:98:1d:cc:eb:59:53:38:21:84:f4:47:39: 70:2d:29:0b:ec:0c:59:fc:9a:51:5c:90:ab:33:ee:16:8c:02: fe:58:3c:0b:80:4c:93:63:83:0c:68:cf:a7:c1:b0:61:4e:01: c7:16:63:69:02:49:d0:8e:c8:d0:8d:1a:55:af:15:af:75:e8: a3:af:83:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqL9WPaJrKw1ztqkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI1MDcxNzA4NTIzM1oXDTI1MTAxNTA4NTIzM1owLzEtMCsGA1UEAxMk YjE0Y2FiOWUtMjUzZS00ZGM0LWFkNWUtZDI1YWJlNTg5NWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv5SnENXE4FnRZ2nYBrQxrGCY80UK+rUzyO5 IUcRcvWcdMEV0t3B0tSfW8Olvb9hTORamI2+QEU+SIVs6Sy6obAnXEpaDVwbPKDu bcCSvCWVHI0HxllAZg29lUfkWoM7QY3qwylaUiXwm5617XII1UybfMgJpyAOXMCu aSGFM+pH/1rbQ+geS6T5hmFtQzrC2oH29G06Ubfb8DCncxSh+yeZDHWqiwQBEbPQ +jYEiApaeolPVfNlFcnr0noLCwk3HTh6TXldgaLzyJep0dUF/XmbbcXdL0l4CFEk tjyNt9k3FWyERGhE5SzQX0VC9K/cThi5/l6V/XaxFjZ5C0uOIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAthCvO0uuiVBshXGdpq7FEmU2XKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvZGFjYjhkNjQtMDQ2Ny0z MDVkLThiYzMtMmM1MzM2NTc5YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDn7Z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKy68MAputCSOHD9OAE6ZMSCE9r6S2yWe1rzwS+tn29PAgjhNEHCpuo DHglePkRZjT4yCKfYkveFKRZtrkO6wiV85rCO1lb7wKuCQOzzfRB0J+DRtMjGFYN DVMFQbK7jj+3ekqOiqWdJdM6Y7hlAHyxPe3C1hJfnJ1Cd7fmE6RafR+ixhHmrM1r 4fXFVL2cJSRbk0CPjQH0zHCwYYvlPBAXa1S9tCa8vUA5FPTdDoP11e9eizh57+iZ 0pgdzOtZUzghhPRHOXAtKQvsDFn8mlFckKsz7haMAv5YPAuATJNjgwxoz6fBsGFO AccWY2kCSdCOyNCNGlWvFa916KOvgx8= -----END CERTIFICATE-----Generated at Tue Aug 5 17:11:49 2025 by rpki-client