$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/ea5fac7c-b585-38d4-8a2c-649c73995029.roa File: ea5fac7c-b585-38d4-8a2c-649c73995029.roa (raw, json) Hash identifier: oPS6FOxANWdVYBPODT6vbgiAx6Cw3uxp5vwcft0ldAc= Subject key identifier: 6A:0D:BF:5D:B1:F0:9B:DD:BD:94:BD:03:15:38:C3:FF:58:66:F2:90 Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584A8BF53642316E38FD7F7EC380 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/ea5fac7c-b585-38d4-8a2c-649c73995029.roa Signing time: Thu 17 Jul 2025 08:52:12 +0000 ROA not before: Thu 17 Jul 2025 08:52:12 +0000 ROA not after: Wed 15 Oct 2025 08:52:12 +0000 asID: 29016 IP address blocks: 159.182.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:f5:36:42:31:6e:38:fd:7f:7e:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Jul 17 08:52:12 2025 GMT Not After : Oct 15 08:52:12 2025 GMT Subject: CN=e004bcde-a9a3-4e24-8090-e05110da5311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:81:d8:13:92:46:f0:a4:a4:29:13:9d:d5:ad: 4f:ec:6d:d5:b1:f0:5d:e3:9d:b9:6e:f0:13:5e:8b: 13:b6:6c:ee:25:f9:7c:7c:c4:e7:20:20:b8:ae:10: fc:be:8b:59:20:f8:72:12:84:67:44:45:4d:1d:6c: 31:dc:f7:95:86:56:df:95:cb:83:c3:e1:3d:97:21: 99:72:84:cf:ec:61:a0:55:7c:70:bb:e7:02:15:dc: 0c:17:59:1f:7b:6f:ff:c4:e4:f8:4d:b3:61:f8:68: 4d:bb:ee:bf:f1:11:c2:19:6f:48:45:0a:9b:3d:63: 26:6d:8d:3c:8f:eb:05:24:98:84:1b:fd:59:b0:08: f2:c9:b8:55:78:37:a4:1a:e2:a1:c8:a4:06:d0:8f: 44:f6:48:bd:77:19:d7:60:52:79:ff:8c:d3:3e:90: de:91:30:fd:21:cd:42:ac:d1:37:ba:3d:d5:7d:82: 10:6c:61:68:f1:da:88:d4:e7:2b:27:23:04:b7:14: 7c:9f:04:71:97:dc:45:70:58:f8:5f:b0:8e:51:37: 69:28:c3:c2:40:98:86:a8:d9:65:3a:80:34:df:13: 2c:f4:26:f8:5d:4b:94:de:a4:16:db:b7:f7:1d:af: f3:a6:93:85:1b:ea:4f:89:85:12:5e:e4:ed:cd:ad: 24:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0D:BF:5D:B1:F0:9B:DD:BD:94:BD:03:15:38:C3:FF:58:66:F2:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/ea5fac7c-b585-38d4-8a2c-649c73995029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 159.182.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:8f:73:78:5e:3f:6d:9e:1a:e0:ea:bb:23:0e:f2:0b:6b:7e: d5:88:62:42:7e:9f:e0:6a:e5:db:2a:d7:8b:0c:cb:09:31:ef: 2e:6b:13:e7:db:c8:de:60:bd:bb:af:c8:74:eb:c5:1c:5a:58: 45:6a:43:d9:8c:fc:19:80:70:74:53:db:c0:84:09:a2:0e:78: 70:7c:8a:b0:63:41:06:73:f7:50:39:e6:9b:61:b1:f8:eb:6a: 6a:d7:a5:87:bc:6b:a7:c5:e0:e0:0c:78:52:b2:f5:03:06:73: d9:2a:81:25:be:07:10:f6:f8:f4:8e:e5:8e:1c:ad:d4:34:02: a9:5e:77:8e:3d:9f:73:c2:a8:86:b7:ad:51:08:0a:b5:e3:1d: 93:8c:89:43:f9:5c:d0:45:c0:59:63:b0:3a:82:86:92:b3:c5: 8e:85:14:9f:76:9b:d9:e8:f2:57:d5:38:1f:b9:f7:7f:1d:e5: 7d:23:2b:88:69:5b:60:b0:33:61:56:84:5f:63:21:6a:a3:ba: 8e:15:03:27:b1:f2:11:aa:95:7e:ae:bd:b1:22:8e:04:65:b5: 2a:21:78:c3:9d:14:5d:4b:cd:15:40:92:d2:8d:2d:1c:7d:e4: 7c:2f:d5:3a:0a:af:6f:c0:79:00:de:87:7c:00:65:42:8b:6c: 6f:39:83:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqL9TZCMW44/X9+w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI1MDcxNzA4NTIxMloXDTI1MTAxNTA4NTIxMlowLzEtMCsGA1UEAxMk ZTAwNGJjZGUtYTlhMy00ZTI0LTgwOTAtZTA1MTEwZGE1MzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIHYE5JG8KSkKROd1a1P7G3VsfBd4525bvAT XosTtmzuJfl8fMTnICC4rhD8votZIPhyEoRnREVNHWwx3PeVhlbflcuDw+E9lyGZ coTP7GGgVXxwu+cCFdwMF1kfe2//xOT4TbNh+GhNu+6/8RHCGW9IRQqbPWMmbY08 j+sFJJiEG/1ZsAjyybhVeDekGuKhyKQG0I9E9ki9dxnXYFJ5/4zTPpDekTD9Ic1C rNE3uj3VfYIQbGFo8dqI1OcrJyMEtxR8nwRxl9xFcFj4X7COUTdpKMPCQJiGqNll OoA03xMs9Cb4XUuU3qQW27f3Ha/zppOFG+pPiYUSXuTtza0k1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoNv12x8JvdvZS9AxU4w/9YZvKQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvZWE1ZmFjN2MtYjU4NS0z OGQ0LThhMmMtNjQ5YzczOTk1MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDn7ZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaPc3heP22eGuDquyMO8gtrftWIYkJ+n+Bq5dsq14sMywkx7y5rE+fb yN5gvbuvyHTrxRxaWEVqQ9mM/BmAcHRT28CECaIOeHB8irBjQQZz91A55pthsfjr amrXpYe8a6fF4OAMeFKy9QMGc9kqgSW+BxD2+PSO5Y4crdQ0Aqled449n3PCqIa3 rVEICrXjHZOMiUP5XNBFwFljsDqChpKzxY6FFJ92m9no8lfVOB+5938d5X0jK4hp W2CwM2FWhF9jIWqjuo4VAyex8hGqlX6uvbEijgRltSoheMOdFF1LzRVAktKNLRx9 5Hwv1ToKr2/AeQDeh3wAZUKLbG85g8Y= -----END CERTIFICATE-----Generated at Tue Aug 5 17:23:56 2025 by rpki-client