$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/a45902da-9e70-3943-a932-51f817256e75.roa File: a45902da-9e70-3943-a932-51f817256e75.roa (raw, json) Hash identifier: gJJrtHu/t2gprtqiQFQ8HMBoOUgLrPXAzGG+f/grB/4= Subject key identifier: 40:8F:5D:38:DA:12:CC:B4:89:03:E3:F6:56:F0:A9:FF:D6:41:AE:49 Certificate issuer: /CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Certificate serial: 010D0C9F4328584A9FFBA6321BE6D2EAE2138B40 Authority key identifier: 42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/a45902da-9e70-3943-a932-51f817256e75.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 53339 IP address blocks: 206.126.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:a6:32:1b:e6:d2:ea:e2:13:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=fefd1e19-c320-40d9-a27d-eb45ae41d5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bc:db:af:a0:6e:e5:7e:7e:0e:b5:f2:0a:8b: f8:30:87:33:2e:4a:ae:33:85:eb:7b:cc:ad:bc:e1: 6a:17:78:01:aa:95:1d:38:64:87:d9:cb:4a:09:d7: ad:e2:80:4c:76:af:7c:ee:c1:94:17:f1:dc:dc:f3: b7:bd:6f:e1:6d:ce:98:48:23:5f:01:ae:75:3a:24: 11:a8:f7:b3:2d:dc:92:61:fb:7c:34:f6:f1:3b:08: ff:f3:60:ef:26:d0:66:84:53:c9:a2:f2:2e:eb:63: 4b:77:5e:04:23:15:c5:2d:7c:5d:5c:59:76:ab:ec: 06:a4:71:98:b9:4b:0a:7b:a2:71:75:d7:e6:5f:b3: 8c:dd:23:de:18:2c:be:8d:63:31:08:9e:0d:65:2e: 73:73:d4:ca:4d:1e:73:00:93:c9:d2:f1:ab:04:42: 9f:c8:f2:03:e5:35:7b:97:30:92:cb:34:96:41:cf: 4b:00:5c:5a:ff:72:6c:18:ab:d5:f2:96:0d:6e:42: 40:76:61:08:33:8c:66:bb:85:4c:f0:0b:4d:78:cd: 87:6f:67:2b:fa:11:b8:22:64:09:49:bd:06:19:f0: a4:8a:a7:0d:f8:6b:f5:76:06:1a:1a:ab:b5:4e:5f: 9c:90:e2:d4:61:fd:d5:18:2c:b6:78:d8:ae:dc:c9: 4c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8F:5D:38:DA:12:CC:B4:89:03:E3:F6:56:F0:A9:FF:D6:41:AE:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/a45902da-9e70-3943-a932-51f817256e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl X509v3 Authority Key Identifier: keyid:42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer sbgp-ipAddrBlock: critical IPv4: 206.126.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:fa:28:b2:11:40:8f:a3:f3:bc:8c:07:62:23:b9:f6:49:97: 77:d0:aa:df:32:5d:7e:d5:8f:d5:23:37:54:3c:2b:45:28:e3: c2:e5:5a:84:00:4a:45:4b:66:88:f6:ef:26:8d:02:16:be:89: d8:29:d5:0c:6c:2d:51:5b:5d:7b:46:9d:25:28:6e:e0:08:7f: a5:11:1e:7a:2e:ac:32:aa:23:8b:4e:d5:35:60:93:79:34:66: 10:79:f6:8d:d9:6c:a0:85:38:1f:96:98:36:2a:4c:80:33:9d: 5b:ae:5c:24:97:ab:18:14:bc:70:e6:e5:bf:19:2e:69:14:b3: 73:ae:d0:da:72:48:22:b5:21:f3:b7:a5:94:12:1b:5e:90:28: 08:d8:67:20:52:d6:51:36:bd:80:2f:71:13:63:94:1e:6f:95: 23:77:45:34:77:ab:de:c4:0b:72:64:ec:ae:03:3d:ff:2b:dc: 9b:54:87:89:4a:db:0b:8e:d8:1b:3b:3e:42:e3:34:03:ec:37: b5:58:40:90:f2:75:93:07:b6:81:0e:ef:34:cc:20:74:18:e2: 69:58:35:5c:d1:a6:8e:58:ba:a5:c9:75:97:34:bd:39:48:b0: 8b:8b:5d:af:10:8f:42:01:df:f5:71:12:40:1a:6a:3c:09:f8: d7:85:b0:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6YyG+bS6uITi0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMTkwMDgtMDQ4Zi00NTgwLTkxMDEtZjBkMWViN2Zj M2FlMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ZmVmZDFlMTktYzMyMC00MGQ5LWEyN2QtZWI0NWFlNDFkNWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLzbr6Bu5X5+DrXyCov4MIczLkquM4Xre8yt vOFqF3gBqpUdOGSH2ctKCdet4oBMdq987sGUF/Hc3PO3vW/hbc6YSCNfAa51OiQR qPezLdySYft8NPbxOwj/82DvJtBmhFPJovIu62NLd14EIxXFLXxdXFl2q+wGpHGY uUsKe6JxddfmX7OM3SPeGCy+jWMxCJ4NZS5zc9TKTR5zAJPJ0vGrBEKfyPID5TV7 lzCSyzSWQc9LAFxa/3JsGKvV8pYNbkJAdmEIM4xmu4VM8AtNeM2Hb2cr+hG4ImQJ Sb0GGfCkiqcN+Gv1dgYaGqu1Tl+ckOLUYf3VGCy2eNiu3MlMkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECPXTjaEsy0iQPj9lbwqf/WQa5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYx OTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQxZWI3ZmMzYWUvYTQ1OTAyZGEtOWU3MC0z OTQzLWE5MzItNTFmODE3MjU2ZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2FmMTkwMDgtMDQ4Zi00NTgwLTkx MDEtZjBkMWViN2ZjM2FlL2NhZjE5MDA4LTA0OGYtNDU4MC05MTAxLWYwZDFlYjdm YzNhZS5jcmwwHwYDVR0jBBgwFoAUQifSb7pJl+xBURbBJOgOsF/uYTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYxOTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQx ZWI3ZmMzYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzn7hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ36KLIRQI+j87yMB2IjufZJl3fQqt8yXX7Vj9UjN1Q8K0Uo48LlWoQA SkVLZoj27yaNAha+idgp1QxsLVFbXXtGnSUobuAIf6URHnourDKqI4tO1TVgk3k0 ZhB59o3ZbKCFOB+WmDYqTIAznVuuXCSXqxgUvHDm5b8ZLmkUs3Ou0NpySCK1IfO3 pZQSG16QKAjYZyBS1lE2vYAvcRNjlB5vlSN3RTR3q97EC3Jk7K4DPf8r3JtUh4lK 2wuO2Bs7PkLjNAPsN7VYQJDydZMHtoEO7zTMIHQY4mlYNVzRpo5YuqXJdZc0vTlI sIuLXa8Qj0IB3/VxEkAaajwJ+NeFsLk= -----END CERTIFICATE-----Generated at Sun Aug 10 05:33:32 2025 by rpki-client