$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e972a60c-651a-3535-bbe5-35e3bcf6c3a6.roa File: e972a60c-651a-3535-bbe5-35e3bcf6c3a6.roa (raw, json) Hash identifier: AC3s2PlVCbhOP5jjqQ6yhndPxKofKg9cBEB6EibpNAM= Subject key identifier: 3D:4E:35:10:61:69:5B:60:91:53:9D:AB:4F:0D:4B:95:62:45:C7:5C Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584AA42B72B2D4E82300860D5E80 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e972a60c-651a-3535-bbe5-35e3bcf6c3a6.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 13767 IP address blocks: 204.251.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:72:b2:d4:e8:23:00:86:0d:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=ba014c9b-db0b-443e-88b1-ed1cae98f7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9d:54:b7:9e:6f:6a:00:61:69:b1:08:4e:1c: 36:f9:42:44:43:09:76:6b:dc:12:73:5b:c3:11:73: a3:88:15:d9:57:1b:56:f4:81:30:f4:c4:be:dd:38: 00:51:e1:27:80:99:f8:38:9d:5a:27:4d:12:5f:d5: ca:81:67:35:e5:af:e7:e3:d1:47:0c:dd:13:ed:13: b8:80:6b:e1:4e:17:c6:e7:63:04:24:58:f4:d9:cc: 15:fa:b2:8c:79:8d:c5:51:a0:58:5a:ff:d3:b1:af: 59:61:05:38:9e:f7:d2:a0:e4:54:6c:01:9b:de:be: 3e:25:57:52:ba:f3:79:e2:d9:39:5e:7d:92:09:58: 69:1c:31:be:40:ee:b8:dd:f5:41:b8:cd:5f:9e:5d: b6:4f:64:0f:03:b6:c6:ad:4a:f4:77:e5:c3:4c:69: 7c:54:56:11:25:f9:ae:1a:bf:4a:69:28:39:86:49: 5b:a5:a9:ff:b9:c8:a9:2e:45:b1:9f:04:d4:b8:d0: 5f:26:8e:35:cb:78:5e:0e:fe:51:c7:c4:a5:a9:41: ed:14:a8:3e:32:1a:df:21:f2:67:f0:3b:93:ec:b6: e5:5c:11:79:ea:e3:06:0a:89:9e:90:8f:36:a4:aa: 51:bf:dd:c9:9e:f4:8e:3f:df:10:00:fd:57:d7:12: 73:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4E:35:10:61:69:5B:60:91:53:9D:AB:4F:0D:4B:95:62:45:C7:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e972a60c-651a-3535-bbe5-35e3bcf6c3a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.251.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:10:c4:27:09:32:32:5a:6d:5d:f7:a0:bc:3d:55:60:7e:ec: 18:bc:72:b2:a6:b0:c9:33:ef:00:9e:ca:43:34:8a:f0:bf:e6: 0f:02:d0:94:31:69:61:d1:1b:5b:51:57:6e:75:07:a2:31:cf: d9:30:7a:f2:11:83:03:3d:22:ab:7f:13:07:08:94:01:05:4a: fe:76:19:7b:55:e1:7f:bb:d1:30:37:9a:11:b1:82:a0:00:c7: 7c:8a:87:7d:1b:0a:ed:f0:f3:a8:e3:a6:f4:95:1f:93:41:23: 2a:06:84:1a:f3:8f:c1:a1:d7:a6:a8:32:98:ee:0c:59:91:df: bb:d0:8a:d9:87:3d:f1:db:f8:da:db:4e:39:08:00:bd:09:50: 1a:10:70:7c:10:b1:b3:0b:d3:3a:93:44:24:87:e0:25:10:59: 31:6b:31:0d:b6:39:e5:34:6b:57:cc:f9:9e:e7:aa:1c:ef:dd: ab:a7:75:ce:75:0d:e0:e2:b7:e7:dd:34:64:97:e3:58:d0:86: 46:96:e9:56:4e:1d:02:13:33:e9:6b:0b:47:25:8b:24:ca:81: c9:4d:83:a7:ea:e2:b6:02:22:35:8e:16:18:8f:f6:38:ec:27: 3b:0b:66:f9:90:fd:a1:c7:91:4d:5e:4d:7e:1f:fd:f5:50:3c: 7f:75:bb:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK3Ky1OgjAIYNXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YmEwMTRjOWItZGIwYi00NDNlLTg4YjEtZWQxY2FlOThmN2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp1Ut55vagBhabEIThw2+UJEQwl2a9wSc1vD EXOjiBXZVxtW9IEw9MS+3TgAUeEngJn4OJ1aJ00SX9XKgWc15a/n49FHDN0T7RO4 gGvhThfG52MEJFj02cwV+rKMeY3FUaBYWv/Tsa9ZYQU4nvfSoORUbAGb3r4+JVdS uvN54tk5Xn2SCVhpHDG+QO643fVBuM1fnl22T2QPA7bGrUr0d+XDTGl8VFYRJfmu Gr9KaSg5hklbpan/ucipLkWxnwTUuNBfJo41y3heDv5Rx8SlqUHtFKg+MhrfIfJn 8DuT7LblXBF56uMGComekI82pKpRv93JnvSOP98QAP1X1xJzswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1ONRBhaVtgkVOdq08NS5ViRcdcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZTk3MmE2MGMtNjUxYS0z NTM1LWJiZTUtMzVlM2JjZjZjM2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzPuvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUQxCcJMjJabV33oLw9VWB+7Bi8crKmsMkz7wCeykM0ivC/5g8C0JQx aWHRG1tRV251B6Ixz9kwevIRgwM9Iqt/EwcIlAEFSv52GXtV4X+70TA3mhGxgqAA x3yKh30bCu3w86jjpvSVH5NBIyoGhBrzj8Gh16aoMpjuDFmR37vQitmHPfHb+Nrb TjkIAL0JUBoQcHwQsbML0zqTRCSH4CUQWTFrMQ22OeU0a1fM+Z7nqhzv3aundc51 DeDit+fdNGSX41jQhkaW6VZOHQITM+lrC0cliyTKgclNg6fq4rYCIjWOFhiP9jjs JzsLZvmQ/aHHkU1eTX4f/fVQPH91uxQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:11:35 2025 by rpki-client