$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa File: 2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa (raw, json) Hash identifier: A9Kl+o1ovV7VO6k5t1x8au4WrTdHTaUywKa4cd/i93s= Subject key identifier: 28:53:18:FD:7D:9B:FC:79:59:6D:87:CF:9A:96:B7:AD:48:41:5C:34 Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584A89A621B51099105C5EE50680 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 33322 IP address blocks: 204.15.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:21:b5:10:99:10:5c:5e:e5:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=a4fa3aca-7c31-4fb3-93aa-a611d5605cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a2:06:da:eb:5f:6b:e6:1a:27:9e:9a:62:0c: bc:11:f0:2b:4b:5d:24:74:88:23:b1:66:c5:d9:6b: 9f:5e:c1:11:76:a3:b2:1f:71:de:af:61:c5:78:ef: 96:de:e5:49:8a:8e:24:52:73:b7:75:61:b5:5b:67: b5:6c:f9:10:4f:2b:b0:a5:a8:3f:3f:62:24:53:fa: b3:8b:d9:a7:84:47:61:9e:5d:72:7b:31:af:e9:77: 18:b7:02:80:06:8e:f9:09:89:a8:cd:29:d8:3f:06: 3c:99:e5:ac:c4:32:9f:e1:c9:f6:5b:4e:be:0f:f3: 75:6a:0e:34:d5:7e:d8:7d:14:ef:5d:64:34:15:9e: 1b:8c:f4:e0:2d:98:14:8b:0f:89:6e:b1:ec:78:ac: 85:17:47:ce:3a:ec:f7:61:ca:d5:1c:90:e5:f3:2b: 3b:57:d2:6b:d7:48:b6:16:31:53:26:15:41:ac:42: ee:01:e1:d3:0f:79:73:c7:2c:a8:47:c6:e4:aa:60: e0:de:32:a7:fe:ff:8e:e3:9a:5c:6d:7c:df:45:76: 85:d5:54:6f:b9:77:55:c3:c2:4f:1f:3b:5b:91:af: 51:3b:68:3a:67:a1:f9:f0:1b:f3:5c:a3:0f:66:ed: 47:a4:a0:de:35:51:d1:83:b7:3f:b0:57:f9:d9:e5: 58:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:53:18:FD:7D:9B:FC:79:59:6D:87:CF:9A:96:B7:AD:48:41:5C:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 204.15.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:08:e5:bf:7a:95:48:9e:ce:36:8c:ab:18:e4:ad:fe:81:22: c3:6a:28:aa:66:48:31:aa:e8:d7:4b:ad:29:3e:77:b6:b9:7a: f3:0a:7b:5e:f1:74:b9:94:55:fb:41:31:62:87:3a:06:a9:d8: 68:47:d3:db:e7:88:62:49:02:a9:a2:de:75:34:7d:5b:ad:2e: 09:65:c3:59:82:f3:67:77:7d:e5:d8:76:7e:3f:36:d6:9d:be: 38:3f:17:16:6c:a3:ed:38:34:8d:4d:19:8e:a9:8d:3e:77:9c: ba:59:3d:0a:2b:51:eb:74:63:73:c6:80:96:ff:3f:0a:f0:a1: 5b:7a:dc:97:76:9d:46:d5:88:06:4c:e7:48:f5:16:a8:c7:25: df:ed:0d:cb:4f:8b:3e:81:7f:44:d7:ed:73:98:b5:59:d6:54: 04:e4:ac:a2:70:52:a7:43:65:f6:90:42:68:11:e4:1e:eb:b2: 65:ec:2b:08:16:79:71:23:01:77:4f:b4:83:29:8f:29:75:dd: cf:4f:2e:1a:a8:28:e6:c7:cc:3b:24:14:b1:fe:66:c0:3b:a4: b2:2d:bf:41:03:4b:b4:59:58:95:11:51:37:1f:87:6b:e5:94: 04:5f:b2:08:5d:99:eb:19:da:03:a0:57:ca:a8:27:a9:ad:de: 0a:b4:91:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJpiG1EJkQXF7lBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk YTRmYTNhY2EtN2MzMS00ZmIzLTkzYWEtYTYxMWQ1NjA1Y2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qIG2utfa+YaJ56aYgy8EfArS10kdIgjsWbF 2WufXsERdqOyH3Her2HFeO+W3uVJio4kUnO3dWG1W2e1bPkQTyuwpag/P2IkU/qz i9mnhEdhnl1yezGv6XcYtwKABo75CYmozSnYPwY8meWsxDKf4cn2W06+D/N1ag40 1X7YfRTvXWQ0FZ4bjPTgLZgUiw+JbrHseKyFF0fOOuz3YcrVHJDl8ys7V9Jr10i2 FjFTJhVBrELuAeHTD3lzxyyoR8bkqmDg3jKn/v+O45pcbXzfRXaF1VRvuXdVw8JP Hztbka9RO2g6Z6H58BvzXKMPZu1HpKDeNVHRg7c/sFf52eVYpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChTGP19m/x5WW2Hz5qWt61IQVw0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvMmZiOTYyOTctMGE4Yi0z N2VjLWJlM2YtMzBiYTViOGMyYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwI5b96lUiezjaMqxjkrf6BIsNqKKpmSDGq6NdLrSk+d7a5evMKe17x dLmUVftBMWKHOgap2GhH09vniGJJAqmi3nU0fVutLgllw1mC82d3feXYdn4/Ntad vjg/FxZso+04NI1NGY6pjT53nLpZPQorUet0Y3PGgJb/PwrwoVt63Jd2nUbViAZM 50j1FqjHJd/tDctPiz6Bf0TX7XOYtVnWVATkrKJwUqdDZfaQQmgR5B7rsmXsKwgW eXEjAXdPtIMpjyl13c9PLhqoKObHzDskFLH+ZsA7pLItv0EDS7RZWJURUTcfh2vl lARfsghdmesZ2gOgV8qoJ6mt3gq0kX0= -----END CERTIFICATE-----Generated at Sun Aug 10 04:16:06 2025 by rpki-client