$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/1ab0dc75-d777-3f56-a8c4-b88401eabf3f.roa File: 1ab0dc75-d777-3f56-a8c4-b88401eabf3f.roa (raw, json) Hash identifier: 0Ln6gjiE5N9SxJPfPhEvfjldVG/3Cn+vQgG5Uq5r5LI= Subject key identifier: 87:58:F3:35:75:02:57:B9:69:1F:08:D4:84:45:00:18:34:33:0D:F2 Certificate issuer: /CN=024863fe-f941-4bf2-81d9-ad03d50aa194 Certificate serial: 010D0C9F4328584A6F207DE63B74461EA3989FE0 Authority key identifier: 26:CF:B7:2C:F1:29:25:18:74:73:0F:1F:50:DE:B5:FD:54:A3:20:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/1ab0dc75-d777-3f56-a8c4-b88401eabf3f.roa Signing time: Mon 07 Jul 2025 01:00:50 +0000 ROA not before: Mon 07 Jul 2025 01:00:50 +0000 ROA not after: Sun 05 Oct 2025 01:00:50 +0000 asID: 13576 IP address blocks: 204.147.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/024863fe-f941-4bf2-81d9-ad03d50aa194.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/024863fe-f941-4bf2-81d9-ad03d50aa194.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:20:7d:e6:3b:74:46:1e:a3:98:9f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024863fe-f941-4bf2-81d9-ad03d50aa194 Validity Not Before: Jul 7 01:00:50 2025 GMT Not After : Oct 5 01:00:50 2025 GMT Subject: CN=405965a7-dc95-40eb-b793-d8fad1910f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:97:c7:2d:a2:b0:d5:3b:29:61:ae:ea:f4:12: 9b:8c:3a:16:7f:21:bf:7f:c4:19:5a:00:f4:9b:f6: d6:c6:ae:60:7f:ec:e9:54:48:b0:b7:a4:12:5d:0b: ac:aa:27:65:8b:a3:2d:bd:68:3e:3e:28:48:82:cd: 76:8b:41:91:9c:a7:73:08:5d:66:5e:2f:9e:57:3a: 15:bc:23:60:12:51:91:3c:39:b6:fb:73:26:55:90: 9c:fd:4a:43:69:e2:5d:67:1e:8d:e2:44:6d:34:8a: bb:86:f8:49:0c:36:4d:ae:10:42:f2:a6:42:94:c4: 75:d5:bc:f6:df:f7:da:1f:19:80:69:c0:91:55:16: b8:96:3f:64:1e:30:0a:48:fc:fc:a1:a0:28:42:4b: f9:6b:b0:ac:a5:4b:67:de:4f:45:d6:f1:d2:5e:b1: 55:03:4d:a1:65:39:3f:11:78:32:51:b7:05:66:3c: 11:f6:9e:a4:f6:6a:1c:ed:f6:fd:6b:0b:12:6c:5f: f5:84:f2:56:2d:b2:88:e8:3c:99:c9:04:fb:8b:01: 6a:8c:63:df:08:29:81:b2:e7:4d:26:e7:f1:bc:62: f0:79:4e:c9:ae:73:0d:1b:ae:5e:72:83:d4:ce:71: 55:74:a7:38:eb:f1:e5:18:45:8b:b8:78:37:95:39: c5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:58:F3:35:75:02:57:B9:69:1F:08:D4:84:45:00:18:34:33:0D:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/1ab0dc75-d777-3f56-a8c4-b88401eabf3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/024863fe-f941-4bf2-81d9-ad03d50aa194.crl X509v3 Authority Key Identifier: keyid:26:CF:B7:2C:F1:29:25:18:74:73:0F:1F:50:DE:B5:FD:54:A3:20:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194.cer sbgp-ipAddrBlock: critical IPv4: 204.147.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:7c:dd:36:a2:a9:0e:f0:9c:ac:30:ef:d9:87:2e:05:07:53: 1f:4b:26:68:0e:3a:01:b6:87:53:20:dc:50:4c:72:cf:c6:64: 6d:76:4f:5c:3a:ce:c7:c3:da:e8:b8:31:79:d3:b1:61:94:46: 68:e7:bc:1a:a0:b0:5a:26:8c:70:31:42:6c:91:22:71:2f:1d: 12:34:ad:69:cd:77:c0:4c:6a:8c:d5:be:fd:10:59:07:2e:17: 68:ca:5a:f1:32:69:e2:13:d2:48:6a:ef:11:e2:92:55:bc:6e: 2a:65:37:76:89:8f:9f:5f:35:19:38:e1:67:42:a5:7e:be:77: b5:96:4e:c1:68:2e:ba:79:9d:6e:3f:23:f6:53:6c:a2:f4:67: 6d:0a:aa:b5:30:d3:c7:00:27:94:39:67:12:f9:6a:5a:14:fd: 64:4e:a9:2a:a4:8b:0a:42:5e:06:95:94:8d:d4:fd:86:c4:1e: aa:ad:23:55:36:6d:1b:cb:26:de:d9:86:59:85:ac:64:5d:c5: 4a:12:13:e2:02:24:07:e5:39:e6:a4:84:27:94:2f:00:53:86: 64:85:46:39:96:02:b3:cb:94:9f:f9:ee:03:ef:e9:a9:39:a4: 8b:50:b0:0b:bd:1d:53:82:d7:fa:f8:24:40:4f:13:ad:e0:3f: d4:c6:43:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIH3mO3RGHqOYn+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI0ODYzZmUtZjk0MS00YmYyLTgxZDktYWQwM2Q1MGFh MTk0MB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk NDA1OTY1YTctZGM5NS00MGViLWI3OTMtZDhmYWQxOTEwZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJfHLaKw1TspYa7q9BKbjDoWfyG/f8QZWgD0 m/bWxq5gf+zpVEiwt6QSXQusqidli6MtvWg+PihIgs12i0GRnKdzCF1mXi+eVzoV vCNgElGRPDm2+3MmVZCc/UpDaeJdZx6N4kRtNIq7hvhJDDZNrhBC8qZClMR11bz2 3/faHxmAacCRVRa4lj9kHjAKSPz8oaAoQkv5a7CspUtn3k9F1vHSXrFVA02hZTk/ EXgyUbcFZjwR9p6k9moc7fb9awsSbF/1hPJWLbKI6DyZyQT7iwFqjGPfCCmBsudN JufxvGLweU7JrnMNG65ecoPUznFVdKc46/HlGEWLuHg3lTnFkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdY8zV1Ale5aR8I1IRFABg0Mw3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMjQ4 NjNmZS1mOTQxLTRiZjItODFkOS1hZDAzZDUwYWExOTQvMWFiMGRjNzUtZDc3Ny0z ZjU2LWE4YzQtYjg4NDAxZWFiZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDI0ODYzZmUtZjk0MS00YmYyLTgx ZDktYWQwM2Q1MGFhMTk0LzAyNDg2M2ZlLWY5NDEtNGJmMi04MWQ5LWFkMDNkNTBh YTE5NC5jcmwwHwYDVR0jBBgwFoAUJs+3LPEpJRh0cw8fUN61/VSjIN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMjQ4NjNmZS1mOTQxLTRiZjItODFkOS1hZDAz ZDUwYWExOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzJOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABR83TaiqQ7wnKww79mHLgUHUx9LJmgOOgG2h1Mg3FBMcs/GZG12T1w6 zsfD2ui4MXnTsWGURmjnvBqgsFomjHAxQmyRInEvHRI0rWnNd8BMaozVvv0QWQcu F2jKWvEyaeIT0khq7xHiklW8biplN3aJj59fNRk44WdCpX6+d7WWTsFoLrp5nW4/ I/ZTbKL0Z20KqrUw08cAJ5Q5ZxL5aloU/WROqSqkiwpCXgaVlI3U/YbEHqqtI1U2 bRvLJt7ZhlmFrGRdxUoSE+ICJAflOeakhCeULwBThmSFRjmWArPLlJ/57gPv6ak5 pItQsAu9HVOC1/r4JEBPE63gP9TGQ/k= -----END CERTIFICATE-----Generated at Wed Aug 6 11:22:02 2025 by rpki-client