$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/df37cc8f-ca63-33dd-9e96-34bd2cd31343.roa File: df37cc8f-ca63-33dd-9e96-34bd2cd31343.roa (raw, json) Hash identifier: Z0n8rA1LcepmRJSZOCfV/Lq+i8jE5mGAW+JeAU2iyLU= Subject key identifier: 79:CA:D4:0B:0A:60:87:DA:B2:46:B7:3B:A3:92:08:E0:68:25:00:3A Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F4328584A9E96199109C7C6AD48EB1440 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/df37cc8f-ca63-33dd-9e96-34bd2cd31343.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396952 IP address blocks: 204.238.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:19:91:09:c7:c6:ad:48:eb:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=8082f66c-8f57-4b52-a01e-d49fdb3714c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:de:15:06:c0:24:0f:87:21:e6:c6:e6:50:3c: c0:80:62:53:2a:66:f9:90:e1:12:5e:b6:62:0e:7c: 09:22:ff:0b:0d:52:6d:f2:2e:c3:b4:9c:ae:14:10: aa:5a:c0:34:f0:33:71:66:94:d0:d7:c7:1e:ce:c5: 8b:bb:c2:40:72:0d:67:4c:28:e4:43:47:f1:c0:a4: b8:de:69:26:93:75:c7:86:8a:b2:53:86:a3:e1:cf: 42:fa:94:c3:35:1f:58:b9:7e:53:d8:4f:40:ed:a6: c2:0e:68:1c:96:43:49:8d:b9:15:dc:ea:8f:57:13: 6a:fb:b6:67:a9:2e:b4:1e:0f:52:9f:af:93:1d:be: f7:c5:09:fb:a0:8e:df:a0:ef:75:1e:38:a5:e6:a8: 16:70:de:7f:4a:e5:0c:cc:2c:47:d8:4d:eb:5f:5d: 0f:00:c7:10:a5:a2:ab:98:f0:40:f3:85:de:e6:a1: fd:2b:d4:56:78:89:bb:eb:45:32:64:3e:7d:67:86: b4:50:26:28:02:6c:6d:cf:43:9f:a9:e8:f7:63:11: 1f:24:f1:c7:5d:fd:dd:ab:13:bf:bc:51:e7:78:f7: 68:0a:a8:05:52:c5:54:2c:86:5d:15:b5:e4:e0:94: 48:ff:85:76:30:a6:19:a8:47:38:b6:39:e5:9d:cb: 70:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CA:D4:0B:0A:60:87:DA:B2:46:B7:3B:A3:92:08:E0:68:25:00:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/df37cc8f-ca63-33dd-9e96-34bd2cd31343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv4: 204.238.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:2f:30:8e:7b:4b:28:18:35:95:cf:30:73:5f:36:42:84:76: f9:c9:15:ca:d5:c1:cd:8d:f9:c7:1f:75:d8:38:59:a7:b9:cd: 15:16:23:3b:d6:4b:0f:4d:6d:39:ac:61:24:60:40:97:d5:fe: b1:19:d3:ab:c8:33:1d:27:55:62:36:da:e9:d0:f1:4c:b3:61: d7:34:f2:ab:88:b6:8d:5f:64:1b:52:43:b0:18:e3:6a:e2:c0: f8:a1:14:07:92:c3:f0:a6:28:1f:30:16:0f:19:84:e0:5d:93: 1f:40:5e:84:f9:6c:45:d4:ea:b6:c4:61:01:0c:76:30:ba:98: 03:37:f4:7f:c4:85:33:dc:45:b7:ec:c7:08:6f:b9:c8:7c:80: 25:e0:7c:6c:08:1b:b0:64:16:fe:e9:69:7d:60:43:26:0f:b5: 88:d1:ed:93:be:32:df:de:0b:4c:81:64:78:f4:e9:05:11:cd: 12:b3:17:0e:04:94:d5:f5:3d:01:13:30:20:70:38:f0:77:4d: 61:35:3a:36:9e:87:98:58:49:1d:26:8e:5a:7b:60:04:b3:21: 9a:ac:04:36:9e:e8:49:5e:ef:68:d5:b6:ab:f6:a0:fe:d1:7a: 64:1e:01:02:e1:ca:97:11:ec:4e:64:90:47:23:f3:41:fe:94: 8f:2f:15:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelhmRCcfGrUjrFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ODA4MmY2NmMtOGY1Ny00YjUyLWEwMWUtZDQ5ZmRiMzcxNGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5N4VBsAkD4ch5sbmUDzAgGJTKmb5kOESXrZi DnwJIv8LDVJt8i7DtJyuFBCqWsA08DNxZpTQ18cezsWLu8JAcg1nTCjkQ0fxwKS4 3mkmk3XHhoqyU4aj4c9C+pTDNR9YuX5T2E9A7abCDmgclkNJjbkV3OqPVxNq+7Zn qS60Hg9Sn6+THb73xQn7oI7foO91Hjil5qgWcN5/SuUMzCxH2E3rX10PAMcQpaKr mPBA84Xe5qH9K9RWeIm760UyZD59Z4a0UCYoAmxtz0Ofqej3YxEfJPHHXf3dqxO/ vFHnePdoCqgFUsVULIZdFbXk4JRI/4V2MKYZqEc4tjnlnctw9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnK1AsKYIfaska3O6OSCOBoJQA6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvZGYzN2NjOGYtY2E2My0z M2RkLTllOTYtMzRiZDJjZDMxMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8vMI57SygYNZXPMHNfNkKEdvnJFcrVwc2N+ccfddg4Wae5zRUWIzvW Sw9NbTmsYSRgQJfV/rEZ06vIMx0nVWI22unQ8UyzYdc08quIto1fZBtSQ7AY42ri wPihFAeSw/CmKB8wFg8ZhOBdkx9AXoT5bEXU6rbEYQEMdjC6mAM39H/EhTPcRbfs xwhvuch8gCXgfGwIG7BkFv7paX1gQyYPtYjR7ZO+Mt/eC0yBZHj06QURzRKzFw4E lNX1PQETMCBwOPB3TWE1Ojaeh5hYSR0mjlp7YASzIZqsBDae6Ele72jVtqv2oP7R emQeAQLhypcR7E5kkEcj80H+lI8vFVo= -----END CERTIFICATE-----Generated at Wed Aug 6 04:06:43 2025 by rpki-client