$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/0156459b-1048-3ac6-b762-361ee7d49132.roa File: 0156459b-1048-3ac6-b762-361ee7d49132.roa (raw, json) Hash identifier: Ha5Xn2X2mr8vWkLfT6QFaFgj2NlU8UipcQMble+587w= Subject key identifier: 6E:AD:0D:7B:5F:50:1D:91:6B:A9:41:77:21:7B:D5:DD:70:76:AB:AB Certificate issuer: /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Certificate serial: 010D0C9F4328584ABD4B9BBF62E4A4BD2424CF00 Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/0156459b-1048-3ac6-b762-361ee7d49132.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 14618 IP address blocks: 204.79.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:9b:bf:62:e4:a4:bd:24:24:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=9b9f1f01-74bc-4093-b12f-bc64e208d2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f4:e1:70:68:d1:43:c8:7b:21:49:c4:99:3f: 42:cd:3b:0c:bf:33:d1:0a:77:5d:9e:ae:86:b4:8d: e4:c2:6a:3d:3e:f8:bf:76:cb:44:7f:fb:cb:d1:58: 64:21:19:f7:76:a9:31:b4:57:ae:8e:72:44:76:a1: 41:76:7f:8c:2a:31:47:a8:ed:b9:5c:62:af:b2:da: 60:49:81:a8:23:14:6e:76:e7:21:c6:27:59:75:48: 2c:68:6f:0a:fe:06:cd:8c:c3:79:d9:33:c7:99:3f: 7c:ba:ad:bd:f6:d1:66:3a:44:00:7c:8d:a7:9b:b1: f6:bd:43:1a:44:58:55:46:46:53:99:18:8d:1a:21: b0:87:7b:50:09:44:8d:d8:2c:d9:3e:7e:ad:cc:4e: 63:8c:82:b6:d8:fb:bc:96:e5:83:10:69:7e:f5:95: 3e:17:c2:f3:12:48:ce:6f:74:77:e2:a8:94:02:65: 78:5a:25:4f:02:ab:4d:50:1e:f5:61:0d:5a:97:c8: 05:ad:39:d8:63:65:27:95:5d:b9:f8:66:c9:8b:c2: 6c:f5:b1:bb:ca:8c:81:53:6f:74:58:fe:cf:84:cc: 13:9f:4b:be:f3:83:0a:f0:94:04:d9:39:a4:6b:bd: 3d:92:18:67:7d:3b:e8:52:11:86:08:f1:5b:68:fe: 37:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AD:0D:7B:5F:50:1D:91:6B:A9:41:77:21:7B:D5:DD:70:76:AB:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/0156459b-1048-3ac6-b762-361ee7d49132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl X509v3 Authority Key Identifier: keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer sbgp-ipAddrBlock: critical IPv4: 204.79.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:3a:b1:d1:25:a8:20:e0:1a:7b:3a:45:df:95:14:85:96:cc: 2f:35:e4:95:0f:3e:53:6d:7c:5b:31:a6:26:f5:f3:32:c4:c7: a7:f5:f2:76:b6:88:41:43:cb:ed:13:1c:b4:b2:52:bb:06:65: b2:d9:5f:fb:d1:19:f3:db:f3:c0:f2:a7:ec:f6:0e:41:c0:8a: 85:68:b4:da:e5:9f:a3:ba:33:09:f4:bc:03:6b:67:ab:57:ee: 7e:7d:e6:07:3f:c5:6d:d2:7c:44:f8:30:f1:e8:eb:4d:b2:9b: 28:cd:ef:75:0c:a8:f6:9f:f9:5b:29:89:fa:dc:04:b8:45:9f: e2:de:b2:75:13:e5:59:45:f1:24:47:1e:39:9c:1f:5e:f0:33: 1e:0d:5d:6c:4d:c7:10:59:2f:ac:98:7e:15:a5:7c:6c:fb:02: fd:d2:27:0d:50:45:67:e6:6c:00:4b:b8:de:a6:3c:40:40:79: 51:ee:b6:6a:ea:c7:09:20:9d:2e:74:2f:65:59:00:d0:c4:54: 5a:3b:51:87:33:79:ec:94:18:01:b9:64:42:ef:a1:8f:2e:2d: e5:d0:d5:2e:4b:f0:d6:81:72:0b:e8:92:70:7e:14:d2:b9:dd: 3e:4c:33:80:03:ff:e0:1f:0d:2f:16:d1:d2:5d:07:c0:92:30: 59:f5:b0:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5u/YuSkvSQkzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxNGY4ZDctNTQwYi00YTRhLWI1YWUtMGFmMTQ3Zjdj MWU0MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk OWI5ZjFmMDEtNzRiYy00MDkzLWIxMmYtYmM2NGUyMDhkMmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfThcGjRQ8h7IUnEmT9CzTsMvzPRCnddnq6G tI3kwmo9Pvi/dstEf/vL0VhkIRn3dqkxtFeujnJEdqFBdn+MKjFHqO25XGKvstpg SYGoIxRuduchxidZdUgsaG8K/gbNjMN52TPHmT98uq299tFmOkQAfI2nm7H2vUMa RFhVRkZTmRiNGiGwh3tQCUSN2CzZPn6tzE5jjIK22Pu8luWDEGl+9ZU+F8LzEkjO b3R34qiUAmV4WiVPAqtNUB71YQ1al8gFrTnYY2UnlV25+GbJi8Js9bG7yoyBU290 WP7PhMwTn0u+84MK8JQE2Tmka709khhnfTvoUhGGCPFbaP43NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6tDXtfUB2Ra6lBdyF71d1wdqurMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0 ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYxNDdmN2MxZTQvMDE1NjQ1OWItMTA0OC0z YWM2LWI3NjItMzYxZWU3ZDQ5MTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGYxNGY4ZDctNTQwYi00YTRhLWI1 YWUtMGFmMTQ3ZjdjMWU0LzhmMTRmOGQ3LTU0MGItNGE0YS1iNWFlLTBhZjE0N2Y3 YzFlNC5jcmwwHwYDVR0jBBgwFoAUT0s4jV9dhOfRkQSO1EfrBXSzPhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYx NDdmN2MxZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE+JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD86sdElqCDgGns6Rd+VFIWWzC815JUPPlNtfFsxpib18zLEx6f18na2 iEFDy+0THLSyUrsGZbLZX/vRGfPb88Dyp+z2DkHAioVotNrln6O6Mwn0vANrZ6tX 7n595gc/xW3SfET4MPHo602ymyjN73UMqPaf+VspifrcBLhFn+LesnUT5VlF8SRH HjmcH17wMx4NXWxNxxBZL6yYfhWlfGz7Av3SJw1QRWfmbABLuN6mPEBAeVHutmrq xwkgnS50L2VZANDEVFo7UYczeeyUGAG5ZELvoY8uLeXQ1S5L8NaBcgvoknB+FNK5 3T5MM4AD/+AfDS8W0dJdB8CSMFn1sE4= -----END CERTIFICATE-----Generated at Wed Aug 6 09:30:58 2025 by rpki-client