$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3/5cb13534-ea1e-3993-a033-6309db2370d3.roa File: 5cb13534-ea1e-3993-a033-6309db2370d3.roa (raw, json) Hash identifier: oDeZHiYPW4TY2Wb4qIGepplLICZ41EXJFtmpZvieRk8= Subject key identifier: 7E:2A:97:39:D4:20:72:CC:60:81:68:8D:BB:A9:4D:83:65:6E:7E:22 Certificate issuer: /CN=f729fc58-80cc-4645-bde5-79b3fcca33c3 Certificate serial: 010D0C9F4328584AA160E1ECBA786529D5081A80 Authority key identifier: DD:A2:E9:5D:2C:22:69:3A:1A:C7:DF:18:7E:66:86:E8:12:98:24:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3/5cb13534-ea1e-3993-a033-6309db2370d3.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 23372 IP address blocks: 204.16.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3/f729fc58-80cc-4645-bde5-79b3fcca33c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3/f729fc58-80cc-4645-bde5-79b3fcca33c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:e1:ec:ba:78:65:29:d5:08:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f729fc58-80cc-4645-bde5-79b3fcca33c3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=5cba06d7-3b10-4971-98c5-6cdd555642e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7c:f1:95:ad:20:11:2f:4c:09:9d:0b:99:34: 56:98:83:0d:fc:9b:fc:68:a3:a8:a5:ec:1a:b7:f2: 97:10:60:1d:4b:4b:02:d6:9b:e5:11:7e:82:3c:91: 02:6d:9e:fa:69:32:bc:d8:04:b3:56:3a:68:10:b9: b5:47:c8:fc:c6:20:da:57:ee:6a:21:85:d0:1a:ae: af:12:af:52:bf:26:c2:2c:95:87:50:b6:6f:25:b5: 9d:73:81:af:23:0d:6a:16:5a:46:8f:2c:56:92:f7: f6:8c:1e:fe:8a:67:f8:38:b1:fa:0b:f7:ac:69:9f: 2f:89:25:f6:d4:8b:85:c9:4e:66:d9:48:70:36:63: 86:a8:50:4b:2b:51:02:0e:bc:9d:ba:58:86:16:74: 94:60:16:d3:85:5f:cd:f5:4b:54:07:f3:92:2b:64: 25:91:c8:66:57:9b:b9:19:e1:9d:3a:ca:a3:d7:8c: 48:38:ae:29:09:51:1d:35:41:f2:e4:24:c6:69:94: af:32:c7:c7:a2:d0:70:55:80:ae:2e:83:72:c9:5f: 5a:32:8b:9a:ca:86:e0:b5:06:92:82:3b:d8:48:51: 99:0a:07:b9:35:0e:a1:c1:b0:00:2d:2b:94:c3:a6: 3e:f0:ff:f7:58:8c:ae:c3:86:d3:76:17:c1:f1:b1: e1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2A:97:39:D4:20:72:CC:60:81:68:8D:BB:A9:4D:83:65:6E:7E:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3/5cb13534-ea1e-3993-a033-6309db2370d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3/f729fc58-80cc-4645-bde5-79b3fcca33c3.crl X509v3 Authority Key Identifier: keyid:DD:A2:E9:5D:2C:22:69:3A:1A:C7:DF:18:7E:66:86:E8:12:98:24:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3.cer sbgp-ipAddrBlock: critical IPv4: 204.16.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:01:9c:8c:c3:89:bf:61:90:be:77:f6:a9:ee:4c:94:55:ef: 42:92:4c:66:15:9d:10:83:8a:40:c1:68:d9:f9:f7:83:d4:68: 24:c9:11:1b:dc:5b:6d:f4:e0:86:eb:c2:45:ba:bd:7e:37:f4: 51:c6:c1:21:34:9c:c7:e7:5b:35:af:1d:0b:63:28:ab:a6:89: f7:8a:14:ee:94:56:4f:7f:87:83:3d:6f:2d:e1:b4:17:4a:65: 37:be:06:a6:fd:f4:9d:31:1a:6f:da:d3:58:54:f3:13:ae:c5: 0c:ab:bc:26:40:f4:e2:e7:0e:60:cb:e1:d2:f9:61:f5:d5:c4: 9f:be:0e:0c:0e:f0:73:ba:53:fc:9e:e2:96:4f:71:6f:1e:b7: dc:32:d5:0a:6d:5f:26:0b:f7:21:76:1a:c6:d0:e6:74:06:41: ab:d8:0c:7b:1a:a7:5f:59:9f:80:da:20:04:20:60:c7:06:7e: ae:46:a1:b5:5b:9c:95:fb:56:80:aa:6b:25:84:4c:aa:ce:d2: 52:c6:55:00:e4:ee:2b:f8:19:27:14:08:65:fe:f2:45:94:88: 87:4d:81:dc:15:64:22:63:75:26:a2:80:bc:60:8d:64:53:86: b9:8a:77:df:50:00:5a:98:6b:69:e9:7d:41:16:83:1c:5c:1c: e0:49:f1:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYOHsunhlKdUIGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjcyOWZjNTgtODBjYy00NjQ1LWJkZTUtNzliM2ZjY2Ez M2MzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NWNiYTA2ZDctM2IxMC00OTcxLTk4YzUtNmNkZDU1NTY0MmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Xzxla0gES9MCZ0LmTRWmIMN/Jv8aKOopewa t/KXEGAdS0sC1pvlEX6CPJECbZ76aTK82ASzVjpoELm1R8j8xiDaV+5qIYXQGq6v Eq9SvybCLJWHULZvJbWdc4GvIw1qFlpGjyxWkvf2jB7+imf4OLH6C/esaZ8viSX2 1IuFyU5m2UhwNmOGqFBLK1ECDryduliGFnSUYBbThV/N9UtUB/OSK2QlkchmV5u5 GeGdOsqj14xIOK4pCVEdNUHy5CTGaZSvMsfHotBwVYCuLoNyyV9aMouayobgtQaS gjvYSFGZCge5NQ6hwbAALSuUw6Y+8P/3WIyuw4bTdhfB8bHhPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4qlznUIHLMYIFojbupTYNlbn4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mNzI5 ZmM1OC04MGNjLTQ2NDUtYmRlNS03OWIzZmNjYTMzYzMvNWNiMTM1MzQtZWExZS0z OTkzLWEwMzMtNjMwOWRiMjM3MGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjcyOWZjNTgtODBjYy00NjQ1LWJk ZTUtNzliM2ZjY2EzM2MzL2Y3MjlmYzU4LTgwY2MtNDY0NS1iZGU1LTc5YjNmY2Nh MzNjMy5jcmwwHwYDVR0jBBgwFoAU3aLpXSwiaToax98YfmaG6BKYJEswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mNzI5ZmM1OC04MGNjLTQ2NDUtYmRlNS03OWIz ZmNjYTMzYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBArMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQBnIzDib9hkL539qnuTJRV70KSTGYVnRCDikDBaNn594PUaCTJERvc W2304IbrwkW6vX439FHGwSE0nMfnWzWvHQtjKKumifeKFO6UVk9/h4M9by3htBdK ZTe+Bqb99J0xGm/a01hU8xOuxQyrvCZA9OLnDmDL4dL5YfXVxJ++DgwO8HO6U/ye 4pZPcW8et9wy1QptXyYL9yF2GsbQ5nQGQavYDHsap19Zn4DaIAQgYMcGfq5GobVb nJX7VoCqayWETKrO0lLGVQDk7iv4GScUCGX+8kWUiIdNgdwVZCJjdSaigLxgjWRT hrmKd99QAFqYa2npfUEWgxxcHOBJ8cQ= -----END CERTIFICATE-----Generated at Sat Aug 9 05:36:20 2025 by rpki-client