$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/f248e126-4d20-3f76-ae28-f1b217f7c05b.roa File: f248e126-4d20-3f76-ae28-f1b217f7c05b.roa (raw, json) Hash identifier: KMCXQjbhZhRssUXQUO+nSuBsKfBH07NSdqPI332EBbw= Subject key identifier: 85:B0:E8:D0:53:EE:A8:F9:C1:9D:62:59:4A:57:71:C6:25:35:60:87 Certificate issuer: /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9 Certificate serial: 010D0C9F4328584AB91B8B93CB91089004B8F840 Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/f248e126-4d20-3f76-ae28-f1b217f7c05b.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 53007 IP address blocks: 204.156.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:8b:93:cb:91:08:90:04:b8:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=4d80522a-e73f-419f-8f18-5330e18f7b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:15:3c:12:c3:65:2a:e9:0d:e2:a0:7b:17:cf: 22:52:da:a3:04:43:62:55:96:99:32:62:95:67:97: f5:82:2d:b8:fe:f5:c0:3e:2c:a0:d3:35:0c:56:62: 39:ef:2b:73:ab:00:7b:4d:97:11:67:f2:32:3f:f5: 79:0f:ee:b5:c8:10:2f:c7:98:6b:06:db:15:eb:cb: 6e:6a:01:16:ca:c7:b2:f2:19:50:9b:30:0a:6b:65: 70:09:5a:fb:8a:28:25:34:21:d5:60:35:7d:8a:f1: ff:1e:1a:bc:f3:f0:cf:f1:8a:11:5c:04:29:04:b6: 56:8b:94:26:ab:39:20:dc:ad:39:3a:a2:e7:19:b5: 6f:07:49:b2:c9:78:16:88:63:d7:36:69:90:93:00: cf:36:f5:62:0c:d1:09:f0:62:b9:74:04:d4:fb:f2: 66:b1:d4:cd:5c:96:08:d7:41:a4:7c:48:38:70:7e: bb:73:e8:74:5f:bf:b6:88:a5:72:1e:90:f3:c1:c8: c5:45:5d:80:6f:96:7a:b9:10:90:95:c4:1c:9e:f9: 74:ef:ac:d0:7f:97:bc:bd:02:d6:ec:e9:e0:29:53: bc:6f:d1:d9:1a:d3:0a:15:07:e8:52:33:94:d9:33: 05:c7:1b:1b:88:cd:8e:59:9c:73:ee:3c:ad:cb:03: ba:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B0:E8:D0:53:EE:A8:F9:C1:9D:62:59:4A:57:71:C6:25:35:60:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/f248e126-4d20-3f76-ae28-f1b217f7c05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl X509v3 Authority Key Identifier: keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer sbgp-ipAddrBlock: critical IPv4: 204.156.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:5e:9e:ff:8c:91:45:2f:87:6e:50:66:76:84:ae:ac:d2:e3: 18:63:b0:72:fd:08:a4:aa:fb:1c:48:b2:33:e5:49:5a:58:86: ee:a3:7e:75:9b:9d:11:80:f6:96:57:ad:60:05:38:b1:70:be: 10:c1:3e:eb:61:f4:9a:71:33:39:aa:22:ca:79:76:e9:08:76: 14:33:c3:9c:de:a0:99:b2:c3:ac:b3:76:ff:95:31:09:00:46: 37:2c:f7:b2:f2:49:d4:01:53:cd:9c:7f:c2:ee:f3:1e:61:62: 48:7e:5b:d4:61:02:46:86:37:a5:a9:d6:9c:e6:6e:09:1d:76: 35:61:2c:8d:41:66:fb:74:33:b2:79:ff:9e:d2:8f:d0:3b:e2: 09:64:df:e7:4a:31:b2:59:82:87:45:ff:84:70:e3:5b:65:dd: 4c:87:2b:12:5d:4c:01:b1:6a:8e:c6:a5:0f:70:a8:33:b0:0f: 49:46:dc:61:40:f2:84:b7:0e:7e:67:3a:8c:45:b0:c9:cc:b7: 20:36:6f:4f:a7:58:24:e5:8d:b4:aa:a7:98:67:38:88:b4:d5: 7f:aa:b8:bb:80:f3:fb:de:98:31:63:12:e6:6c:a8:c0:f0:b0: 2e:88:64:07:57:22:f3:11:08:8c:8c:b0:da:2a:38:9b:f9:fb: 22:f2:c7:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G4uTy5EIkAS4+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JjNzM0ODMtNjAzNC00ZGMwLWJiZjUtZTRkODJiZjI4 YWY5MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NGQ4MDUyMmEtZTczZi00MTlmLThmMTgtNTMzMGUxOGY3Yjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxU8EsNlKukN4qB7F88iUtqjBENiVZaZMmKV Z5f1gi24/vXAPiyg0zUMVmI57ytzqwB7TZcRZ/IyP/V5D+61yBAvx5hrBtsV68tu agEWysey8hlQmzAKa2VwCVr7iiglNCHVYDV9ivH/Hhq88/DP8YoRXAQpBLZWi5Qm qzkg3K05OqLnGbVvB0myyXgWiGPXNmmQkwDPNvViDNEJ8GK5dATU+/JmsdTNXJYI 10GkfEg4cH67c+h0X7+2iKVyHpDzwcjFRV2Ab5Z6uRCQlcQcnvl076zQf5e8vQLW 7OngKVO8b9HZGtMKFQfoUjOU2TMFxxsbiM2OWZxz7jytywO6cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWw6NBT7qj5wZ1iWUpXccYlNWCHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYmM3 MzQ4My02MDM0LTRkYzAtYmJmNS1lNGQ4MmJmMjhhZjkvZjI0OGUxMjYtNGQyMC0z Zjc2LWFlMjgtZjFiMjE3ZjdjMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2JjNzM0ODMtNjAzNC00ZGMwLWJi ZjUtZTRkODJiZjI4YWY5L2NiYzczNDgzLTYwMzQtNGRjMC1iYmY1LWU0ZDgyYmYy OGFmOS5jcmwwHwYDVR0jBBgwFoAUXtsNbM5NizgqaOXw+ekRwi1IZsQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYmM3MzQ4My02MDM0LTRkYzAtYmJmNS1lNGQ4 MmJmMjhhZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJxWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlenv+MkUUvh25QZnaErqzS4xhjsHL9CKSq+xxIsjPlSVpYhu6jfnWb nRGA9pZXrWAFOLFwvhDBPuth9JpxMzmqIsp5dukIdhQzw5zeoJmyw6yzdv+VMQkA Rjcs97LySdQBU82cf8Lu8x5hYkh+W9RhAkaGN6Wp1pzmbgkddjVhLI1BZvt0M7J5 /57Sj9A74glk3+dKMbJZgodF/4Rw41tl3UyHKxJdTAGxao7GpQ9wqDOwD0lG3GFA 8oS3Dn5nOoxFsMnMtyA2b0+nWCTljbSqp5hnOIi01X+quLuA8/vemDFjEuZsqMDw sC6IZAdXIvMRCIyMsNoqOJv5+yLyx5Y= -----END CERTIFICATE-----Generated at Wed Aug 6 14:20:22 2025 by rpki-client