$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/85c8bb0f-50d5-3658-aa4f-fea8ed9636ff.roa File: 85c8bb0f-50d5-3658-aa4f-fea8ed9636ff.roa (raw, json) Hash identifier: APUAE1bsPkGJDeDHydB2vIzc1rnuk+G48A3vL9H44Wo= Subject key identifier: 36:BB:8E:20:CA:27:17:01:83:35:42:69:A2:22:3B:AD:CD:1F:52:E6 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584AB91B84EE223BF2DCA82F7C20 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/85c8bb0f-50d5-3658-aa4f-fea8ed9636ff.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 1280 IP address blocks: 204.152.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:84:ee:22:3b:f2:dc:a8:2f:7c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=f0690234-94cc-4bb1-9b93-8bd87e25d687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c8:ec:e2:dc:f8:48:82:2f:74:7c:dc:b9:f8: fd:eb:83:fb:e1:1b:f4:a2:7d:07:2f:3b:71:0f:b5: 46:63:3d:46:7e:e7:e4:79:95:18:ef:b5:ea:a6:06: 63:c2:a7:21:f0:90:79:a9:07:d8:a3:d0:35:06:15: b8:e8:04:c7:35:cb:da:fa:e3:81:48:7a:58:4f:4e: 6e:f2:60:09:82:8d:3c:e2:2f:d7:b8:af:bb:fd:5c: c8:ce:f3:53:d6:1e:f3:91:b1:83:95:3e:32:df:c5: b7:8b:61:4a:5e:0e:d9:70:41:2e:42:28:50:90:d4: 7a:1d:18:fb:0f:9d:62:cc:7b:4b:b7:bb:f0:1e:42: 61:a5:2e:a0:db:27:59:3d:dc:aa:92:90:01:12:5a: e3:01:89:01:ee:5f:06:f9:88:fc:73:f1:96:79:76: 4a:d5:32:36:df:71:fc:28:08:d2:d2:aa:38:a6:11: a8:87:cb:b6:18:9e:0e:0a:be:87:9c:ac:4d:d2:b0: 0e:a0:be:1d:cb:65:0b:c3:47:a9:a5:e2:f8:66:41: 90:6a:e4:93:5d:ed:81:da:66:7b:04:18:e4:6a:2d: c4:94:59:55:70:c2:02:b2:d3:89:da:fb:8b:90:56: 57:77:14:e5:81:39:95:45:b9:5c:d7:91:f0:6f:e7: 41:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BB:8E:20:CA:27:17:01:83:35:42:69:A2:22:3B:AD:CD:1F:52:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/85c8bb0f-50d5-3658-aa4f-fea8ed9636ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 204.152.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:fa:d4:9d:b7:71:a0:70:20:a1:d0:9e:f7:09:3e:3b:e9:aa: 59:94:3b:71:33:24:fa:bd:b5:94:a5:37:27:3f:72:a1:c7:b7: af:2f:2b:fd:36:40:a5:40:4b:69:7b:15:f7:10:db:a8:ad:cb: a2:39:b4:b9:9b:a4:38:ff:4a:ad:2e:79:19:5c:55:81:44:8c: 97:93:c9:d1:21:3f:2a:40:02:13:a2:9d:25:1a:f2:90:af:62: 94:f5:1e:f4:aa:13:8d:8c:59:3b:35:1a:51:a3:5a:6a:97:e5: c3:77:0c:e9:a9:a1:6c:6b:ca:b4:d8:24:4e:f8:dd:23:64:6c: 96:3d:8e:ca:75:bf:2b:4a:20:8b:10:5a:a6:c3:df:01:e9:51: 24:6a:87:82:f4:81:04:0e:85:a2:dc:82:fd:ed:8e:b8:3f:d4: 5e:3b:8d:25:7d:c0:7a:86:b4:b1:46:b8:08:77:b8:9d:12:77: c8:bd:4e:12:e1:d4:b3:50:bd:da:4d:71:11:f2:bc:ae:98:64: 1d:be:4f:c0:cc:dc:f6:ec:21:fc:fc:b3:4a:7b:6e:f4:ba:76: 6a:47:d5:f9:9a:ee:b5:81:24:7a:7e:7d:fb:83:a6:77:3c:f7: 14:7b:64:a8:d8:28:09:cd:db:b3:86:2d:fb:e5:5e:b6:ce:d1: 4c:93:9b:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G4TuIjvy3KgvfCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZjA2OTAyMzQtOTRjYy00YmIxLTliOTMtOGJkODdlMjVkNjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcjs4tz4SIIvdHzcufj964P74Rv0on0HLztx D7VGYz1GfufkeZUY77XqpgZjwqch8JB5qQfYo9A1BhW46ATHNcva+uOBSHpYT05u 8mAJgo084i/XuK+7/VzIzvNT1h7zkbGDlT4y38W3i2FKXg7ZcEEuQihQkNR6HRj7 D51izHtLt7vwHkJhpS6g2ydZPdyqkpABElrjAYkB7l8G+Yj8c/GWeXZK1TI233H8 KAjS0qo4phGoh8u2GJ4OCr6HnKxN0rAOoL4dy2ULw0eppeL4ZkGQauSTXe2B2mZ7 BBjkai3ElFlVcMICstOJ2vuLkFZXdxTlgTmVRblc15Hwb+dBjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDa7jiDKJxcBgzVCaaIiO63NH1LmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODVjOGJiMGYtNTBkNS0z NjU4LWFhNGYtZmVhOGVkOTYzNmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIv61J23caBwIKHQnvcJPjvpqlmUO3EzJPq9tZSlNyc/cqHHt68vK/02 QKVAS2l7FfcQ26ity6I5tLmbpDj/Sq0ueRlcVYFEjJeTydEhPypAAhOinSUa8pCv YpT1HvSqE42MWTs1GlGjWmqX5cN3DOmpoWxryrTYJE743SNkbJY9jsp1vytKIIsQ WqbD3wHpUSRqh4L0gQQOhaLcgv3tjrg/1F47jSV9wHqGtLFGuAh3uJ0Sd8i9ThLh 1LNQvdpNcRHyvK6YZB2+T8DM3PbsIfz8s0p7bvS6dmpH1fma7rWBJHp+ffuDpnc8 9xR7ZKjYKAnN27OGLfvlXrbO0UyTm8k= -----END CERTIFICATE-----Generated at Mon Aug 4 15:33:21 2025 by rpki-client