$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa File: 1af7f89d-d1da-35f0-bbd2-2132fad40618.roa (raw, json) Hash identifier: a3OweKvGXNyXfFpiVnK34XpJ7User2j/mQ2sM/dFCpc= Subject key identifier: E0:9A:42:2B:79:25:BC:D2:C5:FA:37:9E:22:23:59:2A:29:C6:58:2F Certificate issuer: /CN=850d1bb9-2ef9-4810-8109-25cdd5afc4fd Certificate serial: 010D0C9F4328584ABD4B7747D45691F625A2FA40 Authority key identifier: 8B:76:97:37:A9:39:6D:0D:9E:04:E8:3B:64:42:6D:63:C6:90:00:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 396400 IP address blocks: 204.89.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:77:47:d4:56:91:f6:25:a2:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=850d1bb9-2ef9-4810-8109-25cdd5afc4fd Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=717808ac-58ce-4de8-befc-8b110bb2717e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:44:e3:33:0f:b6:d0:c5:00:11:29:3e:e1: aa:ab:2b:30:03:6a:0f:10:e1:cd:d1:07:cc:fd:cf: 3f:9b:e9:9e:36:b1:cc:82:e2:b3:a5:db:ce:32:dd: b8:42:52:54:da:9a:84:05:20:12:6f:65:2c:8a:99: 91:36:ab:68:39:a2:09:e7:40:0b:1b:e2:bd:72:0d: 35:ac:b1:ef:51:ba:aa:7d:a4:89:8a:3b:b6:ef:01: 8c:d0:2f:c8:fe:80:ec:07:f9:b3:dc:41:dc:0f:a6: 69:dd:f6:db:67:49:54:b6:1e:85:cc:10:d1:ad:ff: ec:28:4a:ec:6c:25:f8:0a:f1:4a:b0:68:c5:4c:59: 3c:b8:c1:82:2c:64:a4:0b:31:1d:c1:dd:53:1e:71: 74:d3:6c:1a:5a:64:0d:06:89:b3:3a:d7:2e:42:f3: df:02:11:e8:76:f8:d3:78:7a:0f:37:0b:6b:4c:af: 0a:94:f3:2e:de:a7:f5:29:0f:e8:8b:1c:fb:73:fb: 14:28:15:1a:68:57:3d:15:dd:0a:74:a7:85:48:f4: d9:f6:28:89:da:d6:bf:33:98:af:24:aa:2f:88:e9: 69:4b:fd:c5:fb:43:b8:01:1e:7b:1c:ff:04:3d:a8: 2c:93:03:58:d4:ab:39:78:db:3b:05:16:67:04:45: 13:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9A:42:2B:79:25:BC:D2:C5:FA:37:9E:22:23:59:2A:29:C6:58:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.crl X509v3 Authority Key Identifier: keyid:8B:76:97:37:A9:39:6D:0D:9E:04:E8:3B:64:42:6D:63:C6:90:00:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer sbgp-ipAddrBlock: critical IPv4: 204.89.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:17:0c:85:d6:df:8b:e2:29:55:93:af:60:a6:bd:eb:6f:71: e6:35:fc:95:75:4c:c5:fb:0c:8e:a6:02:5f:0c:c5:1a:33:a1: 9d:2f:8f:a0:21:6b:c4:03:38:74:ad:f6:08:b2:9c:2a:f6:ff: 46:fc:0a:a2:bf:26:4d:91:98:58:27:ca:31:11:8c:6c:24:da: 7b:40:4e:6b:62:e0:7f:b3:f3:fe:fb:6a:a6:e7:aa:f9:98:89: 18:68:26:51:21:21:98:af:4a:3e:ce:26:67:0a:7c:0e:71:15: 8c:6b:a5:29:ec:d8:d5:1f:9c:8f:bb:e9:33:ab:41:77:49:97: 27:83:73:e9:fe:16:5c:6e:ba:99:e0:bd:bc:37:f2:a6:4a:c3: db:22:b9:57:85:bd:d0:12:f9:e9:a9:29:61:c8:02:23:29:ff: 81:15:be:5e:8a:ed:f2:37:49:6d:0c:f5:9f:b6:0b:05:f3:13: 53:8e:eb:0a:69:b6:ad:ab:c3:8d:09:2f:e1:20:e6:56:1b:c7: db:1f:1e:61:df:54:a3:93:48:f4:69:6c:d9:97:d0:9b:68:a9: bc:78:53:e2:48:0d:85:27:48:67:ff:c3:a6:26:e1:70:a5:a3: ee:58:f4:82:62:84:6b:27:de:16:e0:05:41:3d:f0:94:55:c4: 37:17:82:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S3dH1FaR9iWi+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUwZDFiYjktMmVmOS00ODEwLTgxMDktMjVjZGQ1YWZj NGZkMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk NzE3ODA4YWMtNThjZS00ZGU4LWJlZmMtOGIxMTBiYjI3MTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPNE4zMPttDFABEpPuGqqyswA2oPEOHN0QfM /c8/m+meNrHMguKzpdvOMt24QlJU2pqEBSASb2UsipmRNqtoOaIJ50ALG+K9cg01 rLHvUbqqfaSJiju27wGM0C/I/oDsB/mz3EHcD6Zp3fbbZ0lUth6FzBDRrf/sKErs bCX4CvFKsGjFTFk8uMGCLGSkCzEdwd1THnF002waWmQNBomzOtcuQvPfAhHodvjT eHoPNwtrTK8KlPMu3qf1KQ/oixz7c/sUKBUaaFc9Fd0KdKeFSPTZ9iiJ2ta/M5iv JKoviOlpS/3F+0O4AR57HP8EPagskwNY1Ks5eNs7BRZnBEUTdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCaQit5JbzSxfo3niIjWSopxlgvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NTBk MWJiOS0yZWY5LTQ4MTAtODEwOS0yNWNkZDVhZmM0ZmQvMWFmN2Y4OWQtZDFkYS0z NWYwLWJiZDItMjEzMmZhZDQwNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODUwZDFiYjktMmVmOS00ODEwLTgx MDktMjVjZGQ1YWZjNGZkLzg1MGQxYmI5LTJlZjktNDgxMC04MTA5LTI1Y2RkNWFm YzRmZC5jcmwwHwYDVR0jBBgwFoAUi3aXN6k5bQ2eBOg7ZEJtY8aQAHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NTBkMWJiOS0yZWY5LTQ4MTAtODEwOS0yNWNk ZDVhZmM0ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAXDIXW34viKVWTr2CmvetvceY1/JV1TMX7DI6mAl8MxRozoZ0vj6Ah a8QDOHSt9giynCr2/0b8CqK/Jk2RmFgnyjERjGwk2ntATmti4H+z8/77aqbnqvmY iRhoJlEhIZivSj7OJmcKfA5xFYxrpSns2NUfnI+76TOrQXdJlyeDc+n+Flxuupng vbw38qZKw9siuVeFvdAS+empKWHIAiMp/4EVvl6K7fI3SW0M9Z+2CwXzE1OO6wpp tq2rw40JL+Eg5lYbx9sfHmHfVKOTSPRpbNmX0Jtoqbx4U+JIDYUnSGf/w6Ym4XCl o+5Y9IJihGsn3hbgBUE98JRVxDcXghk= -----END CERTIFICATE-----Generated at Sun Aug 10 15:59:31 2025 by rpki-client