$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/4ceb18d8-1127-3773-8a61-4ada200b7eeb.roa File: 4ceb18d8-1127-3773-8a61-4ada200b7eeb.roa (raw, json) Hash identifier: W7ogL1WXwy8FvOjC+hQfv6oIWUtHYuRkI1QUHadwXLg= Subject key identifier: 1E:44:53:E6:7A:E3:F7:7C:E1:AE:F6:FA:91:A2:45:EC:8B:54:33:B0 Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584AADF1194892F88EBA1F9FEE80 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/4ceb18d8-1127-3773-8a61-4ada200b7eeb.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 11260 IP address blocks: 67.204.192.0/18 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:19:48:92:f8:8e:ba:1f:9f:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=89974e9e-47ef-4da8-87ad-0ddb81423f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ba:f2:d5:e8:60:0f:26:d6:93:1d:e8:15:10: 98:5a:bb:bb:57:2f:c0:40:ea:0e:47:d2:c1:96:0e: 14:0a:fd:70:16:11:7e:c5:1d:e7:a5:ba:8f:8e:1f: 60:f0:d2:3c:c4:05:60:7e:29:31:ac:f8:03:08:9f: 75:6b:8d:c6:1e:7d:3b:a1:64:ed:3f:ae:23:8c:ab: 2a:f7:e3:fc:4c:ef:cc:2d:0f:0b:29:23:09:71:c8: 7b:34:ff:2e:e4:23:1f:4c:5b:f5:5f:a7:a0:6d:ab: 80:2a:0c:30:7d:fa:e5:5c:e9:65:36:1f:6b:04:46: d1:e0:0a:37:04:f5:74:a6:2e:43:1c:c6:7c:5f:bb: 64:01:93:67:a2:31:5e:26:25:55:9d:e1:92:bc:61: 81:a7:71:f5:92:b8:41:18:81:19:fc:0a:76:31:15: b3:85:07:d7:78:7b:4c:c9:c5:3d:ac:e8:ae:e6:da: fc:22:7c:da:2c:6a:f2:35:19:bd:dc:60:e2:0e:86: 6f:93:44:7b:a5:9d:dc:59:db:4f:a3:1b:e5:12:d6: 1f:03:12:91:1e:aa:a4:37:f9:0e:0a:7c:8e:fd:96: 2e:3a:d9:7c:8f:13:99:2d:e1:3f:c4:9f:8e:6a:f2: de:5c:25:f9:71:0e:39:29:68:78:be:99:07:15:53: 85:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:44:53:E6:7A:E3:F7:7C:E1:AE:F6:FA:91:A2:45:EC:8B:54:33:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/4ceb18d8-1127-3773-8a61-4ada200b7eeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 67.204.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e9:01:60:85:01:e1:ce:95:8e:80:da:39:88:84:d1:c3:6b: d7:d6:3f:cb:94:81:26:db:19:79:c7:17:70:b3:16:6e:b1:19: f6:3f:03:47:a3:ca:38:b4:f9:94:c9:8f:98:74:a9:f5:88:0c: c1:78:52:bf:b2:50:fa:d8:e6:05:a0:c5:d4:78:82:fc:65:54: 79:85:43:e9:2f:ba:67:00:e3:77:85:80:55:ca:cf:1a:1f:c7: c9:64:84:06:d9:6f:41:7b:38:bd:2b:96:9d:b0:7c:90:8c:a4: be:d6:13:5d:9c:a7:32:12:4b:8c:f8:89:b2:53:20:df:53:7d: 73:43:29:98:98:61:61:5e:58:fc:78:ce:d3:01:c8:29:2a:5c: 51:ec:83:a5:5c:6c:7a:18:bd:6a:42:85:18:17:c8:79:d8:a7: 94:cb:2b:f6:99:30:c1:54:04:18:e3:cc:e7:74:d7:9b:95:dd: b7:75:6d:b7:15:fc:a6:89:c6:24:b5:74:1d:64:b0:e8:bb:f7: a8:e8:55:90:e8:59:b8:7e:e2:48:36:3e:d8:88:88:bd:24:e2: 48:01:aa:e2:8c:4b:33:e4:64:87:18:c5:7f:74:d4:70:3c:27: 48:f7:52:f8:6e:fc:9d:d1:44:c0:df:3c:00:3e:52:28:21:ea: 94:9a:80:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8RlIkviOuh+f7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ODk5NzRlOWUtNDdlZi00ZGE4LTg3YWQtMGRkYjgxNDIzZjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7ry1ehgDybWkx3oFRCYWru7Vy/AQOoOR9LB lg4UCv1wFhF+xR3npbqPjh9g8NI8xAVgfikxrPgDCJ91a43GHn07oWTtP64jjKsq 9+P8TO/MLQ8LKSMJcch7NP8u5CMfTFv1X6egbauAKgwwffrlXOllNh9rBEbR4Ao3 BPV0pi5DHMZ8X7tkAZNnojFeJiVVneGSvGGBp3H1krhBGIEZ/Ap2MRWzhQfXeHtM ycU9rOiu5tr8InzaLGryNRm93GDiDoZvk0R7pZ3cWdtPoxvlEtYfAxKRHqqkN/kO CnyO/ZYuOtl8jxOZLeE/xJ+OavLeXCX5cQ45KWh4vpkHFVOFGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5EU+Z64/d84a72+pGiReyLVDOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvNGNlYjE4ZDgtMTEyNy0z NzczLThhNjEtNGFkYTIwMGI3ZWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQ8zAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbpAWCFAeHOlY6A2jmIhNHDa9fWP8uUgSbbGXnHF3CzFm6xGfY/A0ej yji0+ZTJj5h0qfWIDMF4Ur+yUPrY5gWgxdR4gvxlVHmFQ+kvumcA43eFgFXKzxof x8lkhAbZb0F7OL0rlp2wfJCMpL7WE12cpzISS4z4ibJTIN9TfXNDKZiYYWFeWPx4 ztMByCkqXFHsg6VcbHoYvWpChRgXyHnYp5TLK/aZMMFUBBjjzOd015uV3bd1bbcV /KaJxiS1dB1ksOi796joVZDoWbh+4kg2PtiIiL0k4kgBquKMSzPkZIcYxX901HA8 J0j3Uvhu/J3RRMDfPAA+Uigh6pSagHk= -----END CERTIFICATE-----Generated at Wed Aug 6 05:59:33 2025 by rpki-client