$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa File: 12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa (raw, json) Hash identifier: zH8LcBi0kgjqfKWeLYTTqGewvgZbjpo7/KL6jEwVQdQ= Subject key identifier: 18:F0:10:5A:34:B2:77:01:81:2F:65:6F:A7:9B:DE:F8:4E:4A:85:B0 Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Certificate serial: 010D0C9F4328584A8B0B4E31A0B8599ACE938360 Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 40805 IP address blocks: 208.96.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:4e:31:a0:b8:59:9a:ce:93:83:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=58cb16f4-6cef-4609-8caf-5b142f584e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5f:67:23:79:d2:e3:47:12:fa:34:1c:0a:03: c3:f1:ac:c7:85:d8:f3:db:dd:c4:6a:71:d3:41:1c: ea:62:d8:ac:22:c3:3a:ce:68:28:5d:69:50:fc:0c: 5b:d5:9f:90:65:71:56:4d:91:e5:08:f8:51:c7:1e: e4:17:1b:e9:42:78:c0:93:9a:7b:03:56:2b:f8:c9: f1:6b:ea:68:23:4d:68:41:51:4f:b9:d8:96:5a:59: 92:49:f6:ab:99:57:13:45:d6:98:f7:61:d9:be:60: e8:a5:8a:b4:69:15:54:61:ee:85:39:09:ec:dc:b5: 14:b0:10:d5:f5:1d:5e:54:10:09:f2:de:ae:8b:fb: 7e:25:d3:7a:fa:a4:82:7a:4d:f2:20:44:b5:a3:49: d5:5b:4c:f0:38:e8:b7:4e:4d:71:78:d6:20:a5:7e: 9d:68:9f:cd:dd:ed:80:a4:08:25:c2:78:c0:9a:ba: c4:82:d4:d3:63:af:e6:ca:a1:c5:61:39:dd:bd:ab: e1:b7:33:d6:e5:1c:de:2f:10:0d:79:db:04:49:07: 20:21:5f:e6:6c:65:a8:8a:97:bf:86:f5:97:92:74: 9b:35:c2:60:92:29:6c:14:0c:f3:22:c9:b6:97:30: 0f:63:90:fd:e9:5b:5f:7e:ff:20:a1:9f:2d:f1:46: 3b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F0:10:5A:34:B2:77:01:81:2F:65:6F:A7:9B:DE:F8:4E:4A:85:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl X509v3 Authority Key Identifier: keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer sbgp-ipAddrBlock: critical IPv4: 208.96.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e9:6f:50:14:d5:df:74:ab:fe:90:64:46:68:5e:73:d8:10: da:0d:dc:2d:3c:31:ae:93:ee:d3:43:f7:d0:42:46:f0:5a:8d: 4a:b5:51:fd:29:86:e1:cd:c8:8e:01:75:75:9f:d7:a0:22:e5: be:8d:cd:c0:8b:1e:87:c6:e1:82:cf:9c:61:4e:28:c0:46:98: 7f:f9:f2:00:71:b0:ad:f4:b5:f7:c7:db:bf:dd:4d:46:62:ee: 40:25:7e:22:d2:dd:ca:42:d2:cb:fa:11:b2:4b:da:65:71:5c: cc:28:34:50:f0:ea:15:bb:18:bc:a0:3d:7a:69:9d:68:3b:92: 6a:97:dd:4d:53:f0:3d:cc:c7:33:3b:ae:43:d2:49:da:84:7b: be:8e:46:8c:c9:44:56:1c:3f:88:35:fe:4e:a1:0e:c7:0a:14: c8:5c:07:a0:59:f6:2f:bf:2b:49:82:af:22:0b:e1:54:ba:26: e9:14:97:0f:78:f0:81:45:78:07:7b:1e:b6:d8:f2:0d:b1:09: 9c:6f:60:c9:b6:04:92:7a:bc:ba:c3:15:c5:84:5b:b9:6a:5f: b7:f7:3f:0a:31:cd:fc:65:ed:e5:f8:13:cb:f9:df:55:84:cb: 6d:14:29:06:13:3f:72:29:31:20:c3:71:94:76:dc:14:2a:05: 6e:e7:23:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC04xoLhZms6Tg2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk ZjY2MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk NThjYjE2ZjQtNmNlZi00NjA5LThjYWYtNWIxNDJmNTg0ZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV9nI3nS40cS+jQcCgPD8azHhdjz293EanHT QRzqYtisIsM6zmgoXWlQ/Axb1Z+QZXFWTZHlCPhRxx7kFxvpQnjAk5p7A1Yr+Mnx a+poI01oQVFPudiWWlmSSfarmVcTRdaY92HZvmDopYq0aRVUYe6FOQns3LUUsBDV 9R1eVBAJ8t6ui/t+JdN6+qSCek3yIES1o0nVW0zwOOi3Tk1xeNYgpX6daJ/N3e2A pAglwnjAmrrEgtTTY6/myqHFYTndvavhtzPW5RzeLxANedsESQcgIV/mbGWoipe/ hvWXknSbNcJgkilsFAzzIsm2lzAPY5D96Vtffv8goZ8t8UY7bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjwEFo0sncBgS9lb6eb3vhOSoWwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvMTJkOGUyZWUtYWY4OS0z Yjg0LTg3MDUtZjM2ZjdmOGM5N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5 ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3 NGQ0OWRmNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0GCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALpb1AU1d90q/6QZEZoXnPYENoN3C08Ma6T7tND99BCRvBajUq1Uf0p huHNyI4BdXWf16Ai5b6NzcCLHofG4YLPnGFOKMBGmH/58gBxsK30tffH27/dTUZi 7kAlfiLS3cpC0sv6EbJL2mVxXMwoNFDw6hW7GLygPXppnWg7kmqX3U1T8D3MxzM7 rkPSSdqEe76ORozJRFYcP4g1/k6hDscKFMhcB6BZ9i+/K0mCryIL4VS6JukUlw94 8IFFeAd7HrbY8g2xCZxvYMm2BJJ6vLrDFcWEW7lqX7f3Pwoxzfxl7eX4E8v531WE y20UKQYTP3IpMSDDcZR23BQqBW7nIww= -----END CERTIFICATE-----Generated at Tue Aug 5 08:20:42 2025 by rpki-client