$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/39a0738d-bd81-3dc4-bada-007779bfb3e8.roa File: 39a0738d-bd81-3dc4-bada-007779bfb3e8.roa (raw, json) Hash identifier: ya9zh/1QM0JPsOZa2hgjRSVjyuWsQuiqMV7TRmPMSrg= Subject key identifier: 84:34:77:DF:54:70:87:A5:42:AD:AE:BB:73:A0:D3:43:26:93:7C:4B Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F4328584A90A0B5A5216D2B66A735DF80 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/39a0738d-bd81-3dc4-bada-007779bfb3e8.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 14618 IP address blocks: 204.194.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:b5:a5:21:6d:2b:66:a7:35:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=d1ddab82-c0e2-4475-a07c-c261c84a2084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6d:99:5e:70:81:d3:99:a1:bc:2a:6e:59:d8: 9e:47:4a:b3:02:bf:6a:20:b6:d8:90:22:96:29:76: c3:18:9e:b6:e0:6e:83:d4:a1:d2:70:7c:64:c5:ac: 2f:03:6a:a2:88:45:c1:b9:55:35:72:b8:64:95:5e: 11:2f:f2:04:8c:b9:4f:f1:b0:2a:d6:48:b7:ef:20: 5d:bd:d2:de:1f:ff:9a:b9:c0:54:61:7c:5c:35:2b: 4a:79:75:70:45:c1:ca:32:b8:39:14:e1:6b:af:e4: 60:ea:1b:97:da:a2:a9:65:f6:ce:af:76:d6:1b:13: 35:8f:42:69:cd:ad:66:ad:d8:98:0f:e1:d2:bd:8a: 61:7e:51:f1:a4:e5:68:22:b4:04:0f:d1:39:b5:e1: 1a:a4:4d:b4:be:25:8a:ff:e0:3f:c8:a1:02:60:36: 50:f6:11:a9:58:94:19:3e:70:06:c1:d5:d4:5d:9e: 24:9e:2e:ec:ad:f4:6c:3f:77:5e:96:01:14:d0:99: ee:84:c7:c0:ec:19:e6:75:89:6b:b9:9e:b8:33:70: b0:f6:10:4f:8f:cf:86:ec:d4:a8:d9:b5:16:79:fb: fd:d5:ba:00:c6:cf:ce:c0:9d:2c:24:b9:22:26:7f: bc:64:93:0d:ab:b1:0e:6c:a9:0a:09:0f:20:0b:6e: ac:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:34:77:DF:54:70:87:A5:42:AD:AE:BB:73:A0:D3:43:26:93:7C:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/39a0738d-bd81-3dc4-bada-007779bfb3e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 204.194.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:32:fe:d8:f0:8f:0d:35:47:70:09:da:cc:8d:40:4d:4f:0d: b7:70:c6:eb:17:5d:67:cf:64:fe:eb:f3:76:08:1a:21:6b:d2: bd:5c:10:80:f2:26:b7:a1:0c:fa:1f:8e:04:23:9e:0f:2f:55: ef:3b:96:c2:1d:dc:b7:e7:31:d5:52:32:81:a9:b5:10:07:1c: 08:7c:99:a0:97:b8:c1:d9:8e:80:6a:a6:b4:a2:b1:68:c7:66: d9:c5:9a:18:e8:fa:3d:e1:80:83:a4:da:51:d2:56:f0:42:d9: e2:77:89:cf:a0:54:8c:65:ef:46:94:86:b6:fb:84:e0:99:3f: 53:0c:d5:54:73:46:49:43:d5:4d:6b:63:2f:eb:8d:23:d1:eb: f0:53:43:4c:6e:15:0b:5a:b0:ea:2d:46:87:e1:e8:75:45:e5: 8e:84:08:9b:0a:9d:70:96:0b:eb:6b:73:15:97:18:4f:be:5c: 8c:ca:c2:80:0d:43:b3:e8:6b:93:3f:03:50:96:08:b1:14:19: 60:08:c6:b0:01:19:4c:e9:14:80:1f:8c:03:52:f1:c4:f3:b8: 9c:2f:4f:02:40:31:71:a8:e4:d4:91:b6:9c:00:2f:f9:65:2c: 36:77:ef:5a:eb:10:cb:c4:c7:ec:ad:e6:ad:3a:23:0c:20:4f: 8e:90:98:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoLWlIW0rZqc134AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZDFkZGFiODItYzBlMi00NDc1LWEwN2MtYzI2MWM4NGEyMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG2ZXnCB05mhvCpuWdieR0qzAr9qILbYkCKW KXbDGJ624G6D1KHScHxkxawvA2qiiEXBuVU1crhklV4RL/IEjLlP8bAq1ki37yBd vdLeH/+aucBUYXxcNStKeXVwRcHKMrg5FOFrr+Rg6huX2qKpZfbOr3bWGxM1j0Jp za1mrdiYD+HSvYphflHxpOVoIrQED9E5teEapE20viWK/+A/yKECYDZQ9hGpWJQZ PnAGwdXUXZ4kni7srfRsP3delgEU0JnuhMfA7BnmdYlruZ64M3Cw9hBPj8+G7NSo 2bUWefv91boAxs/OwJ0sJLkiJn+8ZJMNq7EObKkKCQ8gC26s2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQ0d99UcIelQq2uu3Og00Mmk3xLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvMzlhMDczOGQtYmQ4MS0z ZGM0LWJhZGEtMDA3Nzc5YmZiM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMLfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQy/tjwjw01R3AJ2syNQE1PDbdwxusXXWfPZP7r83YIGiFr0r1cEIDy JrehDPofjgQjng8vVe87lsId3LfnMdVSMoGptRAHHAh8maCXuMHZjoBqprSisWjH ZtnFmhjo+j3hgIOk2lHSVvBC2eJ3ic+gVIxl70aUhrb7hOCZP1MM1VRzRklD1U1r Yy/rjSPR6/BTQ0xuFQtasOotRofh6HVF5Y6ECJsKnXCWC+trcxWXGE++XIzKwoAN Q7Poa5M/A1CWCLEUGWAIxrABGUzpFIAfjANS8cTzuJwvTwJAMXGo5NSRtpwAL/ll LDZ371rrEMvEx+yt5q06IwwgT46QmLQ= -----END CERTIFICATE-----Generated at Wed Aug 6 13:16:36 2025 by rpki-client