$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa File: 8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa (raw, json) Hash identifier: BDWVIP/nBhX+zzbiBkjzfYVjTmDtYAvRWWDBWiE44j4= Subject key identifier: 70:72:FE:45:1B:0F:02:A8:93:0C:60:EE:B9:6A:04:3A:F9:A2:FC:0A Certificate issuer: /CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Certificate serial: 010D0C9F4328584A7E7B59BE0DED9B1BEE6F6B80 Authority key identifier: 5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 400211 IP address blocks: 142.202.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:59:be:0d:ed:9b:1b:ee:6f:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=fe55cfa9-96eb-48bd-b085-391027505be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6c:14:0d:56:9a:4b:a6:7b:74:e9:f9:59:b8: fe:33:c5:04:36:cc:0c:c4:86:9d:2b:5f:38:2f:58: a6:73:d4:16:13:2d:36:db:12:a0:c1:c4:f6:c2:8e: 7a:99:35:5c:e8:b1:4d:c6:b7:c1:72:95:95:c8:35: 8e:bc:7f:05:77:60:1c:a5:79:4f:03:12:d9:bf:ff: d3:2d:b6:f9:31:fb:2d:60:22:06:6d:d0:c9:84:45: 3b:67:41:e2:86:b0:f0:2d:51:62:4c:35:e9:11:f8: 35:9f:19:2c:49:ee:77:48:09:f3:f3:2b:18:7b:60: 54:0c:68:3d:dc:63:7f:00:20:ee:16:7c:6c:74:31: 1d:a5:e0:45:7a:04:86:17:26:15:70:73:6f:30:3a: fa:ec:c8:7e:b5:a6:fc:a2:ef:f0:a0:1c:ce:fd:f7: db:73:c7:69:4f:39:cb:a3:95:ea:29:4d:f2:74:55: 07:d3:c3:a1:c0:0b:b9:54:73:e2:09:5d:76:5f:ba: d0:46:df:22:fb:8a:b6:2a:ac:80:18:3d:b3:1e:0a: b4:ee:21:f2:dd:2b:56:d8:e6:b3:08:f4:57:60:2c: 10:ba:aa:37:23:53:49:f1:87:eb:ac:a5:92:09:01: e9:85:fd:66:8e:de:0a:6c:47:c1:d5:cc:df:1e:59: 5b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:72:FE:45:1B:0F:02:A8:93:0C:60:EE:B9:6A:04:3A:F9:A2:FC:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl X509v3 Authority Key Identifier: keyid:5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer sbgp-ipAddrBlock: critical IPv4: 142.202.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a1:7f:d9:c5:59:14:32:f2:20:d5:0e:7a:33:7d:ee:99:5e: c9:f8:1f:03:b2:51:ff:10:5c:2c:c6:8a:57:55:2d:95:70:73: aa:ef:66:25:72:be:b7:76:97:f2:95:e5:91:46:f0:ef:8a:43: c4:68:90:23:27:6e:19:1b:67:80:39:8a:ec:07:86:90:89:77: 46:ff:5c:d3:e4:32:9b:87:ad:6a:f2:e8:40:d9:c1:e6:15:95: e3:8d:27:42:71:79:44:56:54:d2:40:bc:c1:5b:2f:09:8a:52: 32:78:ae:95:90:9f:aa:49:9c:20:eb:57:a6:69:d7:00:11:35: c5:06:9f:a2:71:85:a5:91:4c:46:70:f7:f9:2e:e7:4f:46:5f: 1b:39:4d:9f:09:7d:9f:ce:40:fe:18:19:ba:2d:4f:c6:04:dd: f8:d4:28:66:28:53:f4:3d:c8:ea:a7:e3:af:79:e7:4f:c3:4d: 59:88:90:fd:19:42:1e:10:12:c4:e2:03:03:bb:87:37:4a:c2: 2a:88:b0:ce:91:0e:7a:e5:bd:77:4e:82:a7:ab:47:0d:5a:c2: b8:7c:77:4f:e3:bf:6e:b4:20:be:9c:08:57:9d:49:b5:ab:32: 31:b4:29:81:93:7c:9f:13:1c:be:ac:a5:ff:a8:fc:b3:3b:24: d9:47:0d:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e1m+De2bG+5va4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcyOGI0ZmQtNmU4Yi00NmM3LWI1OGUtODFmZGVhNmJl NjFmMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZmU1NWNmYTktOTZlYi00OGJkLWIwODUtMzkxMDI3NTA1YmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGwUDVaaS6Z7dOn5Wbj+M8UENswMxIadK184 L1imc9QWEy022xKgwcT2wo56mTVc6LFNxrfBcpWVyDWOvH8Fd2AcpXlPAxLZv//T Lbb5MfstYCIGbdDJhEU7Z0HihrDwLVFiTDXpEfg1nxksSe53SAnz8ysYe2BUDGg9 3GN/ACDuFnxsdDEdpeBFegSGFyYVcHNvMDr67Mh+tab8ou/woBzO/ffbc8dpTznL o5XqKU3ydFUH08OhwAu5VHPiCV12X7rQRt8i+4q2KqyAGD2zHgq07iHy3StW2Oaz CPRXYCwQuqo3I1NJ8YfrrKWSCQHphf1mjt4KbEfB1czfHllb9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBy/kUbDwKokwxg7rlqBDr5ovwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4 YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZkZWE2YmU2MWYvOGM3ZTI3ZDMtYTM4NS0z ZDI2LTlkYmYtMGE4M2RjNjk1ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDcyOGI0ZmQtNmU4Yi00NmM3LWI1 OGUtODFmZGVhNmJlNjFmL2Q3MjhiNGZkLTZlOGItNDZjNy1iNThlLTgxZmRlYTZi ZTYxZi5jcmwwHwYDVR0jBBgwFoAUXqu5H8cB3u5KLUAgcnl0o/4JsCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZk ZWE2YmU2MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjsrrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKhf9nFWRQy8iDVDnozfe6ZXsn4HwOyUf8QXCzGildVLZVwc6rvZiVy vrd2l/KV5ZFG8O+KQ8RokCMnbhkbZ4A5iuwHhpCJd0b/XNPkMpuHrWry6EDZweYV leONJ0JxeURWVNJAvMFbLwmKUjJ4rpWQn6pJnCDrV6Zp1wARNcUGn6JxhaWRTEZw 9/ku509GXxs5TZ8JfZ/OQP4YGbotT8YE3fjUKGYoU/Q9yOqn469550/DTVmIkP0Z Qh4QEsTiAwO7hzdKwiqIsM6RDnrlvXdOgqerRw1awrh8d0/jv260IL6cCFedSbWr MjG0KYGTfJ8THL6spf+o/LM7JNlHDew= -----END CERTIFICATE-----Generated at Mon Aug 4 14:18:53 2025 by rpki-client