$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a2485e6-b86b-4cb5-92da-e03f2283a405/a5f5452e-8fac-3345-9c38-e60126789ad0.roa File: a5f5452e-8fac-3345-9c38-e60126789ad0.roa (raw, json) Hash identifier: Wy6F9RXzp8IVCJyAh++ubg1HTusloqK2bMUd9OUFNZk= Subject key identifier: 54:1B:B1:A8:BE:1B:1D:AA:C1:05:91:CF:35:25:92:C8:A1:68:F0:B2 Certificate issuer: /CN=5a2485e6-b86b-4cb5-92da-e03f2283a405 Certificate serial: 010D0C9F4328584ABA80CA585AC17A266EB8B040 Authority key identifier: 2F:08:F7:91:A0:E1:5C:18:34:5D:49:D3:3F:BB:A4:78:D2:6A:C3:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a2485e6-b86b-4cb5-92da-e03f2283a405.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a2485e6-b86b-4cb5-92da-e03f2283a405/a5f5452e-8fac-3345-9c38-e60126789ad0.roa Signing time: Sun 03 Aug 2025 01:00:32 +0000 ROA not before: Sun 03 Aug 2025 01:00:32 +0000 ROA not after: Sat 01 Nov 2025 01:00:32 +0000 asID: 23316 IP address blocks: 207.181.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a2485e6-b86b-4cb5-92da-e03f2283a405/5a2485e6-b86b-4cb5-92da-e03f2283a405.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a2485e6-b86b-4cb5-92da-e03f2283a405/5a2485e6-b86b-4cb5-92da-e03f2283a405.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a2485e6-b86b-4cb5-92da-e03f2283a405.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:80:ca:58:5a:c1:7a:26:6e:b8:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a2485e6-b86b-4cb5-92da-e03f2283a405 Validity Not Before: Aug 3 01:00:32 2025 GMT Not After : Nov 1 01:00:32 2025 GMT Subject: CN=ebc6da4a-cb21-48a3-954e-a011e33b9740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a2:0b:aa:74:9e:73:ad:9b:80:0b:a6:49:88: 28:7b:1a:d8:88:db:29:09:a8:58:c3:36:2f:83:c3: 22:03:32:77:3b:00:fe:0d:77:74:f6:dc:0a:44:93: a9:ee:45:8a:55:b0:e5:fc:82:9f:a9:24:46:91:01: e3:c2:aa:4e:00:88:d1:7e:96:e0:7e:54:0f:e4:83: fc:dc:bc:8d:e3:69:20:de:e7:5d:16:5d:e3:9f:83: dd:26:91:10:ca:15:56:97:eb:85:6d:88:95:37:e0: 93:dc:b4:82:0e:f6:4e:ea:42:64:a2:09:67:7b:f9: 7b:d7:59:d8:0e:c2:7f:8b:4a:62:e0:42:69:aa:4b: 8a:07:6b:cc:1d:5a:36:cd:fd:a7:d6:8d:e7:18:4b: 38:f7:7b:7e:4b:7e:f3:78:f9:04:a2:37:a8:78:1b: 44:42:95:4d:f9:8c:e9:70:e9:96:5e:2d:dc:df:8d: a7:1f:ea:11:1a:bf:f9:72:3b:f1:75:20:c1:d9:06: 42:8a:5c:01:20:3c:8f:e7:fc:9d:1f:0f:77:a0:f1: b9:a3:9d:68:72:00:07:69:32:f4:91:ac:e7:82:f7: ce:9f:48:88:f7:cd:b1:fe:af:4a:93:02:15:eb:b1: 16:b8:91:81:c8:f0:7c:f8:e8:08:88:29:fb:bf:98: 89:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1B:B1:A8:BE:1B:1D:AA:C1:05:91:CF:35:25:92:C8:A1:68:F0:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a2485e6-b86b-4cb5-92da-e03f2283a405/a5f5452e-8fac-3345-9c38-e60126789ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a2485e6-b86b-4cb5-92da-e03f2283a405/5a2485e6-b86b-4cb5-92da-e03f2283a405.crl X509v3 Authority Key Identifier: keyid:2F:08:F7:91:A0:E1:5C:18:34:5D:49:D3:3F:BB:A4:78:D2:6A:C3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a2485e6-b86b-4cb5-92da-e03f2283a405.cer sbgp-ipAddrBlock: critical IPv4: 207.181.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:31:28:3a:77:0d:2a:d5:a4:dd:17:dc:58:e5:1f:f1:33:a4: f2:32:4b:d0:03:14:80:87:3e:9a:43:9a:53:ad:2c:4e:37:93: 06:75:47:75:29:92:f7:e9:90:d9:c1:2f:50:40:0b:5a:05:45: 9a:e9:cb:53:06:e4:f1:68:b4:a6:25:d1:82:ef:55:4c:90:fa: b2:28:7b:80:30:7c:70:d6:72:12:8b:1a:05:39:ea:25:62:fe: 15:2a:53:e5:04:50:fc:e1:dc:9c:b6:24:17:4f:9d:df:8d:7f: 48:14:b5:c5:95:e5:0f:57:91:42:40:64:62:30:97:5e:18:59: 02:6d:81:23:0b:0f:7e:6d:bf:db:21:f3:cb:18:e8:44:11:e5: de:6f:d2:1f:95:b2:a3:17:60:24:8b:1f:2d:11:f7:1c:8b:ae: e0:a6:22:69:6e:ff:e6:70:c1:6d:51:b4:a3:71:e1:6f:6a:15: 0b:a3:4c:6c:1f:c2:2a:55:96:5a:ae:31:8e:f2:37:f3:31:7a: bd:69:c1:da:d2:15:5e:5c:53:9c:c3:ff:26:a3:55:f3:c6:0e: ed:d6:44:09:c1:ab:3f:b6:dc:d3:64:0b:99:21:32:ec:62:96: b4:c9:61:fb:f7:1d:9e:2c:87:02:49:28:85:29:90:b1:78:34: 3d:5f:53:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6gMpYWsF6Jm64sEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEyNDg1ZTYtYjg2Yi00Y2I1LTkyZGEtZTAzZjIyODNh NDA1MB4XDTI1MDgwMzAxMDAzMloXDTI1MTEwMTAxMDAzMlowLzEtMCsGA1UEAxMk ZWJjNmRhNGEtY2IyMS00OGEzLTk1NGUtYTAxMWUzM2I5NzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaILqnSec62bgAumSYgoexrYiNspCahYwzYv g8MiAzJ3OwD+DXd09twKRJOp7kWKVbDl/IKfqSRGkQHjwqpOAIjRfpbgflQP5IP8 3LyN42kg3uddFl3jn4PdJpEQyhVWl+uFbYiVN+CT3LSCDvZO6kJkoglne/l711nY DsJ/i0pi4EJpqkuKB2vMHVo2zf2n1o3nGEs493t+S37zePkEojeoeBtEQpVN+Yzp cOmWXi3c342nH+oRGr/5cjvxdSDB2QZCilwBIDyP5/ydHw93oPG5o51ocgAHaTL0 kazngvfOn0iI982x/q9KkwIV67EWuJGByPB8+OgIiCn7v5iJ6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQbsai+Gx2qwQWRzzUlksihaPCyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81YTI0 ODVlNi1iODZiLTRjYjUtOTJkYS1lMDNmMjI4M2E0MDUvYTVmNTQ1MmUtOGZhYy0z MzQ1LTljMzgtZTYwMTI2Nzg5YWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWEyNDg1ZTYtYjg2Yi00Y2I1LTky ZGEtZTAzZjIyODNhNDA1LzVhMjQ4NWU2LWI4NmItNGNiNS05MmRhLWUwM2YyMjgz YTQwNS5jcmwwHwYDVR0jBBgwFoAULwj3kaDhXBg0XUnTP7ukeNJqwyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81YTI0ODVlNi1iODZiLTRjYjUtOTJkYS1lMDNm MjI4M2E0MDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz7UAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0xKDp3DSrVpN0X3FjlH/EzpPIyS9ADFICHPppDmlOtLE43kwZ1R3Up kvfpkNnBL1BAC1oFRZrpy1MG5PFotKYl0YLvVUyQ+rIoe4AwfHDWchKLGgU56iVi /hUqU+UEUPzh3Jy2JBdPnd+Nf0gUtcWV5Q9XkUJAZGIwl14YWQJtgSMLD35tv9sh 88sY6EQR5d5v0h+VsqMXYCSLHy0R9xyLruCmImlu/+ZwwW1RtKNx4W9qFQujTGwf wipVllquMY7yN/Mxer1pwdrSFV5cU5zD/yajVfPGDu3WRAnBqz+23NNkC5khMuxi lrTJYfv3HZ4shwJJKIUpkLF4ND1fU4Y= -----END CERTIFICATE-----Generated at Fri Aug 8 13:08:04 2025 by rpki-client