$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8016cad1-9d76-383b-9183-d778f2e3c76c.roa File: 8016cad1-9d76-383b-9183-d778f2e3c76c.roa (raw, json) Hash identifier: yQtIPNH+k3UzzfzWj1X5p8Y1UH/szwNXr2+1mXKMfBY= Subject key identifier: 72:B3:55:8A:F7:44:C1:E4:E4:41:6E:89:02:7D:4E:67:B3:D0:AE:88 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AC1EB003347478DC946A35B82 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8016cad1-9d76-383b-9183-d778f2e3c76c.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 199527 IP address blocks: 204.147.232.0/22 maxlen: 22 204.147.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:eb:00:33:47:47:8d:c9:46:a3:5b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=f49074e6-66b7-4f57-8c66-0f5b04fc8ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a5:56:06:39:1e:db:f1:15:8b:35:01:e7:54: c9:0a:2a:8e:30:d6:a9:23:24:f0:6c:86:49:65:41: 90:22:35:50:25:47:68:15:54:6b:46:76:2c:23:e5: 44:63:ae:66:f3:32:43:0b:6f:77:c5:f7:fa:22:47: 8c:42:52:c0:e8:73:74:98:14:b1:d3:f5:b5:7f:b5: 42:30:68:0e:9a:85:70:84:91:78:ba:f8:bc:d3:a9: dc:c6:84:5f:88:10:ca:4d:4a:51:fd:12:31:9a:d3: 10:8a:93:49:46:dd:e1:65:83:be:cc:26:b4:9d:62: 20:75:1e:e0:6c:9d:08:08:cc:16:16:a0:4f:e3:f4: cc:63:e3:f3:b0:cc:c1:e3:7d:94:01:bf:05:4e:e4: 7c:0b:36:ad:df:6e:d5:b1:49:48:17:d3:ac:57:7f: e0:ba:e8:d4:6d:bc:3e:e8:39:63:9f:be:ec:00:19: ec:4d:5a:51:0b:23:89:f6:d0:c3:ba:3c:56:a7:e8: cd:20:b9:c7:a4:ca:55:95:94:13:9d:2e:b5:6d:30: f0:48:45:6e:e1:10:5e:11:3e:85:32:42:6c:75:cd: b8:3a:58:5e:82:2a:eb:a5:6b:8d:24:2b:15:71:f4: 0e:1a:ce:70:45:5c:d5:62:53:bd:86:44:30:b0:25: 03:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B3:55:8A:F7:44:C1:E4:E4:41:6E:89:02:7D:4E:67:B3:D0:AE:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8016cad1-9d76-383b-9183-d778f2e3c76c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 204.147.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:59:e4:c6:62:13:13:c5:ba:40:7f:13:63:a3:cf:16:86:eb: ff:c7:ac:c6:7e:59:f6:b3:5c:36:33:8a:26:3e:42:71:c5:0f: 49:14:9e:19:d5:8a:eb:a2:59:a9:72:78:75:57:2e:7a:47:cf: 25:03:e6:81:d1:2e:97:31:92:8e:52:ee:0c:5d:82:6e:c6:4f: c5:7e:c3:61:a2:83:5b:a3:a7:69:34:cb:16:de:aa:5f:4f:85: e6:38:05:fb:04:45:15:54:c0:8c:1d:07:33:6d:e1:61:fe:96: 0d:2a:ac:ac:5e:61:a0:de:ed:24:8a:5d:53:2e:1c:aa:23:07: c1:19:45:fe:6e:f5:0d:84:e3:60:ca:73:f5:41:71:19:c3:29: 6a:bf:3a:ae:2d:44:d5:fe:c0:a4:de:e8:60:d8:99:d4:59:fe: da:40:2e:73:6e:b4:75:12:d4:03:c5:05:4e:93:ed:e0:ce:4a: f6:a5:e1:47:f5:b1:57:bd:38:7e:e0:f6:3b:8a:04:7c:6f:f8: d0:39:2b:04:3c:50:42:fd:c5:b8:06:20:5d:e7:4a:71:20:37: 6c:cd:a8:63:58:f1:8d:c7:91:ae:80:6e:45:87:84:52:57:59: a7:8d:5a:71:2b:d8:c0:49:59:09:c0:d1:fc:f8:28:6c:6d:21: 43:b5:51:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErB6wAzR0eNyUajW4IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk ZjQ5MDc0ZTYtNjZiNy00ZjU3LThjNjYtMGY1YjA0ZmM4ZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6VWBjke2/EVizUB51TJCiqOMNapIyTwbIZJ ZUGQIjVQJUdoFVRrRnYsI+VEY65m8zJDC293xff6IkeMQlLA6HN0mBSx0/W1f7VC MGgOmoVwhJF4uvi806ncxoRfiBDKTUpR/RIxmtMQipNJRt3hZYO+zCa0nWIgdR7g bJ0ICMwWFqBP4/TMY+PzsMzB432UAb8FTuR8Czat327VsUlIF9OsV3/guujUbbw+ 6Dljn77sABnsTVpRCyOJ9tDDujxWp+jNILnHpMpVlZQTnS61bTDwSEVu4RBeET6F MkJsdc24OlhegirrpWuNJCsVcfQOGs5wRVzVYlO9hkQwsCUDfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKzVYr3RMHk5EFuiQJ9Tmez0K6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODAxNmNhZDEtOWQ3Ni0z ODNiLTkxODMtZDc3OGYyZTNjNzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlZ5MZiExPFukB/E2OjzxaG6//HrMZ+WfazXDYziiY+QnHFD0kUnhnV iuuiWalyeHVXLnpHzyUD5oHRLpcxko5S7gxdgm7GT8V+w2Gig1ujp2k0yxbeql9P heY4BfsERRVUwIwdBzNt4WH+lg0qrKxeYaDe7SSKXVMuHKojB8EZRf5u9Q2E42DK c/VBcRnDKWq/Oq4tRNX+wKTe6GDYmdRZ/tpALnNutHUS1APFBU6T7eDOSval4Uf1 sVe9OH7g9juKBHxv+NA5KwQ8UEL9xbgGIF3nSnEgN2zNqGNY8Y3Hka6AbkWHhFJX WaeNWnEr2MBJWQnA0fz4KGxtIUO1UUw= -----END CERTIFICATE-----Generated at Sat Aug 9 10:38:39 2025 by rpki-client