$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa File: d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa (raw, json) Hash identifier: H1VnT+j5eKi45fqmkfw0ti3Ev6qu4hs3R54K5bFZ6/w= Subject key identifier: E1:2B:73:8D:85:63:D7:76:3D:0F:CB:AC:51:6A:95:16:C5:7F:A7:B8 Certificate issuer: /CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Certificate serial: 010D0C9F4328584AB386234212D88DADFE1B8980 Authority key identifier: EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 32391 IP address blocks: 204.57.128.0/18 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:23:42:12:d8:8d:ad:fe:1b:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=da643731-ce21-4226-aac9-839dbab1d688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e8:e6:ef:bd:5b:73:98:47:b3:30:ab:26:44: ab:11:40:06:61:6a:b7:e3:ac:2f:29:ab:f3:79:12: ef:01:a5:a2:f7:84:44:26:83:63:fb:9e:fc:4f:a9: 5a:01:6f:ad:d2:cd:8f:98:07:29:32:e8:28:4f:4c: 80:e9:bd:d1:2e:0b:70:6a:f6:43:a6:79:5a:d2:3c: a4:bf:17:b0:42:55:db:d4:5c:f0:34:57:fb:5d:f3: bf:a9:d6:20:cb:31:5d:1f:25:cb:3b:e2:d4:c2:13: f1:fd:7c:67:eb:e8:f0:cb:38:92:b3:05:a0:97:9d: 64:3f:09:aa:bf:68:0b:48:97:15:e7:66:57:7b:43: 22:47:9e:64:23:47:2e:74:91:07:91:5b:f5:6f:01: c9:3b:af:41:c9:b3:6b:97:a8:cc:af:5a:15:5f:61: fe:fc:d2:f6:76:a8:be:94:b6:69:01:f9:56:2a:3d: d1:41:9d:90:89:c8:9f:ca:4d:97:6f:46:f3:f1:db: f1:58:82:61:a2:04:5b:77:ef:7f:37:88:07:aa:51: e7:2a:5e:7d:3d:90:ed:08:57:1d:86:bf:f2:a0:ec: ec:8a:dc:e1:36:f8:80:48:87:99:84:a0:61:a6:2a: 61:04:93:0a:a2:cd:75:ec:48:ad:0c:bd:bc:30:ba: 7c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2B:73:8D:85:63:D7:76:3D:0F:CB:AC:51:6A:95:16:C5:7F:A7:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl X509v3 Authority Key Identifier: keyid:EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer sbgp-ipAddrBlock: critical IPv4: 204.57.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:63:f0:93:4b:8e:51:ef:1e:6e:2d:f1:03:aa:08:56:49:84: b3:e5:da:5d:9e:1a:8f:17:94:f3:2e:b1:4f:5c:86:e6:d9:0f: f7:26:68:c5:81:a1:61:d4:c9:8e:18:f9:87:a9:0f:bf:e8:66: 8c:eb:ab:f0:07:17:95:eb:d2:11:e3:f5:51:27:dd:9e:a4:68: a9:71:cc:c0:79:35:8e:70:a6:ec:4d:de:1c:02:95:93:98:14: 93:bf:5b:b6:20:bb:a0:2e:33:0c:8f:ab:f1:14:41:eb:35:92: da:30:af:62:82:41:71:02:64:3f:84:3b:20:6d:f9:fb:4b:82: a7:88:97:99:42:09:54:19:59:91:2e:57:70:b2:c5:1d:8c:24: 86:f0:8e:3d:16:b2:78:d7:e1:2f:3e:0b:7f:e4:e8:9c:5d:75: 5f:13:57:17:a2:85:e7:19:76:e8:75:3c:3f:01:bd:5a:a4:fb: c7:f9:ba:4d:7c:d2:df:cf:0d:57:b2:2e:f0:32:8b:ae:c7:c9: b6:1c:a7:13:0e:f3:3e:9a:a1:87:0d:63:ed:c0:6a:e5:53:b6: 60:b9:f4:6d:ed:82:9f:8b:e9:68:d1:a5:bb:1c:12:78:be:4f: 74:30:9d:7d:b0:db:c3:f6:f8:fe:7d:45:a0:ed:b3:4e:05:de: d1:f0:ad:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhiNCEtiNrf4biYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NWE0MWEtODExNC00ZTA0LWFiZGItYTNhMDMyYjM3 YTA0MB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk ZGE2NDM3MzEtY2UyMS00MjI2LWFhYzktODM5ZGJhYjFkNjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOjm771bc5hHszCrJkSrEUAGYWq346wvKavz eRLvAaWi94REJoNj+578T6laAW+t0s2PmAcpMugoT0yA6b3RLgtwavZDpnla0jyk vxewQlXb1FzwNFf7XfO/qdYgyzFdHyXLO+LUwhPx/Xxn6+jwyziSswWgl51kPwmq v2gLSJcV52ZXe0MiR55kI0cudJEHkVv1bwHJO69BybNrl6jMr1oVX2H+/NL2dqi+ lLZpAflWKj3RQZ2Qicifyk2Xb0bz8dvxWIJhogRbd+9/N4gHqlHnKl59PZDtCFcd hr/yoOzsitzhNviASIeZhKBhpiphBJMKos117EitDL28MLp8yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOErc42FY9d2PQ/LrFFqlRbFf6e4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1 YTQxYS04MTE0LTRlMDQtYWJkYi1hM2EwMzJiMzdhMDQvZDAwMTI5OTgtZTVkMy0z MmE5LWFkM2EtZGNkN2Y0NjE1NTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmE4NWE0MWEtODExNC00ZTA0LWFi ZGItYTNhMDMyYjM3YTA0LzJhODVhNDFhLTgxMTQtNGUwNC1hYmRiLWEzYTAzMmIz N2EwNC5jcmwwHwYDVR0jBBgwFoAU76oZ3vz/oGu+JzCMbTVq5IOpML4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1YTQxYS04MTE0LTRlMDQtYWJkYi1hM2Ew MzJiMzdhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzDmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVj8JNLjlHvHm4t8QOqCFZJhLPl2l2eGo8XlPMusU9chubZD/cmaMWB oWHUyY4Y+YepD7/oZozrq/AHF5Xr0hHj9VEn3Z6kaKlxzMB5NY5wpuxN3hwClZOY FJO/W7Ygu6AuMwyPq/EUQes1ktowr2KCQXECZD+EOyBt+ftLgqeIl5lCCVQZWZEu V3CyxR2MJIbwjj0WsnjX4S8+C3/k6JxddV8TVxeihecZduh1PD8BvVqk+8f5uk18 0t/PDVeyLvAyi67HybYcpxMO8z6aoYcNY+3AauVTtmC59G3tgp+L6WjRpbscEni+ T3QwnX2w28P2+P59RaDts04F3tHwrdg= -----END CERTIFICATE-----Generated at Mon Aug 4 14:03:39 2025 by rpki-client