$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/3721f4d7-0ed4-3209-88f8-9531cd7b670f.roa File: 3721f4d7-0ed4-3209-88f8-9531cd7b670f.roa (raw, json) Hash identifier: 1ksjLsJEsCbvbGolGYM39G6bFfVCvfLRamWWqCGqavw= Subject key identifier: BE:BB:BB:1E:60:70:3E:37:4B:73:2B:9C:62:4A:BB:9C:1A:1B:79:A1 Certificate issuer: /CN=8e159820-cf56-42eb-b9f0-0187b10bb721 Certificate serial: 010D0C9F4328584AA42B74C8418DDBCCCFB8A480 Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/3721f4d7-0ed4-3209-88f8-9531cd7b670f.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 376 IP address blocks: 205.151.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:74:c8:41:8d:db:cc:cf:b8:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=b1e168a8-97db-471c-ba1e-41e60aa12fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cb:02:ec:9e:8c:b0:d8:65:5d:92:88:aa:bf: a3:86:e0:a7:2c:45:4f:93:d7:a2:4d:b5:16:25:18: 94:68:a5:08:7c:54:de:e2:1a:88:25:8c:e6:4b:5e: c3:74:23:08:c1:d4:54:48:f4:83:ca:55:b1:98:04: 5d:1a:8b:6f:eb:1c:16:4c:c6:4a:8f:7d:b1:e4:99: de:96:29:9a:b0:89:a3:06:47:95:88:f0:15:12:c4: 04:1f:0c:77:a1:a9:40:78:fd:ad:72:74:23:95:60: 7f:08:76:25:4a:e7:61:5a:32:96:97:ca:01:87:df: 39:2b:26:f1:81:30:ae:a0:52:e8:17:23:67:ea:9b: 91:73:30:b2:11:85:e3:07:a4:c5:ff:e7:e6:8d:78: 27:a5:9f:d5:ed:01:00:b2:b1:a8:48:33:ab:f1:2e: 2e:47:ca:fb:ad:1d:5e:d1:80:e5:94:a7:12:65:63: e5:ea:95:45:39:24:de:97:ec:cd:95:9a:2b:04:0b: 02:46:16:f3:0d:08:9d:b6:2d:3e:56:fe:d5:f2:39: ff:65:34:ad:bc:97:db:12:07:da:b5:49:95:28:34: 96:a7:b6:36:da:87:22:4c:4b:f4:bd:aa:7c:3c:cc: 6a:51:f1:82:94:ca:dd:c4:c5:02:8c:ca:87:e3:f4: 6d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BB:BB:1E:60:70:3E:37:4B:73:2B:9C:62:4A:BB:9C:1A:1B:79:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/3721f4d7-0ed4-3209-88f8-9531cd7b670f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl X509v3 Authority Key Identifier: keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer sbgp-ipAddrBlock: critical IPv4: 205.151.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:be:2b:01:fa:0f:41:28:bb:bb:81:1a:ed:30:1c:75:f4:ee: 83:86:8c:b4:20:e0:16:85:93:72:35:88:90:56:b4:eb:9d:e6: ea:92:1a:40:c1:9f:aa:b3:91:39:2f:30:18:24:db:1d:82:99: 15:d8:4b:c6:af:cc:3d:8b:5e:6f:cb:42:44:65:48:9b:08:81: df:1e:53:f6:0a:57:f6:59:4c:e9:e8:71:bb:28:87:b8:41:18: 48:32:d0:2a:39:c6:13:90:c6:f7:16:98:43:a7:97:b6:45:6c: 21:38:67:ec:9e:c3:0f:85:e6:b2:11:8e:8f:a3:24:b1:7d:c9: 69:17:9a:e2:a3:82:2b:9a:aa:02:3a:c2:87:99:b0:f4:cd:29: 66:05:a2:96:6e:ce:ea:02:c5:35:ea:79:ff:2e:d9:97:b1:d0: 1e:74:80:c0:4c:cc:60:43:bb:b8:7c:4f:70:f8:46:01:15:70: fe:b1:29:d5:45:e5:e6:b1:8c:9c:a6:76:3f:6d:0a:d5:35:52: df:5d:62:cb:47:dc:7d:0d:f4:19:e0:76:5a:a7:c0:d6:f9:96: 16:03:7c:9d:12:e5:ae:d2:6d:11:6b:c3:d7:77:2e:c2:b6:98: 80:a1:f2:25:11:d8:ac:c5:8b:fb:65:a7:9a:a8:81:e7:3d:e4: 98:7f:12:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK3TIQY3bzM+4pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUxNTk4MjAtY2Y1Ni00MmViLWI5ZjAtMDE4N2IxMGJi NzIxMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YjFlMTY4YTgtOTdkYi00NzFjLWJhMWUtNDFlNjBhYTEyZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsssC7J6MsNhlXZKIqr+jhuCnLEVPk9eiTbUW JRiUaKUIfFTe4hqIJYzmS17DdCMIwdRUSPSDylWxmARdGotv6xwWTMZKj32x5Jne limasImjBkeViPAVEsQEHwx3oalAeP2tcnQjlWB/CHYlSudhWjKWl8oBh985Kybx gTCuoFLoFyNn6puRczCyEYXjB6TF/+fmjXgnpZ/V7QEAsrGoSDOr8S4uR8r7rR1e 0YDllKcSZWPl6pVFOSTel+zNlZorBAsCRhbzDQidti0+Vv7V8jn/ZTStvJfbEgfa tUmVKDSWp7Y22ociTEv0vap8PMxqUfGClMrdxMUCjMqH4/Rt6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL67ux5gcD43S3MrnGJKu5waG3mhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1 OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3YjEwYmI3MjEvMzcyMWY0ZDctMGVkNC0z MjA5LTg4ZjgtOTUzMWNkN2I2NzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGUxNTk4MjAtY2Y1Ni00MmViLWI5 ZjAtMDE4N2IxMGJiNzIxLzhlMTU5ODIwLWNmNTYtNDJlYi1iOWYwLTAxODdiMTBi YjcyMS5jcmwwHwYDVR0jBBgwFoAUP6asP+ah5UuMrQtDbx2HECUnhEQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3 YjEwYmI3MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzZdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAS+KwH6D0Eou7uBGu0wHHX07oOGjLQg4BaFk3I1iJBWtOud5uqSGkDB n6qzkTkvMBgk2x2CmRXYS8avzD2LXm/LQkRlSJsIgd8eU/YKV/ZZTOnocbsoh7hB GEgy0Co5xhOQxvcWmEOnl7ZFbCE4Z+yeww+F5rIRjo+jJLF9yWkXmuKjgiuaqgI6 woeZsPTNKWYFopZuzuoCxTXqef8u2Zex0B50gMBMzGBDu7h8T3D4RgEVcP6xKdVF 5eaxjJymdj9tCtU1Ut9dYstH3H0N9BngdlqnwNb5lhYDfJ0S5a7SbRFrw9d3LsK2 mICh8iUR2KzFi/tlp5qogec95Jh/EmY= -----END CERTIFICATE-----Generated at Mon Aug 4 14:42:17 2025 by rpki-client