$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3f88eb45-1ebb-364d-9949-8283978277cd.roa File: 3f88eb45-1ebb-364d-9949-8283978277cd.roa (raw, json) Hash identifier: pAKsob7XZqUfv6iqAWJWCq8uHrQQQYwJ+SlRqDLA2Ts= Subject key identifier: 7A:B1:8E:20:B5:CC:13:E8:07:4C:D6:26:DD:70:EA:28:59:25:E9:60 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584AAB265C882413A270C8F6F380 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3f88eb45-1ebb-364d-9949-8283978277cd.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 40948 IP address blocks: 204.156.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:5c:88:24:13:a2:70:c8:f6:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=61294e38-4c14-4e70-8c3f-e6a2e8739fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:95:33:90:5c:c8:c4:2d:c8:c9:f8:a7:4b:3e: 75:f1:cf:d8:62:7c:0f:83:d0:7b:96:15:8d:33:81: dd:65:01:06:8f:97:36:2c:0a:bf:79:3e:b6:c8:a4: 1d:51:91:47:66:99:5b:42:d4:74:33:ff:e9:65:a6: db:2f:b8:5e:f1:9c:e1:fd:11:d5:af:52:14:22:f0: 48:01:42:a0:a0:c7:f0:f0:7e:09:18:f5:3f:0d:e7: 7e:e2:f9:4c:e8:e9:80:5d:75:af:c5:08:b2:5a:f5: 2e:92:24:c0:ae:05:25:9b:3f:62:9e:34:cd:ce:df: f3:ec:00:6d:2e:9d:bf:e7:f1:1c:bb:4e:d6:1f:99: 04:8c:dc:ef:ce:0e:36:dd:be:08:42:8b:9e:50:c6: fc:0a:ac:e7:31:7c:28:16:fe:cd:13:37:25:19:77: c9:66:69:ad:0e:f2:cf:b7:0c:64:fb:be:d8:61:64: 1a:39:a4:5c:fa:41:cb:37:1e:a3:ad:eb:1d:62:fd: f4:1f:15:fe:29:bb:2b:0a:bc:73:e1:f1:43:dc:69: f6:27:21:45:ab:9a:22:e3:bb:2c:18:05:67:36:09: ab:60:5f:f6:26:c7:ed:74:73:cc:0e:c8:88:4f:c9: bc:57:63:b3:e5:67:52:e6:33:2c:8e:b8:d8:59:f6: f2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B1:8E:20:B5:CC:13:E8:07:4C:D6:26:DD:70:EA:28:59:25:E9:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3f88eb45-1ebb-364d-9949-8283978277cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 204.156.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:8c:f2:59:74:43:06:70:59:f5:88:90:22:a5:6b:cb:89:51: bc:1d:c5:a2:63:de:34:48:8f:87:70:21:84:e6:ca:e3:e6:08: 7e:62:d5:74:ff:1e:41:50:ee:97:94:fb:76:65:3f:22:42:a0: f7:2e:f5:27:09:18:40:28:88:b3:85:7b:b1:58:cc:e1:64:94: 4f:09:05:f2:b0:f8:6e:b5:0e:7d:90:a7:79:10:2f:4c:d9:55: 09:90:b9:3a:c6:0c:fb:ff:83:9c:e7:27:18:8f:d1:51:6f:3f: 62:c7:de:61:26:f1:89:40:c7:d2:98:f2:25:cb:28:35:06:ba: 6c:3b:aa:ec:36:62:e8:f4:dd:fb:a3:80:5b:14:c0:c0:eb:c5: 9e:b4:3c:13:7d:63:ed:d6:67:b3:ac:f0:a2:66:af:06:2a:4f: 5f:1b:3f:22:8a:fd:a5:7f:a8:06:70:25:b3:94:62:4d:70:8f: 83:3f:d3:3a:0a:e4:b1:ce:96:fb:15:a7:74:10:0d:7d:66:bb: de:a3:47:d3:2a:4b:8b:b4:33:94:47:aa:25:be:78:04:71:c9: b3:d4:9a:a8:d3:12:10:0f:a5:5c:db:bf:2d:4d:82:32:08:ec: cb:0d:8f:68:5b:2a:a2:8d:7a:6b:2b:42:2e:a6:87:14:5f:c8: 3d:13:db:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlyIJBOicMj284AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk NjEyOTRlMzgtNGMxNC00ZTcwLThjM2YtZTZhMmU4NzM5ZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJUzkFzIxC3IyfinSz518c/YYnwPg9B7lhWN M4HdZQEGj5c2LAq/eT62yKQdUZFHZplbQtR0M//pZabbL7he8Zzh/RHVr1IUIvBI AUKgoMfw8H4JGPU/Ded+4vlM6OmAXXWvxQiyWvUukiTArgUlmz9injTNzt/z7ABt Lp2/5/Ecu07WH5kEjNzvzg423b4IQoueUMb8CqznMXwoFv7NEzclGXfJZmmtDvLP twxk+77YYWQaOaRc+kHLNx6jresdYv30HxX+KbsrCrxz4fFD3Gn2JyFFq5oi47ss GAVnNgmrYF/2JsftdHPMDsiIT8m8V2Oz5WdS5jMsjrjYWfbyqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqxjiC1zBPoB0zWJt1w6ihZJelgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvM2Y4OGViNDUtMWViYi0z NjRkLTk5NDktODI4Mzk3ODI3N2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaM8ll0QwZwWfWIkCKla8uJUbwdxaJj3jRIj4dwIYTmyuPmCH5i1XT/ HkFQ7peU+3ZlPyJCoPcu9ScJGEAoiLOFe7FYzOFklE8JBfKw+G61Dn2Qp3kQL0zZ VQmQuTrGDPv/g5znJxiP0VFvP2LH3mEm8YlAx9KY8iXLKDUGumw7quw2Yuj03fuj gFsUwMDrxZ60PBN9Y+3WZ7Os8KJmrwYqT18bPyKK/aV/qAZwJbOUYk1wj4M/0zoK 5LHOlvsVp3QQDX1mu96jR9MqS4u0M5RHqiW+eARxybPUmqjTEhAPpVzbvy1NgjII 7MsNj2hbKqKNemsrQi6mhxRfyD0T248= -----END CERTIFICATE-----Generated at Wed Aug 6 09:30:51 2025 by rpki-client