$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/cf946ccd-298e-3852-a04f-6a34b0aec559.roa File: cf946ccd-298e-3852-a04f-6a34b0aec559.roa (raw, json) Hash identifier: fUjdx3bEmsHZMukwGFdl2wgmlfnqba2gtYCLoLpu/90= Subject key identifier: AF:AC:01:E6:9D:F0:82:62:4B:9B:8C:5C:66:73:B9:9A:F5:21:8B:3A Certificate issuer: /CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51 Certificate serial: 010D0C9F4328584AB91B8BE63A6D53179C883A00 Authority key identifier: 1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/cf946ccd-298e-3852-a04f-6a34b0aec559.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 395823 IP address blocks: 205.201.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:8b:e6:3a:6d:53:17:9c:88:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=fb63f174-3d50-441f-8eac-c959f7816ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2c:72:fb:70:dd:de:8e:6b:dd:38:4c:40:bf: 80:2f:57:4b:5c:cf:d6:d0:3a:ec:ee:9a:39:5d:d8: 59:97:37:4c:63:ce:89:e3:47:9d:f0:98:63:3e:5d: 5d:8c:03:b6:ae:db:6f:53:d8:ff:3e:3b:5d:91:07: 36:b1:7b:d3:18:53:be:4d:3d:d9:8a:c9:d6:56:28: 87:b9:8a:d5:d9:e6:7f:70:35:ab:02:de:f3:ad:4e: ab:83:6f:bb:4f:92:23:88:f4:b7:87:ec:08:48:8a: e0:87:fe:ed:ca:2a:23:93:e4:76:ea:94:52:2a:da: 7c:13:18:9b:47:e0:35:db:cc:65:e6:8c:e1:9f:d4: 7f:63:34:1d:73:58:b3:1e:75:d2:c2:bc:61:2c:fc: c4:4e:f5:7c:12:07:f6:d0:f6:5a:a4:6e:c0:97:f0: 43:17:06:bb:3c:98:48:5e:cb:16:24:63:99:d4:69: 8e:ff:a0:d3:28:ec:30:6a:7b:25:84:ff:79:d2:f0: 02:05:f7:77:c8:bc:cb:b9:b6:74:0d:fd:e9:08:82: 52:bc:c2:68:d2:fb:a3:0d:fe:35:ab:84:8c:7c:f9: c2:b2:40:1b:38:db:0f:52:2d:8a:00:0e:22:32:1d: 7f:83:9a:07:ee:ed:07:c1:77:83:6a:15:ef:78:0a: c1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AC:01:E6:9D:F0:82:62:4B:9B:8C:5C:66:73:B9:9A:F5:21:8B:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/cf946ccd-298e-3852-a04f-6a34b0aec559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl X509v3 Authority Key Identifier: keyid:1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer sbgp-ipAddrBlock: critical IPv4: 205.201.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:7c:03:bf:2a:4f:b7:02:69:d2:63:0b:b6:1a:47:06:0f:aa: 8c:7a:cd:e3:da:14:54:c6:a8:68:16:7b:9c:6a:9d:9c:fe:38: d7:c5:c0:c0:84:fa:4d:d4:3d:20:82:28:2f:b3:40:f6:2c:e2: 0f:98:f5:f3:0b:d0:29:c6:6e:b9:82:ab:ae:4b:21:10:08:b0: 2d:2f:57:a9:a3:5a:39:25:e6:ad:1c:80:d7:a4:e6:e1:7e:a3: 24:06:83:33:d5:bf:07:e4:08:11:53:29:04:35:01:c3:17:93: 10:86:e0:da:1b:06:75:01:f8:1b:bf:d2:2a:c8:d6:83:da:c1: 1a:fc:b0:21:1f:d9:42:2a:3d:f0:e7:8e:63:22:95:4d:ab:c6: b6:b8:c3:3d:57:3e:0c:1b:1c:55:a3:46:2c:b4:93:67:8d:ca: 7b:ec:72:2f:94:3c:a5:9b:a4:dc:fe:7d:54:63:91:c9:df:c6: 0b:85:5d:13:97:66:57:12:bb:1a:2b:30:f5:65:1c:1f:16:56: b1:ba:9c:7a:93:33:f7:94:ed:9e:38:02:9d:8d:e8:67:99:16: 86:3a:8d:b5:67:e5:bf:61:c4:f6:c0:f1:c2:f0:04:24:cc:23: 8c:ba:eb:59:35:87:af:79:59:db:f3:4f:72:be:e4:47:17:b1: 8d:e7:48:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G4vmOm1TF5yIOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE0ZTVlNjctNDE2MS00YTJkLWJkNzMtMmRlYjVmMWQ4 ZjUxMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZmI2M2YxNzQtM2Q1MC00NDFmLThlYWMtYzk1OWY3ODE2ZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCxy+3Dd3o5r3ThMQL+AL1dLXM/W0Drs7po5 XdhZlzdMY86J40ed8JhjPl1djAO2rttvU9j/PjtdkQc2sXvTGFO+TT3ZisnWViiH uYrV2eZ/cDWrAt7zrU6rg2+7T5IjiPS3h+wISIrgh/7tyiojk+R26pRSKtp8Exib R+A128xl5ozhn9R/YzQdc1izHnXSwrxhLPzETvV8Egf20PZapG7Al/BDFwa7PJhI XssWJGOZ1GmO/6DTKOwwanslhP950vACBfd3yLzLubZ0Df3pCIJSvMJo0vujDf41 q4SMfPnCskAbONsPUi2KAA4iMh1/g5oH7u0HwXeDahXveArBWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+sAead8IJiS5uMXGZzuZr1IYs6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMTRl NWU2Ny00MTYxLTRhMmQtYmQ3My0yZGViNWYxZDhmNTEvY2Y5NDZjY2QtMjk4ZS0z ODUyLWEwNGYtNmEzNGIwYWVjNTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE0ZTVlNjctNDE2MS00YTJkLWJk NzMtMmRlYjVmMWQ4ZjUxL2UxNGU1ZTY3LTQxNjEtNGEyZC1iZDczLTJkZWI1ZjFk OGY1MS5jcmwwHwYDVR0jBBgwFoAUG9dxIb6YBpSp8yztchxJVEi+aecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMTRlNWU2Ny00MTYxLTRhMmQtYmQ3My0yZGVi NWYxZDhmNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzck/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN8A78qT7cCadJjC7YaRwYPqox6zePaFFTGqGgWe5xqnZz+ONfFwMCE +k3UPSCCKC+zQPYs4g+Y9fML0CnGbrmCq65LIRAIsC0vV6mjWjkl5q0cgNek5uF+ oyQGgzPVvwfkCBFTKQQ1AcMXkxCG4NobBnUB+Bu/0irI1oPawRr8sCEf2UIqPfDn jmMilU2rxra4wz1XPgwbHFWjRiy0k2eNynvsci+UPKWbpNz+fVRjkcnfxguFXROX ZlcSuxorMPVlHB8WVrG6nHqTM/eU7Z44Ap2N6GeZFoY6jbVn5b9hxPbA8cLwBCTM I4y661k1h695WdvzT3K+5EcXsY3nSDc= -----END CERTIFICATE-----Generated at Mon Aug 4 18:33:32 2025 by rpki-client