$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/689a175c-8139-38d7-8a6f-600b40ae21e3.roa File: 689a175c-8139-38d7-8a6f-600b40ae21e3.roa (raw, json) Hash identifier: 1NOH/2UVElJ7CmB7kB19d+61NKeRwBLCalEGwDsu/CU= Subject key identifier: FD:00:05:29:C8:50:EC:A9:A6:6C:E1:08:B1:D2:78:0F:8D:90:54:F8 Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F4328584AADF126D9D6A5302405997900 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/689a175c-8139-38d7-8a6f-600b40ae21e3.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 8014 IP address blocks: 204.236.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:26:d9:d6:a5:30:24:05:99:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=cfa95681-5f83-423a-85c2-6ce9200a6108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cc:84:b0:6c:39:cc:36:2b:f8:cd:ff:b9:8b: e7:58:04:a4:0d:ad:c5:35:08:d6:c7:17:ac:b6:49: a3:01:9a:cc:78:51:ec:87:0f:a9:fa:d3:cb:32:4c: a2:c4:1e:ed:de:0a:2b:14:8b:82:4f:ff:41:0a:d2: e6:9d:10:de:e0:c7:1e:19:d7:5c:61:d0:e4:66:08: 09:52:b9:1b:74:a9:59:2c:e5:a0:b6:46:d2:de:d3: 11:e1:46:2d:0e:04:fe:14:dc:65:65:31:f2:51:a7: 10:11:55:56:f3:3a:55:2e:0f:fd:68:b8:e1:f3:f9: 29:cf:2d:d6:83:69:57:15:02:ee:96:83:de:e6:92: 65:52:71:40:37:71:b7:7a:16:f8:47:27:c8:05:12: d9:44:87:44:99:7b:10:c2:70:87:0e:63:b8:37:c0: a9:88:23:0f:5e:2a:6a:ea:00:67:a8:54:cc:86:b6: 3a:56:f6:66:aa:4c:d4:f9:44:fe:cd:cb:52:70:f6: a1:d8:2e:98:40:a1:c0:aa:98:82:29:54:c8:9a:4a: a3:0e:8a:bf:07:26:34:6a:5d:80:9a:fc:18:03:2b: a9:20:c1:f0:66:80:ca:ff:6d:41:04:8e:c0:9a:dd: 64:49:4c:d6:21:ec:7d:51:ab:ac:69:8c:30:39:a9: e8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:00:05:29:C8:50:EC:A9:A6:6C:E1:08:B1:D2:78:0F:8D:90:54:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/689a175c-8139-38d7-8a6f-600b40ae21e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:9b:7d:e9:c4:39:e4:58:42:c3:38:ca:fa:c4:ce:ef:ee:74: fe:76:9f:4c:8a:18:93:9c:6b:7e:e3:b2:17:0c:8d:f9:8d:94: 5a:5a:11:6b:45:d4:ba:96:7a:e1:9a:a1:e7:c2:c5:5b:dd:5e: 6f:d4:7b:13:2b:c9:40:fc:4c:83:6c:9b:34:0c:5f:66:bf:f3: 8a:a9:99:76:e1:48:c7:d6:95:79:42:86:06:2e:ef:33:06:30: 1d:03:8c:e6:ee:f6:58:f9:55:57:6d:09:8a:f3:2a:71:fd:51: ce:1f:1b:29:07:31:d4:e3:c9:57:fc:aa:31:d9:27:6f:a8:9b: c4:c6:c1:ed:93:e8:44:1b:95:9b:7f:3d:ed:72:81:b5:cc:b4: 38:5d:73:83:a9:69:64:d2:6e:7a:01:db:bb:fb:a6:57:bd:65: 3d:b6:d5:96:73:71:ea:63:f9:47:36:dc:bb:e6:06:ac:a7:3a: 33:fe:8c:5b:02:32:a0:09:d6:b8:47:36:8e:8c:e1:0f:b1:a5: 9d:d3:2c:dc:d7:1e:bd:7c:08:81:7e:87:ed:58:cb:d7:11:98: a5:42:0a:10:69:99:ad:bb:9e:37:95:91:68:39:c4:b3:ba:32: 57:9e:75:e4:1f:1f:ae:ca:a3:ae:a4:e8:85:23:76:15:42:f1: 25:c1:75:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8SbZ1qUwJAWZeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk Y2ZhOTU2ODEtNWY4My00MjNhLTg1YzItNmNlOTIwMGE2MTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMyEsGw5zDYr+M3/uYvnWASkDa3FNQjWxxes tkmjAZrMeFHshw+p+tPLMkyixB7t3gorFIuCT/9BCtLmnRDe4MceGddcYdDkZggJ UrkbdKlZLOWgtkbS3tMR4UYtDgT+FNxlZTHyUacQEVVW8zpVLg/9aLjh8/kpzy3W g2lXFQLuloPe5pJlUnFAN3G3ehb4RyfIBRLZRIdEmXsQwnCHDmO4N8CpiCMPXipq 6gBnqFTMhrY6VvZmqkzU+UT+zctScPah2C6YQKHAqpiCKVTImkqjDoq/ByY0al2A mvwYAyupIMHwZoDK/21BBI7Amt1kSUzWIex9UausaYwwOanoKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0ABSnIUOyppmzhCLHSeA+NkFT4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvNjg5YTE3NWMtODEzOS0z OGQ3LThhNmYtNjAwYjQwYWUyMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOxYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2bfenEOeRYQsM4yvrEzu/udP52n0yKGJOca37jshcMjfmNlFpaEWtF 1LqWeuGaoefCxVvdXm/UexMryUD8TINsmzQMX2a/84qpmXbhSMfWlXlChgYu7zMG MB0DjObu9lj5VVdtCYrzKnH9Uc4fGykHMdTjyVf8qjHZJ2+om8TGwe2T6EQblZt/ Pe1ygbXMtDhdc4OpaWTSbnoB27v7ple9ZT221ZZzcepj+Uc23LvmBqynOjP+jFsC MqAJ1rhHNo6M4Q+xpZ3TLNzXHr18CIF+h+1Yy9cRmKVCChBpma27njeVkWg5xLO6 MleedeQfH67Ko66k6IUjdhVC8SXBdY0= -----END CERTIFICATE-----Generated at Mon Aug 4 16:09:07 2025 by rpki-client