$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa File: ca248d62-3f50-35a2-9999-0258d4f72f02.roa (raw, json) Hash identifier: fzn6NkFVL962s6yF0LGAoO7ApU5BVv57NFP2AUYIa10= Subject key identifier: FF:81:87:5C:BD:9A:65:6F:AF:70:DC:AE:CE:99:73:BF:9B:0F:A7:4B Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F4328584ABD4BA3C6FC4911CE64E1F50C Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 8014 IP address blocks: 204.236.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:a3:c6:fc:49:11:ce:64:e1:f5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=5676fa80-6abc-415e-914f-e5537c90160d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5a:b9:10:ac:d9:11:1e:71:99:b8:3b:a9:42: 80:2a:6a:ea:fc:ad:c8:58:61:52:7f:73:b7:24:c3: f3:6e:1d:6e:5f:3e:0b:a6:15:0a:4d:83:0e:48:69: 3a:f7:df:b9:fb:9c:7c:6a:79:c3:c9:d7:83:4e:c5: e0:87:f4:1d:fb:37:b6:bf:08:95:9a:a4:c9:2f:c8: c0:4c:57:88:90:7a:d2:40:12:ff:7f:51:c5:9a:bc: 1f:58:a7:b4:9c:3f:35:5c:61:72:d7:a8:82:6e:cc: 7e:ed:9a:8f:61:01:16:7c:2a:49:20:18:b6:5f:57: 95:2b:a5:c3:74:a9:83:c0:8a:e5:98:09:4b:87:5f: 4a:3d:42:55:88:2f:59:0c:61:cf:2c:cc:5c:55:74: da:5b:66:1e:4f:14:b1:8a:b6:c4:f5:76:2f:dc:da: 4a:1c:74:4e:25:b3:3c:e1:4b:72:46:40:fc:79:b8: dd:78:ce:b5:1c:3c:33:05:6e:bc:ee:36:81:31:25: b8:ce:10:21:38:8d:12:22:ad:f1:95:d5:f9:ee:be: 97:04:55:3b:c0:ac:e4:60:7e:b9:45:4c:cc:70:a8: c5:a9:a4:62:f7:01:d3:70:9a:f7:d5:cb:65:dc:68: 0e:65:06:10:e3:dc:8f:d2:cf:76:e3:3d:3e:33:67: 15:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:81:87:5C:BD:9A:65:6F:AF:70:DC:AE:CE:99:73:BF:9B:0F:A7:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:d3:36:10:b7:06:f4:7f:98:35:9b:4d:12:98:60:32:d8:13: 50:2e:f7:6a:b4:a9:a2:23:db:f5:97:cf:b4:5b:d6:b4:9b:0f: 06:56:ec:a6:82:d3:5c:59:97:c3:a9:5d:c4:0a:b3:af:b9:7e: aa:c8:d4:c8:81:30:e3:21:b1:29:0d:b4:97:28:12:55:15:1f: b5:89:2f:8b:24:da:b6:05:85:ac:68:bb:32:c6:a8:03:fc:93: 55:99:d3:2e:0a:db:03:d3:33:4e:4c:5b:3e:a1:2b:e7:e6:b9: d4:78:e1:76:6d:f8:27:89:62:c4:df:03:54:4a:13:d8:69:f3: a8:1b:d5:99:d7:5b:d8:ce:55:11:1f:da:d0:70:4e:df:d1:04: 4f:a7:e1:1d:55:45:a3:7e:22:61:39:89:ba:34:0e:41:27:b4: 6c:87:32:d2:db:69:62:0e:ac:18:c6:ea:59:bc:b9:08:89:d9: 70:f7:70:46:de:1d:11:94:f4:8c:d6:2d:a6:c6:d7:e5:74:49: 34:af:f8:41:41:3d:6d:0e:08:61:8f:aa:9b:b8:b6:71:af:e1: 16:c1:7b:cb:00:38:a9:03:a8:5f:66:a8:2d:65:d6:97:ff:61: bc:04:bd:a8:5c:53:a0:69:d3:8b:ec:3e:21:05:ab:c0:80:81: 76:4a:06:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S6PG/EkRzmTh9QwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk NTY3NmZhODAtNmFiYy00MTVlLTkxNGYtZTU1MzdjOTAxNjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlq5EKzZER5xmbg7qUKAKmrq/K3IWGFSf3O3 JMPzbh1uXz4LphUKTYMOSGk699+5+5x8annDydeDTsXgh/Qd+ze2vwiVmqTJL8jA TFeIkHrSQBL/f1HFmrwfWKe0nD81XGFy16iCbsx+7ZqPYQEWfCpJIBi2X1eVK6XD dKmDwIrlmAlLh19KPUJViC9ZDGHPLMxcVXTaW2YeTxSxirbE9XYv3NpKHHROJbM8 4UtyRkD8ebjdeM61HDwzBW687jaBMSW4zhAhOI0SIq3xldX57r6XBFU7wKzkYH65 RUzMcKjFqaRi9wHTcJr31ctl3GgOZQYQ49yP0s924z0+M2cVrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+Bh1y9mmVvr3Dcrs6Zc7+bD6dLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvY2EyNDhkNjItM2Y1MC0z NWEyLTk5OTktMDI1OGQ0ZjcyZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzTNhC3BvR/mDWbTRKYYDLYE1Au92q0qaIj2/WXz7Rb1rSbDwZW7KaC 01xZl8OpXcQKs6+5fqrI1MiBMOMhsSkNtJcoElUVH7WJL4sk2rYFhaxouzLGqAP8 k1WZ0y4K2wPTM05MWz6hK+fmudR44XZt+CeJYsTfA1RKE9hp86gb1ZnXW9jOVREf 2tBwTt/RBE+n4R1VRaN+ImE5ibo0DkEntGyHMtLbaWIOrBjG6lm8uQiJ2XD3cEbe HRGU9IzWLabG1+V0STSv+EFBPW0OCGGPqpu4tnGv4RbBe8sAOKkDqF9mqC1l1pf/ YbwEvahcU6Bp04vsPiEFq8CAgXZKBrU= -----END CERTIFICATE-----Generated at Wed Aug 6 00:56:03 2025 by rpki-client