$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/c04562b5-288e-3c36-874e-4a12e968ed8f.roa File: c04562b5-288e-3c36-874e-4a12e968ed8f.roa (raw, json) Hash identifier: twCKZRDKBE5scVigwPg+PVfDfdzsRxaM3RdPh+qiT3I= Subject key identifier: 05:38:CB:9B:40:BF:C9:71:45:C1:35:16:40:FB:F8:ED:13:82:F0:82 Certificate issuer: /CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee Certificate serial: 010D0C9F4328584B2CF718D356064369C7362568 Authority key identifier: EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/c04562b5-288e-3c36-874e-4a12e968ed8f.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 18540 IP address blocks: 204.14.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f7:18:d3:56:06:43:69:c7:36:25:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=c161bd06-bee2-4b91-9498-6035a8185edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:19:44:de:16:af:77:09:96:b7:05:cf:fd:3d: 43:f8:3e:20:39:ea:40:9d:c6:4f:45:d2:ee:c3:f9: a2:d4:a7:ff:ba:a5:df:84:fb:b7:50:62:15:c6:4b: 24:4f:6d:de:12:56:0d:3f:f0:ae:00:18:9c:41:bd: bb:3d:aa:fd:09:55:83:46:5b:a1:ba:d1:96:d8:d5: de:d3:41:30:d9:91:57:4e:ca:b7:d3:fc:f4:eb:c4: 9a:43:52:d1:c7:59:1c:b2:33:8c:6d:7c:b4:9a:57: db:79:d3:50:c5:42:2b:bc:20:9d:3b:63:96:f2:50: 80:5b:39:f5:73:f1:2e:14:7b:56:cc:a9:f4:41:ec: fa:97:1c:b3:e1:1c:8b:bd:ce:fd:d7:6d:26:ab:f6: d0:0c:5e:03:ea:bf:19:18:eb:5b:75:09:01:1c:da: 70:84:fe:43:2f:81:e2:8d:da:e7:85:6b:85:5b:72: f4:0a:4d:92:21:99:e7:8c:7c:c6:27:85:6d:89:7a: 4b:c1:67:3c:7c:84:27:86:92:41:56:45:bd:a0:47: b4:2e:04:a9:fc:76:b1:4d:9a:34:d5:ac:11:3e:7e: 50:64:44:39:f5:4a:b7:b5:7a:da:4a:6a:61:89:56: 97:da:51:9a:27:fd:1c:d6:88:51:ee:d7:ac:b1:22: 15:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:38:CB:9B:40:BF:C9:71:45:C1:35:16:40:FB:F8:ED:13:82:F0:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/c04562b5-288e-3c36-874e-4a12e968ed8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl X509v3 Authority Key Identifier: keyid:EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer sbgp-ipAddrBlock: critical IPv4: 204.14.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:b7:1b:22:3e:02:5e:9d:e9:e3:ef:31:12:77:37:b5:17:59: 83:44:27:08:7a:2f:d0:a0:bc:6b:0b:af:5c:83:7e:b6:7b:eb: 31:8d:cc:5d:fa:88:ae:29:51:1e:25:4a:0b:11:6b:68:a8:1f: 68:f8:f3:62:fe:fc:db:7a:f0:15:55:18:cd:e7:f0:32:2c:86: 7d:f1:3c:30:e8:80:1d:2b:8e:f8:00:a4:fa:ba:17:bb:94:52: 07:4f:d8:9c:70:d8:7e:09:4c:be:d6:18:05:f2:6f:ee:91:17: b9:49:af:c7:a8:d7:66:c9:71:c1:c4:73:06:48:63:2a:8d:a3: 37:9c:a4:ce:d8:f6:f1:1d:29:22:f4:93:43:23:f1:6c:b1:71: 4d:b5:fa:4a:2d:1d:61:a2:fc:b4:88:6b:84:10:e3:6e:c5:6a: de:a3:31:15:23:d3:74:59:0a:59:72:8a:f2:87:8a:05:17:cb: 38:62:c7:10:b8:05:54:d8:0d:22:fb:6d:2c:07:72:f8:51:33: 1f:93:55:48:d7:8f:1e:dd:9d:92:64:d4:51:40:07:da:36:24: b7:29:05:3c:8f:bb:6c:7c:fd:5f:b0:3e:87:8a:4a:4f:3f:21: 3a:8e:7e:1d:66:d8:43:93:99:63:f0:78:e9:50:c5:21:f4:17: 47:53:84:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9xjTVgZDacc2JWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QwMDE5OGYtYTUzMC00OTBjLThlZjUtNWMzMWFjOWI4 OGVlMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk YzE2MWJkMDYtYmVlMi00YjkxLTk0OTgtNjAzNWE4MTg1ZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhlE3havdwmWtwXP/T1D+D4gOepAncZPRdLu w/mi1Kf/uqXfhPu3UGIVxkskT23eElYNP/CuABicQb27Par9CVWDRluhutGW2NXe 00Ew2ZFXTsq30/z068SaQ1LRx1kcsjOMbXy0mlfbedNQxUIrvCCdO2OW8lCAWzn1 c/EuFHtWzKn0Qez6lxyz4RyLvc79120mq/bQDF4D6r8ZGOtbdQkBHNpwhP5DL4Hi jdrnhWuFW3L0Ck2SIZnnjHzGJ4VtiXpLwWc8fIQnhpJBVkW9oEe0LgSp/HaxTZo0 1awRPn5QZEQ59Uq3tXraSmphiVaX2lGaJ/0c1ohR7tessSIVnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAU4y5tAv8lxRcE1FkD7+O0TgvCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDAw MTk4Zi1hNTMwLTQ5MGMtOGVmNS01YzMxYWM5Yjg4ZWUvYzA0NTYyYjUtMjg4ZS0z YzM2LTg3NGUtNGExMmU5NjhlZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2QwMDE5OGYtYTUzMC00OTBjLThl ZjUtNWMzMWFjOWI4OGVlL2NkMDAxOThmLWE1MzAtNDkwYy04ZWY1LTVjMzFhYzli ODhlZS5jcmwwHwYDVR0jBBgwFoAU7rLnVBdOMcl6DRXlckVdZx3zkr8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZDAwMTk4Zi1hNTMwLTQ5MGMtOGVmNS01YzMx YWM5Yjg4ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA6EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+3GyI+Al6d6ePvMRJ3N7UXWYNEJwh6L9CgvGsLr1yDfrZ76zGNzF36 iK4pUR4lSgsRa2ioH2j482L+/Nt68BVVGM3n8DIshn3xPDDogB0rjvgApPq6F7uU UgdP2Jxw2H4JTL7WGAXyb+6RF7lJr8eo12bJccHEcwZIYyqNozecpM7Y9vEdKSL0 k0Mj8WyxcU21+kotHWGi/LSIa4QQ427Fat6jMRUj03RZCllyivKHigUXyzhixxC4 BVTYDSL7bSwHcvhRMx+TVUjXjx7dnZJk1FFAB9o2JLcpBTyPu2x8/V+wPoeKSk8/ ITqOfh1m2EOTmWPweOlQxSH0F0dThC0= -----END CERTIFICATE-----Generated at Sat Oct 11 02:59:00 2025 by rpki-client