$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/d4870908-1a75-3a92-bcc7-0281d31bc642.roa File: d4870908-1a75-3a92-bcc7-0281d31bc642.roa (raw, json) Hash identifier: bEr436r5DLJh1LQtd1H11w+5toe0nsOJCiIuRmgpGTA= Subject key identifier: 4D:A4:8A:07:2A:E6:06:7A:A6:80:A9:DE:78:4D:50:83:D8:F7:92:CC Certificate issuer: /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Certificate serial: 010D0C9F4328584A9A662CE067227AC04E62C700 Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/d4870908-1a75-3a92-bcc7-0281d31bc642.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 44431 IP address blocks: 204.8.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:2c:e0:67:22:7a:c0:4e:62:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=5d205e00-d2e6-434b-8faf-5d6c9997e78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:f6:61:b0:f2:be:22:08:82:47:e8:47:d9: fd:7a:68:fd:f1:95:0c:af:9e:9c:7f:91:ae:60:b2: a7:01:ca:e4:77:28:03:71:3a:0b:42:51:38:4d:0d: 34:0a:be:a9:41:61:e7:63:3e:5d:a2:2d:ff:45:ae: 16:d7:8f:71:ff:16:e1:95:92:7a:66:f3:7f:78:85: ba:c0:b4:60:02:0d:3a:7d:37:c1:e0:bc:9d:1e:50: db:ef:be:2c:a4:46:82:08:4a:2e:f5:68:f7:e6:71: 83:7b:a7:9c:75:d9:ca:dd:06:21:b7:6e:3e:53:2c: 5b:ed:46:20:d5:26:f7:e5:ca:2a:3e:91:80:4a:b1: d2:29:56:0e:c2:a1:b6:68:c6:88:e4:67:70:90:7e: e0:7b:ad:bb:95:eb:cd:c6:9f:37:de:6c:be:d3:0c: 7d:48:de:12:be:f2:bd:b3:82:88:74:b8:b6:03:5a: 1b:64:1d:e5:37:07:c5:37:5d:6a:97:2d:e1:ed:37: 3c:d3:01:9b:1d:34:b2:09:05:c7:d7:65:21:95:ad: ba:76:06:32:49:af:5f:f6:aa:75:c8:3f:62:43:75: ea:bc:30:ff:fb:cd:ba:e2:10:a4:5c:e2:57:3d:fc: ff:80:7f:2a:c2:e5:e1:8b:19:d3:f3:a5:a4:37:ba: 04:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A4:8A:07:2A:E6:06:7A:A6:80:A9:DE:78:4D:50:83:D8:F7:92:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/d4870908-1a75-3a92-bcc7-0281d31bc642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl X509v3 Authority Key Identifier: keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer sbgp-ipAddrBlock: critical IPv4: 204.8.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:4a:37:d0:21:6f:6e:00:34:26:ec:71:a4:2a:77:20:f7:82: 56:7f:9f:6c:6e:63:b9:71:0c:44:40:58:d8:93:69:c2:1b:f4: 78:ff:3f:25:d9:e8:e1:8c:7e:99:93:ce:96:43:3c:9f:7b:7b: 4c:46:49:0e:89:c9:bd:94:81:bf:63:d0:a5:a6:be:b1:e8:b9: ab:b2:c5:ae:ec:6a:2a:50:07:05:d4:c3:f6:7a:65:c4:4d:0c: 63:18:bb:ec:32:9b:9b:70:0c:2d:c2:17:d6:cf:3b:5b:80:6b: c8:a9:c2:58:a4:d4:f5:d2:41:c1:cb:cf:c7:c4:2f:ff:51:f2: e3:e9:c2:c5:26:ac:b5:15:6c:eb:1d:70:0c:79:e8:fd:b8:0e: c7:b3:b3:60:4a:ba:75:d3:83:1f:88:3f:cc:58:06:13:76:d1: b4:b5:12:69:62:2e:ca:4f:80:3e:7d:28:c2:a4:81:5d:0a:21: 86:5e:ea:9a:f7:6f:a7:92:6e:9f:df:19:e8:36:ee:b2:da:25: 98:7e:ea:33:c5:31:97:47:dc:2c:f7:3f:46:81:a6:13:fd:5a: 01:50:13:42:87:a4:82:1d:20:ec:95:19:f2:96:0a:05:32:4d: 30:32:84:42:8e:26:bb:f1:a7:b3:04:f1:e3:66:7b:2e:d5:2c: 23:02:d6:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZizgZyJ6wE5ixwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzNGY2OGItMmY3Zi00ZWYzLWJkZWUtNWEwZTJkNjhh MDNiMB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk NWQyMDVlMDAtZDJlNi00MzRiLThmYWYtNWQ2Yzk5OTdlNzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8L2YbDyviIIgkfoR9n9emj98ZUMr56cf5Gu YLKnAcrkdygDcToLQlE4TQ00Cr6pQWHnYz5doi3/Ra4W149x/xbhlZJ6ZvN/eIW6 wLRgAg06fTfB4LydHlDb774spEaCCEou9Wj35nGDe6ecddnK3QYht24+Uyxb7UYg 1Sb35coqPpGASrHSKVYOwqG2aMaI5GdwkH7ge627levNxp833my+0wx9SN4SvvK9 s4KIdLi2A1obZB3lNwfFN11qly3h7Tc80wGbHTSyCQXH12Uhla26dgYySa9f9qp1 yD9iQ3XqvDD/+8264hCkXOJXPfz/gH8qwuXhixnT86WkN7oEBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2kigcq5gZ6poCp3nhNUIPY95LMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0 ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBlMmQ2OGEwM2IvZDQ4NzA5MDgtMWE3NS0z YTkyLWJjYzctMDI4MWQzMWJjNjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMzNGY2OGItMmY3Zi00ZWYzLWJk ZWUtNWEwZTJkNjhhMDNiLzBjMzRmNjhiLTJmN2YtNGVmMy1iZGVlLTVhMGUyZDY4 YTAzYi5jcmwwHwYDVR0jBBgwFoAUGT96sPm60yA6FwWVB8+TKk6ScCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBl MmQ2OGEwM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhKN9Ahb24ANCbscaQqdyD3glZ/n2xuY7lxDERAWNiTacIb9Hj/PyXZ 6OGMfpmTzpZDPJ97e0xGSQ6Jyb2Ugb9j0KWmvrHouauyxa7saipQBwXUw/Z6ZcRN DGMYu+wym5twDC3CF9bPO1uAa8ipwlik1PXSQcHLz8fEL/9R8uPpwsUmrLUVbOsd cAx56P24Dsezs2BKunXTgx+IP8xYBhN20bS1EmliLspPgD59KMKkgV0KIYZe6pr3 b6eSbp/fGeg27rLaJZh+6jPFMZdH3Cz3P0aBphP9WgFQE0KHpIIdIOyVGfKWCgUy TTAyhEKOJrvxp7ME8eNmey7VLCMC1sM= -----END CERTIFICATE-----Generated at Sat Jul 26 11:28:10 2025 by rpki-client