$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa File: a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa (raw, json) Hash identifier: 4zKLVHNeCIiaQMo5ZW0HcyATpnw73tH+O8UcmOkaCNs= Subject key identifier: 8D:92:E6:94:85:44:42:2A:B5:58:C9:37:7B:BB:23:5F:C3:DB:C9:B7 Certificate issuer: /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Certificate serial: 010D0C9F4328584B1C36D2E88892C2EE72806900 Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 27313 IP address blocks: 204.79.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:d2:e8:88:92:c2:ee:72:80:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=c8a133a5-1abc-43e5-98c9-c521c29dbb12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1f:e9:b5:83:bc:8f:cb:82:55:6f:7d:f3:81: ff:6a:25:4f:ef:f4:c1:5a:77:47:7c:ea:ff:c7:52: bc:c2:94:c9:ea:dc:64:39:7f:16:74:1b:2b:10:ad: e2:c4:33:24:a8:c9:f1:b1:f6:91:43:4c:b2:2e:54: 54:ef:f7:4e:eb:ff:36:d5:d4:75:02:c0:1f:dd:f9: 29:4f:5c:0f:cf:99:cb:eb:cc:6f:7c:93:0f:be:44: 1d:16:f0:d3:94:da:99:27:b1:6b:94:40:b0:cf:77: c7:6d:b1:19:7e:90:70:2f:9d:cd:5d:f6:1d:10:a7: e5:f2:9b:8e:18:d5:9d:fa:05:56:16:10:2c:fd:ed: 2f:77:41:98:c2:8a:27:3d:f3:3a:6c:75:f1:d3:ad: b8:5f:a4:85:f4:5a:0c:6f:a9:cd:1d:c3:e1:b1:38: bd:74:c9:15:92:7e:d1:cb:9a:a5:89:a0:2e:53:d2: 8a:dd:98:7e:05:1c:3f:03:01:d2:ed:ad:b1:5c:9b: 7b:2f:bc:9e:ef:e0:ab:17:da:2a:07:5b:27:68:3b: cb:e8:53:df:c4:37:4d:2a:7a:fb:83:90:f7:3e:c1: 3d:b6:eb:56:c2:98:5e:e8:c6:1a:4e:e4:96:85:8d: 03:68:b3:10:cf:3b:37:18:92:1d:5a:e2:a7:d5:27: f9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:92:E6:94:85:44:42:2A:B5:58:C9:37:7B:BB:23:5F:C3:DB:C9:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl X509v3 Authority Key Identifier: keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer sbgp-ipAddrBlock: critical IPv4: 204.79.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:7a:c0:f5:01:c4:15:21:83:de:24:94:6f:6b:d9:89:cb:90: 22:8e:7b:88:a8:a1:3b:70:a2:2a:fd:0d:85:8c:58:2b:f5:84: 04:bf:40:45:fd:71:0c:22:83:c0:cc:34:4d:b9:4f:5f:31:a1: 69:fa:6f:5c:71:75:9f:5d:0d:38:07:cb:a9:64:1d:41:5b:2d: 04:c7:3c:4e:e8:80:de:d6:1e:7d:dc:af:72:41:82:56:f2:4a: fa:70:e0:b8:3f:fc:cf:0c:c8:5b:eb:25:28:06:2a:fc:8d:63: e2:bb:e8:be:18:9d:19:46:45:71:13:70:75:08:9a:d4:e1:52: 55:a5:15:73:45:31:cf:8c:bc:01:ed:a4:2b:f3:09:c6:05:e8: d2:c8:7c:03:92:7b:28:a9:e2:9c:e2:8b:53:e2:05:f1:73:9b: ea:cb:30:fb:4a:51:4c:e7:d4:d5:9f:77:72:f0:7f:0a:0e:f1: aa:1d:13:3e:48:d6:1d:b3:f5:d1:95:3f:7f:53:07:58:3f:ad: 67:cd:d0:73:65:40:94:74:f9:3b:96:f0:91:f4:9b:ef:de:59: c0:2f:a4:bf:cb:72:c3:4b:31:22:38:3b:75:51:69:3c:93:76: 98:ce:03:63:61:8b:20:3c:7c:fc:22:ee:1d:da:62:07:c0:ed: 01:87:06:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtLoiJLC7nKAaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxNGY4ZDctNTQwYi00YTRhLWI1YWUtMGFmMTQ3Zjdj MWU0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YzhhMTMzYTUtMWFiYy00M2U1LTk4YzktYzUyMWMyOWRiYjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx/ptYO8j8uCVW9984H/aiVP7/TBWndHfOr/ x1K8wpTJ6txkOX8WdBsrEK3ixDMkqMnxsfaRQ0yyLlRU7/dO6/821dR1AsAf3fkp T1wPz5nL68xvfJMPvkQdFvDTlNqZJ7FrlECwz3fHbbEZfpBwL53NXfYdEKfl8puO GNWd+gVWFhAs/e0vd0GYwoonPfM6bHXx0624X6SF9FoMb6nNHcPhsTi9dMkVkn7R y5qliaAuU9KK3Zh+BRw/AwHS7a2xXJt7L7ye7+CrF9oqB1snaDvL6FPfxDdNKnr7 g5D3PsE9tutWwphe6MYaTuSWhY0DaLMQzzs3GJIdWuKn1Sf5OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2S5pSFREIqtVjJN3u7I1/D28m3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0 ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYxNDdmN2MxZTQvYTIzZjhiNTQtNGE3MS0z YjBmLTkyYTEtMmFmNzNjYzI0MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGYxNGY4ZDctNTQwYi00YTRhLWI1 YWUtMGFmMTQ3ZjdjMWU0LzhmMTRmOGQ3LTU0MGItNGE0YS1iNWFlLTBhZjE0N2Y3 YzFlNC5jcmwwHwYDVR0jBBgwFoAUT0s4jV9dhOfRkQSO1EfrBXSzPhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYx NDdmN2MxZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE+MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEl6wPUBxBUhg94klG9r2YnLkCKOe4iooTtwoir9DYWMWCv1hAS/QEX9 cQwig8DMNE25T18xoWn6b1xxdZ9dDTgHy6lkHUFbLQTHPE7ogN7WHn3cr3JBglby Svpw4Lg//M8MyFvrJSgGKvyNY+K76L4YnRlGRXETcHUImtThUlWlFXNFMc+MvAHt pCvzCcYF6NLIfAOSeyip4pzii1PiBfFzm+rLMPtKUUzn1NWfd3LwfwoO8aodEz5I 1h2z9dGVP39TB1g/rWfN0HNlQJR0+TuW8JH0m+/eWcAvpL/LcsNLMSI4O3VRaTyT dpjOA2NhiyA8fPwi7h3aYgfA7QGHBuY= -----END CERTIFICATE-----Generated at Wed Oct 8 23:12:18 2025 by rpki-client