$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/26239fe9-1b4c-309b-baa7-62dcf11a0892.roa File: 26239fe9-1b4c-309b-baa7-62dcf11a0892.roa (raw, json) Hash identifier: GGcX0IufdvIat9W3KQdMmJPC9a/fhr2556fB2fSn5gw= Subject key identifier: 6B:47:F4:0F:F3:08:F8:E5:74:BA:EB:3A:E5:E2:E9:75:26:F3:2F:F8 Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Certificate serial: 010D0C9F4328584A612B0D1AE2C36D4E10C76900 Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/26239fe9-1b4c-309b-baa7-62dcf11a0892.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 40805 IP address blocks: 108.161.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:0d:1a:e2:c3:6d:4e:10:c7:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=3dd9a246-5265-443e-8f17-243512cbf33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e3:64:f6:90:e0:1c:87:74:c3:4b:a4:8c:56: 58:51:b8:01:77:6a:6f:15:69:02:cb:c4:17:b3:28: 2f:9a:40:4f:6b:a1:67:a8:45:a4:f0:13:ef:60:97: 3c:98:9d:60:36:21:0e:f4:eb:2d:15:18:7b:bb:78: eb:93:06:0e:c2:03:ba:1c:4e:ba:6d:bf:e2:56:96: 87:10:13:4d:91:57:74:eb:16:28:33:47:79:e7:68: 38:04:99:06:4b:c5:9f:49:68:2a:ce:b5:36:af:2b: 51:7e:6f:2d:ee:7d:09:10:a8:e1:5c:dd:7c:16:17: a3:b9:d6:8b:e6:44:d4:66:4a:6d:2e:11:9f:f9:e5: 04:d1:0e:16:09:7e:30:98:65:45:e5:b0:29:06:5a: 66:20:b6:41:60:5e:39:15:45:23:19:61:22:00:9d: 11:2d:cf:82:23:9a:9b:e5:a3:c5:7e:7d:b6:46:e6: c0:10:f9:08:c0:cc:15:ce:02:83:7c:9c:66:b2:4f: fc:3b:9d:be:51:ef:fd:9e:67:6d:1c:5f:0f:67:b0: 38:57:17:f8:92:e5:0a:d0:21:51:bd:5f:78:e8:73: f7:f1:b4:d9:79:a0:4c:d4:c5:56:55:b4:6e:ed:e5: c8:d3:5d:39:7a:e2:18:c7:05:4a:33:66:11:dd:dd: bf:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:47:F4:0F:F3:08:F8:E5:74:BA:EB:3A:E5:E2:E9:75:26:F3:2F:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/26239fe9-1b4c-309b-baa7-62dcf11a0892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl X509v3 Authority Key Identifier: keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer sbgp-ipAddrBlock: critical IPv4: 108.161.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:3d:11:a1:9e:69:d8:62:7c:33:3e:0e:9c:a4:2e:95:d0:86: ab:90:83:e3:66:04:31:73:d5:d2:e2:d4:e5:15:24:53:b2:f1: a7:2b:f7:5c:5e:f0:5b:fb:04:6f:e9:92:95:a6:30:88:c3:4a: 6e:5d:93:64:26:9b:d3:44:ba:20:a5:3e:fa:9f:4e:bf:32:1f: d0:46:73:92:65:ad:c8:d7:48:98:42:2b:2a:f5:73:78:04:19: 82:47:ee:8b:b5:3f:0c:9c:ae:b3:d1:6b:de:23:4c:05:ca:7d: 40:ae:8f:d2:24:0c:70:f1:46:b8:bb:01:04:07:86:d9:5a:0d: be:4f:29:42:17:aa:e6:a7:30:42:2f:db:9b:78:f3:5e:81:78: 1c:d0:0a:76:81:2a:88:ee:79:12:00:d4:57:85:4d:83:f5:e9: 7c:5c:cb:54:14:73:aa:e9:bc:35:3e:fe:4b:92:fe:c2:ad:80: fa:b1:17:09:a2:42:8b:af:18:cf:08:db:b7:65:dc:9d:32:40: 46:7d:22:40:bf:e5:a6:55:1c:34:39:c7:9e:ce:c6:ac:44:3f: 39:72:76:6a:3e:56:3f:6e:23:3e:b6:41:3e:bb:35:e6:53:05: 1e:77:fc:43:0a:46:5b:e7:7c:5d:33:de:b6:13:34:91:19:02: 04:33:d5:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKw0a4sNtThDHaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk ZjY2MB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk M2RkOWEyNDYtNTI2NS00NDNlLThmMTctMjQzNTEyY2JmMzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgONk9pDgHId0w0ukjFZYUbgBd2pvFWkCy8QX sygvmkBPa6FnqEWk8BPvYJc8mJ1gNiEO9OstFRh7u3jrkwYOwgO6HE66bb/iVpaH EBNNkVd06xYoM0d552g4BJkGS8WfSWgqzrU2rytRfm8t7n0JEKjhXN18FhejudaL 5kTUZkptLhGf+eUE0Q4WCX4wmGVF5bApBlpmILZBYF45FUUjGWEiAJ0RLc+CI5qb 5aPFfn22RubAEPkIwMwVzgKDfJxmsk/8O52+Ue/9nmdtHF8PZ7A4Vxf4kuUK0CFR vV946HP38bTZeaBM1MVWVbRu7eXI0105euIYxwVKM2YR3d2/4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtH9A/zCPjldLrrOuXi6XUm8y/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvMjYyMzlmZTktMWI0Yy0z MDliLWJhYTctNjJkY2YxMWEwODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5 ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3 NGQ0OWRmNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbKHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABE9EaGeadhifDM+DpykLpXQhquQg+NmBDFz1dLi1OUVJFOy8acr91xe 8Fv7BG/pkpWmMIjDSm5dk2Qmm9NEuiClPvqfTr8yH9BGc5JlrcjXSJhCKyr1c3gE GYJH7ou1PwycrrPRa94jTAXKfUCuj9IkDHDxRri7AQQHhtlaDb5PKUIXquanMEIv 25t4816BeBzQCnaBKojueRIA1FeFTYP16Xxcy1QUc6rpvDU+/kuS/sKtgPqxFwmi QouvGM8I27dl3J0yQEZ9IkC/5aZVHDQ5x57OxqxEPzlydmo+Vj9uIz62QT67NeZT BR53/EMKRlvnfF0z3rYTNJEZAgQz1SE= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:08 2025 by rpki-client