$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/168f3620-15b5-32f3-aef4-e2de2ba149c4.roa File: 168f3620-15b5-32f3-aef4-e2de2ba149c4.roa (raw, json) Hash identifier: B5f1EYxuniAB4iMCLfqfnzpi8qhM7qQ1mSto/N2O+ZI= Subject key identifier: 20:3F:8E:75:38:61:50:8A:CF:42:2A:A4:3D:0D:F4:23:2D:90:7A:F0 Certificate issuer: /CN=cb079463-85da-4da7-b699-7f92f9faff04 Certificate serial: 010D0C9F4328584A5FC5E0FDAF94311C29F2A6E0 Authority key identifier: 90:19:F1:21:95:02:6C:A1:2B:92:FF:1C:49:51:AC:D2:F8:7D:97:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/168f3620-15b5-32f3-aef4-e2de2ba149c4.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 397251 IP address blocks: 205.166.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/cb079463-85da-4da7-b699-7f92f9faff04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/cb079463-85da-4da7-b699-7f92f9faff04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e0:fd:af:94:31:1c:29:f2:a6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb079463-85da-4da7-b699-7f92f9faff04 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=40a7bd04-42f8-4540-97a7-87c55b103418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8e:cc:65:69:84:1d:c2:46:b3:2d:d5:7f:1c: 67:32:ac:fc:dc:ed:cc:b4:17:21:6a:eb:21:81:82: 00:28:ea:e6:f7:b3:e9:c9:46:54:4f:a3:2e:c9:6d: 0f:ed:8f:d2:18:d7:ef:0c:08:79:4c:92:18:4a:09: ae:7a:ab:63:7c:16:ac:7d:22:19:25:a4:ac:9d:72: 91:b9:2f:bf:c4:40:0f:37:ae:45:06:66:71:3b:a6: 25:79:c4:86:33:30:76:51:e0:62:52:40:a0:33:21: aa:11:93:03:09:19:97:7b:ee:d1:01:ff:ab:8d:d5: 81:41:18:4e:eb:95:f8:b6:90:75:b8:26:29:0d:e4: d5:0a:65:a6:57:49:66:24:64:ef:32:1f:97:62:f2: b7:47:59:50:24:8c:26:a1:f7:77:66:53:45:44:ef: 29:ce:4b:4a:c2:90:ce:48:b9:61:6a:85:46:1e:57: fb:35:46:08:27:2c:b1:79:71:38:2e:9b:5d:d7:77: 29:fa:d8:94:48:a1:b1:e7:f8:ad:01:e0:24:08:f0: 7e:aa:78:ba:db:ce:f8:4c:9f:88:b9:81:b4:54:4a: 43:d5:f7:66:3c:be:6a:86:6b:e1:1e:84:d7:fb:b0: c0:1b:38:0a:53:51:52:cb:b4:6b:9a:61:05:6d:3c: ea:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3F:8E:75:38:61:50:8A:CF:42:2A:A4:3D:0D:F4:23:2D:90:7A:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/168f3620-15b5-32f3-aef4-e2de2ba149c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/cb079463-85da-4da7-b699-7f92f9faff04.crl X509v3 Authority Key Identifier: keyid:90:19:F1:21:95:02:6C:A1:2B:92:FF:1C:49:51:AC:D2:F8:7D:97:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04.cer sbgp-ipAddrBlock: critical IPv4: 205.166.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:fc:fd:09:5d:8a:7a:0f:8e:f5:d6:72:87:27:0a:88:76:12: d4:d0:b9:c6:4a:fd:b5:07:a4:a2:29:ba:4b:08:8a:c2:a7:9a: 37:7b:dd:c4:62:96:8f:96:b3:32:1b:52:9b:a0:0e:00:24:20: 18:74:d4:fc:1e:87:c8:6b:15:d1:11:5c:c2:c0:e2:11:c1:42: 3f:e4:b7:ca:b8:4d:5f:20:6e:e1:5c:a2:5a:9e:59:b1:1b:13: 94:8d:c3:ac:ac:f7:3e:83:7e:b2:88:66:b2:51:60:23:1a:85: 00:9b:3a:81:3c:49:ea:aa:c8:f4:01:35:1e:74:af:8a:64:7f: 61:53:f3:13:84:94:f1:3d:c2:6e:d8:ca:86:c1:4c:06:a5:30: 1a:cc:55:97:3b:28:3d:57:9d:c7:dd:3c:fe:03:e7:3f:f7:6e: d4:fc:0a:65:15:00:16:0b:d1:7f:ba:b7:bd:d5:68:fa:89:00: 59:e3:fb:86:3f:b6:e6:bf:18:92:4a:e7:2e:95:1c:80:5a:b3: 2e:5f:43:95:e3:5f:e1:81:89:34:30:d4:33:dc:cc:41:e9:67: ba:4c:06:e1:c4:e4:86:8a:32:10:8a:56:fd:42:c7:ff:80:32: b0:4e:cb:06:17:44:1f:1e:77:d0:a3:51:b1:5f:8c:9a:d8:0c: 64:e4:c6:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxeD9r5QxHCnypuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwNzk0NjMtODVkYS00ZGE3LWI2OTktN2Y5MmY5ZmFm ZjA0MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk NDBhN2JkMDQtNDJmOC00NTQwLTk3YTctODdjNTViMTAzNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw47MZWmEHcJGsy3VfxxnMqz83O3MtBchaush gYIAKOrm97PpyUZUT6MuyW0P7Y/SGNfvDAh5TJIYSgmueqtjfBasfSIZJaSsnXKR uS+/xEAPN65FBmZxO6YlecSGMzB2UeBiUkCgMyGqEZMDCRmXe+7RAf+rjdWBQRhO 65X4tpB1uCYpDeTVCmWmV0lmJGTvMh+XYvK3R1lQJIwmofd3ZlNFRO8pzktKwpDO SLlhaoVGHlf7NUYIJyyxeXE4Lptd13cp+tiUSKGx5/itAeAkCPB+qni62874TJ+I uYG0VEpD1fdmPL5qhmvhHoTX+7DAGzgKU1FSy7RrmmEFbTzqDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCA/jnU4YVCKz0IqpD0N9CMtkHrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jYjA3 OTQ2My04NWRhLTRkYTctYjY5OS03ZjkyZjlmYWZmMDQvMTY4ZjM2MjAtMTViNS0z MmYzLWFlZjQtZTJkZTJiYTE0OWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2IwNzk0NjMtODVkYS00ZGE3LWI2 OTktN2Y5MmY5ZmFmZjA0L2NiMDc5NDYzLTg1ZGEtNGRhNy1iNjk5LTdmOTJmOWZh ZmYwNC5jcmwwHwYDVR0jBBgwFoAUkBnxIZUCbKErkv8cSVGs0vh9l5MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jYjA3OTQ2My04NWRhLTRkYTctYjY5OS03Zjky ZjlmYWZmMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzabrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD8/QldinoPjvXWcocnCoh2EtTQucZK/bUHpKIpuksIisKnmjd73cRi lo+WszIbUpugDgAkIBh01Pweh8hrFdERXMLA4hHBQj/kt8q4TV8gbuFcolqeWbEb E5SNw6ys9z6DfrKIZrJRYCMahQCbOoE8SeqqyPQBNR50r4pkf2FT8xOElPE9wm7Y yobBTAalMBrMVZc7KD1XncfdPP4D5z/3btT8CmUVABYL0X+6t73VaPqJAFnj+4Y/ tua/GJJK5y6VHIBasy5fQ5XjX+GBiTQw1DPczEHpZ7pMBuHE5IaKMhCKVv1Cx/+A MrBOywYXRB8ed9CjUbFfjJrYDGTkxpM= -----END CERTIFICATE-----Generated at Sun Jul 27 14:44:19 2025 by rpki-client