$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/cedfec36-7604-34c8-94e0-386e140ea60f.roa File: cedfec36-7604-34c8-94e0-386e140ea60f.roa (raw, json) Hash identifier: STI2GZDgLkXwQIdafVoz0QFsEt0TLQOd5XAzpcaR2OM= Subject key identifier: 73:BD:1F:9A:41:83:2E:95:0C:8D:97:1C:64:FF:90:4D:50:54:1F:92 Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F4328584AFC1C104509F79DEBDBA7D540 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/cedfec36-7604-34c8-94e0-386e140ea60f.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 23528 IP address blocks: 168.203.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:10:45:09:f7:9d:eb:db:a7:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=429e1274-4096-4a47-b2dc-9df0a7f97745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:2f:7d:8e:a8:15:3e:a2:a3:ea:69:3d:d3: 94:ea:e9:01:5a:4f:e8:49:03:4e:f5:12:e4:b7:fa: 74:b8:3b:74:86:95:61:12:62:99:c4:54:c8:6c:fe: c1:6f:2d:c1:b5:b9:f6:ce:2c:22:33:1e:1d:54:32: 1f:3a:aa:8f:52:1d:88:05:f1:03:b2:a5:53:34:ad: 3d:75:a9:b1:5e:b6:38:ca:0e:4b:62:d7:b0:f5:95: a9:b1:c1:4e:1a:57:0f:98:1f:fe:3b:a1:4c:83:a3: 05:ea:37:c0:da:3a:5d:73:70:e3:da:8b:58:80:57: 6b:93:f6:99:e9:71:84:46:b3:c3:2b:1d:a2:4b:be: 75:a1:39:70:f2:0c:9f:f4:ee:e9:88:c0:77:3a:d3: 24:c3:03:45:cc:5a:7f:b9:cd:70:18:5f:a6:29:e0: 97:da:e8:fd:c9:67:78:df:ba:13:9a:b0:43:25:64: 8e:03:37:47:13:3b:54:c7:88:a3:f5:e8:89:05:0e: 8c:34:d1:1d:44:fb:73:12:60:42:5b:21:23:67:d6: 01:2f:25:01:6a:35:58:a0:71:37:de:4f:2c:26:30: b4:10:0d:1e:a2:48:2b:75:b2:2c:ae:2e:c9:69:24: 1a:18:13:4d:63:e5:38:72:3a:77:3a:b9:e5:93:90: ac:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BD:1F:9A:41:83:2E:95:0C:8D:97:1C:64:FF:90:4D:50:54:1F:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/cedfec36-7604-34c8-94e0-386e140ea60f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:51:d4:c7:36:34:aa:07:d1:f9:f6:8b:24:57:3e:6a:90:9b: 52:fa:09:26:58:7b:ed:28:27:ed:ab:3b:72:43:79:a0:87:a7: bf:8b:2a:bc:7c:96:c1:41:46:c4:d5:50:24:96:32:13:15:24: b6:cc:9c:e9:6f:b8:77:e0:f7:b8:0e:4f:c9:4e:0d:d4:4e:6b: 28:7b:bd:3f:c3:b7:c0:d1:86:cd:f8:e0:c4:b0:d0:1b:0a:c0: 33:27:8d:05:97:a3:3c:3d:14:72:d9:86:1d:0d:25:40:eb:5a: 27:56:7a:93:92:28:d1:0c:52:58:b1:41:84:de:64:6d:d1:b6: 95:99:1c:4a:0c:4f:e5:7f:d6:61:b8:5b:62:76:af:77:36:a2: 04:02:c9:6f:b7:5c:78:ad:72:62:60:1b:5f:b7:79:d6:34:fd: 09:67:21:0b:01:5e:74:49:38:89:e6:99:c1:58:06:77:92:9d: 42:e3:82:63:67:81:02:0e:80:f8:b0:4e:9b:d8:4f:bc:5c:d3: fd:cf:3a:00:c6:ed:a0:d6:12:c7:dd:ff:27:76:7e:86:aa:76: 05:ee:6b:2f:89:24:12:f4:06:ac:bb:b5:17:82:96:10:74:ac: bf:1f:d2:11:cc:11:f5:2f:76:32:28:4b:2a:cd:95:b5:f8:88: 75:96:d2:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBBFCfed69un1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NDI5ZTEyNzQtNDA5Ni00YTQ3LWIyZGMtOWRmMGE3Zjk3NzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPYvfY6oFT6io+ppPdOU6ukBWk/oSQNO9RLk t/p0uDt0hpVhEmKZxFTIbP7Bby3Btbn2ziwiMx4dVDIfOqqPUh2IBfEDsqVTNK09 damxXrY4yg5LYtew9ZWpscFOGlcPmB/+O6FMg6MF6jfA2jpdc3Dj2otYgFdrk/aZ 6XGERrPDKx2iS751oTlw8gyf9O7piMB3OtMkwwNFzFp/uc1wGF+mKeCX2uj9yWd4 37oTmrBDJWSOAzdHEztUx4ij9eiJBQ6MNNEdRPtzEmBCWyEjZ9YBLyUBajVYoHE3 3k8sJjC0EA0eokgrdbIsri7JaSQaGBNNY+U4cjp3Ornlk5CsGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHO9H5pBgy6VDI2XHGT/kE1QVB+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvY2VkZmVjMzYtNzYwNC0z NGM4LTk0ZTAtMzg2ZTE0MGVhNjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMssMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtR1Mc2NKoH0fn2iyRXPmqQm1L6CSZYe+0oJ+2rO3JDeaCHp7+LKrx8 lsFBRsTVUCSWMhMVJLbMnOlvuHfg97gOT8lODdROayh7vT/Dt8DRhs344MSw0BsK wDMnjQWXozw9FHLZhh0NJUDrWidWepOSKNEMUlixQYTeZG3RtpWZHEoMT+V/1mG4 W2J2r3c2ogQCyW+3XHitcmJgG1+3edY0/QlnIQsBXnRJOInmmcFYBneSnULjgmNn gQIOgPiwTpvYT7xc0/3POgDG7aDWEsfd/yd2foaqdgXuay+JJBL0Bqy7tReClhB0 rL8f0hHMEfUvdjIoSyrNlbX4iHWW0tw= -----END CERTIFICATE-----Generated at Mon Sep 15 14:32:06 2025 by rpki-client