$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/20065a80-fc1c-313d-bc55-ba7100fda1b9.roa File: 20065a80-fc1c-313d-bc55-ba7100fda1b9.roa (raw, json) Hash identifier: nfwwrnnbU5rR7DtLsnanUG/pz4a1htHRvD76CviAzRM= Subject key identifier: D7:18:C8:06:23:2C:50:FC:9D:2E:4E:9F:95:41:88:62:13:85:61:50 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584A9FFB967DE35F6A74CAB7B740 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/20065a80-fc1c-313d-bc55-ba7100fda1b9.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 4005 IP address blocks: 204.59.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:96:7d:e3:5f:6a:74:ca:b7:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=4e4e9382-8810-4e54-b0b6-66fbcb538917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:53:27:30:31:38:00:b9:a0:a3:81:cb:64:26: 00:81:44:10:1e:88:bd:8d:42:1c:e8:55:a1:d8:73: 49:6b:f2:92:41:be:8b:de:94:2f:19:29:da:fd:67: 10:77:dc:1b:b7:16:23:9f:0f:3b:f1:1c:67:f8:f4: 07:72:12:46:ed:fb:38:cb:76:32:59:de:f7:4e:bf: a5:eb:bc:ba:cb:56:d1:bc:2d:3e:d6:be:52:60:64: 5f:fe:26:aa:04:75:25:6e:e7:df:47:42:88:99:a4: 3a:cc:bd:ae:90:0c:d9:eb:56:f1:95:fe:90:a5:bf: 4d:67:cf:fb:6f:37:b2:eb:cc:c5:33:c9:3a:76:3a: 0d:f8:b3:d6:84:5b:8c:90:6a:5f:86:0e:72:da:21: 56:47:fd:22:e8:08:67:9f:d1:17:bc:04:77:2f:9a: f0:99:ca:9f:1e:aa:a2:52:ae:0e:24:96:25:d1:88: cd:a6:6a:d3:14:52:5b:eb:d9:2d:74:99:df:2e:98: 08:f3:7d:15:c4:db:42:ee:bc:8c:7e:61:22:a6:d6: a4:d3:4d:84:ce:9e:50:fb:7c:d9:89:d2:cf:74:7f: 87:87:c0:fd:d6:6d:51:98:be:2d:a4:e5:67:30:95: d1:d3:49:b3:38:86:ae:8f:bb:46:cd:35:83:06:66: b2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:18:C8:06:23:2C:50:FC:9D:2E:4E:9F:95:41:88:62:13:85:61:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/20065a80-fc1c-313d-bc55-ba7100fda1b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 204.59.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:02:ab:06:36:1c:1f:15:19:e6:6a:09:6b:bc:f3:60:37:14: 81:a6:c6:c2:52:0c:36:0f:a4:28:9d:de:44:bd:a6:57:ba:21: 14:10:2d:83:77:45:f4:f9:7c:f9:56:32:50:10:c7:12:31:88: 56:e6:1a:a9:1b:82:04:da:9a:47:d6:e9:f1:31:47:94:71:71: fc:14:c2:62:e9:c6:6a:76:61:42:69:2c:99:d2:da:73:ec:ee: b4:9c:80:be:48:35:b5:7a:a8:f5:9e:5a:09:10:55:2a:9a:9b: d1:f2:4e:f2:ea:43:f5:ba:7b:77:90:ad:2f:fb:68:66:7f:44: 57:67:cb:22:25:37:48:6e:d4:5c:e1:9e:f3:dd:91:7d:b4:10: 6e:f9:15:30:00:f9:9c:85:d1:99:5a:a8:84:92:c1:7b:9a:25: 2b:fb:10:cc:5c:66:dc:6e:c3:bc:d5:71:ae:b6:ca:cc:f7:d0: 67:5d:11:da:10:97:1d:37:62:2f:ab:cf:d8:a0:63:9e:c4:a6: 13:57:32:c2:18:5e:1a:02:23:62:4f:dc:2b:6c:4e:6c:39:65: 46:3a:76:cb:2c:98:be:56:45:0c:a1:6c:bf:ec:84:83:57:68: b9:35:7b:82:88:16:1b:c4:74:90:b7:f8:ce:fc:b5:c3:17:91: 90:91:8c:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+5Z9419qdMq3t0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk NGU0ZTkzODItODgxMC00ZTU0LWIwYjYtNjZmYmNiNTM4OTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1MnMDE4ALmgo4HLZCYAgUQQHoi9jUIc6FWh 2HNJa/KSQb6L3pQvGSna/WcQd9wbtxYjnw878Rxn+PQHchJG7fs4y3YyWd73Tr+l 67y6y1bRvC0+1r5SYGRf/iaqBHUlbuffR0KImaQ6zL2ukAzZ61bxlf6Qpb9NZ8/7 bzey68zFM8k6djoN+LPWhFuMkGpfhg5y2iFWR/0i6Ahnn9EXvAR3L5rwmcqfHqqi Uq4OJJYl0YjNpmrTFFJb69ktdJnfLpgI830VxNtC7ryMfmEiptak002Ezp5Q+3zZ idLPdH+Hh8D91m1RmL4tpOVnMJXR00mzOIauj7tGzTWDBmayNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcYyAYjLFD8nS5On5VBiGIThWFQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvMjAwNjVhODAtZmMxYy0z MTNkLWJjNTUtYmE3MTAwZmRhMWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwCqwY2HB8VGeZqCWu882A3FIGmxsJSDDYPpCid3kS9ple6IRQQLYN3 RfT5fPlWMlAQxxIxiFbmGqkbggTamkfW6fExR5RxcfwUwmLpxmp2YUJpLJnS2nPs 7rScgL5INbV6qPWeWgkQVSqam9HyTvLqQ/W6e3eQrS/7aGZ/RFdnyyIlN0hu1Fzh nvPdkX20EG75FTAA+ZyF0ZlaqISSwXuaJSv7EMxcZtxuw7zVca62ysz30GddEdoQ lx03Yi+rz9igY57EphNXMsIYXhoCI2JP3CtsTmw5ZUY6dsssmL5WRQyhbL/shINX aLk1e4KIFhvEdJC3+M78tcMXkZCRjFQ= -----END CERTIFICATE-----Generated at Sat Jul 26 11:18:45 2025 by rpki-client