$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/ce4d1c8d-ee6d-3784-9fc8-ae9d4c245bd8.roa File: ce4d1c8d-ee6d-3784-9fc8-ae9d4c245bd8.roa (raw, json) Hash identifier: A6tWyS+UzeEpoLNgovejERZeakktahvzDv6DdowdiQ8= Subject key identifier: 85:EB:82:59:12:AB:54:8C:52:65:B4:29:79:8F:6B:28:62:87:10:05 Certificate issuer: /CN=4b2ad884-5960-46cd-bf60-910c222c8cfc Certificate serial: 010D0C9F4328584B004BF1A5CB090E49CC5A4AC0 Authority key identifier: 39:6E:8F:38:F6:0D:E5:AE:A9:FC:82:8E:9F:82:C6:52:BF:D9:F1:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/ce4d1c8d-ee6d-3784-9fc8-ae9d4c245bd8.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 376 IP address blocks: 204.19.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f1:a5:cb:09:0e:49:cc:5a:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b2ad884-5960-46cd-bf60-910c222c8cfc Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=36ec2e49-cc63-43f4-a50f-6de6141f2439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7b:0a:32:2a:2e:4e:eb:30:62:6b:f0:22:c9: ec:e0:5c:eb:99:6d:53:69:20:7a:a4:f1:12:71:d7: 71:97:93:bb:6d:54:7c:e7:46:b1:99:71:07:f2:4d: 3a:24:f5:56:3f:51:a4:d5:50:cc:4f:ec:aa:26:24: 58:da:88:46:15:8f:18:19:ed:9e:c3:fb:84:82:c8: 37:25:4d:a3:80:c4:2c:84:8a:78:a2:4c:22:6d:bd: 7b:0c:54:63:0e:ca:c8:c6:64:e5:a9:c5:82:48:fb: 80:7f:79:16:bf:68:60:09:9e:cf:a2:0b:6b:1c:ce: 82:6e:22:06:81:b1:a0:42:03:9a:fb:ac:23:a6:41: 4e:33:72:fb:91:76:e0:be:3e:28:a7:31:e3:8e:cd: 31:a4:d8:d9:5c:fb:69:8c:1e:ee:18:6e:c9:fb:18: 42:4e:1b:57:84:fd:eb:81:3d:d1:b1:1d:b2:92:13: df:90:af:b8:6a:7d:ab:07:2c:b1:38:f1:43:8c:65: 0c:66:67:74:59:99:88:47:2f:2b:0a:5c:fc:94:ce: bc:90:50:56:a7:7f:eb:31:a6:d6:0b:c9:9f:1a:fc: 7e:08:08:59:06:7e:cd:90:03:07:06:af:af:31:0e: 19:b6:56:2e:cc:08:8f:45:b6:72:f2:a6:4e:46:bd: 53:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EB:82:59:12:AB:54:8C:52:65:B4:29:79:8F:6B:28:62:87:10:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/ce4d1c8d-ee6d-3784-9fc8-ae9d4c245bd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.crl X509v3 Authority Key Identifier: keyid:39:6E:8F:38:F6:0D:E5:AE:A9:FC:82:8E:9F:82:C6:52:BF:D9:F1:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer sbgp-ipAddrBlock: critical IPv4: 204.19.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:43:5e:e3:11:e4:84:f3:e9:4f:4c:be:0d:48:3f:bd:69:03: 6e:d0:98:d5:19:ff:d0:fa:bb:9a:b3:c4:90:79:d1:d7:30:4c: bf:34:46:77:73:a5:82:2b:9f:eb:54:13:f0:36:a3:f2:22:02: f5:33:ac:66:01:ae:79:50:69:77:6f:8a:98:f2:46:1f:c7:d3: 21:43:3c:6d:45:13:68:82:40:74:a9:8f:1d:98:5e:55:1f:5c: 6b:59:7b:a5:6d:e9:92:3f:3b:25:e9:23:b7:5f:39:ca:ec:39: 01:84:32:62:71:03:47:f2:64:2a:21:aa:fc:60:b2:1d:49:e0: 09:b4:ca:6a:ed:60:46:1f:9b:4a:9b:7c:84:63:79:f6:50:68: f7:6a:26:ff:4f:6b:cc:f1:21:94:6a:03:68:3b:88:a3:4d:1c: ed:e4:b5:35:a5:ce:60:98:c8:b1:b1:1f:b3:d2:0e:ea:12:15: 6a:eb:3a:10:bd:fb:69:a0:05:2e:1f:ea:70:00:24:19:b9:5d: e6:82:e7:cb:5c:58:85:c4:4d:43:18:54:fe:54:8b:19:83:77: ba:32:04:7f:ed:59:37:28:56:ef:c2:ee:7c:99:fd:3c:e9:78: 72:62:de:cf:b3:96:a7:9a:2d:c7:b6:01:c6:4a:49:32:bf:bc: a8:0a:14:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS/GlywkOScxaSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGIyYWQ4ODQtNTk2MC00NmNkLWJmNjAtOTEwYzIyMmM4 Y2ZjMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MzZlYzJlNDktY2M2My00M2Y0LWE1MGYtNmRlNjE0MWYyNDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHsKMiouTuswYmvwIsns4FzrmW1TaSB6pPES cddxl5O7bVR850axmXEH8k06JPVWP1Gk1VDMT+yqJiRY2ohGFY8YGe2ew/uEgsg3 JU2jgMQshIp4okwibb17DFRjDsrIxmTlqcWCSPuAf3kWv2hgCZ7PogtrHM6CbiIG gbGgQgOa+6wjpkFOM3L7kXbgvj4opzHjjs0xpNjZXPtpjB7uGG7J+xhCThtXhP3r gT3RsR2ykhPfkK+4an2rByyxOPFDjGUMZmd0WZmIRy8rClz8lM68kFBWp3/rMabW C8mfGvx+CAhZBn7NkAMHBq+vMQ4ZtlYuzAiPRbZy8qZORr1TBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXrglkSq1SMUmW0KXmPayhihxAFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YjJh ZDg4NC01OTYwLTQ2Y2QtYmY2MC05MTBjMjIyYzhjZmMvY2U0ZDFjOGQtZWU2ZC0z Nzg0LTlmYzgtYWU5ZDRjMjQ1YmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGIyYWQ4ODQtNTk2MC00NmNkLWJm NjAtOTEwYzIyMmM4Y2ZjLzRiMmFkODg0LTU5NjAtNDZjZC1iZjYwLTkxMGMyMjJj OGNmYy5jcmwwHwYDVR0jBBgwFoAUOW6POPYN5a6p/IKOn4LGUr/Z8YIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjJhZDg4NC01OTYwLTQ2Y2QtYmY2MC05MTBj MjIyYzhjZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBMqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZDXuMR5ITz6U9Mvg1IP71pA27QmNUZ/9D6u5qzxJB50dcwTL80Rndz pYIrn+tUE/A2o/IiAvUzrGYBrnlQaXdvipjyRh/H0yFDPG1FE2iCQHSpjx2YXlUf XGtZe6Vt6ZI/OyXpI7dfOcrsOQGEMmJxA0fyZCohqvxgsh1J4Am0ymrtYEYfm0qb fIRjefZQaPdqJv9Pa8zxIZRqA2g7iKNNHO3ktTWlzmCYyLGxH7PSDuoSFWrrOhC9 +2mgBS4f6nAAJBm5XeaC58tcWIXETUMYVP5UixmDd7oyBH/tWTcoVu/C7nyZ/Tzp eHJi3s+zlqeaLce2AcZKSTK/vKgKFIE= -----END CERTIFICATE-----Generated at Mon Sep 15 10:47:33 2025 by rpki-client