$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4/1c410a85-ef61-329c-8758-bd379673e65f.roa File: 1c410a85-ef61-329c-8758-bd379673e65f.roa (raw, json) Hash identifier: 9e5ZuMQDZmFz5Lc8rL4JY43Roa3xfO9+3m1FkgAYArg= Subject key identifier: 0B:13:7F:27:7A:1D:1D:D9:10:A7:D6:EF:79:77:D5:C9:DA:F0:19:41 Certificate issuer: /CN=a56a3708-27fd-4435-a52a-57e44da7dab4 Certificate serial: 010D0C9F4328584AA85BB16C7B58787C558BAC00 Authority key identifier: 63:17:61:37:A5:B8:6E:08:2E:25:5F:AF:1C:64:FC:4F:8E:78:0E:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4/1c410a85-ef61-329c-8758-bd379673e65f.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 26498 IP address blocks: 204.114.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4/a56a3708-27fd-4435-a52a-57e44da7dab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4/a56a3708-27fd-4435-a52a-57e44da7dab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 31 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b1:6c:7b:58:78:7c:55:8b:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a56a3708-27fd-4435-a52a-57e44da7dab4 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=9c683f08-3265-460a-b90d-28e9031ab402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1b:55:47:1e:a0:4c:bc:5a:14:48:e8:d2:c0: 7e:5a:3f:c9:97:31:87:6d:ca:77:48:57:2a:db:71: e0:8b:db:58:e7:a1:b4:4c:0d:d4:38:62:8e:58:d2: f9:95:1d:5a:0b:b9:5c:92:6d:4a:80:14:7c:5b:55: c3:75:87:a4:43:5f:8e:ca:8a:a6:6a:6a:99:df:c3: 82:fa:08:8b:b7:c0:49:be:7f:5a:90:3d:61:d1:59: a7:47:e5:5c:ba:ba:f6:34:f8:75:3f:9f:a8:91:96: fc:89:2d:14:2d:cb:c0:8d:69:25:cf:99:74:c7:d5: 88:fd:3e:af:11:c9:67:aa:e0:0e:4f:c2:da:a9:8d: d0:c4:69:3e:5f:3d:b0:1f:00:e4:a1:b5:6e:f2:de: d3:45:74:36:39:21:b1:94:b7:60:da:70:be:66:66: 6f:71:36:d7:c5:e4:28:c1:d4:d1:b3:72:08:b1:3e: bd:10:d1:86:20:25:5d:29:ee:a8:b4:57:31:fd:60: 63:ab:8d:22:2e:1d:fa:97:20:04:9e:41:31:19:e3: 58:6e:8e:57:e7:b1:9e:aa:da:1b:55:09:87:03:eb: f7:39:e7:f2:04:87:a7:76:54:fd:00:a8:23:d9:0e: 4b:4b:9f:04:a3:ad:b6:6c:71:42:fe:44:c8:eb:ad: f1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:13:7F:27:7A:1D:1D:D9:10:A7:D6:EF:79:77:D5:C9:DA:F0:19:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4/1c410a85-ef61-329c-8758-bd379673e65f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4/a56a3708-27fd-4435-a52a-57e44da7dab4.crl X509v3 Authority Key Identifier: keyid:63:17:61:37:A5:B8:6E:08:2E:25:5F:AF:1C:64:FC:4F:8E:78:0E:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a56a3708-27fd-4435-a52a-57e44da7dab4.cer sbgp-ipAddrBlock: critical IPv4: 204.114.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:79:a4:80:7b:68:90:51:b6:f4:8b:b9:97:cb:18:df:9c:ee: d6:f3:19:08:06:13:b0:f6:d7:e6:a7:4b:af:13:10:53:05:26: 43:09:02:59:b8:14:d7:d4:42:a5:1a:5e:40:a4:a0:25:dc:99: 10:50:21:0c:8f:40:03:96:ce:ab:0d:0d:62:13:27:57:9e:35: d6:42:3f:b5:c6:7f:08:9a:dd:5e:63:fa:67:02:82:34:16:ad: 88:82:86:53:09:eb:4f:7e:55:b2:f0:0b:0e:56:7f:7e:7f:59: 6e:b2:28:dd:74:ad:56:e1:e4:63:89:09:27:9e:cc:01:99:9a: 1e:20:21:a0:52:ca:31:13:0a:7a:37:ad:75:93:61:3b:60:52: 5b:39:91:0a:bb:77:e3:75:85:7e:00:b6:9a:66:e7:08:5e:3c: 73:79:4e:79:44:4a:91:e2:93:52:15:00:db:f9:f1:56:b8:6e: f1:ea:52:50:09:c4:bb:10:75:9a:18:96:7d:bb:90:04:cc:b6: 6e:1f:e6:7f:02:62:2d:6a:47:d4:9c:e1:d6:3c:b6:54:92:fc: 3a:04:b6:36:1b:4c:85:76:73:d6:10:b8:39:47:57:db:09:e2: 6b:2b:ae:eb:87:01:b5:52:70:b2:a5:b0:49:b5:bf:c4:b1:05: dc:81:a5:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7Fse1h4fFWLrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU2YTM3MDgtMjdmZC00NDM1LWE1MmEtNTdlNDRkYTdk YWI0MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk OWM2ODNmMDgtMzI2NS00NjBhLWI5MGQtMjhlOTAzMWFiNDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBtVRx6gTLxaFEjo0sB+Wj/JlzGHbcp3SFcq 23Hgi9tY56G0TA3UOGKOWNL5lR1aC7lckm1KgBR8W1XDdYekQ1+OyoqmamqZ38OC +giLt8BJvn9akD1h0VmnR+Vcurr2NPh1P5+okZb8iS0ULcvAjWklz5l0x9WI/T6v EclnquAOT8LaqY3QxGk+Xz2wHwDkobVu8t7TRXQ2OSGxlLdg2nC+ZmZvcTbXxeQo wdTRs3IIsT69ENGGICVdKe6otFcx/WBjq40iLh36lyAEnkExGeNYbo5X57Geqtob VQmHA+v3OefyBIendlT9AKgj2Q5LS58Eo622bHFC/kTI663xMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsTfyd6HR3ZEKfW73l31cna8BlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hNTZh MzcwOC0yN2ZkLTQ0MzUtYTUyYS01N2U0NGRhN2RhYjQvMWM0MTBhODUtZWY2MS0z MjljLTg3NTgtYmQzNzk2NzNlNjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTU2YTM3MDgtMjdmZC00NDM1LWE1 MmEtNTdlNDRkYTdkYWI0L2E1NmEzNzA4LTI3ZmQtNDQzNS1hNTJhLTU3ZTQ0ZGE3 ZGFiNC5jcmwwHwYDVR0jBBgwFoAUYxdhN6W4bgguJV+vHGT8T454Dn0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hNTZhMzcwOC0yN2ZkLTQ0MzUtYTUyYS01N2U0 NGRhN2RhYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzHIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJx5pIB7aJBRtvSLuZfLGN+c7tbzGQgGE7D21+anS68TEFMFJkMJAlm4 FNfUQqUaXkCkoCXcmRBQIQyPQAOWzqsNDWITJ1eeNdZCP7XGfwia3V5j+mcCgjQW rYiChlMJ609+VbLwCw5Wf35/WW6yKN10rVbh5GOJCSeezAGZmh4gIaBSyjETCno3 rXWTYTtgUls5kQq7d+N1hX4Atppm5whePHN5TnlESpHik1IVANv58Va4bvHqUlAJ xLsQdZoYln27kATMtm4f5n8CYi1qR9Sc4dY8tlSS/DoEtjYbTIV2c9YQuDlHV9sJ 4msrruuHAbVScLKlsEm1v8SxBdyBpXI= -----END CERTIFICATE-----Generated at Wed Jul 30 19:04:10 2025 by rpki-client