$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/08bf5d51-24e3-396f-9b0e-36469c4b1aa0.roa File: 08bf5d51-24e3-396f-9b0e-36469c4b1aa0.roa (raw, json) Hash identifier: 9VKeLLjl7kfOATUXzRbHhAjKFTCk50xPKbJbH7GsQTM= Subject key identifier: 43:FE:5A:D0:D8:11:7E:1A:70:0C:6B:C2:1D:95:1E:03:4E:F0:F6:92 Certificate issuer: /CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Certificate serial: 010D0C9F4328584AC87650103C19E1B8113A8880 Authority key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/08bf5d51-24e3-396f-9b0e-36469c4b1aa0.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 15054 IP address blocks: 76.10.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:50:10:3c:19:e1:b8:11:3a:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=fa5f8fd7-0bb4-464c-ab43-d00f002ec060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cd:78:e0:7e:28:e0:90:ef:54:16:05:11:fb: 63:36:ce:44:32:29:de:7e:50:a5:0e:6b:62:70:de: e9:1f:78:18:a1:6e:7f:de:1a:71:ac:cf:dc:6f:49: 93:72:2a:2a:af:19:33:f5:49:8d:f4:49:cc:77:db: ac:87:2a:67:f5:91:69:b1:27:c4:97:5b:a3:32:ff: c5:3d:02:a3:99:a3:d6:92:23:ac:d3:50:f8:56:b6: 72:fe:91:33:45:70:70:4e:a5:18:9f:41:a4:2e:3c: 83:94:fc:73:f0:10:9d:e8:0e:24:c7:8e:9a:33:85: 14:b2:5c:6a:e0:15:75:71:f8:cc:20:d6:bf:38:f1: c7:eb:07:81:e9:00:4c:dd:fe:99:75:10:32:96:e9: 5e:6a:82:86:c3:c5:43:b5:b8:16:f2:7e:cf:83:19: 2f:b5:70:9f:f3:3f:8d:6b:da:c3:d0:88:bc:96:26: c3:f5:63:dd:27:39:50:ee:21:4d:f7:f5:10:00:e0: 4e:ae:da:e9:ef:bc:de:db:c2:d2:3a:33:22:cf:cf: 50:36:3c:b9:3b:c3:f7:19:a9:2b:a0:4b:e0:f7:83: 8e:e3:b7:90:e9:af:f3:6d:db:50:40:42:e9:a4:e1: ff:5e:22:fa:dd:ad:8b:4b:17:81:8a:db:85:3a:3e: af:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FE:5A:D0:D8:11:7E:1A:70:0C:6B:C2:1D:95:1E:03:4E:F0:F6:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/08bf5d51-24e3-396f-9b0e-36469c4b1aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl X509v3 Authority Key Identifier: keyid:37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer sbgp-ipAddrBlock: critical IPv4: 76.10.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:03:81:0c:df:a0:ee:af:1f:8d:48:57:ae:36:4e:c6:db:0c: 52:48:09:87:a0:fc:be:63:af:1c:a6:3f:fc:cc:56:f5:c5:fd: 11:f2:74:5e:77:6c:e3:82:a4:08:62:0b:01:fb:2d:45:5a:d7: 18:37:f9:6c:90:6a:5b:62:7c:4c:2b:32:5d:dd:63:92:23:d0: 8a:9a:cc:36:de:36:37:d3:50:b1:f3:b9:5a:fb:5a:21:13:46: 1b:d5:c0:54:29:9d:b1:ff:dc:16:82:d0:6c:d0:6f:27:f2:fd: 8a:d7:fc:fe:b6:7a:3a:40:4f:95:2c:63:b6:b3:45:99:35:0c: ac:e1:04:21:6a:d2:51:76:66:19:ed:e1:87:a4:f0:32:c7:32: 65:53:f0:72:18:77:a0:bf:5c:cb:65:6a:01:56:60:1b:56:8c: 70:98:20:3b:15:9e:48:10:0e:0c:6a:fc:3f:9b:b8:3e:cc:0f: a0:19:64:5c:7d:b4:1e:fb:f1:5c:85:45:8b:f0:fd:1b:c8:a9: f5:a7:b8:9f:3e:42:a0:21:bc:da:89:57:65:22:c6:74:ba:61: dd:bc:a0:da:a3:cc:e4:eb:15:46:96:d6:fa:83:e8:32:27:cd: 40:3a:ab:b2:bb:2c:60:28:71:7b:69:f0:2a:d1:5b:e3:7e:f7: 39:c7:12:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdlAQPBnhuBE6iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmZTI1MzUtMmRjNS00ZDQ3LWIwM2UtZDQ0ZWVhMjYw MzJmMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmE1ZjhmZDctMGJiNC00NjRjLWFiNDMtZDAwZjAwMmVjMDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc144H4o4JDvVBYFEftjNs5EMineflClDmti cN7pH3gYoW5/3hpxrM/cb0mTcioqrxkz9UmN9EnMd9ushypn9ZFpsSfEl1ujMv/F PQKjmaPWkiOs01D4VrZy/pEzRXBwTqUYn0GkLjyDlPxz8BCd6A4kx46aM4UUslxq 4BV1cfjMINa/OPHH6weB6QBM3f6ZdRAyluleaoKGw8VDtbgW8n7PgxkvtXCf8z+N a9rD0Ii8libD9WPdJzlQ7iFN9/UQAOBOrtrp77ze28LSOjMiz89QNjy5O8P3Gakr oEvg94OO47eQ6a/zbdtQQELppOH/XiL63a2LSxeBituFOj6v6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEP+WtDYEX4acAxrwh2VHgNO8PaSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZl MjUzNS0yZGM1LTRkNDctYjAzZS1kNDRlZWEyNjAzMmYvMDhiZjVkNTEtMjRlMy0z OTZmLTliMGUtMzY0NjljNGIxYWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGFmZTI1MzUtMmRjNS00ZDQ3LWIw M2UtZDQ0ZWVhMjYwMzJmL2RhZmUyNTM1LTJkYzUtNGQ0Ny1iMDNlLWQ0NGVlYTI2 MDMyZi5jcmwwHwYDVR0jBBgwFoAUN8t1jDs52bn6L7Uc75kQZ5e56xAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZlMjUzNS0yZGM1LTRkNDctYjAzZS1kNDRl ZWEyNjAzMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETArwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMDgQzfoO6vH41IV642TsbbDFJICYeg/L5jrxymP/zMVvXF/RHydF53 bOOCpAhiCwH7LUVa1xg3+WyQaltifEwrMl3dY5Ij0IqazDbeNjfTULHzuVr7WiET RhvVwFQpnbH/3BaC0GzQbyfy/YrX/P62ejpAT5UsY7azRZk1DKzhBCFq0lF2Zhnt 4Yek8DLHMmVT8HIYd6C/XMtlagFWYBtWjHCYIDsVnkgQDgxq/D+buD7MD6AZZFx9 tB778VyFRYvw/RvIqfWnuJ8+QqAhvNqJV2UixnS6Yd28oNqjzOTrFUaW1vqD6DIn zUA6q7K7LGAocXtp8CrRW+N+9znHEn8= -----END CERTIFICATE-----Generated at Wed Aug 20 17:15:09 2025 by rpki-client