$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa File: daea1d32-9330-32a9-8559-afb521212b02.roa (raw, json) Hash identifier: Vtgj7D++ZVCWludYmzCQZQvRD3A9CP7A5bU1K5+lmxA= Subject key identifier: 25:B6:80:A1:F9:96:7E:2A:45:4A:28:E7:76:57:D8:93:4D:8C:26:BC Certificate issuer: /CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Certificate serial: 010D0C9F4328584AC87650491E1FE5BA1F822578 Authority key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 3257 IP address blocks: 76.10.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:50:49:1e:1f:e5:ba:1f:82:25:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=8deab4a5-3838-4e49-bc25-c28c0b0c352b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:38:3f:51:27:44:a6:4f:ef:e6:f2:12:3b:f1: c4:69:f8:3e:3d:a2:33:42:21:76:22:4f:50:19:45: 0f:1f:ee:bc:00:67:b0:34:fc:d6:2f:7b:8f:a3:00: ff:5c:7c:7c:59:ff:fd:80:29:16:fe:2c:6a:93:15: 68:0f:08:e1:1a:3c:13:ea:35:47:73:8f:77:c8:a2: 4e:be:26:b4:b5:d4:1d:f6:8f:fa:32:e0:51:61:48: 6b:3d:a7:92:3b:21:9c:93:8a:a3:d3:8b:11:72:74: 88:26:67:c6:8c:6c:09:00:65:b9:b7:54:21:64:50: b9:4c:a2:50:e9:59:fb:5b:6a:d5:22:68:f7:c3:be: e6:18:dd:45:dc:d3:b9:72:9b:ef:5f:8f:37:22:9e: 1f:76:95:36:2e:d7:48:e6:49:9e:0a:2a:1b:6d:8e: c1:9c:d1:5f:c1:8d:7c:a3:61:a7:17:ed:62:3e:91: 36:fb:e6:db:be:86:0a:c2:9d:5a:56:0c:4b:3b:af: 27:f0:8a:f7:68:0f:12:d5:9f:54:22:74:91:06:7b: 79:98:84:30:17:f1:50:12:61:6f:a1:09:f0:4d:96: 78:5a:7a:b0:da:a1:81:24:8a:ef:7d:5b:41:07:16: 6d:d7:f6:e1:e1:73:10:26:8f:56:dd:ef:81:a0:64: 13:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B6:80:A1:F9:96:7E:2A:45:4A:28:E7:76:57:D8:93:4D:8C:26:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl X509v3 Authority Key Identifier: keyid:37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer sbgp-ipAddrBlock: critical IPv4: 76.10.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e3:10:e1:1e:a4:dc:da:1c:0b:6b:e4:6b:53:97:fb:3d:b9: b7:b3:a5:b0:a4:3b:66:12:58:24:7f:5b:16:ff:ae:27:83:09: dd:fa:a5:7b:2c:9b:74:d0:b6:66:3e:1f:92:64:f6:db:67:55: ab:47:e6:33:ef:bf:53:bd:b4:cb:fb:42:56:51:a9:69:61:1d: dc:66:ea:6a:55:5a:07:91:e5:fd:3f:c5:7c:5d:85:d8:5c:02: 3c:aa:e7:2f:76:09:b4:28:c0:ea:a4:36:e5:47:57:ec:37:63: 7d:32:8b:bd:f3:5e:c3:ec:48:54:b6:61:07:95:88:71:e3:19: 44:07:89:da:0c:d1:9a:71:d1:42:e5:84:d1:bb:06:cf:ea:1b: 7f:9c:63:4b:88:3b:ce:57:f8:c4:f2:51:dd:47:46:8a:29:14: 32:32:53:ed:e6:8a:6d:2b:c1:80:14:33:e8:61:5e:13:99:67: 7d:0e:ac:6e:ec:05:96:24:99:27:d4:4a:a0:86:18:42:02:36: fc:78:cf:f9:76:15:25:d6:8d:49:d2:e9:00:36:8c:a7:ad:64: 92:d6:9a:57:f1:74:69:91:18:91:bd:3f:96:12:30:2d:e1:e9: 9a:26:2f:5b:5e:be:a4:08:8b:84:13:e6:70:a4:10:e5:96:27: 63:e4:6a:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdlBJHh/luh+CJXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmZTI1MzUtMmRjNS00ZDQ3LWIwM2UtZDQ0ZWVhMjYw MzJmMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk OGRlYWI0YTUtMzgzOC00ZTQ5LWJjMjUtYzI4YzBiMGMzNTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzg/USdEpk/v5vISO/HEafg+PaIzQiF2Ik9Q GUUPH+68AGewNPzWL3uPowD/XHx8Wf/9gCkW/ixqkxVoDwjhGjwT6jVHc493yKJO via0tdQd9o/6MuBRYUhrPaeSOyGck4qj04sRcnSIJmfGjGwJAGW5t1QhZFC5TKJQ 6Vn7W2rVImj3w77mGN1F3NO5cpvvX483Ip4fdpU2LtdI5kmeCiobbY7BnNFfwY18 o2GnF+1iPpE2++bbvoYKwp1aVgxLO68n8Ir3aA8S1Z9UInSRBnt5mIQwF/FQEmFv oQnwTZZ4Wnqw2qGBJIrvfVtBBxZt1/bh4XMQJo9W3e+BoGQTUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCW2gKH5ln4qRUoo53ZX2JNNjCa8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZl MjUzNS0yZGM1LTRkNDctYjAzZS1kNDRlZWEyNjAzMmYvZGFlYTFkMzItOTMzMC0z MmE5LTg1NTktYWZiNTIxMjEyYjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGFmZTI1MzUtMmRjNS00ZDQ3LWIw M2UtZDQ0ZWVhMjYwMzJmL2RhZmUyNTM1LTJkYzUtNGQ0Ny1iMDNlLWQ0NGVlYTI2 MDMyZi5jcmwwHwYDVR0jBBgwFoAUN8t1jDs52bn6L7Uc75kQZ5e56xAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZlMjUzNS0yZGM1LTRkNDctYjAzZS1kNDRl ZWEyNjAzMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETArwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTjEOEepNzaHAtr5GtTl/s9ubezpbCkO2YSWCR/Wxb/rieDCd36pXss m3TQtmY+H5Jk9ttnVatH5jPvv1O9tMv7QlZRqWlhHdxm6mpVWgeR5f0/xXxdhdhc Ajyq5y92CbQowOqkNuVHV+w3Y30yi73zXsPsSFS2YQeViHHjGUQHidoM0Zpx0ULl hNG7Bs/qG3+cY0uIO85X+MTyUd1HRoopFDIyU+3mim0rwYAUM+hhXhOZZ30OrG7s BZYkmSfUSqCGGEICNvx4z/l2FSXWjUnS6QA2jKetZJLWmlfxdGmRGJG9P5YSMC3h 6ZomL1tevqQIi4QT5nCkEOWWJ2PkajU= -----END CERTIFICATE-----Generated at Wed Aug 20 13:19:31 2025 by rpki-client