$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/479e42a7-2d8b-3487-9131-f9e8a189935b.roa File: 479e42a7-2d8b-3487-9131-f9e8a189935b.roa (raw, json) Hash identifier: ldzJ0shd4huqXN18p4+bDzsY1Iek6OqpKqDvMaDzceY= Subject key identifier: EC:DC:51:DB:9B:4E:B8:35:90:69:4C:2E:E8:0A:BB:DB:CB:D7:AE:58 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A16E013578C53981A94600 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/479e42a7-2d8b-3487-9131-f9e8a189935b.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 36850 IP address blocks: 204.84.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:6e:01:35:78:c5:39:81:a9:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=5338a273-c4ee-428a-b576-7116f32c9a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:aa:48:71:a2:c8:57:94:5e:0e:99:07:52:83: bd:99:80:49:58:63:d6:81:61:11:b7:56:38:8e:4c: 0b:ce:74:03:a1:4d:23:68:98:c9:79:d3:36:50:1f: f1:16:1a:c6:8a:87:ef:11:56:c7:03:af:52:4c:24: 0b:de:e7:d1:e4:aa:f9:b1:23:a2:87:23:5b:69:99: c9:d9:38:28:5e:f0:6c:a1:e4:56:88:d1:47:b2:e4: c6:be:3e:e4:5e:6c:32:2c:d2:3b:aa:29:13:90:b1: 22:00:b2:06:a7:18:7b:71:c2:11:0c:6d:24:9a:15: a2:b3:26:11:18:55:88:ff:e2:e6:07:94:28:7c:17: b6:0e:51:25:75:d2:a0:79:dd:22:99:e2:d3:e5:fe: 07:04:96:e6:63:80:aa:f3:1b:1a:e7:78:dc:d1:9d: 69:06:82:a2:c0:6b:61:d1:f4:8b:cc:1f:ac:c3:07: b4:f0:11:09:04:7b:63:f7:6f:b6:d0:c2:5e:82:75: a8:a0:18:c5:3a:15:d7:c2:19:da:11:1d:ee:c3:b2: 4b:79:6a:03:e8:4c:41:7f:50:cb:a2:54:ae:c4:a5: c7:36:2a:7a:e7:a8:19:af:31:54:ed:1b:4d:9d:5c: 0e:be:b5:ab:d3:22:c2:73:8d:11:a0:ba:db:98:f9: 04:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DC:51:DB:9B:4E:B8:35:90:69:4C:2E:E8:0A:BB:DB:CB:D7:AE:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/479e42a7-2d8b-3487-9131-f9e8a189935b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 204.84.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:a7:ea:42:de:f1:0b:bd:40:b2:4e:c4:f0:37:d2:f9:4b:53: 2a:f7:e1:a0:db:4e:07:cc:70:03:89:8b:a9:7d:09:3e:49:77: 96:9c:47:2e:07:40:55:a5:f8:1e:7d:35:cb:35:4e:cb:78:d3: 8a:66:6f:0c:78:67:3e:02:f2:23:03:d0:fd:df:d8:23:9e:2d: 09:06:53:03:2e:af:89:01:f2:57:9e:1f:9a:d6:fc:3c:ae:34: 12:9f:ad:fb:c9:24:29:1a:6b:2d:11:b5:54:ff:b7:4b:8e:3a: d0:5d:c9:d0:2e:7e:a2:c9:4e:b8:c6:40:02:e8:db:d7:e8:bd: 9d:eb:a8:e8:ca:22:9a:f8:a1:6f:73:45:9b:09:5d:4d:c5:54: 5a:de:33:b1:ca:61:c0:02:3c:be:2b:9d:26:ec:1b:1f:5f:19: 51:de:c3:e1:d5:d7:91:31:0b:42:be:77:aa:29:6a:66:78:09: 4c:9d:c4:34:f8:89:27:74:21:39:8e:dd:f5:5a:1e:5a:96:aa: 4a:ab:50:5c:a1:5f:85:ff:0d:e4:1c:20:e0:6d:92:b4:07:4c: de:a4:d5:1e:57:0c:8c:aa:93:3b:52:e9:4b:91:24:0c:a9:70: 35:b1:e5:52:ee:e9:a6:9e:90:d3:2b:7f:56:e3:89:28:24:ba: d4:54:c4:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoW4BNXjFOYGpRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk NTMzOGEyNzMtYzRlZS00MjhhLWI1NzYtNzExNmYzMmM5YTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6pIcaLIV5ReDpkHUoO9mYBJWGPWgWERt1Y4 jkwLznQDoU0jaJjJedM2UB/xFhrGiofvEVbHA69STCQL3ufR5Kr5sSOihyNbaZnJ 2TgoXvBsoeRWiNFHsuTGvj7kXmwyLNI7qikTkLEiALIGpxh7ccIRDG0kmhWisyYR GFWI/+LmB5QofBe2DlElddKged0imeLT5f4HBJbmY4Cq8xsa53jc0Z1pBoKiwGth 0fSLzB+swwe08BEJBHtj92+20MJegnWooBjFOhXXwhnaER3uw7JLeWoD6ExBf1DL olSuxKXHNip656gZrzFU7RtNnVwOvrWr0yLCc40RoLrbmPkEuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzcUdubTrg1kGlMLugKu9vL165YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNDc5ZTQyYTctMmQ4Yi0z NDg3LTkxMzEtZjllOGExODk5MzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzFT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGn6kLe8Qu9QLJOxPA30vlLUyr34aDbTgfMcAOJi6l9CT5Jd5acRy4H QFWl+B59Ncs1Tst404pmbwx4Zz4C8iMD0P3f2COeLQkGUwMur4kB8leeH5rW/Dyu NBKfrfvJJCkaay0RtVT/t0uOOtBdydAufqLJTrjGQALo29fovZ3rqOjKIpr4oW9z RZsJXU3FVFreM7HKYcACPL4rnSbsGx9fGVHew+HV15ExC0K+d6opamZ4CUydxDT4 iSd0ITmO3fVaHlqWqkqrUFyhX4X/DeQcIOBtkrQHTN6k1R5XDIyqkztS6UuRJAyp cDWx5VLu6aaekNMrf1bjiSgkutRUxOM= -----END CERTIFICATE-----Generated at Tue Sep 9 18:33:40 2025 by rpki-client