$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/5d0a7198-8453-3d90-be60-b8f5cea99644.roa File: 5d0a7198-8453-3d90-be60-b8f5cea99644.roa (raw, json) Hash identifier: +Y85iwOzpi01KY52x35/Es27LDIOfcXwM9oADpQLNog= Subject key identifier: FB:2B:B0:A1:A6:B3:70:D5:A7:22:AF:55:5B:DC:D4:41:38:90:24:78 Certificate issuer: /CN=261c40d7-8712-472b-8c28-a09b3f549365 Certificate serial: 010D0C9F4328584AE46128316A372973E0083C80 Authority key identifier: FA:F8:CB:26:B0:B0:5A:8F:DB:BF:42:DA:6A:30:00:DB:9D:1B:EE:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/5d0a7198-8453-3d90-be60-b8f5cea99644.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 15830 IP address blocks: 142.216.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/261c40d7-8712-472b-8c28-a09b3f549365.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/261c40d7-8712-472b-8c28-a09b3f549365.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:28:31:6a:37:29:73:e0:08:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=261c40d7-8712-472b-8c28-a09b3f549365 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=bc1e84cd-7b98-45f2-8cff-6e8cf2a49755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:26:eb:c2:c1:b5:05:54:ad:cc:bf:5f:5b:ca: aa:f7:47:4a:19:a5:74:3c:29:42:8d:5a:35:eb:e2: ca:29:9a:6e:52:ea:60:e3:be:fd:89:e4:ed:36:f7: 8a:7c:00:cf:c2:f0:ec:92:09:79:02:8b:ff:32:4f: cc:b6:a8:05:70:2e:0a:66:d7:07:ef:23:92:2b:28: 0b:27:1e:c2:67:72:39:71:45:7b:9f:fc:e6:6b:a4: 34:b6:8b:10:9d:7a:88:14:8b:a5:9f:5b:cf:ed:f2: 71:57:1b:7f:3e:75:1b:f7:d1:2a:1d:ed:09:90:70: 9e:42:67:f3:d6:13:c3:40:69:0e:de:c8:3d:50:54: 17:c8:ba:c7:a0:a0:10:19:6a:3e:c5:7e:dc:8c:90: 8a:2a:7b:04:fb:8f:c4:6b:42:3a:1d:85:fd:20:3b: 37:33:00:66:a3:63:de:38:e8:02:02:bc:b1:cd:ef: 30:4c:bb:f4:79:d3:cd:49:6f:c6:64:1f:3e:73:25: e5:2b:1c:38:d6:44:56:16:29:04:35:2d:10:f5:15: 6d:8a:1d:96:fd:f3:ef:a5:76:32:74:d0:62:01:15: a8:0c:a8:61:52:d3:b8:8e:7c:41:37:82:5a:0f:c3: c9:4e:73:5b:42:9a:fd:e0:b3:77:c4:4a:e6:ab:bb: ab:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2B:B0:A1:A6:B3:70:D5:A7:22:AF:55:5B:DC:D4:41:38:90:24:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/5d0a7198-8453-3d90-be60-b8f5cea99644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/261c40d7-8712-472b-8c28-a09b3f549365.crl X509v3 Authority Key Identifier: keyid:FA:F8:CB:26:B0:B0:5A:8F:DB:BF:42:DA:6A:30:00:DB:9D:1B:EE:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365.cer sbgp-ipAddrBlock: critical IPv4: 142.216.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f5:9c:d3:ba:48:2c:83:11:3e:59:52:54:37:a8:2f:98:9b: d6:5b:1a:a4:fa:08:a0:5e:58:c3:38:00:a0:d5:4f:d2:70:c8: 21:5e:3f:bb:36:6b:ae:61:78:f3:41:0a:92:49:36:f5:04:aa: 79:97:31:08:83:4c:ae:90:60:57:56:27:5d:9d:c5:07:27:da: 2b:a8:c5:fb:98:02:55:fc:76:00:be:ab:d0:06:a7:39:93:3d: 54:e6:6c:89:6c:c1:6d:33:c1:05:bf:c5:70:03:9f:c7:2e:6d: fb:53:6b:d6:02:b6:72:4d:ed:e9:9b:05:82:6c:4f:3f:9a:2c: 74:7a:c6:19:ed:ac:9d:32:6f:c6:a0:54:b0:34:05:19:1a:ee: 14:bb:6a:dd:f2:9b:8b:c5:36:da:b2:6a:55:11:39:eb:37:c9: 0b:3a:40:8d:ae:d4:ef:f0:84:91:3c:61:63:8e:a2:a7:58:e1: eb:a3:c9:32:a5:c6:09:b5:85:3c:71:ec:ac:25:79:02:6c:13: c0:e1:95:23:38:46:d8:13:ed:35:02:77:91:f3:04:c5:de:7e: 19:54:5c:9d:5c:9a:f6:cc:19:77:32:65:a7:d7:98:6d:46:dd: 65:4c:14:39:93:1a:19:73:01:c2:4d:57:30:2f:b3:d9:79:70: a6:81:4d:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSgxajcpc+AIPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjYxYzQwZDctODcxMi00NzJiLThjMjgtYTA5YjNmNTQ5 MzY1MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YmMxZTg0Y2QtN2I5OC00NWYyLThjZmYtNmU4Y2YyYTQ5NzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCbrwsG1BVStzL9fW8qq90dKGaV0PClCjVo1 6+LKKZpuUupg4779ieTtNveKfADPwvDskgl5Aov/Mk/MtqgFcC4KZtcH7yOSKygL Jx7CZ3I5cUV7n/zma6Q0tosQnXqIFIuln1vP7fJxVxt/PnUb99EqHe0JkHCeQmfz 1hPDQGkO3sg9UFQXyLrHoKAQGWo+xX7cjJCKKnsE+4/Ea0I6HYX9IDs3MwBmo2Pe OOgCAryxze8wTLv0edPNSW/GZB8+cyXlKxw41kRWFikENS0Q9RVtih2W/fPvpXYy dNBiARWoDKhhUtO4jnxBN4JaD8PJTnNbQpr94LN3xErmq7urbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsrsKGms3DVpyKvVVvc1EE4kCR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yNjFj NDBkNy04NzEyLTQ3MmItOGMyOC1hMDliM2Y1NDkzNjUvNWQwYTcxOTgtODQ1My0z ZDkwLWJlNjAtYjhmNWNlYTk5NjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjYxYzQwZDctODcxMi00NzJiLThj MjgtYTA5YjNmNTQ5MzY1LzI2MWM0MGQ3LTg3MTItNDcyYi04YzI4LWEwOWIzZjU0 OTM2NS5jcmwwHwYDVR0jBBgwFoAU+vjLJrCwWo/bv0LaajAA250b7igwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8yNjFjNDBkNy04NzEyLTQ3MmItOGMyOC1hMDli M2Y1NDkzNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjtj1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGf1nNO6SCyDET5ZUlQ3qC+Ym9ZbGqT6CKBeWMM4AKDVT9JwyCFeP7s2 a65hePNBCpJJNvUEqnmXMQiDTK6QYFdWJ12dxQcn2iuoxfuYAlX8dgC+q9AGpzmT PVTmbIlswW0zwQW/xXADn8cubftTa9YCtnJN7embBYJsTz+aLHR6xhntrJ0yb8ag VLA0BRka7hS7at3ym4vFNtqyalUROes3yQs6QI2u1O/whJE8YWOOoqdY4eujyTKl xgm1hTxx7KwleQJsE8DhlSM4RtgT7TUCd5HzBMXefhlUXJ1cmvbMGXcyZafXmG1G 3WVMFDmTGhlzAcJNVzAvs9l5cKaBTWE= -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:26 2025 by rpki-client