$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/d00129db-d5ad-33be-afac-2e76df39b2b2.roa File: d00129db-d5ad-33be-afac-2e76df39b2b2.roa (raw, json) Hash identifier: pS2oQbtzEWaK0Nc8CwP7U9azF96UBCHOpHsuEOI0mag= Subject key identifier: 74:EE:C8:2B:F0:17:44:55:C7:B9:8A:BD:C1:00:50:69:FB:E7:0A:68 Certificate issuer: /CN=0a4ce5e6-29f4-4552-bf3b-5510aa3b5052 Certificate serial: 010D0C9F4328584AF52142C030D12B1604151600 Authority key identifier: 6F:D9:11:69:B9:73:1F:5C:48:7D:CE:11:8A:21:CE:B1:3F:F5:F9:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/d00129db-d5ad-33be-afac-2e76df39b2b2.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 6095 IP address blocks: 204.89.58.0/24 maxlen: 24 204.89.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:42:c0:30:d1:2b:16:04:15:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a4ce5e6-29f4-4552-bf3b-5510aa3b5052 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=18a6d5e0-1e7d-497d-b37b-bff15841c4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5d:43:fd:4d:37:01:4e:4e:12:1c:aa:71:92: c7:f4:6b:14:ba:08:fd:83:d2:e9:cd:84:4b:9b:ec: ff:4c:f0:a9:97:40:96:4a:48:5c:bd:90:21:51:98: 4e:02:1d:32:0b:4d:4c:ea:e0:42:e8:1b:80:7a:8e: 24:46:e2:c3:07:04:f8:38:93:c3:c9:af:a3:52:75: b1:e6:c9:c8:c6:79:6b:3f:4f:ce:ae:20:34:f2:30: f2:6a:ee:cf:c9:01:88:65:51:7f:96:52:b6:0a:dd: b3:ad:06:61:a7:ac:ee:4a:0a:86:bc:02:6b:be:fb: 9e:6e:4a:37:7b:65:0f:22:bf:6d:91:ec:e4:8f:2a: eb:39:7f:20:5d:3c:5e:b2:50:1d:95:07:37:c5:ec: d1:1d:f2:e8:6c:38:3f:90:75:4c:f6:e1:02:3f:cf: 84:af:df:5c:b5:eb:34:0c:1c:84:c2:b7:f4:d0:c1: ae:bf:37:b3:c2:ab:4e:cd:54:75:50:13:b5:93:fc: 6a:27:4b:36:ed:13:4f:e1:92:2f:02:64:b7:85:79: 20:ad:e8:58:74:c4:33:e3:f0:93:6d:80:77:85:f3: 85:7f:9a:92:fd:f0:db:45:5a:04:93:30:6b:18:3e: fa:4a:d9:9c:1f:aa:83:09:a2:d1:4d:8b:cc:41:a1: f2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:EE:C8:2B:F0:17:44:55:C7:B9:8A:BD:C1:00:50:69:FB:E7:0A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/d00129db-d5ad-33be-afac-2e76df39b2b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.crl X509v3 Authority Key Identifier: keyid:6F:D9:11:69:B9:73:1F:5C:48:7D:CE:11:8A:21:CE:B1:3F:F5:F9:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.cer sbgp-ipAddrBlock: critical IPv4: 204.89.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:df:7d:8d:07:88:7a:7f:77:11:55:c8:b7:5e:2c:68:30:14: 26:fe:ea:81:84:00:ff:2d:c5:03:a7:7d:98:b6:8a:e7:1f:c1: ef:85:38:02:b9:8c:b9:15:c4:b9:9f:4a:b7:dd:ea:08:30:7c: 5e:23:20:41:41:a3:5b:f5:97:49:88:c4:a7:1b:68:a0:00:7c: 67:64:eb:28:9a:1d:d2:fd:32:a0:f5:15:8e:47:3a:36:c5:51: 25:48:2e:be:fd:f9:8f:d9:e1:42:d9:15:90:0d:bd:0b:3f:97: 2b:37:8b:00:e1:56:81:15:da:ed:59:e4:d0:aa:80:17:48:2b: a1:c1:d9:b7:be:9f:46:ad:b7:dc:14:31:e4:5d:25:b6:e9:80: 8e:b9:5b:9c:c9:53:7c:ca:a3:49:38:6a:fe:a4:e7:7d:3b:a5: 3d:1f:ff:c9:ce:9b:7b:2d:e0:b0:cc:c5:cb:b7:a0:7e:a2:40: 37:e7:70:35:dd:ba:d7:79:62:e7:46:04:d7:b7:ca:89:58:4a: 6d:41:e6:8e:07:ba:e6:79:b8:a1:e4:c0:bd:bc:db:59:47:a7: 0f:cb:bf:a8:15:dc:03:84:81:15:62:1d:0f:2f:7a:b8:ec:7c: 39:7d:af:d6:fd:19:34:d9:15:06:f8:e2:e8:e8:11:c6:3d:48: c6:e4:35:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IULAMNErFgQVFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE0Y2U1ZTYtMjlmNC00NTUyLWJmM2ItNTUxMGFhM2I1 MDUyMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MThhNmQ1ZTAtMWU3ZC00OTdkLWIzN2ItYmZmMTU4NDFjNGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol1D/U03AU5OEhyqcZLH9GsUugj9g9LpzYRL m+z/TPCpl0CWSkhcvZAhUZhOAh0yC01M6uBC6BuAeo4kRuLDBwT4OJPDya+jUnWx 5snIxnlrP0/OriA08jDyau7PyQGIZVF/llK2Ct2zrQZhp6zuSgqGvAJrvvuebko3 e2UPIr9tkezkjyrrOX8gXTxeslAdlQc3xezRHfLobDg/kHVM9uECP8+Er99ctes0 DByEwrf00MGuvzezwqtOzVR1UBO1k/xqJ0s27RNP4ZIvAmS3hXkgrehYdMQz4/CT bYB3hfOFf5qS/fDbRVoEkzBrGD76StmcH6qDCaLRTYvMQaHyDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTuyCvwF0RVx7mKvcEAUGn75wpoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYTRj ZTVlNi0yOWY0LTQ1NTItYmYzYi01NTEwYWEzYjUwNTIvZDAwMTI5ZGItZDVhZC0z M2JlLWFmYWMtMmU3NmRmMzliMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGE0Y2U1ZTYtMjlmNC00NTUyLWJm M2ItNTUxMGFhM2I1MDUyLzBhNGNlNWU2LTI5ZjQtNDU1Mi1iZjNiLTU1MTBhYTNi NTA1Mi5jcmwwHwYDVR0jBBgwFoAUb9kRablzH1xIfc4RiiHOsT/1+SUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYTRjZTVlNi0yOWY0LTQ1NTItYmYzYi01NTEw YWEzYjUwNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzFk6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/ffY0HiHp/dxFVyLdeLGgwFCb+6oGEAP8txQOnfZi2iucfwe+FOAK5 jLkVxLmfSrfd6ggwfF4jIEFBo1v1l0mIxKcbaKAAfGdk6yiaHdL9MqD1FY5HOjbF USVILr79+Y/Z4ULZFZANvQs/lys3iwDhVoEV2u1Z5NCqgBdIK6HB2be+n0att9wU MeRdJbbpgI65W5zJU3zKo0k4av6k5307pT0f/8nOm3st4LDMxcu3oH6iQDfncDXd utd5YudGBNe3yolYSm1B5o4HuuZ5uKHkwL2821lHpw/Lv6gV3AOEgRViHQ8verjs fDl9r9b9GTTZFQb44ujoEcY9SMbkNUY= -----END CERTIFICATE-----Generated at Tue Sep 16 01:23:12 2025 by rpki-client