$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa File: 58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa (raw, json) Hash identifier: bE4L7z5/0QYxcNGT4Gc68igxv1Rot3EXJcTVPt5CG98= Subject key identifier: F5:A7:8F:0E:41:47:DB:10:4D:4E:B9:B3:27:4D:81:4A:DC:CA:ED:0B Certificate issuer: /CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef Certificate serial: 010D0C9F4328584A5FC5E83A9CA5D06489E65D80 Authority key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 393981 IP address blocks: 204.239.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e8:3a:9c:a5:d0:64:89:e6:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=f88880b5-6f30-4386-bb57-38f4c254fa79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4e:77:bb:5b:31:5d:ff:99:d2:fd:79:bd:84: ca:70:a4:5e:08:f6:a7:c3:a3:f3:62:ab:84:f7:82: 52:af:4f:4a:9b:35:d0:36:e5:3b:ac:c3:7d:bd:df: ec:64:ad:8f:6f:ed:1f:ec:ec:41:0b:3b:6f:1e:c0: ee:1f:2e:f9:d1:da:50:fa:d5:62:4b:be:a2:42:47: 56:8d:02:60:95:30:b5:19:89:bb:e2:eb:bb:62:40: 70:8d:4b:44:6d:33:1c:ba:6a:75:62:3a:df:40:ae: 4c:6c:f7:65:00:13:af:22:a8:27:1a:55:c6:af:91: 7b:8e:56:9c:39:0f:f1:bd:a9:2e:80:60:b8:c9:07: 64:6f:87:f0:c3:aa:20:4b:31:bc:41:e4:91:db:39: 89:c5:54:fb:c3:48:73:d9:c7:c1:7b:4d:d0:41:81: 8a:ea:df:7a:d9:05:43:30:17:ce:38:9c:6e:60:82: 3e:f9:6e:35:fd:6b:76:9a:6b:87:69:ef:55:60:82: 4f:4d:97:f8:28:e4:f6:29:90:14:6c:f8:4f:f8:37: 00:1c:bd:ce:c0:ac:e0:c3:42:6a:cb:53:b0:c4:92: 27:6e:9b:43:95:05:76:35:7f:fd:23:00:37:66:4e: b9:6a:28:01:ae:ef:dd:55:4d:28:4e:41:b3:d3:bd: 09:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A7:8F:0E:41:47:DB:10:4D:4E:B9:B3:27:4D:81:4A:DC:CA:ED:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl X509v3 Authority Key Identifier: keyid:2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer sbgp-ipAddrBlock: critical IPv4: 204.239.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:76:25:64:d5:0d:65:9c:d3:2d:8e:2a:22:80:bf:f3:68:6b: cc:bf:93:b9:8c:1f:ab:ae:db:31:3a:db:10:51:71:20:d6:9a: 3f:c4:b0:81:5f:ed:75:46:02:31:7e:02:84:b4:3b:52:e1:ea: 62:45:e5:40:0c:7a:51:49:1b:60:41:21:29:00:98:fd:3f:29: 84:a2:4f:13:5b:c6:40:ba:58:58:cb:2a:2a:c0:2b:33:ed:ae: 3a:5a:0f:ce:e3:96:4e:ac:8f:4b:fe:b7:79:b9:3b:d4:c4:a5: c0:bc:bd:af:fd:c2:99:c2:60:28:32:1c:c1:3d:32:82:ed:3b: e6:26:b8:77:60:1c:ef:17:32:a9:38:8f:cb:f8:99:9e:fb:af: 2e:51:35:a2:f6:dc:98:c4:3f:4c:cc:ce:4f:a5:cb:ab:22:2e: 0d:05:cf:e4:de:51:a8:2a:f2:ea:77:2e:1b:46:d7:4a:fc:69: 52:81:20:0f:0e:51:e0:49:11:d6:51:90:0c:6a:3c:6a:42:16: 15:98:b7:0c:75:2b:29:96:da:ab:2f:91:dc:d1:d2:52:82:77: 19:8e:c1:16:c4:2f:dc:10:d1:be:36:8a:cb:98:54:76:e8:d5: 64:db:35:a0:e0:24:6a:43:68:e0:60:ab:4a:99:87:de:71:b4: 9c:73:ab:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxeg6nKXQZInmXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQxMGFjNjctZDhmZi00ZTJlLTkyZTktOTliOGFhMjcx OGVmMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk Zjg4ODgwYjUtNmYzMC00Mzg2LWJiNTctMzhmNGMyNTRmYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6E53u1sxXf+Z0v15vYTKcKReCPanw6PzYquE 94JSr09KmzXQNuU7rMN9vd/sZK2Pb+0f7OxBCztvHsDuHy750dpQ+tViS76iQkdW jQJglTC1GYm74uu7YkBwjUtEbTMcump1YjrfQK5MbPdlABOvIqgnGlXGr5F7jlac OQ/xvakugGC4yQdkb4fww6ogSzG8QeSR2zmJxVT7w0hz2cfBe03QQYGK6t962QVD MBfOOJxuYII++W41/Wt2mmuHae9VYIJPTZf4KOT2KZAUbPhP+DcAHL3OwKzgw0Jq y1OwxJInbptDlQV2NX/9IwA3Zk65aigBru/dVU0oTkGz070JiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWnjw5BR9sQTU65sydNgUrcyu0LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZDEw YWM2Ny1kOGZmLTRlMmUtOTJlOS05OWI4YWEyNzE4ZWYvNThkODc0YTgtNjdiMi0z NTJjLWI4YWEtNmI2OTk5ZTdjYTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGQxMGFjNjctZDhmZi00ZTJlLTky ZTktOTliOGFhMjcxOGVmLzRkMTBhYzY3LWQ4ZmYtNGUyZS05MmU5LTk5YjhhYTI3 MThlZi5jcmwwHwYDVR0jBBgwFoAUL4RfQ6yTgW/6VJUXKva2p0MINvkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZDEwYWM2Ny1kOGZmLTRlMmUtOTJlOS05OWI4 YWEyNzE4ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO9WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHt2JWTVDWWc0y2OKiKAv/Noa8y/k7mMH6uu2zE62xBRcSDWmj/EsIFf 7XVGAjF+AoS0O1Lh6mJF5UAMelFJG2BBISkAmP0/KYSiTxNbxkC6WFjLKirAKzPt rjpaD87jlk6sj0v+t3m5O9TEpcC8va/9wpnCYCgyHME9MoLtO+YmuHdgHO8XMqk4 j8v4mZ77ry5RNaL23JjEP0zMzk+ly6siLg0Fz+TeUagq8up3LhtG10r8aVKBIA8O UeBJEdZRkAxqPGpCFhWYtwx1KymW2qsvkdzR0lKCdxmOwRbEL9wQ0b42isuYVHbo 1WTbNaDgJGpDaOBgq0qZh95xtJxzq8w= -----END CERTIFICATE-----Generated at Wed Jul 9 20:28:13 2025 by rpki-client