$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/0b137322-9ca3-31c8-9319-f32301edc7c7.roa File: 0b137322-9ca3-31c8-9319-f32301edc7c7.roa (raw, json) Hash identifier: g5nnPVzAsSoz4mFqgsfXrC/KRPqVDT2ml1jlRKbHSpg= Subject key identifier: 03:9B:E1:B2:D0:9F:3B:F3:69:02:56:80:E3:02:27:10:70:DC:EF:77 Certificate issuer: /CN=b24224ba-8340-4a2e-986a-5e1f9b2c2182 Certificate serial: 010D0C9F4328584A68260A07C313E52A02A3E740 Authority key identifier: F3:D3:ED:75:10:95:A0:58:67:73:5A:61:EF:97:F9:D6:F3:16:94:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/0b137322-9ca3-31c8-9319-f32301edc7c7.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397913 IP address blocks: 204.235.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:0a:07:c3:13:e5:2a:02:a3:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b24224ba-8340-4a2e-986a-5e1f9b2c2182 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=22b07195-e7f3-4904-a5d8-08e4ead41cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:91:37:d8:28:64:42:70:a0:89:ab:de:59:7d: 72:f7:21:8e:73:3b:b5:fe:b7:19:6b:2c:6b:d8:78: 64:48:bf:ce:28:65:20:bb:f9:ba:a5:88:12:23:66: 23:0d:40:f4:a1:11:e6:5d:b7:7c:59:72:65:ae:e7: 52:a0:a7:25:9c:8b:3c:10:0d:3e:d8:78:47:53:a8: 78:64:15:50:26:28:62:0b:1c:5e:57:fe:1f:42:f4: 2f:1e:2f:d6:61:3d:3d:0a:44:42:59:32:d5:7b:d2: 89:0b:e4:92:59:16:8d:40:61:6d:4f:27:71:1f:94: 47:92:95:1b:c3:7f:a7:c5:14:a4:b5:dd:9c:e3:4b: b0:3f:c1:36:31:92:d7:33:07:32:04:ff:d0:37:a3: ec:86:94:b4:30:38:a1:36:05:e6:48:4f:3b:09:13: 08:a3:4d:54:ab:e4:84:5b:b6:12:17:15:47:f1:ec: 1c:10:52:6d:0e:5f:c0:dd:5c:a0:7d:ac:11:61:e4: 06:85:33:45:b5:d1:62:34:22:c0:d9:e7:88:8e:b1: df:0c:a3:3c:13:56:ba:2d:e5:e0:8e:a6:b8:d2:91: 29:cd:ee:7d:b7:14:9f:b9:22:df:02:1a:f9:20:4e: 09:68:2f:e0:14:dd:85:3c:18:0d:c9:a4:cf:d4:bf: 11:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9B:E1:B2:D0:9F:3B:F3:69:02:56:80:E3:02:27:10:70:DC:EF:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/0b137322-9ca3-31c8-9319-f32301edc7c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.crl X509v3 Authority Key Identifier: keyid:F3:D3:ED:75:10:95:A0:58:67:73:5A:61:EF:97:F9:D6:F3:16:94:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer sbgp-ipAddrBlock: critical IPv4: 204.235.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c1:77:ae:44:40:86:a4:d3:47:f6:82:18:25:c9:30:cc:0e: 8e:71:0a:ad:d9:e7:c9:20:f3:2c:e4:cb:2b:8a:fd:30:d9:e1: b0:21:29:38:d4:42:d0:89:5a:ed:61:15:82:c2:1f:df:72:92: e1:45:47:7d:5d:51:04:24:9f:50:d1:e8:9c:ad:63:b6:e0:30: d5:6b:4b:af:bd:c0:81:72:52:79:b2:27:63:5d:71:03:d7:6d: da:c4:a2:67:6a:6b:19:59:a0:9b:28:96:dd:b0:b5:4b:0d:d7: 65:15:2a:c6:ab:59:30:ad:e2:db:ee:5c:e1:31:79:11:7e:79: fb:43:a2:d5:4f:00:4a:e5:c1:2c:de:d5:c0:2e:f8:21:21:69: 51:08:4e:75:7e:91:9d:0c:f9:2b:ba:30:bd:09:25:03:f0:6b: 8e:e0:a5:1f:1f:0b:ce:9a:b5:36:3b:70:ef:32:65:5d:6a:5c: 9b:7a:c9:09:70:3e:26:e5:b3:42:7f:23:36:57:28:c0:05:c5: 7a:f2:3d:61:9e:41:89:61:92:d1:81:92:a4:67:0b:49:e4:fc: 11:b6:0b:69:6f:96:83:0d:0d:a2:ea:bb:bb:3c:00:33:17:63: b8:f4:aa:06:a9:57:8b:ab:05:54:d7:d0:a8:d2:64:51:d2:48: f7:a8:4e:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgoHwxPlKgKj50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI0MjI0YmEtODM0MC00YTJlLTk4NmEtNWUxZjliMmMy MTgyMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MjJiMDcxOTUtZTdmMy00OTA0LWE1ZDgtMDhlNGVhZDQxY2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZE32ChkQnCgiaveWX1y9yGOczu1/rcZayxr 2HhkSL/OKGUgu/m6pYgSI2YjDUD0oRHmXbd8WXJlrudSoKclnIs8EA0+2HhHU6h4 ZBVQJihiCxxeV/4fQvQvHi/WYT09CkRCWTLVe9KJC+SSWRaNQGFtTydxH5RHkpUb w3+nxRSktd2c40uwP8E2MZLXMwcyBP/QN6PshpS0MDihNgXmSE87CRMIo01Uq+SE W7YSFxVH8ewcEFJtDl/A3VygfawRYeQGhTNFtdFiNCLA2eeIjrHfDKM8E1a6LeXg jqa40pEpze59txSfuSLfAhr5IE4JaC/gFN2FPBgNyaTP1L8RWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOb4bLQnzvzaQJWgOMCJxBw3O93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMjQy MjRiYS04MzQwLTRhMmUtOTg2YS01ZTFmOWIyYzIxODIvMGIxMzczMjItOWNhMy0z MWM4LTkzMTktZjMyMzAxZWRjN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjI0MjI0YmEtODM0MC00YTJlLTk4 NmEtNWUxZjliMmMyMTgyL2IyNDIyNGJhLTgzNDAtNGEyZS05ODZhLTVlMWY5YjJj MjE4Mi5jcmwwHwYDVR0jBBgwFoAU89PtdRCVoFhnc1ph75f51vMWlLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMjQyMjRiYS04MzQwLTRhMmUtOTg2YS01ZTFm OWIyYzIxODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzOugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDBd65EQIak00f2ghglyTDMDo5xCq3Z58kg8yzkyyuK/TDZ4bAhKTjU QtCJWu1hFYLCH99ykuFFR31dUQQkn1DR6JytY7bgMNVrS6+9wIFyUnmyJ2NdcQPX bdrEomdqaxlZoJsolt2wtUsN12UVKsarWTCt4tvuXOExeRF+eftDotVPAErlwSze 1cAu+CEhaVEITnV+kZ0M+Su6ML0JJQPwa47gpR8fC86atTY7cO8yZV1qXJt6yQlw Pibls0J/IzZXKMAFxXryPWGeQYlhktGBkqRnC0nk/BG2C2lvloMNDaLqu7s8ADMX Y7j0qgapV4urBVTX0KjSZFHSSPeoTlw= -----END CERTIFICATE-----Generated at Sun Aug 3 00:47:05 2025 by rpki-client