$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/08c816d8-7401-3f72-a18e-ad21b4840346.roa File: 08c816d8-7401-3f72-a18e-ad21b4840346.roa (raw, json) Hash identifier: 0s2cDkGnoxNsezF5Ea9a57B4OIzYpLUSnsHnngbs+gE= Subject key identifier: 40:CC:7E:61:12:8D:9F:06:49:46:9E:03:C9:E6:A1:8F:6E:75:69:D6 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584AD5EF51108D495BDD936C1A80 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/08c816d8-7401-3f72-a18e-ad21b4840346.roa Signing time: Tue 12 Aug 2025 20:50:08 +0000 ROA not before: Tue 12 Aug 2025 20:50:08 +0000 ROA not after: Mon 10 Nov 2025 21:50:08 +0000 asID: 3561 IP address blocks: 204.189.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:ef:51:10:8d:49:5b:dd:93:6c:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Aug 12 20:50:08 2025 GMT Not After : Nov 10 21:50:08 2025 GMT Subject: CN=75c68001-7eee-4e33-b151-028cd3376d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:78:8f:db:68:6e:20:85:12:bd:73:c9:95:e9: 9e:d7:98:cc:f6:e4:f5:cc:12:90:a3:1c:fe:76:97: 13:c0:4a:f2:e0:0c:e2:be:12:10:05:b2:e1:b4:eb: 84:14:6e:f1:49:57:91:b4:bc:d6:76:07:52:1e:2f: f3:4c:dc:d2:88:ae:cd:2c:7a:45:81:29:c5:9d:51: 53:3d:c8:a9:85:00:1f:93:61:44:08:09:ef:4e:06: 44:22:5e:11:f4:36:84:e0:09:c5:c8:a5:2f:d3:58: 08:4e:fd:08:6f:78:a6:35:de:87:b9:a5:26:96:82: 06:ea:5a:e7:e6:e4:7c:63:f7:1e:2f:d4:bb:95:aa: f0:12:11:2f:f0:07:d6:eb:0e:41:9c:8c:74:c3:a2: 57:50:a3:1e:cb:15:51:f9:7c:71:b8:30:bf:a3:ec: 20:16:05:d2:ba:9c:4c:66:a1:ca:89:5e:fc:3b:13: 9e:c1:24:e8:58:ef:6e:92:8a:58:66:85:02:95:23: e7:70:3e:c9:cd:22:68:79:36:06:a0:79:f3:c7:71: f0:42:b7:67:0a:a8:17:b4:1c:ca:20:13:ee:93:8f: c0:ad:1e:5b:fc:3d:4b:a0:75:69:1a:8a:f9:d5:fb: 54:a9:40:21:7d:75:2c:96:2c:42:b0:24:9c:1c:a6: 26:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CC:7E:61:12:8D:9F:06:49:46:9E:03:C9:E6:A1:8F:6E:75:69:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/08c816d8-7401-3f72-a18e-ad21b4840346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 204.189.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:2d:2e:8e:57:2d:ac:68:8b:d5:56:91:2f:bd:c5:a1:8a:de: 36:33:96:6b:88:d1:d3:09:ad:31:44:52:d3:fb:ac:4a:2d:0f: cc:dc:e1:ce:b9:13:b9:6d:4b:d4:3b:2b:88:b6:7f:1b:69:b3: 8b:cb:d1:ec:a3:34:5d:b2:8f:1c:26:10:18:e8:23:c6:0a:cb: a0:3d:f8:38:b9:77:69:4e:43:b0:41:dd:1e:fa:12:52:ee:df: 2f:ec:45:80:65:d3:64:95:f4:83:53:c6:c0:c7:4c:b5:a5:95: d0:83:9a:dd:1a:14:90:c4:6a:ee:65:02:1b:0b:79:2e:81:f8: ff:b9:47:d3:23:07:77:8f:ce:06:99:41:a5:97:47:96:a8:e4: ff:b1:0c:cb:ee:05:9c:48:58:1e:f5:90:f5:23:60:f5:e9:b4: e2:9b:a5:85:be:36:4b:0a:dd:25:76:69:4d:9f:f8:2b:ed:fa: 6b:b9:64:a8:70:cb:af:4e:d3:e1:26:4b:18:7f:eb:29:6e:bb: aa:a5:7f:4e:33:1f:c2:b3:72:fc:8b:be:c3:6a:47:be:4b:01: 1c:cf:cd:2e:9e:6c:77:01:3f:c0:73:48:04:fe:06:1a:47:15: 04:e9:bc:bf:df:a4:da:c1:94:e7:12:c5:e5:f6:18:45:bb:15: 64:b0:e8:30 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErV71EQjUlb3ZNsGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDgxMjIwNTAwOFoXDTI1MTExMDIxNTAwOFowLzEtMCsGA1UEAxMk NzVjNjgwMDEtN2VlZS00ZTMzLWIxNTEtMDI4Y2QzMzc2ZDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3iP22huIIUSvXPJleme15jM9uT1zBKQoxz+ dpcTwEry4AzivhIQBbLhtOuEFG7xSVeRtLzWdgdSHi/zTNzSiK7NLHpFgSnFnVFT PciphQAfk2FECAnvTgZEIl4R9DaE4AnFyKUv01gITv0Ib3imNd6HuaUmloIG6lrn 5uR8Y/ceL9S7larwEhEv8AfW6w5BnIx0w6JXUKMeyxVR+XxxuDC/o+wgFgXSupxM ZqHKiV78OxOewSToWO9ukopYZoUClSPncD7JzSJoeTYGoHnzx3HwQrdnCqgXtBzK IBPuk4/ArR5b/D1LoHVpGor51ftUqUAhfXUslixCsCScHKYmlQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEDMfmESjZ8GSUaeA8nmoY9udWnWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvMDhjODE2ZDgtNzQwMS0z ZjcyLWExOGUtYWQyMWI0ODQwMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzL0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAVS0ujlctrGiL1VaRL73FoYreNjOWa4jR0wmtMURS0/usSi0PzNzhzrkT uW1L1DsriLZ/G2mzi8vR7KM0XbKPHCYQGOgjxgrLoD34OLl3aU5DsEHdHvoSUu7f L+xFgGXTZJX0g1PGwMdMtaWV0IOa3RoUkMRq7mUCGwt5LoH4/7lH0yMHd4/OBplB pZdHlqjk/7EMy+4FnEhYHvWQ9SNg9em04pulhb42SwrdJXZpTZ/4K+36a7lkqHDL r07T4SZLGH/rKW67qqV/TjMfwrNy/Iu+w2pHvksBHM/NLp5sdwE/wHNIBP4GGkcV BOm8v9+k2sGU5xLF5fYYRbsVZLDoMA== -----END CERTIFICATE-----Generated at Sat Aug 23 18:24:18 2025 by rpki-client