$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/27fb50ad-2b05-3265-be7c-7d3d367f8588.roa File: 27fb50ad-2b05-3265-be7c-7d3d367f8588.roa (raw, json) Hash identifier: ucbbK0N3Al0VFWylidm7JLo+gy6pRLw9yZ/cTXEfK3A= Subject key identifier: 2C:AA:E3:AB:F7:27:52:B3:D2:64:BD:66:6C:E5:23:91:B0:FB:13:60 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584AE46109BF9B06EA624D0014C0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/27fb50ad-2b05-3265-be7c-7d3d367f8588.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 14061 IP address blocks: 208.68.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:09:bf:9b:06:ea:62:4d:00:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=9a6cb8d9-27ba-4be8-a6fa-d3da7640aa62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:67:dd:d4:a1:c7:d2:64:bd:4c:10:12:a8: c7:fc:01:fc:c3:e2:d9:e0:6f:9c:f1:27:a7:16:9d: 01:79:00:f5:ca:46:0f:3e:05:6d:59:17:98:56:0d: 39:32:5c:17:9d:c5:37:6e:dc:02:96:32:6d:cb:49: d2:79:11:56:ee:b8:3b:c5:0c:07:05:24:49:0a:d3: 1a:8e:6b:c7:1b:59:8f:84:78:06:a0:6e:23:d2:73: f8:9d:a7:bb:5c:1d:49:90:f3:6c:3f:2b:e2:a0:5e: 94:7f:97:a7:c9:2e:ce:1a:61:7d:ec:7a:53:e6:f6: d1:3c:f7:f3:a3:04:9e:3b:18:17:64:f9:d7:93:a5: 39:d4:bc:ad:35:59:34:d4:7b:2b:a3:a9:11:a0:b4: 33:69:7a:98:33:13:7e:63:25:a4:ab:cc:b8:3c:cc: 9d:c3:20:87:55:c8:2b:42:7f:87:da:76:85:0b:ad: d8:f2:8f:52:70:32:45:f3:bf:2c:20:c1:35:54:d1: cc:6b:cb:34:4c:86:20:05:12:05:d4:7a:c4:b1:01: 65:25:58:d2:82:f5:10:88:46:c8:b5:8a:b0:d1:66: 57:b6:3a:aa:32:26:28:ee:07:49:af:97:28:75:d7: 70:2e:fd:9f:e8:51:79:86:09:3c:21:5c:72:bf:44: 3d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AA:E3:AB:F7:27:52:B3:D2:64:BD:66:6C:E5:23:91:B0:FB:13:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/27fb50ad-2b05-3265-be7c-7d3d367f8588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 208.68.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ec:9a:16:80:af:ff:71:ba:dc:f4:1b:46:f5:0c:3f:e7:0f: 33:81:61:50:83:c0:b1:c9:f1:e9:bd:53:71:b4:72:56:a1:b8: eb:b1:9d:ad:93:b5:e2:43:a4:e3:70:05:af:12:37:2b:98:9f: da:63:72:84:79:ba:86:37:22:0a:4d:49:16:f8:9b:c7:b9:24: 49:f3:a0:78:8d:76:2a:06:47:3c:7c:f5:d2:cb:5d:6f:a9:0f: f3:de:0f:09:c7:da:54:28:b9:a4:cf:88:e8:5a:ef:55:27:c3: c2:46:56:0e:a2:95:a5:6a:00:ec:1a:d1:5a:b0:30:e8:48:d4: 89:47:13:8f:8b:eb:2f:7f:1f:59:b0:1b:92:b4:f5:3a:98:c3: cc:87:b7:31:86:c3:cd:22:11:dc:fe:6b:6a:60:40:9a:bb:9d: 98:04:7f:a1:ff:30:9c:ba:c0:f1:8b:de:19:07:bf:31:34:e0: 0e:94:65:6c:4a:d4:71:f5:22:70:ac:4c:bc:0d:1b:ea:9b:91: fb:65:0d:30:81:5f:99:90:75:da:58:da:a5:c5:7f:2a:5e:6d: af:0f:64:54:f2:a6:ff:c2:e7:79:76:6e:ca:6c:6d:31:15:3a: 65:06:5d:a0:36:14:af:9c:08:59:a5:e1:55:f6:ad:b5:69:19: 4f:d7:5f:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYQm/mwbqYk0AFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk OWE2Y2I4ZDktMjdiYS00YmU4LWE2ZmEtZDNkYTc2NDBhYTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEVn3dShx9JkvUwQEqjH/AH8w+LZ4G+c8Sen Fp0BeQD1ykYPPgVtWReYVg05MlwXncU3btwCljJty0nSeRFW7rg7xQwHBSRJCtMa jmvHG1mPhHgGoG4j0nP4nae7XB1JkPNsPyvioF6Uf5enyS7OGmF97HpT5vbRPPfz owSeOxgXZPnXk6U51LytNVk01Hsro6kRoLQzaXqYMxN+YyWkq8y4PMydwyCHVcgr Qn+H2naFC63Y8o9ScDJF878sIME1VNHMa8s0TIYgBRIF1HrEsQFlJVjSgvUQiEbI tYqw0WZXtjqqMiYo7gdJr5codddwLv2f6FF5hgk8IVxyv0Q9AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyq46v3J1Kz0mS9ZmzlI5Gw+xNgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMjdmYjUwYWQtMmIwNS0z MjY1LWJlN2MtN2QzZDM2N2Y4NTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrsmhaAr/9xutz0G0b1DD/nDzOBYVCDwLHJ8em9U3G0clahuOuxna2T teJDpONwBa8SNyuYn9pjcoR5uoY3IgpNSRb4m8e5JEnzoHiNdioGRzx89dLLXW+p D/PeDwnH2lQouaTPiOha71Unw8JGVg6ilaVqAOwa0VqwMOhI1IlHE4+L6y9/H1mw G5K09TqYw8yHtzGGw80iEdz+a2pgQJq7nZgEf6H/MJy6wPGL3hkHvzE04A6UZWxK 1HH1InCsTLwNG+qbkftlDTCBX5mQddpY2qXFfypeba8PZFTypv/C53l2bspsbTEV OmUGXaA2FK+cCFml4VX2rbVpGU/XXzY= -----END CERTIFICATE-----Generated at Sat Aug 23 17:52:20 2025 by rpki-client