$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/29d5e091-9446-3719-ad71-bce2ae8ab71c.roa File: 29d5e091-9446-3719-ad71-bce2ae8ab71c.roa (raw, json) Hash identifier: WhaylViHXJeZG26wDGW4Z0kDr40Kua5s+ZLRACoZbzo= Subject key identifier: 1D:7A:B7:05:D6:EF:6B:34:B3:43:13:14:90:94:05:6A:D0:C8:B6:AF Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584AE4610B2C71B63EA4D3030D00 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/29d5e091-9446-3719-ad71-bce2ae8ab71c.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 14061 IP address blocks: 107.170.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:0b:2c:71:b6:3e:a4:d3:03:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=77f1ae72-98ab-451e-8bb0-95d3e39cbb0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ab:ab:fc:b4:65:42:16:8b:cd:9b:a2:3f:72: 8b:42:cc:25:80:6f:73:ac:c3:e6:8d:db:29:10:d0: 05:db:e3:08:de:db:8d:46:f6:81:d3:2a:2a:aa:e0: 28:63:37:3d:e0:c5:90:b1:70:48:f1:80:f3:eb:e6: 7c:6b:c8:b6:56:a3:a1:19:30:8b:1b:88:44:0f:67: 9a:80:79:f5:76:ec:24:8b:c4:84:0e:23:83:6f:cf: 1e:cc:24:5b:a3:a6:8b:6e:c5:c5:e3:31:b5:1d:58: 2f:73:95:ca:6f:b6:dd:f3:f0:ae:5a:4f:42:3b:2b: a4:4e:4f:ec:aa:01:17:38:18:11:38:75:b9:8d:2b: 8a:78:94:63:92:7b:ab:a5:04:b5:6b:61:ad:bb:df: de:09:db:82:64:33:d3:8d:1c:20:af:53:d8:98:1c: a7:89:a7:1b:ac:7c:c0:11:6d:68:d9:92:15:08:1d: 76:9d:b0:34:60:39:09:75:8e:df:f7:4a:cb:16:f8: 18:fe:f5:21:f2:dd:74:d1:31:c8:f0:31:e1:1f:59: 0c:8e:c5:a4:72:19:e1:d0:be:7c:70:a1:93:f6:57: 67:1b:88:75:1e:81:b5:39:73:1a:55:73:a6:ff:79: d4:1d:eb:be:23:76:03:dd:3a:f9:7d:50:5d:97:54: a2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7A:B7:05:D6:EF:6B:34:B3:43:13:14:90:94:05:6A:D0:C8:B6:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/29d5e091-9446-3719-ad71-bce2ae8ab71c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 107.170.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b0:45:89:e8:be:83:3b:5d:68:4d:d9:89:0a:93:2b:25:f2: 0f:ac:30:8c:d0:8c:8a:30:7b:1a:8a:9d:80:6f:8d:27:c1:20: ab:ec:60:00:16:42:89:eb:6b:60:90:2a:6f:74:97:46:f9:1b: 3c:1e:e4:0f:1f:e4:06:d7:73:94:c2:38:cc:85:13:54:60:2e: d3:c5:21:c8:8e:e3:62:ed:bb:11:10:b7:8a:f6:86:4f:1a:94: 8f:84:b5:72:82:63:cb:e7:44:c1:d3:db:54:a2:ea:20:9d:11: 6a:f2:b5:04:16:f1:59:03:a7:cb:e4:72:bb:f4:8f:96:29:47: 11:d1:5f:e4:ec:74:2d:ed:74:b4:6b:11:da:55:d5:d1:6c:17: 28:56:d2:ef:33:a4:44:59:c3:3a:25:bd:df:57:cc:06:b4:e7: 58:85:c4:36:aa:a8:fb:54:3d:23:46:48:40:f7:70:6a:4d:ec: fc:43:ea:5b:f3:5a:aa:40:a4:d2:80:fa:02:8c:9d:3b:a7:40: 90:69:bc:e6:7c:19:15:f2:70:52:ab:0d:63:c0:db:54:db:34: 97:32:91:db:29:c2:30:c7:67:ed:f3:e5:74:91:77:6b:82:90: 8b:fa:13:32:b0:50:01:d1:78:5d:62:01:9b:ae:ec:2d:e9:a9: 93:0c:35:7a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErkYQsscbY+pNMDDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NzdmMWFlNzItOThhYi00NTFlLThiYjAtOTVkM2UzOWNiYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Kur/LRlQhaLzZuiP3KLQswlgG9zrMPmjdsp ENAF2+MI3tuNRvaB0yoqquAoYzc94MWQsXBI8YDz6+Z8a8i2VqOhGTCLG4hED2ea gHn1duwki8SEDiODb88ezCRbo6aLbsXF4zG1HVgvc5XKb7bd8/CuWk9COyukTk/s qgEXOBgROHW5jSuKeJRjknurpQS1a2Gtu9/eCduCZDPTjRwgr1PYmByniacbrHzA EW1o2ZIVCB12nbA0YDkJdY7f90rLFvgY/vUh8t100THI8DHhH1kMjsWkchnh0L58 cKGT9ldnG4h1HoG1OXMaVXOm/3nUHeu+I3YD3Tr5fVBdl1SiywIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFB16twXW72s0s0MTFJCUBWrQyLavMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMjlkNWUwOTEtOTQ0Ni0z NzE5LWFkNzEtYmNlMmFlOGFiNzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAa6owVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACbBFiei+gztdaE3ZiQqTKyXyD6wwjNCMijB7GoqdgG+NJ8Egq+xgABZC ietrYJAqb3SXRvkbPB7kDx/kBtdzlMI4zIUTVGAu08UhyI7jYu27ERC3ivaGTxqU j4S1coJjy+dEwdPbVKLqIJ0RavK1BBbxWQOny+Ryu/SPlilHEdFf5Ox0Le10tGsR 2lXV0WwXKFbS7zOkRFnDOiW931fMBrTnWIXENqqo+1Q9I0ZIQPdwak3s/EPqW/Na qkCk0oD6AoydO6dAkGm85nwZFfJwUqsNY8DbVNs0lzKR2ynCMMdn7fPldJF3a4KQ i/oTMrBQAdF4XWIBm67sLempkww1eg== -----END CERTIFICATE-----Generated at Sat Aug 23 18:13:52 2025 by rpki-client