$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8c7713fe-d02e-3839-8767-5850385e7210.roa File: 8c7713fe-d02e-3839-8767-5850385e7210.roa (raw, json) Hash identifier: qic0rx/PpnsYMtWoxTt4daQA5q8Uaprgu1umJR89Pnc= Subject key identifier: B3:AF:58:40:36:95:FD:C2:16:4F:2F:92:3C:32:AC:80:29:08:47:BE Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584ABD4BA76464F9CE88C614AB00 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8c7713fe-d02e-3839-8767-5850385e7210.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 26441 IP address blocks: 69.172.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:a7:64:64:f9:ce:88:c6:14:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=24089d91-0c48-4afb-9929-3cd36a833518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ab:59:07:bf:33:ed:06:e5:44:66:e5:4c:27: 63:6e:23:c2:eb:c1:d5:24:71:f7:d1:f1:11:4b:3b: fc:d0:b9:a3:1f:12:d7:65:48:5e:e7:fc:3a:47:6b: 46:01:b2:c9:47:1f:3c:09:dd:69:d3:3d:58:2f:63: be:ee:96:b0:e7:de:5e:54:a7:9f:ee:6f:51:9c:0e: 96:c8:d6:11:fe:06:f8:a8:40:1e:ca:36:dc:2a:65: da:d8:ee:2f:0d:44:85:7a:6f:43:06:b3:f1:ac:1a: 26:68:01:bf:d2:63:3d:fe:46:16:1b:41:00:0b:6c: a1:5f:d1:96:66:66:7d:9f:64:f4:c3:a2:d8:6c:13: 92:3a:b9:38:c7:89:e4:0d:45:77:26:4b:12:9d:5d: 82:aa:bf:c9:77:14:9c:8a:3b:62:e8:b0:9e:35:d2: e6:bd:d6:ee:d2:0f:0c:32:7b:6f:48:d1:f7:13:15: 2e:b8:78:45:28:f7:91:d3:43:1d:19:3f:ef:46:04: 82:e6:12:54:71:9a:cd:59:e0:b9:e1:24:ef:36:9a: 48:9e:3e:f4:67:6f:bd:28:61:20:ac:19:d5:27:5e: a1:f4:ec:f2:10:ab:b4:08:f6:1f:44:79:be:f2:c3: dd:c1:33:35:09:e8:e8:da:2a:ad:59:b7:1d:af:f1: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AF:58:40:36:95:FD:C2:16:4F:2F:92:3C:32:AC:80:29:08:47:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8c7713fe-d02e-3839-8767-5850385e7210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 69.172.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:04:b4:b4:19:77:69:f9:cc:5e:f4:5a:0e:75:22:9b:33:6a: 65:5b:2f:a7:1e:15:33:a9:ee:4c:e5:2c:1e:55:04:23:2a:f4: 8f:86:2d:c0:63:78:53:95:66:49:fe:c1:bf:ea:ec:df:7c:4f: 75:9a:cc:18:1a:47:49:c7:ec:f8:38:84:aa:34:a1:14:25:98: e1:4d:4f:8a:06:be:dd:e5:a1:89:47:ec:08:30:ec:98:d4:57: 8e:f5:20:7b:ff:e1:6e:d1:82:d8:72:4d:e3:16:46:3c:81:87: a5:7e:c4:36:64:ac:92:80:89:90:8d:8a:62:ae:1a:28:aa:71: 64:98:77:11:01:42:21:5c:2b:1b:61:47:a4:8c:75:86:b8:13: 70:86:82:11:d1:2f:9a:37:fa:43:16:86:67:8d:63:dd:2f:08: 74:d1:f9:37:79:b1:08:5e:98:cb:a0:fd:f4:3b:cb:01:05:fa: f7:d4:7c:e2:e8:42:db:5f:05:02:f1:5c:38:cc:ca:4a:83:c2: 78:4a:bb:6b:70:20:6e:57:90:be:70:ec:4c:1e:5b:3e:b8:27: 9f:15:c3:ac:32:a1:f4:33:fc:f3:03:cd:1e:d6:e3:05:a1:a1: 4e:88:e6:2e:a9:37:eb:24:ba:79:b4:6c:21:4a:cb:5a:98:fe: a8:03:06:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S6dkZPnOiMYUqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk MjQwODlkOTEtMGM0OC00YWZiLTk5MjktM2NkMzZhODMzNTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKtZB78z7QblRGblTCdjbiPC68HVJHH30fER Szv80LmjHxLXZUhe5/w6R2tGAbLJRx88Cd1p0z1YL2O+7paw595eVKef7m9RnA6W yNYR/gb4qEAeyjbcKmXa2O4vDUSFem9DBrPxrBomaAG/0mM9/kYWG0EAC2yhX9GW ZmZ9n2T0w6LYbBOSOrk4x4nkDUV3JksSnV2Cqr/JdxScijti6LCeNdLmvdbu0g8M MntvSNH3ExUuuHhFKPeR00MdGT/vRgSC5hJUcZrNWeC54STvNppInj70Z2+9KGEg rBnVJ16h9OzyEKu0CPYfRHm+8sPdwTM1Cejo2iqtWbcdr/H5RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOvWEA2lf3CFk8vkjwyrIApCEe+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvOGM3NzEzZmUtZDAyZS0z ODM5LTg3NjctNTg1MDM4NWU3MjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARaz/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkEtLQZd2n5zF70Wg51IpszamVbL6ceFTOp7kzlLB5VBCMq9I+GLcBj eFOVZkn+wb/q7N98T3WazBgaR0nH7Pg4hKo0oRQlmOFNT4oGvt3loYlH7Agw7JjU V471IHv/4W7RgthyTeMWRjyBh6V+xDZkrJKAiZCNimKuGiiqcWSYdxEBQiFcKxth R6SMdYa4E3CGghHRL5o3+kMWhmeNY90vCHTR+Td5sQhemMug/fQ7ywEF+vfUfOLo QttfBQLxXDjMykqDwnhKu2twIG5XkL5w7EweWz64J58Vw6wyofQz/PMDzR7W4wWh oU6I5i6pN+skunm0bCFKy1qY/qgDBkY= -----END CERTIFICATE-----Generated at Sun Aug 24 00:31:49 2025 by rpki-client