$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff6e7d7f-03ef-33ed-9418-2b53a742ec30.roa File: ff6e7d7f-03ef-33ed-9418-2b53a742ec30.roa (raw, json) Hash identifier: dJLHY+cDZBe3tlKFXg3IPPH+E0wVG2P+DfSVdu9t8dU= Subject key identifier: 12:A3:A0:55:38:90:7F:8F:81:F8:73:DF:3B:24:2D:CB:CD:91:57:80 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AD0D66D8DA54FF27EFC8FBA80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff6e7d7f-03ef-33ed-9418-2b53a742ec30.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 149440 IP address blocks: 168.93.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:6d:8d:a5:4f:f2:7e:fc:8f:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=acab7d4b-c520-4cf7-aa1e-3ccff1bcd7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1b:33:49:2a:00:29:a3:b4:12:94:e4:0f:9c: 3f:90:5a:f0:84:4e:7e:51:75:cd:f9:2b:f3:a9:32: 65:17:b0:21:1a:54:d1:fe:8e:6c:52:22:05:b2:73: 37:56:3a:94:71:1a:1b:9d:8a:7a:11:b6:b6:df:17: ae:e3:ec:e1:14:00:04:15:1b:2c:7f:9f:50:89:91: 6a:17:00:85:8e:4e:74:48:9a:d7:e0:14:ea:1f:b1: cc:62:fe:a6:21:d9:25:bc:92:26:c8:e2:48:cc:4c: b2:5e:54:ca:90:d7:e1:ca:42:80:32:84:e9:e8:c5: 3b:ed:bd:97:99:d7:55:50:55:f0:ba:fd:89:fc:3f: d1:f4:a5:39:7b:05:4d:4f:c1:4d:57:30:70:02:f6: 15:b0:5b:f7:ac:2a:9d:e1:7d:b2:cf:90:ea:f2:a5: ca:42:c7:5c:7e:12:2f:30:5b:7c:4b:54:33:13:84: 38:22:e8:6b:93:8b:13:31:a6:33:6f:17:bd:4f:31: 1d:59:0f:c4:ec:12:1a:41:e3:7b:89:68:b2:3e:f4: 26:1f:a1:6b:10:1e:f3:e1:d4:9a:75:f6:c1:7c:81: 9d:4f:16:81:a4:56:40:d9:d5:0a:87:54:71:c2:9e: 2e:18:0e:b1:32:d8:5c:b9:a4:f6:9f:9d:aa:5b:a9: 55:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A3:A0:55:38:90:7F:8F:81:F8:73:DF:3B:24:2D:CB:CD:91:57:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff6e7d7f-03ef-33ed-9418-2b53a742ec30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 168.93.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:65:a9:0f:8b:f4:1a:0b:e3:4a:f7:14:87:a4:c9:6c:23:5d: 82:15:94:f5:d3:79:88:87:32:e9:4a:11:64:ea:f5:df:40:cd: 2d:99:01:5b:57:36:5c:a0:42:fc:41:99:79:31:e7:f7:3b:b7: 66:ab:7c:0d:ef:9a:aa:75:e0:81:82:3e:3c:96:22:df:e4:75: fc:ce:04:af:8b:58:05:98:e6:43:8f:73:2d:99:ce:dd:7d:f2: f2:7f:b6:01:77:d6:9a:3e:10:5e:aa:12:08:23:ab:7f:69:63: b4:36:a5:1a:d5:81:88:5a:b8:21:5f:46:bb:f0:cc:bd:a6:6c: 90:f3:2c:b0:7f:9f:27:2e:b1:d2:f1:f4:e7:40:15:c7:d5:9a: ff:25:3c:87:05:0f:7a:b8:e8:db:a2:c3:52:ab:6b:2b:66:8b: 2f:82:ef:be:45:45:b3:13:95:b1:08:10:9a:11:cc:fe:4f:6b: 1d:42:53:75:b6:88:70:79:ce:4f:10:5b:97:eb:b9:94:fe:ab: fe:9b:9e:cf:d5:2c:f7:61:7b:cb:62:06:ec:f7:f4:8c:98:52: 6c:98:2d:4c:a1:65:1e:8f:a1:8d:bc:e5:35:1f:f3:2f:3d:10: 0d:e5:2e:69:27:4e:da:2f:3c:26:c6:17:8e:a3:8e:65:49:94: bc:bc:a3:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1m2NpU/yfvyPuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk YWNhYjdkNGItYzUyMC00Y2Y3LWFhMWUtM2NjZmYxYmNkN2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihszSSoAKaO0EpTkD5w/kFrwhE5+UXXN+Svz qTJlF7AhGlTR/o5sUiIFsnM3VjqUcRobnYp6Eba23xeu4+zhFAAEFRssf59QiZFq FwCFjk50SJrX4BTqH7HMYv6mIdklvJImyOJIzEyyXlTKkNfhykKAMoTp6MU77b2X mddVUFXwuv2J/D/R9KU5ewVNT8FNVzBwAvYVsFv3rCqd4X2yz5Dq8qXKQsdcfhIv MFt8S1QzE4Q4Iuhrk4sTMaYzbxe9TzEdWQ/E7BIaQeN7iWiyPvQmH6FrEB7z4dSa dfbBfIGdTxaBpFZA2dUKh1Rxwp4uGA6xMthcuaT2n52qW6lVBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKjoFU4kH+Pgfhz3zskLcvNkVeAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmY2ZTdkN2YtMDNlZi0z M2VkLTk0MTgtMmI1M2E3NDJlYzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF3WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVlqQ+L9BoL40r3FIekyWwjXYIVlPXTeYiHMulKEWTq9d9AzS2ZAVtX NlygQvxBmXkx5/c7t2arfA3vmqp14IGCPjyWIt/kdfzOBK+LWAWY5kOPcy2Zzt19 8vJ/tgF31po+EF6qEggjq39pY7Q2pRrVgYhauCFfRrvwzL2mbJDzLLB/nycusdLx 9OdAFcfVmv8lPIcFD3q46Nuiw1Kraytmiy+C775FRbMTlbEIEJoRzP5Pax1CU3W2 iHB5zk8QW5fruZT+q/6bns/VLPdhe8tiBuz39IyYUmyYLUyhZR6PoY285TUf8y89 EA3lLmknTtovPCbGF46jjmVJlLy8o28= -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:02 2025 by rpki-client