$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a1bfb361-9899-3482-a213-5e754c1091f7.roa File: a1bfb361-9899-3482-a213-5e754c1091f7.roa (raw, json) Hash identifier: O+S7wdZAdeJymgbCu3YV5m3QZbxx7R33HTDFZvsJKGg= Subject key identifier: 49:D3:16:04:B1:3E:06:4D:0B:28:77:D1:4A:69:3D:2C:5B:81:03:FC Certificate issuer: /CN=eb36756e-e433-4732-a707-a9fa13965624 Certificate serial: 010D0C9F4328584AD23BD28C37A9D60F0F375400 Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a1bfb361-9899-3482-a213-5e754c1091f7.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 3565 IP address blocks: 208.68.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:d2:8c:37:a9:d6:0f:0f:37:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=25ff0f95-8ff7-4b07-9eda-d6971d9a305f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7d:3d:dc:86:7b:82:b2:73:36:b9:52:e8:dc: 7b:49:54:69:3b:68:2f:87:70:ce:31:17:73:a4:9b: 22:54:f0:8d:e6:2d:4e:54:6f:40:f7:11:85:e0:38: 88:9a:70:d3:c4:d0:6d:4e:36:fa:e7:7a:93:eb:37: b5:b4:fd:5f:96:a1:a5:46:c7:68:9a:b6:9c:4e:56: bb:15:81:06:7e:fa:7a:0e:d2:35:75:52:c2:ff:20: ab:a4:e7:4b:be:ba:b5:8f:20:70:f4:df:b5:ab:53: fe:78:d1:54:16:f6:6b:53:42:64:0e:10:89:15:e3: ef:cd:9f:b8:a8:ac:75:70:75:e7:41:9b:2a:60:f7: 31:2a:29:5e:f8:22:aa:68:ef:06:84:b1:5c:04:ad: cd:7a:0b:7e:dd:b6:c4:7b:5c:d2:95:20:0c:58:7f: 57:5a:d4:64:74:2d:60:37:49:56:98:9d:57:07:9b: 18:93:f4:44:dc:aa:c5:c7:df:1a:1d:61:15:f2:27: 89:06:e0:5a:af:e6:aa:00:28:d4:2c:1c:84:ca:7a: 2c:d8:a9:14:ba:dc:c0:a6:19:96:f4:4b:34:82:2c: fe:7f:f4:64:b2:93:bc:a3:06:8f:3f:35:36:1b:f1: 27:be:4e:5d:f2:4f:89:50:56:1f:3f:a2:ed:e9:ac: a1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D3:16:04:B1:3E:06:4D:0B:28:77:D1:4A:69:3D:2C:5B:81:03:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a1bfb361-9899-3482-a213-5e754c1091f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl X509v3 Authority Key Identifier: keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer sbgp-ipAddrBlock: critical IPv4: 208.68.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:f1:e8:7c:1c:20:86:eb:b5:7d:c6:32:69:ac:40:63:1e:d9: 67:2f:23:cb:39:df:4d:d7:40:39:1b:31:38:34:77:86:a2:d8: 56:51:ce:63:69:8b:59:b4:ae:0a:da:8e:6b:a6:9b:eb:c8:6c: fe:38:18:fb:90:25:b0:55:38:8c:9f:04:3e:a0:d4:92:e1:f8: 2d:09:b4:bc:3d:48:20:6c:b7:0c:b3:fd:e9:9a:83:55:d3:a7: 6d:e1:0d:59:a1:de:c4:ab:4c:a0:5b:76:6b:ba:40:75:ef:08: 66:b0:f3:98:da:e7:2a:0f:ac:9a:3c:b6:2f:7d:2a:5d:cf:1d: d4:51:9e:13:44:92:9f:0c:91:3e:65:77:0f:9b:34:56:ae:bf: 4b:cd:d6:1a:63:db:8c:1f:4b:b1:00:a9:a1:55:36:ac:7c:15: e6:35:d2:8e:16:2d:52:b0:94:6a:c0:15:e7:e2:60:0a:ad:06: a1:21:f8:f4:b6:4c:6c:7c:e6:5f:ff:5b:32:4f:38:e3:c9:a7: 48:2a:f3:a1:b8:30:6b:6e:a0:4d:83:88:55:de:a9:b7:ee:b1: 4e:b6:6f:75:e0:21:8f:39:d3:56:f3:62:08:65:fb:75:6a:b0: f5:a0:92:46:7e:18:9c:83:49:64:88:c9:d0:4d:2f:fa:06:33: ba:83:a7:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9KMN6nWDw83VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIzNjc1NmUtZTQzMy00NzMyLWE3MDctYTlmYTEzOTY1 NjI0MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MjVmZjBmOTUtOGZmNy00YjA3LTllZGEtZDY5NzFkOWEzMDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun093IZ7grJzNrlS6Nx7SVRpO2gvh3DOMRdz pJsiVPCN5i1OVG9A9xGF4DiImnDTxNBtTjb653qT6ze1tP1flqGlRsdomracTla7 FYEGfvp6DtI1dVLC/yCrpOdLvrq1jyBw9N+1q1P+eNFUFvZrU0JkDhCJFePvzZ+4 qKx1cHXnQZsqYPcxKile+CKqaO8GhLFcBK3Negt+3bbEe1zSlSAMWH9XWtRkdC1g N0lWmJ1XB5sYk/RE3KrFx98aHWEV8ieJBuBar+aqACjULByEynos2KkUutzAphmW 9Es0giz+f/RkspO8owaPPzU2G/Envk5d8k+JUFYfP6Lt6ayhWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnTFgSxPgZNCyh30UppPSxbgQP8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYjM2 NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZhMTM5NjU2MjQvYTFiZmIzNjEtOTg5OS0z NDgyLWEyMTMtNWU3NTRjMTA5MWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWIzNjc1NmUtZTQzMy00NzMyLWE3 MDctYTlmYTEzOTY1NjI0L2ViMzY3NTZlLWU0MzMtNDczMi1hNzA3LWE5ZmExMzk2 NTYyNC5jcmwwHwYDVR0jBBgwFoAUiA349Y8cCk5qFJhNT4/nj8QP0TIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lYjM2NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZh MTM5NjU2MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ETfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzx6HwcIIbrtX3GMmmsQGMe2WcvI8s5303XQDkbMTg0d4ai2FZRzmNp i1m0rgrajmumm+vIbP44GPuQJbBVOIyfBD6g1JLh+C0JtLw9SCBstwyz/emag1XT p23hDVmh3sSrTKBbdmu6QHXvCGaw85ja5yoPrJo8ti99Kl3PHdRRnhNEkp8MkT5l dw+bNFauv0vN1hpj24wfS7EAqaFVNqx8FeY10o4WLVKwlGrAFefiYAqtBqEh+PS2 TGx85l//WzJPOOPJp0gq86G4MGtuoE2DiFXeqbfusU62b3XgIY8501bzYghl+3Vq sPWgkkZ+GJyDSWSIydBNL/oGM7qDp6Y= -----END CERTIFICATE-----Generated at Sun Aug 24 10:51:43 2025 by rpki-client