$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa File: a665e37a-2264-3b19-b8a4-ae270c10d73a.roa (raw, json) Hash identifier: WJE8QpZS304PrxVpIRnkJ2hXgRfmdYVewbTKZIuTAKU= Subject key identifier: 44:75:5F:B3:8B:CB:6E:DD:05:AB:4A:43:DC:8C:30:2F:F3:D9:AB:0B Certificate issuer: /CN=eb36756e-e433-4732-a707-a9fa13965624 Certificate serial: 010D0C9F4328584AD23BD29C7796F09050F92950 Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 3565 IP address blocks: 208.68.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:d2:9c:77:96:f0:90:50:f9:29:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=bbd456fb-c44d-4208-8ecc-30157afa323e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:bd:75:b6:33:0b:6f:e9:40:fb:18:e9:2b: fa:b7:85:49:84:83:60:0a:65:24:99:3d:2d:c4:45: d6:10:7d:9e:08:25:b6:61:a3:b3:65:97:0b:7f:7d: 45:1e:58:38:0c:fc:6e:fe:34:59:a2:bf:8f:13:1c: b9:45:95:6f:d9:80:16:ee:ab:e5:35:11:2d:4c:b1: 15:13:26:fa:c7:33:94:b5:98:31:5f:a0:26:35:9a: 68:9e:97:f3:e4:66:41:f8:25:81:54:a3:a5:5d:de: d8:4f:d4:48:84:bf:4e:b1:79:53:26:b0:11:c9:51: 12:a7:21:bc:86:11:33:76:03:11:c6:a9:c8:87:a5: b6:5b:e4:d6:68:cc:9c:58:04:65:ee:b8:d3:6f:84: 1c:65:78:84:c2:0a:90:d2:3a:c8:55:7e:a5:6c:be: 45:07:5d:68:a2:ea:17:12:5e:c2:ca:81:d0:04:af: 8b:90:32:ea:81:66:16:cb:7f:7e:36:f8:fe:94:31: d4:45:0c:61:f2:2f:d0:6b:c1:ce:ac:5d:4d:b1:7b: 26:c7:e7:9b:80:f9:f8:e0:e8:ed:53:27:92:28:f1: f9:d1:e8:18:af:49:ae:b5:3d:bc:be:0a:1a:cf:ff: b1:22:2b:62:5a:9d:19:b7:5d:6d:6a:d0:3f:dd:48: 39:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:75:5F:B3:8B:CB:6E:DD:05:AB:4A:43:DC:8C:30:2F:F3:D9:AB:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl X509v3 Authority Key Identifier: keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer sbgp-ipAddrBlock: critical IPv4: 208.68.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:7d:a9:70:0f:a7:49:c0:66:6e:08:76:ac:df:7b:1d:1e:5d: e2:1b:56:85:86:ca:ae:fc:cf:5e:00:1e:72:dc:53:6a:88:ad: 45:af:c3:09:7a:11:5c:59:ad:a0:48:36:a9:c5:c3:c3:1f:49: 20:45:b0:92:2c:09:34:b6:38:59:ef:e5:5e:e7:db:70:a0:8b: c6:d3:79:35:b0:71:1a:f8:1e:1f:9b:14:b3:41:73:f3:d8:bb: 93:e0:ca:ca:a2:f6:eb:d5:b7:41:8a:52:df:aa:81:d6:29:00: d1:2b:a1:50:02:e9:50:39:ce:51:62:45:1d:92:a0:64:a0:e5: 91:bc:a4:eb:47:4f:99:ea:8f:3a:6a:4d:30:84:b1:cb:1b:db: 50:14:40:57:c7:e0:df:8f:a6:87:a8:b8:81:c9:96:15:b9:cb: 5e:4d:74:f0:17:7b:c6:39:69:b9:80:fa:5e:0e:1f:8e:b4:4a: e9:df:54:c4:52:14:c0:d0:5f:a1:e0:5d:83:15:42:57:06:70: 1a:fe:1c:e5:f1:c6:40:b8:43:36:a8:ed:6c:33:28:ba:d2:19: 4b:53:68:6f:09:c9:04:8e:db:be:cd:81:e6:ff:39:f4:3f:0f: ad:4c:f9:c5:07:ec:bf:95:48:ab:64:4f:2f:ee:a0:c0:22:f7: 30:84:0f:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9Kcd5bwkFD5KVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIzNjc1NmUtZTQzMy00NzMyLWE3MDctYTlmYTEzOTY1 NjI0MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YmJkNDU2ZmItYzQ0ZC00MjA4LThlY2MtMzAxNTdhZmEzMjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuki9dbYzC2/pQPsY6Sv6t4VJhINgCmUkmT0t xEXWEH2eCCW2YaOzZZcLf31FHlg4DPxu/jRZor+PExy5RZVv2YAW7qvlNREtTLEV Eyb6xzOUtZgxX6AmNZponpfz5GZB+CWBVKOlXd7YT9RIhL9OsXlTJrARyVESpyG8 hhEzdgMRxqnIh6W2W+TWaMycWARl7rjTb4QcZXiEwgqQ0jrIVX6lbL5FB11oouoX El7CyoHQBK+LkDLqgWYWy39+Nvj+lDHURQxh8i/Qa8HOrF1NsXsmx+ebgPn44Ojt UyeSKPH50egYr0mutT28vgoaz/+xIitiWp0Zt11tatA/3Ug5WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFER1X7OLy27dBatKQ9yMMC/z2asLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYjM2 NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZhMTM5NjU2MjQvYTY2NWUzN2EtMjI2NC0z YjE5LWI4YTQtYWUyNzBjMTBkNzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWIzNjc1NmUtZTQzMy00NzMyLWE3 MDctYTlmYTEzOTY1NjI0L2ViMzY3NTZlLWU0MzMtNDczMi1hNzA3LWE5ZmExMzk2 NTYyNC5jcmwwHwYDVR0jBBgwFoAUiA349Y8cCk5qFJhNT4/nj8QP0TIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lYjM2NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZh MTM5NjU2MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ETcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAF9qXAPp0nAZm4Idqzfex0eXeIbVoWGyq78z14AHnLcU2qIrUWvwwl6 EVxZraBINqnFw8MfSSBFsJIsCTS2OFnv5V7n23Cgi8bTeTWwcRr4Hh+bFLNBc/PY u5Pgysqi9uvVt0GKUt+qgdYpANEroVAC6VA5zlFiRR2SoGSg5ZG8pOtHT5nqjzpq TTCEscsb21AUQFfH4N+PpoeouIHJlhW5y15NdPAXe8Y5abmA+l4OH460SunfVMRS FMDQX6HgXYMVQlcGcBr+HOXxxkC4Qzao7WwzKLrSGUtTaG8JyQSO277Ngeb/OfQ/ D61M+cUH7L+VSKtkTy/uoMAi9zCED5Q= -----END CERTIFICATE-----Generated at Sun Aug 24 07:13:44 2025 by rpki-client