$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/366115b5-c36e-3002-98be-5414f7a238fe.roa File: 366115b5-c36e-3002-98be-5414f7a238fe.roa (raw, json) Hash identifier: aFGGbOqNvBM6Htzb+lqMai0FFnEmGBwrqCGkJOxsf9A= Subject key identifier: 97:F6:81:72:A6:D5:1B:85:D7:86:6F:B7:F8:AA:CD:A7:E1:B6:BB:D2 Certificate issuer: /CN=307848a1-01e5-4124-ac5f-8d98a3abaa0d Certificate serial: 010D0C9F4328584AD23BB2E2C1F8FE0B70CAEA00 Authority key identifier: 56:61:05:E5:78:59:E0:0E:D5:6A:AE:0A:9C:D5:93:9D:BA:35:C8:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/366115b5-c36e-3002-98be-5414f7a238fe.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 14618 IP address blocks: 167.94.127.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b2:e2:c1:f8:fe:0b:70:ca:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307848a1-01e5-4124-ac5f-8d98a3abaa0d Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=91d7c620-c797-418f-ade9-aec273619a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9f:39:32:8c:0f:66:23:24:e1:ab:b5:9f:86: c3:17:88:50:c9:7b:12:af:4b:bf:d3:7b:09:56:2f: c9:89:34:a7:d9:37:47:dc:15:1b:4b:ce:02:79:00: 49:4d:02:96:53:62:5f:b9:bf:06:63:5e:be:66:9c: 3a:b9:3b:ad:33:14:4d:e2:bd:78:a4:01:1e:f5:a2: a0:65:df:8d:42:66:96:0d:b9:fb:9f:0c:6f:bd:85: 56:35:20:73:44:6b:9a:78:93:8f:8f:5b:a9:79:b4: 2d:5a:28:8f:64:3e:c4:32:f0:b7:b2:0c:f7:62:bc: 83:a5:23:75:5b:a0:d0:00:d8:3f:7d:4e:9b:49:1a: 6c:d3:3e:4c:d9:14:2c:5d:98:40:ab:f8:de:19:c3: 11:5d:9f:b2:29:2f:bd:ba:11:22:67:7f:a2:12:81: a1:74:32:a7:04:26:d6:7f:2f:8e:27:ed:b5:50:62: f3:a5:ce:62:31:fb:7b:38:fe:da:22:bf:00:63:19: a2:e8:0d:db:bd:ba:78:e9:06:a5:6a:34:c9:0a:6f: c7:b7:f3:8d:2f:55:47:83:f0:24:51:90:d3:11:0c: 46:1b:1e:a7:ae:89:91:55:17:91:ae:fa:40:bc:96: 9c:5e:db:af:5a:93:eb:ce:6d:43:af:d3:89:88:5a: d5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F6:81:72:A6:D5:1B:85:D7:86:6F:B7:F8:AA:CD:A7:E1:B6:BB:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/366115b5-c36e-3002-98be-5414f7a238fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.crl X509v3 Authority Key Identifier: keyid:56:61:05:E5:78:59:E0:0E:D5:6A:AE:0A:9C:D5:93:9D:BA:35:C8:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer sbgp-ipAddrBlock: critical IPv4: 167.94.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c8:87:e5:6e:90:9d:60:79:39:82:4a:b4:9f:91:0a:17:42: a4:55:aa:aa:4d:bc:5d:d6:1b:81:6e:64:2d:f6:10:a1:54:e2: 01:2b:76:a4:ea:15:96:11:ba:aa:38:4a:9a:d1:32:ff:c2:5d: fc:5b:93:61:fa:58:8c:9e:ac:0e:96:79:70:9e:b6:10:70:b2: 6d:72:e5:ed:53:a1:af:fd:38:57:4c:8f:16:96:cf:34:ec:d9: 9f:22:e2:e0:f2:8f:3b:3f:88:a4:71:ad:74:ae:ea:33:3f:32: 60:53:82:dd:1b:a4:e7:91:45:a1:88:b8:2d:5c:f9:12:8e:65: 49:59:07:5a:19:78:e6:9f:ea:0e:27:2c:61:01:17:fd:b0:b7: 4d:c0:1d:2d:28:1b:17:67:bb:cf:2a:a0:ed:4b:46:b7:a8:17: a2:70:15:1c:1a:ea:1d:8d:33:c9:82:01:fc:02:b6:df:55:f5: c4:1f:02:bc:b7:35:15:80:95:47:9a:b4:fa:a1:6a:df:b3:7e: 1a:a7:6b:02:30:cc:b6:e8:3d:96:77:fb:22:99:74:c7:1b:22: e3:f4:91:a4:01:b7:0b:8c:a1:68:f6:f9:90:1d:d5:fa:62:c9: c5:1d:08:b2:bc:b6:12:e0:83:2c:2a:92:12:7c:aa:37:da:90: 56:c9:24:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7Liwfj+C3DK6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzA3ODQ4YTEtMDFlNS00MTI0LWFjNWYtOGQ5OGEzYWJh YTBkMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk OTFkN2M2MjAtYzc5Ny00MThmLWFkZTktYWVjMjczNjE5YTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj585MowPZiMk4au1n4bDF4hQyXsSr0u/03sJ Vi/JiTSn2TdH3BUbS84CeQBJTQKWU2Jfub8GY16+Zpw6uTutMxRN4r14pAEe9aKg Zd+NQmaWDbn7nwxvvYVWNSBzRGuaeJOPj1upebQtWiiPZD7EMvC3sgz3YryDpSN1 W6DQANg/fU6bSRps0z5M2RQsXZhAq/jeGcMRXZ+yKS+9uhEiZ3+iEoGhdDKnBCbW fy+OJ+21UGLzpc5iMft7OP7aIr8AYxmi6A3bvbp46QalajTJCm/Ht/ONL1VHg/Ak UZDTEQxGGx6nromRVReRrvpAvJacXtuvWpPrzm1Dr9OJiFrVzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJf2gXKm1RuF14Zvt/iqzafhtrvSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMDc4 NDhhMS0wMWU1LTQxMjQtYWM1Zi04ZDk4YTNhYmFhMGQvMzY2MTE1YjUtYzM2ZS0z MDAyLTk4YmUtNTQxNGY3YTIzOGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzA3ODQ4YTEtMDFlNS00MTI0LWFj NWYtOGQ5OGEzYWJhYTBkLzMwNzg0OGExLTAxZTUtNDEyNC1hYzVmLThkOThhM2Fi YWEwZC5jcmwwHwYDVR0jBBgwFoAUVmEF5XhZ4A7Vaq4KnNWTnbo1yEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMDc4NDhhMS0wMWU1LTQxMjQtYWM1Zi04ZDk4 YTNhYmFhMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp15/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrIh+VukJ1geTmCSrSfkQoXQqRVqqpNvF3WG4FuZC32EKFU4gErdqTq FZYRuqo4SprRMv/CXfxbk2H6WIyerA6WeXCethBwsm1y5e1Toa/9OFdMjxaWzzTs 2Z8i4uDyjzs/iKRxrXSu6jM/MmBTgt0bpOeRRaGIuC1c+RKOZUlZB1oZeOaf6g4n LGEBF/2wt03AHS0oGxdnu88qoO1LRreoF6JwFRwa6h2NM8mCAfwCtt9V9cQfAry3 NRWAlUeatPqhat+zfhqnawIwzLboPZZ3+yKZdMcbIuP0kaQBtwuMoWj2+ZAd1fpi ycUdCLK8thLggywqkhJ8qjfakFbJJIk= -----END CERTIFICATE-----Generated at Sat Aug 23 08:21:28 2025 by rpki-client