$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/8ade9aaf-3985-387b-bb00-4ee94c446cc7.roa File: 8ade9aaf-3985-387b-bb00-4ee94c446cc7.roa (raw, json) Hash identifier: rvnYzkojs0BeN706b3uDXWMEWXcR2uFP+n6noT4Rhrc= Subject key identifier: 33:21:4C:87:5E:54:12:49:AB:0B:99:2C:0E:8A:44:68:84:B3:75:10 Certificate issuer: /CN=78369c58-f0b4-454b-ad08-df84f1fd007c Certificate serial: 010D0C9F4328584AD7D10EFBFA5762871E1BAE40 Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/8ade9aaf-3985-387b-bb00-4ee94c446cc7.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 22822 IP address blocks: 208.69.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:0e:fb:fa:57:62:87:1e:1b:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=79ee425f-fa0c-4aa3-8ab5-df36352202f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c4:e8:7a:1f:08:33:84:8f:54:7e:b0:ec:96: 11:e1:9c:57:3f:d4:a7:06:0f:e9:b1:d7:1b:5c:11: aa:9e:f0:85:d8:3c:96:e1:88:bd:48:dd:5e:6d:c2: 91:57:8f:82:33:a3:9e:2b:6a:dd:cd:08:bd:6b:aa: 45:99:a7:f8:3a:ac:32:cd:0e:5c:64:cf:1b:5c:ec: 55:f4:2b:2f:5c:12:f6:80:cf:3a:5b:f0:9b:41:34: ee:ed:db:36:9c:f3:d8:f3:05:60:c1:82:89:d2:24: ae:90:a7:79:75:2b:3e:17:1d:82:49:c5:16:56:5a: 11:57:e9:ef:a5:b1:1d:c7:5e:03:a8:53:bf:01:24: 87:f6:7d:62:7e:3b:6f:bb:6b:d7:3d:6b:cc:e5:44: 43:65:c1:0c:25:46:5d:20:d2:15:8a:6c:e4:68:6f: a7:86:f1:4f:58:0d:c4:04:8d:d1:29:3f:7f:30:e7: 62:a1:f1:57:95:3a:c5:ea:5f:15:5a:ab:75:81:a0: 7b:55:74:70:47:cc:38:cc:e2:17:97:b7:4a:63:9b: 00:c9:66:a1:73:62:e1:fc:45:80:57:da:f5:3d:15: dd:cc:c5:f2:fa:57:b8:ed:d4:bf:79:0d:41:8b:40: 44:26:2e:20:83:20:42:ac:6d:18:e9:17:39:f1:bc: f4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:21:4C:87:5E:54:12:49:AB:0B:99:2C:0E:8A:44:68:84:B3:75:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/8ade9aaf-3985-387b-bb00-4ee94c446cc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl X509v3 Authority Key Identifier: keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer sbgp-ipAddrBlock: critical IPv4: 208.69.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c9:f4:e2:d2:b5:f6:7e:70:1b:86:34:62:6f:47:99:1a:6a: 74:e2:95:ea:2c:00:83:1d:23:b8:f5:14:dc:fd:f6:6c:c2:ea: 8d:21:cd:83:5d:4e:f2:cc:98:e8:f5:7d:d2:65:d6:65:b3:46: 6c:cc:da:bb:e0:a0:91:fd:06:1d:7f:42:89:38:1c:da:c2:a8: c3:71:57:2e:dd:f8:cd:2f:85:84:53:b3:98:b0:56:d0:86:a1: 22:83:18:f1:68:a4:e9:b1:27:a5:8d:49:98:b0:2c:1a:fb:44: 17:6e:3f:7d:0d:c1:48:8a:09:38:c9:58:27:c4:3e:31:18:89: 54:bf:9a:07:16:96:06:59:44:2a:01:32:bb:d2:69:5f:da:18: bd:b4:67:74:3b:b1:49:7f:2a:40:4e:02:09:83:de:65:2c:a4: da:0b:aa:cd:75:e0:ef:d9:13:a2:75:74:f3:ee:96:66:ad:cb: 66:f9:6a:8a:d1:7c:ad:a6:98:a1:2b:28:ce:83:02:ed:3b:ee: 5e:be:6d:d1:7a:d4:d5:df:4e:2a:81:40:7f:1d:c4:67:ac:9a: 34:5d:99:c5:28:2d:4d:ee:4b:29:36:fe:ec:9e:cf:12:3a:62: c2:0f:1c:d8:d2:71:4f:41:1f:db:63:bb:7a:9d:25:95:18:16: f3:68:94:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0Q77+ldihx4brkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw MDdjMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NzllZTQyNWYtZmEwYy00YWEzLThhYjUtZGYzNjM1MjIwMmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMToeh8IM4SPVH6w7JYR4ZxXP9SnBg/psdcb XBGqnvCF2DyW4Yi9SN1ebcKRV4+CM6OeK2rdzQi9a6pFmaf4OqwyzQ5cZM8bXOxV 9CsvXBL2gM86W/CbQTTu7ds2nPPY8wVgwYKJ0iSukKd5dSs+Fx2CScUWVloRV+nv pbEdx14DqFO/ASSH9n1ifjtvu2vXPWvM5URDZcEMJUZdINIVimzkaG+nhvFPWA3E BI3RKT9/MOdiofFXlTrF6l8VWqt1gaB7VXRwR8w4zOIXl7dKY5sAyWahc2Lh/EWA V9r1PRXdzMXy+le47dS/eQ1Bi0BEJi4ggyBCrG0Y6Rc58bz03wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMhTIdeVBJJqwuZLA6KRGiEs3UQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2 OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvOGFkZTlhYWYtMzk4NS0z ODdiLWJiMDAtNGVlOTRjNDQ2Y2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0 ZjFmZDAwN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDJ9OLStfZ+cBuGNGJvR5kaanTileosAIMdI7j1FNz99mzC6o0hzYNd TvLMmOj1fdJl1mWzRmzM2rvgoJH9Bh1/Qok4HNrCqMNxVy7d+M0vhYRTs5iwVtCG oSKDGPFopOmxJ6WNSZiwLBr7RBduP30NwUiKCTjJWCfEPjEYiVS/mgcWlgZZRCoB MrvSaV/aGL20Z3Q7sUl/KkBOAgmD3mUspNoLqs114O/ZE6J1dPPulmaty2b5aorR fK2mmKErKM6DAu077l6+bdF61NXfTiqBQH8dxGesmjRdmcUoLU3uSyk2/uyezxI6 YsIPHNjScU9BH9tju3qdJZUYFvNolJg= -----END CERTIFICATE-----Generated at Sun Aug 24 01:23:49 2025 by rpki-client