$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/a5508c4f-6730-30e3-9fc2-5de444b84995.roa File: a5508c4f-6730-30e3-9fc2-5de444b84995.roa (raw, json) Hash identifier: UjfKq4HOeIQrERfhuJ4FyaU3bcLbyRf4IT/dn7DbOLM= Subject key identifier: 45:E1:8D:B3:80:B2:D0:86:29:AE:D3:DE:57:89:7A:39:8F:EE:5C:52 Certificate issuer: /CN=78369c58-f0b4-454b-ad08-df84f1fd007c Certificate serial: 010D0C9F4328584AD7D10E40FBB090E515A38800 Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/a5508c4f-6730-30e3-9fc2-5de444b84995.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 22822 IP address blocks: 69.28.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:0e:40:fb:b0:90:e5:15:a3:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=20856685-b697-40c8-8ce2-3f676661f775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:cf:a8:d1:09:a1:9f:4f:e8:00:f9:91:a7: d2:7f:2d:be:bd:1c:77:c7:c1:03:98:43:48:40:b8: 87:e7:d6:a5:45:4d:d1:bc:45:82:11:49:10:5f:f4: a9:a0:22:6d:b7:5b:de:1c:c0:1f:f7:73:8d:37:2a: 7b:2f:ad:4c:c2:48:ac:8b:cd:41:81:22:74:08:6e: 2b:7e:4d:6c:77:e5:c1:fa:5b:3d:8b:e7:12:ee:64: d2:fd:a7:3d:b4:6e:65:73:a7:28:7f:f1:a9:f8:92: e2:7d:da:bc:cb:eb:5a:96:5b:9f:58:bd:61:05:fc: 52:25:1e:39:d6:75:9d:af:34:71:f5:f8:d2:02:09: 40:90:cc:fa:2e:40:0d:1d:d6:c4:64:a0:05:11:1f: a9:14:33:82:07:b5:f7:16:82:af:45:79:21:84:33: d2:2d:db:be:ba:91:04:d7:c4:3b:a8:18:2b:30:b0: 7b:8f:bb:00:87:7c:ae:1e:ef:c5:e4:68:2c:1f:c3: 1a:e0:58:c7:8d:9e:b3:87:ce:14:d9:9e:e0:be:01: d5:39:66:6a:85:45:24:36:94:39:31:5c:80:e5:9a: 19:dd:ea:90:04:eb:84:42:01:84:55:04:b3:f1:77: 02:5f:cc:d3:0d:c9:f1:7d:d2:d3:de:e4:e9:7d:b6: f0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E1:8D:B3:80:B2:D0:86:29:AE:D3:DE:57:89:7A:39:8F:EE:5C:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/a5508c4f-6730-30e3-9fc2-5de444b84995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl X509v3 Authority Key Identifier: keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer sbgp-ipAddrBlock: critical IPv4: 69.28.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:6e:ab:c5:cc:ab:f8:01:e3:84:44:69:fa:c6:bd:69:55:e0: 7c:e3:8b:73:68:66:a0:b7:dd:e2:c7:0f:b7:f7:a7:53:c7:14: af:b9:5f:d9:2d:e8:3a:0e:67:9f:96:f3:3d:24:6f:ca:f6:1b: 1a:66:6e:04:e8:4b:e0:d4:53:e5:3f:3a:b9:cd:2d:96:f5:78: 25:a8:08:fc:7a:a3:ee:07:9c:e9:9b:ec:05:52:88:b5:83:60: 60:7d:c3:f8:d7:d0:af:58:86:80:da:85:82:f2:a9:5c:4d:d8: ff:dc:c9:ce:4e:ba:4e:ea:ff:fd:c8:70:d2:fe:d6:e8:29:87: 46:c4:cc:a0:54:31:b5:79:00:d1:b7:81:98:33:ca:6f:6f:fe: 91:ba:e0:42:97:ff:a4:2f:23:89:81:9e:51:2f:f6:78:85:e1: 85:0e:1d:22:c5:05:01:dc:7b:e4:7c:be:41:9b:f7:8e:d9:f9: 2b:26:12:e6:97:6f:b5:6c:b7:e0:f6:7f:a0:22:ab:7e:a4:9b: 0d:f6:92:69:7d:45:4b:ad:9d:c3:69:e8:f1:fb:22:e3:a2:b0: 16:af:32:53:25:cf:69:77:95:ef:7a:31:fc:23:5b:98:fc:8f: 8e:1b:5c:6d:94:5a:20:4e:ad:ea:23:fc:01:c6:0d:51:f5:90: e2:91:a3:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0Q5A+7CQ5RWjiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw MDdjMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MjA4NTY2ODUtYjY5Ny00MGM4LThjZTItM2Y2NzY2NjFmNzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4vPqNEJoZ9P6AD5kafSfy2+vRx3x8EDmENI QLiH59alRU3RvEWCEUkQX/SpoCJtt1veHMAf93ONNyp7L61Mwkisi81BgSJ0CG4r fk1sd+XB+ls9i+cS7mTS/ac9tG5lc6cof/Gp+JLifdq8y+tallufWL1hBfxSJR45 1nWdrzRx9fjSAglAkMz6LkANHdbEZKAFER+pFDOCB7X3FoKvRXkhhDPSLdu+upEE 18Q7qBgrMLB7j7sAh3yuHu/F5GgsH8Ma4FjHjZ6zh84U2Z7gvgHVOWZqhUUkNpQ5 MVyA5ZoZ3eqQBOuEQgGEVQSz8XcCX8zTDcnxfdLT3uTpfbbw+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXhjbOAstCGKa7T3leJejmP7lxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2 OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvYTU1MDhjNGYtNjczMC0z MGUzLTlmYzItNWRlNDQ0Yjg0OTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0 ZjFmZDAwN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRRyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9uq8XMq/gB44REafrGvWlV4Hzji3NoZqC33eLHD7f3p1PHFK+5X9kt 6DoOZ5+W8z0kb8r2GxpmbgToS+DUU+U/OrnNLZb1eCWoCPx6o+4HnOmb7AVSiLWD YGB9w/jX0K9YhoDahYLyqVxN2P/cyc5Ouk7q//3IcNL+1ugph0bEzKBUMbV5ANG3 gZgzym9v/pG64EKX/6QvI4mBnlEv9niF4YUOHSLFBQHce+R8vkGb947Z+SsmEuaX b7Vst+D2f6Aiq36kmw32kml9RUutncNp6PH7IuOisBavMlMlz2l3le96MfwjW5j8 j44bXG2UWiBOreoj/AHGDVH1kOKRo3s= -----END CERTIFICATE-----Generated at Sun Aug 24 09:38:18 2025 by rpki-client