$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/175a7774-3b58-3926-8574-a23f74a28ae2.roa File: 175a7774-3b58-3926-8574-a23f74a28ae2.roa (raw, json) Hash identifier: yyWlXrMf06YnqO3XdK4Hmt1lRMCSXhdDnQWF2TeNt+o= Subject key identifier: 98:30:95:25:0D:FF:58:CF:7B:41:7C:5C:59:D6:C5:54:5B:C6:CF:C9 Certificate issuer: /CN=c900ace0-a77f-456b-b2a7-db5e6b89e87a Certificate serial: 010D0C9F4328584AEE26829CD4B5445BF20C7000 Authority key identifier: 8B:F6:E7:60:0F:BE:E9:94:02:D6:BF:EE:BB:24:5A:C7:7D:FB:CD:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/175a7774-3b58-3926-8574-a23f74a28ae2.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 397888 IP address blocks: 68.68.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:82:9c:d4:b5:44:5b:f2:0c:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c900ace0-a77f-456b-b2a7-db5e6b89e87a Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=3bc95e8d-e1e5-4449-9e51-d7f4ce6223d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:15:54:9a:c4:c3:0e:91:d0:4a:12:00:78:6b: fa:3e:8a:29:9c:d0:37:e2:1c:21:16:e9:f9:ef:c9: 38:80:7f:ba:6f:14:23:64:01:ce:18:68:00:7e:29: c8:b2:a3:de:e2:81:db:c1:06:7b:9e:44:4f:18:8e: 6e:1b:4d:e6:04:18:0f:ac:67:96:7c:14:d2:5c:6c: 9f:a5:d7:e0:ec:16:bd:47:a0:cc:64:36:f5:32:d8: b8:41:13:e7:2d:68:f0:7f:8c:dd:eb:0e:11:bb:a3: 68:3b:f2:cd:c8:67:d9:33:dd:fa:ac:67:02:91:a7: a3:89:ed:85:c3:cb:5a:8b:3f:38:40:40:25:f3:92: 2e:2e:0c:f6:0f:26:5d:b3:d2:16:b0:c7:e3:36:57: e7:c1:87:f3:43:14:89:f6:e8:01:4f:7a:ee:6e:fa: d1:1c:75:d2:cd:03:95:7e:b3:28:d9:33:ac:fe:a0: 8b:3d:7d:97:5f:85:38:22:7b:a0:07:dd:fa:c9:a0: 78:53:18:0d:9e:4f:1a:15:dd:77:f3:b1:51:78:6a: 62:35:ec:08:e5:e6:52:58:d8:02:7e:6c:18:ff:c0: fd:9f:fc:5f:13:39:f9:d1:bb:a7:ab:c7:82:8f:5c: ef:77:8b:3e:3a:1c:ab:a1:70:7c:45:f3:60:12:e6: b0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:30:95:25:0D:FF:58:CF:7B:41:7C:5C:59:D6:C5:54:5B:C6:CF:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/175a7774-3b58-3926-8574-a23f74a28ae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.crl X509v3 Authority Key Identifier: keyid:8B:F6:E7:60:0F:BE:E9:94:02:D6:BF:EE:BB:24:5A:C7:7D:FB:CD:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a.cer sbgp-ipAddrBlock: critical IPv4: 68.68.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:75:93:e5:61:12:46:e1:e9:f8:dc:73:47:14:9a:f4:60:b9: d3:cc:2e:cd:58:8e:08:c8:02:27:31:dc:c8:45:b2:dd:f4:f4: e2:1f:42:57:d5:5d:59:b3:7e:7b:bf:08:3c:b7:15:f2:9e:de: a6:f4:9a:3a:c9:ec:05:79:20:9b:5b:76:bf:2e:cb:22:14:a3: 89:28:be:29:5c:8c:89:f7:bb:75:c1:e6:57:02:1f:b8:43:79: a2:e6:95:14:b1:23:5b:f9:84:32:81:43:f0:36:37:30:97:01: 5f:f0:2c:2f:16:59:1c:e4:38:48:e3:ee:de:29:58:d7:dd:e6: d9:95:b6:a0:e2:62:2d:f0:6e:38:ba:b6:3a:23:4b:dd:a8:4e: e4:2b:42:7e:db:e6:fb:e9:04:ea:be:d1:59:87:e2:8e:39:c1: 72:b1:2b:f1:20:f0:73:2e:ba:fa:89:a2:ce:bd:1a:b1:8b:00: 7f:73:8b:f3:0c:be:18:26:a3:be:74:3a:98:8a:56:41:3e:40: 89:fa:b5:ef:9e:3e:95:38:38:5f:0c:e5:1a:fc:51:66:ee:f2: 7a:d8:aa:5e:68:f2:2e:49:c5:01:79:cb:98:8a:82:b4:51:da: cd:49:19:8d:07:bd:04:a5:af:a7:0c:3a:e1:bc:3f:72:40:37: 69:ec:31:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJoKc1LVEW/IMcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkwMGFjZTAtYTc3Zi00NTZiLWIyYTctZGI1ZTZiODll ODdhMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk M2JjOTVlOGQtZTFlNS00NDQ5LTllNTEtZDdmNGNlNjIyM2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xVUmsTDDpHQShIAeGv6PoopnNA34hwhFun5 78k4gH+6bxQjZAHOGGgAfinIsqPe4oHbwQZ7nkRPGI5uG03mBBgPrGeWfBTSXGyf pdfg7Ba9R6DMZDb1Mti4QRPnLWjwf4zd6w4Ru6NoO/LNyGfZM936rGcCkaejie2F w8taiz84QEAl85IuLgz2DyZds9IWsMfjNlfnwYfzQxSJ9ugBT3rubvrRHHXSzQOV frMo2TOs/qCLPX2XX4U4InugB936yaB4UxgNnk8aFd1387FReGpiNewI5eZSWNgC fmwY/8D9n/xfEzn50bunq8eCj1zvd4s+OhyroXB8RfNgEuawHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgwlSUN/1jPe0F8XFnWxVRbxs/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jOTAw YWNlMC1hNzdmLTQ1NmItYjJhNy1kYjVlNmI4OWU4N2EvMTc1YTc3NzQtM2I1OC0z OTI2LTg1NzQtYTIzZjc0YTI4YWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzkwMGFjZTAtYTc3Zi00NTZiLWIy YTctZGI1ZTZiODllODdhL2M5MDBhY2UwLWE3N2YtNDU2Yi1iMmE3LWRiNWU2Yjg5 ZTg3YS5jcmwwHwYDVR0jBBgwFoAUi/bnYA++6ZQC1r/uuyRax337zSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jOTAwYWNlMC1hNzdmLTQ1NmItYjJhNy1kYjVl NmI4OWU4N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRETeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD51k+VhEkbh6fjcc0cUmvRgudPMLs1YjgjIAicx3MhFst309OIfQlfV XVmzfnu/CDy3FfKe3qb0mjrJ7AV5IJtbdr8uyyIUo4kovilcjIn3u3XB5lcCH7hD eaLmlRSxI1v5hDKBQ/A2NzCXAV/wLC8WWRzkOEjj7t4pWNfd5tmVtqDiYi3wbji6 tjojS92oTuQrQn7b5vvpBOq+0VmH4o45wXKxK/Eg8HMuuvqJos69GrGLAH9zi/MM vhgmo750OpiKVkE+QIn6te+ePpU4OF8M5Rr8UWbu8nrYql5o8i5JxQF5y5iKgrRR 2s1JGY0HvQSlr6cMOuG8P3JAN2nsMZs= -----END CERTIFICATE-----Generated at Sun Aug 24 02:54:52 2025 by rpki-client