$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/8e12930e-504a-3f50-8b98-113950f808f7.roa File: 8e12930e-504a-3f50-8b98-113950f808f7.roa (raw, json) Hash identifier: O0iRt/7GVn2QYF7rVY6YdpKirDmDZBvOcNKCbEtwuEw= Subject key identifier: 79:1D:ED:D8:00:A7:82:EA:B9:EF:18:D2:7D:3A:B0:41:17:A5:52:6A Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584AF2567CA0EDCBC1E7CBD9FB80 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/8e12930e-504a-3f50-8b98-113950f808f7.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 88 IP address blocks: 204.153.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:7c:a0:ed:cb:c1:e7:cb:d9:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=0e8db94e-88ca-47ae-a3cf-3b2d3fe08e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e6:d8:a9:9b:08:43:6e:0b:65:6c:8a:dc:8f: 24:4f:2b:e8:33:5f:ea:ef:e2:b0:ea:c2:bf:61:75: 67:da:d9:40:72:f0:01:61:54:a7:4e:87:54:1a:40: bb:ce:20:b0:07:09:2a:2a:37:82:df:ad:f1:68:88: f7:17:b3:0e:9f:e7:7e:e4:b2:be:dc:00:91:5e:68: dd:5e:93:1a:dd:e1:9c:72:24:e7:1c:e2:09:18:87: b2:64:48:0c:3f:2b:8f:db:5a:ec:3c:9c:87:32:c7: 44:ad:ef:4e:3e:30:d1:0b:5d:c6:fc:a1:0e:54:38: 70:97:2c:ae:7a:6a:38:f7:b2:9a:29:d1:a2:67:a3: 18:73:6d:8b:19:22:3d:ea:7a:87:be:d4:63:92:69: 0d:2b:c0:1e:a3:1c:0a:9c:a2:11:79:a5:7a:3d:9f: 4b:4d:1c:bf:b3:fa:81:f7:bb:a1:63:47:f5:ab:81: ab:f3:d2:a1:f5:6c:b8:fa:2d:af:da:b3:bb:60:b0: 63:fc:13:c7:7c:05:8d:9e:ef:93:51:75:7f:25:7a: ab:01:09:a7:ce:7c:d9:f9:5c:90:71:a5:1b:ae:c8: 79:7e:22:c8:26:74:e0:6c:eb:a8:79:e4:d1:86:a8: 59:db:3e:c7:8c:9e:99:b5:bb:42:bf:30:a5:2f:43: 73:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1D:ED:D8:00:A7:82:EA:B9:EF:18:D2:7D:3A:B0:41:17:A5:52:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/8e12930e-504a-3f50-8b98-113950f808f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 204.153.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:49:d8:49:be:f5:2e:58:8d:19:e1:41:ff:a9:7d:30:79:57: e8:9f:cd:bb:9f:fd:ac:12:93:85:2d:91:80:68:43:88:be:4b: fa:81:2a:fa:64:c1:bd:0c:5c:f4:c4:f9:e8:39:b6:05:19:a2: ac:f4:24:37:11:bb:78:41:84:15:38:6c:38:1a:0b:ae:c4:d8: 0f:b5:97:d0:3e:53:51:4e:d2:64:4c:5a:c8:45:41:75:42:3d: 27:ae:74:17:d0:2d:55:de:4c:13:fb:c4:d0:0a:42:c8:6c:64: b0:bf:25:d9:87:56:07:51:fe:b7:86:69:f5:18:4b:ca:99:39: 1e:e9:db:45:2b:17:fe:3d:32:a3:68:6c:40:ff:8d:c5:33:20: 2b:a1:35:f5:4c:63:e8:8d:72:1b:28:19:c4:61:a7:ca:6d:58: 44:99:40:7a:e3:1c:52:66:bd:66:fe:1c:ad:6b:7b:a7:86:2d: de:96:8d:aa:f7:c9:f7:9b:f8:cf:ad:36:5e:b5:c8:b6:9a:df: 65:d7:9c:40:ed:60:65:61:46:b6:85:7f:8f:a6:aa:2b:d7:ba: 15:e2:5c:4e:13:b6:1e:73:7a:6c:35:53:8a:14:9f:51:8b:37: b7:a0:01:16:0a:85:c2:e3:1f:10:68:bc:b8:58:3f:02:b7:00: 1a:40:14:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnyg7cvB58vZ+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MGU4ZGI5NGUtODhjYS00N2FlLWEzY2YtM2IyZDNmZTA4ZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlObYqZsIQ24LZWyK3I8kTyvoM1/q7+Kw6sK/ YXVn2tlAcvABYVSnTodUGkC7ziCwBwkqKjeC363xaIj3F7MOn+d+5LK+3ACRXmjd XpMa3eGcciTnHOIJGIeyZEgMPyuP21rsPJyHMsdEre9OPjDRC13G/KEOVDhwlyyu emo497KaKdGiZ6MYc22LGSI96nqHvtRjkmkNK8AeoxwKnKIReaV6PZ9LTRy/s/qB 97uhY0f1q4Gr89Kh9Wy4+i2v2rO7YLBj/BPHfAWNnu+TUXV/JXqrAQmnznzZ+VyQ caUbrsh5fiLIJnTgbOuoeeTRhqhZ2z7HjJ6ZtbtCvzClL0NzEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkd7dgAp4Lque8Y0n06sEEXpVJqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvOGUxMjkzMGUtNTA0YS0z ZjUwLThiOTgtMTEzOTUwZjgwOGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzJkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtJ2Em+9S5YjRnhQf+pfTB5V+ifzbuf/awSk4UtkYBoQ4i+S/qBKvpk wb0MXPTE+eg5tgUZoqz0JDcRu3hBhBU4bDgaC67E2A+1l9A+U1FO0mRMWshFQXVC PSeudBfQLVXeTBP7xNAKQshsZLC/JdmHVgdR/reGafUYS8qZOR7p20UrF/49MqNo bED/jcUzICuhNfVMY+iNchsoGcRhp8ptWESZQHrjHFJmvWb+HK1re6eGLd6Wjar3 yfeb+M+tNl61yLaa32XXnEDtYGVhRraFf4+mqivXuhXiXE4Tth5zemw1U4oUn1GL N7egARYKhcLjHxBovLhYPwK3ABpAFMc= -----END CERTIFICATE-----Generated at Sat Aug 23 21:19:37 2025 by rpki-client