$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa File: 844a9f17-b00f-3490-8954-09544703c001.roa (raw, json) Hash identifier: IlmTUoadff0U/zzo4sC4Kc3is5zvL1Q3FBJOmOaEMA4= Subject key identifier: F4:88:30:47:67:C0:22:94:B5:46:6C:2D:43:09:03:76:9C:EA:3D:25 Certificate issuer: /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Certificate serial: 010D0C9F4328584A3B7AF64B3B9E8899EE4DD6C0 Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 13629 IP address blocks: 208.94.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:f6:4b:3b:9e:88:99:ee:4d:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=f682a3e5-58cb-4fb7-810c-3de71e20f323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1b:61:b8:8f:64:1f:ee:56:11:4f:d4:de:5b: ab:a5:4d:ad:54:b7:c1:ad:52:ce:31:8a:79:2a:c3: 67:d3:f1:5a:35:dc:51:93:95:fc:c9:25:90:fd:bf: 9c:a1:46:e0:c1:57:0f:d4:a1:1a:50:e7:50:c0:d9: 04:3f:f6:4b:b1:17:64:0d:f5:29:4b:a5:f7:fb:de: 75:2f:d9:78:54:9e:ea:20:14:37:b3:14:f4:7e:ab: a1:ec:79:10:48:cd:b2:4f:d7:6a:b6:41:17:9c:a6: 7d:6a:f4:ee:46:6d:2b:60:bc:7e:b1:ba:2e:74:0a: 8a:e1:70:94:56:05:0a:44:50:11:d0:f8:11:fd:0c: b6:f5:b7:67:f6:64:d8:c7:3e:93:fb:2f:6c:5c:96: 58:78:2f:8c:4e:b2:5f:3d:f2:f3:47:f9:ab:d0:16: df:a6:b9:e5:ff:cf:ad:f0:ca:4a:0a:5a:ea:93:86: 29:7a:86:5b:77:7c:93:d7:d9:f7:a3:8a:2c:07:ca: a0:92:3d:38:db:e6:92:89:1a:22:d5:80:24:ea:d5: 35:68:95:54:7c:d3:3f:09:d8:6b:52:45:0e:1b:6a: 2a:a3:7e:8b:18:dd:1e:4a:29:7e:4b:9d:13:89:2d: 95:e0:a1:31:79:a2:6c:70:e7:b8:d8:9f:fd:24:50: f1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:88:30:47:67:C0:22:94:B5:46:6C:2D:43:09:03:76:9C:EA:3D:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl X509v3 Authority Key Identifier: keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer sbgp-ipAddrBlock: critical IPv4: 208.94.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f2:7f:db:fd:2a:f8:50:ec:d7:62:6e:3c:b7:56:26:d7:5d: 5f:bc:f1:65:e3:6a:17:47:31:1d:eb:4b:95:04:b7:10:b0:35: 7e:ea:58:80:da:1e:04:6a:c2:6e:13:39:8d:73:fa:bb:cd:6a: 2b:90:c8:87:77:9b:83:0b:03:76:6c:94:1f:82:0a:6a:63:ec: 10:ba:5f:91:f4:12:c9:3c:c5:3a:dc:4a:de:11:51:a4:32:03: da:b2:6e:8b:15:a4:77:9b:10:97:ef:21:5a:eb:54:dd:00:f5: c3:ff:66:03:33:3d:4c:d0:85:93:27:a7:6a:d5:3e:09:da:fa: 11:6a:48:4c:52:84:cf:c2:16:3a:02:c6:e8:e2:54:f3:c7:2f: c9:7f:19:6f:24:c2:cd:c0:99:07:d0:8a:bd:9b:cf:c0:5e:82: 87:ff:36:3c:14:65:0f:ea:3a:dc:1e:c4:43:75:a1:2e:f0:f8: 5e:ca:ec:ca:32:2a:95:ef:1d:c4:7d:c5:58:c0:ff:e7:7f:bc: 6b:69:0e:4f:77:9d:21:15:a1:d8:11:65:39:c4:d6:17:5d:15: a6:0e:c0:78:15:d7:fd:cb:34:a8:da:e0:29:99:93:4b:7a:0f: c1:d0:67:d8:9e:6a:aa:37:9e:d9:94:46:3c:36:5a:ae:98:9c: 33:18:ba:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7evZLO56Ime5N1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE2ODQwOGYtN2RlZS00MTViLWExYzEtYjc2ZGYwYTg3 YTkzMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk ZjY4MmEzZTUtNThjYi00ZmI3LTgxMGMtM2RlNzFlMjBmMzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBthuI9kH+5WEU/U3lurpU2tVLfBrVLOMYp5 KsNn0/FaNdxRk5X8ySWQ/b+coUbgwVcP1KEaUOdQwNkEP/ZLsRdkDfUpS6X3+951 L9l4VJ7qIBQ3sxT0fquh7HkQSM2yT9dqtkEXnKZ9avTuRm0rYLx+sboudAqK4XCU VgUKRFAR0PgR/Qy29bdn9mTYxz6T+y9sXJZYeC+MTrJfPfLzR/mr0Bbfprnl/8+t 8MpKClrqk4YpeoZbd3yT19n3o4osB8qgkj042+aSiRoi1YAk6tU1aJVUfNM/Cdhr UkUOG2oqo36LGN0eSil+S50TiS2V4KExeaJscOe42J/9JFDxRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSIMEdnwCKUtUZsLUMJA3ac6j0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4 NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZkZjBhODdhOTMvODQ0YTlmMTctYjAwZi0z NDkwLTg5NTQtMDk1NDQ3MDNjMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWE2ODQwOGYtN2RlZS00MTViLWEx YzEtYjc2ZGYwYTg3YTkzL2VhNjg0MDhmLTdkZWUtNDE1Yi1hMWMxLWI3NmRmMGE4 N2E5My5jcmwwHwYDVR0jBBgwFoAUFphb3M+6SOUGLSTwgm6NQ0VLLqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZk ZjBhODdhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHyf9v9KvhQ7Ndibjy3VibXXV+88WXjahdHMR3rS5UEtxCwNX7qWIDa HgRqwm4TOY1z+rvNaiuQyId3m4MLA3ZslB+CCmpj7BC6X5H0Esk8xTrcSt4RUaQy A9qybosVpHebEJfvIVrrVN0A9cP/ZgMzPUzQhZMnp2rVPgna+hFqSExShM/CFjoC xujiVPPHL8l/GW8kws3AmQfQir2bz8Begof/NjwUZQ/qOtwexEN1oS7w+F7K7Moy KpXvHcR9xVjA/+d/vGtpDk93nSEVodgRZTnE1hddFaYOwHgV1/3LNKja4CmZk0t6 D8HQZ9ieaqo3ntmURjw2Wq6YnDMYuo4= -----END CERTIFICATE-----Generated at Tue Jul 1 21:38:43 2025 by rpki-client