$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa File: 4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa (raw, json) Hash identifier: WAoy7lD4HzOCptb0etwOSvNwxMYzJn5orYPfF4PTvbg= Subject key identifier: 38:7A:1E:77:90:A2:DC:9E:00:EF:71:F8:C8:C3:FE:2B:83:35:4D:27 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584AE89136F617A3E4C526F46600 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 12157 IP address blocks: 208.67.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:36:f6:17:a3:e4:c5:26:f4:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=406b0bae-f87a-40b5-8c46-1c9dedb7b5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:99:d1:cd:22:ce:24:4b:87:40:8c:ed:6e:2b: a5:cf:88:68:92:39:77:35:72:c7:78:f1:d5:ce:78: 91:10:a5:ac:65:e9:7a:a8:d5:dd:bc:8c:0d:e3:59: 15:5e:18:51:3b:02:e9:83:a8:3f:cd:1b:db:b6:0e: 2a:3d:d4:02:69:7a:0f:0d:69:52:74:8d:44:b9:d5: c3:fd:44:52:0c:66:40:c5:63:44:77:be:f2:fc:3a: 37:68:8b:a9:6f:6b:a0:1c:3d:fd:e8:24:b4:30:85: 4a:1e:14:20:a3:79:ec:15:6b:9d:70:4d:04:40:cd: cf:e1:c4:61:bf:2a:4e:52:28:3f:8f:29:03:be:32: 98:13:2d:9e:c4:a1:5a:b5:d2:6a:6f:66:e6:77:38: f2:7a:50:3d:8d:ac:8f:10:c5:59:1e:e0:2f:83:b2: 59:74:21:8a:00:7a:ef:fc:f9:58:cc:16:92:72:b0: bd:78:0e:14:0b:18:d8:c1:7e:0e:d3:82:6a:e0:60: 4d:ce:aa:57:b3:53:31:0a:81:c6:f9:66:33:07:f2: a3:68:83:ca:2c:12:40:78:72:30:ad:ae:8f:e1:24: 99:72:c1:00:c3:65:3e:78:d3:a6:c9:7e:80:17:75: 84:68:43:7d:31:8e:35:59:96:cb:99:9f:99:60:d9: 02:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7A:1E:77:90:A2:DC:9E:00:EF:71:F8:C8:C3:FE:2B:83:35:4D:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 208.67.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:5a:82:d7:2c:21:4a:30:46:08:90:37:d7:05:f6:9f:dd:37: 01:d6:54:5f:43:68:ed:b2:f7:63:25:1e:4e:42:00:83:c8:fd: 5b:62:e0:c9:74:a1:ce:df:24:71:ed:03:3c:67:20:fc:01:51: b8:68:77:5f:4f:4b:11:7e:b6:c2:b1:22:40:01:c2:58:bb:91: 3b:a0:97:d7:34:d6:e8:c0:62:bb:52:47:4f:61:d6:90:6f:fa: dd:d8:09:d1:7b:e0:ab:3a:2d:f4:f2:d9:13:e1:fe:55:06:e8: 7d:30:e4:14:f2:ea:2e:60:a6:5a:cb:3f:fa:62:65:8b:3e:05: cc:ea:02:2b:a8:dd:6c:d8:a2:c6:57:3f:d4:ec:6a:9a:5a:3f: a2:32:33:19:a2:e2:0f:f0:c2:8b:9a:2d:58:03:1f:75:0a:cf: 78:f0:71:d9:09:42:d6:e4:c3:44:eb:27:cf:0d:c4:1a:2f:2e: 28:12:dc:4d:f2:34:ab:5e:d7:1c:ca:16:c8:e2:de:9a:92:50: da:9f:2d:d2:4e:bb:51:78:2a:38:ac:4f:c7:84:9c:bf:fb:36: ed:6d:9b:9b:25:57:3d:f0:81:74:b7:66:6c:04:3b:34:52:b8: ba:9b:68:c4:fd:e4:ab:9d:94:fb:c0:57:31:38:09:8f:21:88: af:53:32:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTb2F6PkxSb0ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NDA2YjBiYWUtZjg3YS00MGI1LThjNDYtMWM5ZGVkYjdiNWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5nRzSLOJEuHQIztbiulz4hokjl3NXLHePHV zniREKWsZel6qNXdvIwN41kVXhhROwLpg6g/zRvbtg4qPdQCaXoPDWlSdI1EudXD /URSDGZAxWNEd77y/Do3aIupb2ugHD396CS0MIVKHhQgo3nsFWudcE0EQM3P4cRh vypOUig/jykDvjKYEy2exKFatdJqb2bmdzjyelA9jayPEMVZHuAvg7JZdCGKAHrv /PlYzBaScrC9eA4UCxjYwX4O04Jq4GBNzqpXs1MxCoHG+WYzB/KjaIPKLBJAeHIw ra6P4SSZcsEAw2U+eNOmyX6AF3WEaEN9MY41WZbLmZ+ZYNkCvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDh6HneQotyeAO9x+MjD/iuDNU0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvNGM4YTA2ZjctNDJjMi0z Njk5LTljMTAtYWE2MDE1OTE4Y2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EN/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1agtcsIUowRgiQN9cF9p/dNwHWVF9DaO2y92MlHk5CAIPI/Vti4Ml0 oc7fJHHtAzxnIPwBUbhod19PSxF+tsKxIkABwli7kTugl9c01ujAYrtSR09h1pBv +t3YCdF74Ks6LfTy2RPh/lUG6H0w5BTy6i5gplrLP/piZYs+BczqAiuo3WzYosZX P9TsappaP6IyMxmi4g/wwouaLVgDH3UKz3jwcdkJQtbkw0TrJ88NxBovLigS3E3y NKte1xzKFsji3pqSUNqfLdJOu1F4KjisT8eEnL/7Nu1tm5slVz3wgXS3ZmwEOzRS uLqbaMT95KudlPvAVzE4CY8hiK9TMgs= -----END CERTIFICATE-----Generated at Sat Aug 23 23:25:05 2025 by rpki-client