$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa File: 8235dfbe-b3ab-3735-aab7-c2955069fad0.roa (raw, json) Hash identifier: 4g2W/cntFlWFSlYVXVISNipeOhOrP5BCiMqmsQ0C1RM= Subject key identifier: 0B:7F:0C:F0:FB:9B:03:35:B1:64:2F:E8:A6:55:7A:C1:20:2D:BD:00 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584AECC13319E37EC08D16C1CF40 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 68.71.224.0/24 maxlen: 24 68.71.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:33:19:e3:7e:c0:8d:16:c1:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=fd8b1e7b-6669-45d1-a313-a801f704c275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e1:f2:e6:d4:9b:89:e7:1f:af:0c:cc:39:4e: 0a:cc:26:65:58:e3:9a:a6:5e:b9:28:e6:18:62:22: 2a:93:48:4a:5e:f2:b4:52:b4:72:f1:b5:c4:f6:70: 28:c9:69:d5:13:18:c9:78:83:f7:26:0d:db:96:8c: 0d:05:d2:89:0e:9e:8c:bb:69:c1:20:2f:50:a1:84: 91:cf:a1:ea:83:c4:dc:60:fc:d2:55:da:99:d4:67: 1a:4b:a0:04:da:ce:2b:53:ec:1d:fa:ae:64:87:a7: b6:9c:29:6b:3f:e3:4c:87:24:04:03:5f:31:71:31: 6e:00:95:72:92:15:2f:5f:6f:06:1f:f3:1b:e0:32: d7:c2:bc:fd:a3:75:3e:99:a5:32:fe:7e:b0:87:5d: 43:2b:c3:5a:2a:ac:34:9f:30:3a:5e:5b:7d:4b:fa: cb:72:b8:7d:b7:9a:95:e3:fb:b4:93:91:b8:6d:ad: 16:02:72:3a:d9:ef:71:f2:61:b3:5f:b1:c9:57:b9: 8f:42:05:9c:18:04:13:d0:a9:a7:36:ce:69:38:48: 67:87:a7:74:3c:71:46:82:b9:fb:06:a0:af:61:c4: 89:7d:c9:a3:37:e8:e9:c4:11:4b:98:a8:f5:d4:37: cb:94:e2:5c:30:3b:d7:ba:31:f8:fe:da:5c:d8:15: 73:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7F:0C:F0:FB:9B:03:35:B1:64:2F:E8:A6:55:7A:C1:20:2D:BD:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.224.0/24 68.71.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:14:b3:40:f2:ca:a8:95:07:15:45:a9:06:70:7e:59:1f:03: 7e:b7:aa:42:db:27:2b:54:b1:1c:1f:f1:e9:8d:76:db:0b:00: de:b8:67:d2:d5:63:4c:ba:aa:d0:31:5f:fe:46:f1:a2:5b:1b: 49:ea:01:ec:39:71:5b:f9:1c:f2:8d:f6:47:b3:c1:59:d7:e9: ba:b5:9e:e7:6e:48:9c:be:62:fb:66:af:c8:11:56:d2:d0:e6: 4e:fe:e6:f5:83:61:2a:be:90:31:2e:9f:f9:14:c2:bf:03:93: 18:29:b8:88:b8:b4:99:50:0f:a4:80:60:79:e8:33:ea:d6:5e: b8:a5:ba:85:6e:9d:41:ab:4e:ae:80:61:a4:6c:ce:5b:0a:fa: 48:06:e0:f8:20:32:aa:88:d1:d0:62:1f:78:6c:fc:9a:c8:eb: 28:5e:74:37:3a:69:97:12:1c:a0:de:4f:43:ea:5d:25:e0:b4: 2f:7e:5e:f9:28:29:e3:09:61:26:d6:fa:95:6c:88:1d:69:22: f5:32:ab:14:48:6d:89:12:c6:7a:42:36:a9:cf:8c:6a:b5:18: 5b:75:02:c7:0e:e4:ab:77:c8:21:73:cc:77:d3:c5:c7:ec:79: 8e:33:04:6d:02:3c:54:42:42:b8:2e:85:06:b2:bb:18:ee:5a: 08:92:7c:ff -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErswTMZ437AjRbBz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZmQ4YjFlN2ItNjY2OS00NWQxLWEzMTMtYTgwMWY3MDRjMjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOHy5tSbiecfrwzMOU4KzCZlWOOapl65KOYY YiIqk0hKXvK0UrRy8bXE9nAoyWnVExjJeIP3Jg3blowNBdKJDp6Mu2nBIC9QoYSR z6Hqg8TcYPzSVdqZ1GcaS6AE2s4rU+wd+q5kh6e2nClrP+NMhyQEA18xcTFuAJVy khUvX28GH/Mb4DLXwrz9o3U+maUy/n6wh11DK8NaKqw0nzA6Xlt9S/rLcrh9t5qV 4/u0k5G4ba0WAnI62e9x8mGzX7HJV7mPQgWcGAQT0KmnNs5pOEhnh6d0PHFGgrn7 BqCvYcSJfcmjN+jpxBFLmKj11DfLlOJcMDvXujH4/tpc2BVzDwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAt/DPD7mwM1sWQv6KZVesEgLb0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvODIzNWRmYmUtYjNhYi0z NzM1LWFhYjctYzI5NTUwNjlmYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAREfgAwQB REfkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEwUs0DyyqiVBxVFqQZwflkfA363qkLbJytUsRwf8emNdtsL AN64Z9LVY0y6qtAxX/5G8aJbG0nqAew5cVv5HPKN9kezwVnX6bq1nuduSJy+Yvtm r8gRVtLQ5k7+5vWDYSq+kDEun/kUwr8DkxgpuIi4tJlQD6SAYHnoM+rWXriluoVu nUGrTq6AYaRszlsK+kgG4PggMqqI0dBiH3hs/JrI6yhedDc6aZcSHKDeT0PqXSXg tC9+XvkoKeMJYSbW+pVsiB1pIvUyqxRIbYkSxnpCNqnPjGq1GFt1AscO5Kt3yCFz zHfTxcfseY4zBG0CPFRCQrguhQayuxjuWgiSfP8= -----END CERTIFICATE-----Generated at Sat Aug 23 06:45:50 2025 by rpki-client