$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa File: 8a468e47-8a6e-3f96-b02e-a3434f12468a.roa (raw, json) Hash identifier: y0JC6EdliGsx3kp+4VboB35BMI6sT4y75ybCKfqsXA8= Subject key identifier: 85:54:1D:B1:91:4A:88:28:8D:83:4E:7B:42:62:F6:C9:8C:FC:3E:35 Certificate issuer: /CN=3bb72fa3-359e-464d-be35-978a12d62998 Certificate serial: 010D0C9F4328584ADA9BBDA31AF317A6BAA5FC90 Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 18855 IP address blocks: 160.223.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:bd:a3:1a:f3:17:a6:ba:a5:fc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=5637e721-b768-4db9-87dd-68bd2f39d718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a2:c9:b7:3e:e5:85:c2:98:75:b1:01:63:b3: 84:b9:ab:03:35:99:16:91:64:72:f0:49:29:1c:a1: 6d:dc:fb:b3:88:87:89:89:83:9f:62:8a:cb:24:1d: 74:14:33:96:75:80:5e:61:c6:02:ae:34:b3:e8:f2: 9e:b7:50:46:f7:e9:4f:86:ea:b3:a9:6c:59:1c:58: c4:5f:8f:dd:6e:14:a0:87:04:fe:84:7f:e3:95:d0: 2a:f7:93:c3:cd:46:7e:0c:4f:81:45:cb:22:2f:fc: 53:bf:99:ff:70:4d:15:30:50:7d:0d:0f:69:e4:7a: 52:ff:79:ad:b6:0d:1e:d8:b2:3e:9a:78:19:09:7b: 80:01:86:76:12:88:33:d7:1d:13:58:f0:49:e7:5f: b3:8a:75:d9:e4:f9:a7:72:cd:e8:26:a1:7e:65:9d: 30:fa:af:26:84:84:f2:06:5b:50:68:e0:06:f1:21: ae:ac:5c:5d:4c:b7:88:a0:08:f8:7c:21:c3:5e:77: d6:c5:21:f3:cb:27:59:a5:c9:9e:a8:ee:d4:b6:3a: ae:43:ab:4f:84:f9:b7:ba:d5:ea:96:3c:a3:61:ec: 4d:b0:28:60:c7:1e:ac:db:57:7f:97:c8:7d:15:b4: 25:d0:c0:99:28:04:c6:6a:04:1b:fb:8e:3c:c6:9d: a9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:54:1D:B1:91:4A:88:28:8D:83:4E:7B:42:62:F6:C9:8C:FC:3E:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl X509v3 Authority Key Identifier: keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer sbgp-ipAddrBlock: critical IPv4: 160.223.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:f4:a2:78:44:ad:a2:fe:b9:30:d1:55:0c:fb:ba:e0:15:63: 11:67:00:da:e3:c5:f2:9f:6b:17:35:b3:7d:f8:04:f8:b5:16: 80:ec:d1:b2:4d:08:85:d6:73:6c:ef:d7:e4:bc:a6:34:f7:d7: 65:96:59:ad:de:f6:bb:3d:c4:9d:51:a2:06:62:c5:8c:a1:27: ba:14:85:a5:ea:f1:65:86:02:5d:cd:99:a6:24:7c:e4:ab:c3: 38:b4:c9:5f:f8:ab:ec:90:20:a5:ca:c9:c0:27:56:45:d6:4d: 16:8d:09:2d:fc:f1:d6:0b:e4:3a:f1:f8:63:86:91:88:37:cd: 2d:08:99:3b:44:ca:61:b0:e7:a2:72:83:a2:e6:7c:cd:e9:bf: 9c:04:5c:7f:0f:3a:14:98:7c:0a:d2:61:0c:02:d7:0c:b0:6c: 33:ac:cf:b8:4a:00:f3:64:57:ec:90:01:01:b0:3f:68:c2:2a: 5f:80:b5:0c:14:9e:2d:4e:7e:4b:b8:e4:07:4f:f8:a2:20:d4: 12:40:bf:6d:bd:8e:4f:d2:3a:50:9c:49:6d:95:40:1a:c4:29: 82:7c:7f:e0:a7:f2:17:72:fe:c2:34:5f:08:e2:20:48:8a:ce: 50:ec:7d:c5:39:d3:82:f0:d2:f0:4d:78:3e:b7:04:95:41:8e: 9b:02:0b:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram72jGvMXprql/JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNzJmYTMtMzU5ZS00NjRkLWJlMzUtOTc4YTEyZDYy OTk4MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk NTYzN2U3MjEtYjc2OC00ZGI5LTg3ZGQtNjhiZDJmMzlkNzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qLJtz7lhcKYdbEBY7OEuasDNZkWkWRy8Ekp HKFt3PuziIeJiYOfYorLJB10FDOWdYBeYcYCrjSz6PKet1BG9+lPhuqzqWxZHFjE X4/dbhSghwT+hH/jldAq95PDzUZ+DE+BRcsiL/xTv5n/cE0VMFB9DQ9p5HpS/3mt tg0e2LI+mngZCXuAAYZ2Eogz1x0TWPBJ51+zinXZ5Pmncs3oJqF+ZZ0w+q8mhITy BltQaOAG8SGurFxdTLeIoAj4fCHDXnfWxSHzyydZpcmeqO7UtjquQ6tPhPm3utXq ljyjYexNsChgxx6s21d/l8h9FbQl0MCZKATGagQb+448xp2p0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVUHbGRSogojYNOe0Ji9smM/D41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3 MmZhMy0zNTllLTQ2NGQtYmUzNS05NzhhMTJkNjI5OTgvOGE0NjhlNDctOGE2ZS0z Zjk2LWIwMmUtYTM0MzRmMTI0NjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNzJmYTMtMzU5ZS00NjRkLWJl MzUtOTc4YTEyZDYyOTk4LzNiYjcyZmEzLTM1OWUtNDY0ZC1iZTM1LTk3OGExMmQ2 Mjk5OC5jcmwwHwYDVR0jBBgwFoAU6KpNDavZkpnzD6D/MKvaA2ZFkPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3MmZhMy0zNTllLTQ2NGQtYmUzNS05Nzhh MTJkNjI5OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoN/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ70onhEraL+uTDRVQz7uuAVYxFnANrjxfKfaxc1s334BPi1FoDs0bJN CIXWc2zv1+S8pjT312WWWa3e9rs9xJ1RogZixYyhJ7oUhaXq8WWGAl3NmaYkfOSr wzi0yV/4q+yQIKXKycAnVkXWTRaNCS388dYL5Drx+GOGkYg3zS0ImTtEymGw56Jy g6LmfM3pv5wEXH8POhSYfArSYQwC1wywbDOsz7hKAPNkV+yQAQGwP2jCKl+AtQwU ni1Ofku45AdP+KIg1BJAv229jk/SOlCcSW2VQBrEKYJ8f+Cn8hdy/sI0XwjiIEiK zlDsfcU504Lw0vBNeD63BJVBjpsCCwA= -----END CERTIFICATE-----Generated at Sat Aug 23 23:47:52 2025 by rpki-client