$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d6ed83b7-d5df-3a9e-b44a-fd7b542bfb1e.roa File: d6ed83b7-d5df-3a9e-b44a-fd7b542bfb1e.roa (raw, json) Hash identifier: VsSfn8PtXbVgLhzZ5q8Kz+Kf29nI9d5WD+ZT4UBkhZE= Subject key identifier: 89:83:2F:54:66:31:6A:46:0C:97:D8:05:B7:00:40:5E:F4:68:39:45 Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F4328584AD0D64233CB1685FA319BDC00 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d6ed83b7-d5df-3a9e-b44a-fd7b542bfb1e.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 5065 IP address blocks: 208.123.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:42:33:cb:16:85:fa:31:9b:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=2d70ed24-0ee3-4c32-aabb-458e57eefd15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:77:4c:c0:31:bb:0b:0a:05:c3:29:da:c2:3e: e7:cc:fc:a0:51:9d:1a:83:b2:2f:91:2b:bd:a4:ba: d7:cc:52:f6:6a:10:91:fc:ef:c5:c1:61:e8:eb:11: cd:e2:2b:f9:64:e1:bc:5a:b6:33:97:b8:31:e7:96: 66:69:b5:b7:99:8b:dd:72:16:50:2f:ed:39:74:f0: ba:47:25:38:fe:5f:f5:c0:e0:33:ef:6d:59:2f:42: 80:b6:2b:f6:a2:2c:13:21:e7:97:15:81:fa:28:29: 36:b2:0f:b2:c8:6a:38:01:9b:48:ab:e8:d4:0c:be: b5:15:96:81:af:72:90:1c:90:df:f5:27:cb:07:73: 80:34:ef:39:90:59:cd:b8:22:e8:1e:6e:de:54:45: 6d:5f:0c:3d:e4:48:96:47:c9:e9:57:a0:e7:74:ed: 54:2e:7d:2f:5e:c9:92:36:82:73:b0:57:0a:3f:24: d6:79:71:b9:fe:e9:72:d1:c7:89:3d:ff:a5:a2:0b: b5:85:33:ff:14:89:fd:ef:ae:74:97:f4:95:69:44: 84:4f:84:0b:97:6e:87:c7:35:cd:11:33:be:13:50: da:a1:8f:fe:60:ad:53:1f:06:77:a6:35:3f:66:67: fc:08:85:8d:bd:c9:6b:4a:9b:2a:07:1d:74:ac:56: a9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:83:2F:54:66:31:6A:46:0C:97:D8:05:B7:00:40:5E:F4:68:39:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d6ed83b7-d5df-3a9e-b44a-fd7b542bfb1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 208.123.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e7:c9:e3:4c:69:e6:b6:eb:6b:02:41:2b:98:da:3e:de:90: 80:7a:18:71:72:3b:b0:82:2c:25:77:65:f8:2a:7f:dc:40:9c: 08:3c:7e:47:06:5c:4a:e4:65:50:1d:92:d6:da:aa:24:58:31: 4d:cd:e9:fa:a2:24:cf:a4:1e:4e:55:b4:0c:a2:23:4b:51:72: a9:9c:11:5f:a9:04:4b:c4:ac:6e:52:60:87:9a:90:de:bf:dd: 9b:56:6a:f4:43:81:4d:9f:a9:86:dd:1a:07:0a:16:ff:00:48: b6:c9:62:c9:88:69:33:a9:2b:01:85:79:68:0e:b8:c9:6b:15: 0f:b2:95:80:c5:66:b6:05:73:64:62:36:9d:82:f2:88:a0:b8: fc:02:4c:d9:ad:68:2a:f5:9a:1c:b1:7e:5d:03:77:d8:b6:d1: 8e:b0:c2:7c:81:27:77:8d:eb:80:4c:4a:ec:53:29:16:80:b9: 4f:af:cc:1c:56:2c:f0:af:f2:6a:2b:9c:bd:97:c4:cb:f6:4a: 74:47:f2:76:78:09:70:cb:3b:a1:59:25:02:ed:ed:41:2d:b8: 2a:f1:02:2e:35:36:4c:6f:ca:2d:97:98:84:60:41:e5:f2:88: 61:dd:e3:92:c3:fa:e2:ab:62:a1:46:86:8a:11:e9:96:fd:0f: 72:b5:10:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1kIzyxaF+jGb3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk MmQ3MGVkMjQtMGVlMy00YzMyLWFhYmItNDU4ZTU3ZWVmZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzndMwDG7CwoFwynawj7nzPygUZ0ag7IvkSu9 pLrXzFL2ahCR/O/FwWHo6xHN4iv5ZOG8WrYzl7gx55ZmabW3mYvdchZQL+05dPC6 RyU4/l/1wOAz721ZL0KAtiv2oiwTIeeXFYH6KCk2sg+yyGo4AZtIq+jUDL61FZaB r3KQHJDf9SfLB3OANO85kFnNuCLoHm7eVEVtXww95EiWR8npV6DndO1ULn0vXsmS NoJzsFcKPyTWeXG5/uly0ceJPf+logu1hTP/FIn97650l/SVaUSET4QLl26HxzXN ETO+E1DaoY/+YK1THwZ3pjU/Zmf8CIWNvclrSpsqBx10rFapMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImDL1RmMWpGDJfYBbcAQF70aDlFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvZDZlZDgzYjctZDVkZi0z YTllLWI0NGEtZmQ3YjU0MmJmYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HvdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLnyeNMaea262sCQSuY2j7ekIB6GHFyO7CCLCV3Zfgqf9xAnAg8fkcG XErkZVAdktbaqiRYMU3N6fqiJM+kHk5VtAyiI0tRcqmcEV+pBEvErG5SYIeakN6/ 3ZtWavRDgU2fqYbdGgcKFv8ASLbJYsmIaTOpKwGFeWgOuMlrFQ+ylYDFZrYFc2Ri Np2C8oiguPwCTNmtaCr1mhyxfl0Dd9i20Y6wwnyBJ3eN64BMSuxTKRaAuU+vzBxW LPCv8mornL2XxMv2SnRH8nZ4CXDLO6FZJQLt7UEtuCrxAi41Nkxvyi2XmIRgQeXy iGHd45LD+uKrYqFGhooR6Zb9D3K1EJE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:03:40 2025 by rpki-client