$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/10b807b1-e711-3d18-8639-ef43944d7fd6.roa File: 10b807b1-e711-3d18-8639-ef43944d7fd6.roa (raw, json) Hash identifier: QpYfb/X3n/kJYGSUIU1FaJbklBqDRv3/VuNSS0vLzCM= Subject key identifier: B1:18:4A:40:50:58:54:1E:3F:12:17:EF:85:84:E0:AA:B0:E0:A9:35 Certificate issuer: /CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b Certificate serial: 010D0C9F4328584AD7D10AA176A71C8D07C97E80 Authority key identifier: 95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/10b807b1-e711-3d18-8639-ef43944d7fd6.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 396982 IP address blocks: 168.100.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:0a:a1:76:a7:1c:8d:07:c9:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=bc215d8c-a09a-46da-a4e9-0fdb268e7a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:c1:e7:7d:2a:bd:5b:4e:70:d3:10:97:7c: 9e:d1:0f:04:6a:3e:49:c3:78:c4:e3:3b:eb:57:6c: af:59:48:35:a4:da:5a:93:0f:b8:96:a0:4c:a2:14: 6a:68:93:3f:fb:3a:ed:24:c1:be:0a:1c:ce:f5:7f: 6d:ed:e9:62:55:e6:ec:ee:c3:01:56:a7:39:f6:41: 78:5b:36:bb:f6:10:53:fb:ff:65:d7:9d:54:f8:60: 78:06:c4:d9:69:85:88:5e:d8:a6:67:e5:7b:34:11: 94:ba:b9:6e:09:f2:1e:f9:e4:5e:33:6f:c6:cb:22: 25:3a:ae:7e:eb:94:76:cb:6a:49:f4:c8:59:7c:61: 21:55:90:1d:33:36:73:4d:78:4f:c2:fc:36:7e:c8: ee:54:88:e2:85:7f:2e:95:bf:f8:35:1c:1d:55:d1: 64:63:30:ed:ea:2a:28:96:1e:88:0b:9b:ea:d1:36: bb:aa:c1:c8:26:80:5c:20:93:ee:8a:08:db:2c:9f: 7c:0e:e0:b0:ef:c1:ac:e1:ec:4a:7e:90:0b:b6:c8: a8:85:fa:9d:25:a6:04:29:c3:51:17:4c:46:cb:ec: 8b:7b:b6:46:7d:ed:5f:65:5e:fe:42:cf:58:ec:d6: 09:43:47:a8:33:26:11:a3:98:44:ca:02:46:15:4f: 1e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:18:4A:40:50:58:54:1E:3F:12:17:EF:85:84:E0:AA:B0:E0:A9:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/10b807b1-e711-3d18-8639-ef43944d7fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.crl X509v3 Authority Key Identifier: keyid:95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer sbgp-ipAddrBlock: critical IPv4: 168.100.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:ff:60:2f:5f:6c:66:38:54:5d:10:49:c5:13:4e:43:dc:2e: cc:67:a1:35:b6:6f:aa:71:67:18:a6:1e:03:d6:96:4a:37:ae: c3:23:9c:42:5e:30:fb:3f:39:82:21:34:bd:77:14:87:dd:c7: c7:d1:dc:e0:0a:74:3e:9b:42:51:84:22:d0:86:95:ba:23:7c: 6f:20:c5:ae:9f:b7:24:2b:6a:d1:b7:13:e8:e2:4d:fd:fa:de: 48:1e:d9:a1:7a:ea:d5:71:81:ae:9c:30:af:ea:b4:3f:50:be: e3:f8:4e:6f:19:71:b8:86:7f:69:29:d6:ea:d3:cb:ae:8e:cc: 25:72:32:d5:f0:6f:b0:20:f7:92:22:f3:67:17:19:92:94:76: 88:2a:bf:7a:6d:92:52:d5:5f:0e:70:49:fa:f1:1d:b9:3b:5b: 92:d3:5f:13:9d:7f:72:38:c8:94:e4:bf:4d:e6:e1:49:7b:6e: 9b:a8:56:e6:5a:c3:12:01:76:7e:12:27:b6:d4:43:98:75:04: 41:34:25:de:46:4e:23:b6:63:77:7c:2c:26:0a:90:60:00:2b: 10:6c:ad:e6:91:d3:2b:28:69:78:e2:d5:60:d9:de:2a:64:86: 12:df:90:6b:c0:a3:1f:54:7d:9d:b2:12:63:ad:fa:fc:22:25: d7:66:c4:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0QqhdqccjQfJfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY2NjYzYmUtMDk1Ny00NWNkLTg2ZDYtZTNkNjM1NGY2 YjliMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk YmMyMTVkOGMtYTA5YS00NmRhLWE0ZTktMGZkYjI2OGU3YTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMHB530qvVtOcNMQl3ye0Q8Eaj5Jw3jE4zvr V2yvWUg1pNpakw+4lqBMohRqaJM/+zrtJMG+ChzO9X9t7eliVebs7sMBVqc59kF4 Wza79hBT+/9l151U+GB4BsTZaYWIXtimZ+V7NBGUurluCfIe+eReM2/GyyIlOq5+ 65R2y2pJ9MhZfGEhVZAdMzZzTXhPwvw2fsjuVIjihX8ulb/4NRwdVdFkYzDt6ioo lh6IC5vq0Ta7qsHIJoBcIJPuigjbLJ98DuCw78Gs4exKfpALtsiohfqdJaYEKcNR F0xGy+yLe7ZGfe1fZV7+Qs9Y7NYJQ0eoMyYRo5hEygJGFU8e+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEYSkBQWFQePxIX74WE4Kqw4Kk1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84ZjY2 NjNiZS0wOTU3LTQ1Y2QtODZkNi1lM2Q2MzU0ZjZiOWIvMTBiODA3YjEtZTcxMS0z ZDE4LTg2MzktZWY0Mzk0NGQ3ZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGY2NjYzYmUtMDk1Ny00NWNkLTg2 ZDYtZTNkNjM1NGY2YjliLzhmNjY2M2JlLTA5NTctNDVjZC04NmQ2LWUzZDYzNTRm NmI5Yi5jcmwwHwYDVR0jBBgwFoAUlTXciMlOhWGTasimvQgR0KCufsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84ZjY2NjNiZS0wOTU3LTQ1Y2QtODZkNi1lM2Q2 MzU0ZjZiOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqGQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID/YC9fbGY4VF0QScUTTkPcLsxnoTW2b6pxZximHgPWlko3rsMjnEJe MPs/OYIhNL13FIfdx8fR3OAKdD6bQlGEItCGlbojfG8gxa6ftyQratG3E+jiTf36 3kge2aF66tVxga6cMK/qtD9QvuP4Tm8ZcbiGf2kp1urTy66OzCVyMtXwb7Ag95Ii 82cXGZKUdogqv3ptklLVXw5wSfrxHbk7W5LTXxOdf3I4yJTkv03m4Ul7bpuoVuZa wxIBdn4SJ7bUQ5h1BEE0Jd5GTiO2Y3d8LCYKkGAAKxBsreaR0ysoaXji1WDZ3ipk hhLfkGvAox9UfZ2yEmOt+vwiJddmxAk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:31:45 2025 by rpki-client