$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8491bcd5-3593-3080-b953-4fe2d3a28be8.roa File: 8491bcd5-3593-3080-b953-4fe2d3a28be8.roa (raw, json) Hash identifier: 0nC+7YeDxxSXpRad8mRtUurk86FbtwJ/qszE49+bGGI= Subject key identifier: 19:72:27:01:C7:9E:F0:D5:AF:FC:88:53:C3:D7:48:30:A9:DD:D4:73 Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F4328584ACE0B9D3163B1EA95A60FA400 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8491bcd5-3593-3080-b953-4fe2d3a28be8.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 53475 IP address blocks: 173.251.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:9d:31:63:b1:ea:95:a6:0f:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=942819c1-11ed-486c-b2fd-808954b088bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ab:af:ce:65:b0:46:f0:c0:54:4e:cc:ca:24: 88:20:5f:ab:c2:c2:0d:76:07:74:3b:f6:23:5e:aa: be:6f:81:82:0a:2d:d7:41:cb:a3:f7:09:b6:af:7c: a8:45:03:b2:12:40:2f:bc:98:ac:10:2b:2d:a4:00: a6:39:76:20:f9:8d:68:ed:b5:01:71:3f:33:cf:58: a4:a0:cb:14:b1:ac:7f:b9:d1:c1:6e:f7:e1:95:91: f3:de:3c:20:7c:e7:bc:a1:24:14:8e:5a:7a:0e:67: 25:a1:1e:46:a1:71:e6:02:9b:29:b1:e5:ad:2e:4d: 5d:19:12:35:8b:c9:4c:b0:df:05:7f:c8:45:a8:39: 82:6c:fa:2c:ec:66:5e:81:67:e2:99:f7:4e:e6:2c: 16:08:c0:0f:f4:94:77:fe:f6:6f:37:44:41:6d:c8: 56:11:3e:f5:f9:63:19:41:10:b1:e7:1c:7a:70:67: 8c:6a:ac:28:ac:d9:11:d5:fe:6a:98:a0:c3:7d:7b: bc:ab:00:eb:5f:77:45:78:16:21:3f:8f:8b:6e:66: c7:ab:c8:ce:f4:d1:de:27:86:3e:01:01:fe:ed:fb: 6a:26:0a:42:ac:33:a2:50:c6:7b:e1:b1:6b:c6:f9: c6:cf:ce:a3:29:75:36:be:7e:97:93:55:9e:81:82: ba:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:72:27:01:C7:9E:F0:D5:AF:FC:88:53:C3:D7:48:30:A9:DD:D4:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8491bcd5-3593-3080-b953-4fe2d3a28be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 173.251.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:44:4e:77:ba:97:41:c2:41:e0:e9:db:38:30:30:d5:64:9e: 88:99:4c:d3:9a:ba:a6:e7:42:da:46:4c:89:1f:be:90:b2:84: 5a:70:02:d1:1b:42:ad:73:32:a5:bf:e9:12:be:18:c4:be:f5: 0b:3a:6f:c6:21:c1:39:2d:fb:31:85:2b:08:5a:30:1f:82:02: 2d:cb:11:ca:41:70:95:26:dc:47:e3:59:0f:14:3b:8e:dd:c6: 0f:46:55:78:05:ce:eb:74:b5:6e:9b:9e:01:20:80:e9:f5:7c: 2d:62:34:33:14:79:60:72:98:14:c1:f3:6c:16:1d:e9:1b:3e: db:de:26:d2:c5:1f:f9:46:f5:e4:d7:e0:a8:a2:0b:39:b8:df: 00:f1:66:62:6d:45:9a:2c:d4:ff:36:a1:d4:07:f2:39:f4:ae: 8f:79:11:88:51:a5:f3:6b:6b:ec:b7:d0:65:2b:ca:a3:2e:e4: 22:ab:2b:4f:e3:d4:9d:01:af:19:54:27:df:10:2b:5f:5f:8a: 66:e5:68:f6:40:85:72:b7:d8:52:23:c0:92:1e:bf:e9:f9:2e: 0d:8e:9a:43:1d:a9:3a:ac:9b:a3:48:23:dd:14:e5:0b:9b:dd: 1f:8f:9b:21:48:f7:90:aa:b7:96:93:97:30:9a:43:74:c9:1c: f4:e8:f3:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC50xY7HqlaYPpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk OTQyODE5YzEtMTFlZC00ODZjLWIyZmQtODA4OTU0YjA4OGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsquvzmWwRvDAVE7MyiSIIF+rwsINdgd0O/Yj Xqq+b4GCCi3XQcuj9wm2r3yoRQOyEkAvvJisECstpACmOXYg+Y1o7bUBcT8zz1ik oMsUsax/udHBbvfhlZHz3jwgfOe8oSQUjlp6DmcloR5GoXHmApspseWtLk1dGRI1 i8lMsN8Ff8hFqDmCbPos7GZegWfimfdO5iwWCMAP9JR3/vZvN0RBbchWET71+WMZ QRCx5xx6cGeMaqworNkR1f5qmKDDfXu8qwDrX3dFeBYhP4+LbmbHq8jO9NHeJ4Y+ AQH+7ftqJgpCrDOiUMZ74bFrxvnGz86jKXU2vn6Xk1WegYK6ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlyJwHHnvDVr/yIU8PXSDCp3dRzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvODQ5MWJjZDUtMzU5My0z MDgwLWI5NTMtNGZlMmQzYTI4YmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArftvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANBETne6l0HCQeDp2zgwMNVknoiZTNOauqbnQtpGTIkfvpCyhFpwAtEb Qq1zMqW/6RK+GMS+9Qs6b8YhwTkt+zGFKwhaMB+CAi3LEcpBcJUm3EfjWQ8UO47d xg9GVXgFzut0tW6bngEggOn1fC1iNDMUeWBymBTB82wWHekbPtveJtLFH/lG9eTX 4KiiCzm43wDxZmJtRZos1P82odQH8jn0ro95EYhRpfNra+y30GUryqMu5CKrK0/j 1J0BrxlUJ98QK19fimblaPZAhXK32FIjwJIev+n5Lg2OmkMdqTqsm6NII90U5Qub 3R+PmyFI95Cqt5aTlzCaQ3TJHPTo804= -----END CERTIFICATE-----Generated at Sat Aug 23 17:36:24 2025 by rpki-client