$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/d379290d-66d2-34d2-a150-78081960fa2b.roa File: d379290d-66d2-34d2-a150-78081960fa2b.roa (raw, json) Hash identifier: 4Kwx0OQIu7c2DHUa24ZbKwx9S8bsjwmqUY3CL+jTmUI= Subject key identifier: F0:A1:11:5E:D8:CE:B9:2E:9D:25:90:47:68:6B:E6:51:E6:75:28:7C Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F4328584ACE0BA2B24A13A967AD029580 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/d379290d-66d2-34d2-a150-78081960fa2b.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 6128 IP address blocks: 173.251.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a2:b2:4a:13:a9:67:ad:02:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=a5449494-1178-4b67-848a-f7dcf846781a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:28:46:02:c6:79:05:93:e3:ba:c1:46:b0:23: b5:d4:23:66:09:a1:d3:80:ad:a8:64:76:14:e2:46: 03:f3:e5:ac:02:4a:47:f5:36:dd:79:62:83:0b:f6: 9e:d1:12:90:3d:db:01:4c:a3:45:0b:d0:b3:6f:61: 1c:e6:26:b1:3f:fd:3d:26:68:52:c3:12:fb:64:4a: 05:c8:55:42:67:a5:70:db:6b:f6:a2:6d:9a:8c:cd: 3f:6f:df:ae:a8:bc:cf:de:3a:8c:35:6f:92:9f:8c: 5e:8c:12:65:b8:0b:09:47:a9:90:26:84:26:bb:f7: c2:e5:9e:ad:86:5f:f2:28:53:65:98:83:ce:dd:50: a7:2c:52:37:cc:26:88:0c:25:de:64:35:0b:54:fb: df:67:6a:a6:99:f8:60:57:46:7b:9e:c5:87:33:a6: bc:af:fb:c3:d9:b2:66:6b:50:f9:4c:26:1a:9a:27: 10:1f:bc:65:9a:55:bb:cb:82:b3:76:3c:8b:da:95: f0:92:6e:04:d5:99:f6:c8:12:fe:34:84:4c:11:62: ab:07:1b:b2:aa:81:02:66:7e:d2:05:c2:0b:07:64: bb:9f:66:a1:e0:44:b7:05:14:b7:d7:b6:8f:9d:69: 11:3a:90:0b:6d:4d:68:e1:dd:58:10:9a:1f:a8:66: c3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A1:11:5E:D8:CE:B9:2E:9D:25:90:47:68:6B:E6:51:E6:75:28:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/d379290d-66d2-34d2-a150-78081960fa2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 173.251.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:be:02:ed:e9:36:3a:0c:69:00:13:fc:32:ce:a2:96:08:21: f4:9f:03:d3:1d:02:d9:cd:cc:55:db:a7:26:67:ca:07:99:cc: ad:4d:2d:13:27:d3:99:58:af:8a:24:55:e3:1f:e9:11:f4:df: 08:c5:fd:fc:f2:83:4d:75:53:16:e2:8f:a5:9b:37:19:23:27: 49:a8:bd:10:d6:2b:d4:a7:5a:3d:5e:3e:ce:6c:d7:c3:1e:76: 83:f2:03:0d:32:83:e0:1f:a6:54:06:41:5f:ae:28:c4:6d:9b: 9c:f8:45:ee:27:b5:50:f1:9b:cf:85:a8:45:2b:4c:73:7d:2a: 2e:be:7c:f6:3a:aa:3c:28:74:ae:91:0e:79:37:6c:1b:88:36: e6:2d:37:42:d8:53:9c:5c:12:32:07:2c:57:ab:af:97:04:b5: fb:3a:b5:b5:a4:c7:35:08:ef:1f:ee:28:28:31:d6:a4:17:49: f5:6e:c5:60:10:7e:59:1a:dc:24:9e:c3:71:98:3d:9c:f3:e9: 73:25:80:fc:1b:03:5b:76:0e:14:da:6e:f6:18:0c:55:12:cd: 99:c6:10:a2:0f:a7:29:06:05:63:42:b9:6f:5f:01:a3:56:1a: 22:83:bc:29:04:5b:09:87:47:fb:23:e7:45:35:73:8f:27:80: 30:07:a3:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC6KyShOpZ60ClYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk YTU0NDk0OTQtMTE3OC00YjY3LTg0OGEtZjdkY2Y4NDY3ODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyhGAsZ5BZPjusFGsCO11CNmCaHTgK2oZHYU 4kYD8+WsAkpH9TbdeWKDC/ae0RKQPdsBTKNFC9Czb2Ec5iaxP/09JmhSwxL7ZEoF yFVCZ6Vw22v2om2ajM0/b9+uqLzP3jqMNW+Sn4xejBJluAsJR6mQJoQmu/fC5Z6t hl/yKFNlmIPO3VCnLFI3zCaIDCXeZDULVPvfZ2qmmfhgV0Z7nsWHM6a8r/vD2bJm a1D5TCYamicQH7xlmlW7y4KzdjyL2pXwkm4E1Zn2yBL+NIRMEWKrBxuyqoECZn7S BcILB2S7n2ah4ES3BRS317aPnWkROpALbU1o4d1YEJofqGbDHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPChEV7YzrkunSWQR2hr5lHmdSh8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvZDM3OTI5MGQtNjZkMi0z NGQyLWExNTAtNzgwODE5NjBmYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArftUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABS+Au3pNjoMaQAT/DLOopYIIfSfA9MdAtnNzFXbpyZnygeZzK1NLRMn 05lYr4okVeMf6RH03wjF/fzyg011Uxbij6WbNxkjJ0movRDWK9SnWj1ePs5s18Me doPyAw0yg+AfplQGQV+uKMRtm5z4Re4ntVDxm8+FqEUrTHN9Ki6+fPY6qjwodK6R Dnk3bBuINuYtN0LYU5xcEjIHLFerr5cEtfs6tbWkxzUI7x/uKCgx1qQXSfVuxWAQ flka3CSew3GYPZzz6XMlgPwbA1t2DhTabvYYDFUSzZnGEKIPpykGBWNCuW9fAaNW GiKDvCkEWwmHR/sj50U1c48ngDAHo8M= -----END CERTIFICATE-----Generated at Sat Aug 23 18:01:01 2025 by rpki-client