$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/84b980dc-1b89-371a-8343-16c5dac99a40.roa File: 84b980dc-1b89-371a-8343-16c5dac99a40.roa (raw, json) Hash identifier: DDsj+eUsaxc405RYgMt3E5u164Qhq5JhohBIhOCxqfo= Subject key identifier: D7:29:86:31:DA:A3:34:B6:E2:1B:0E:FA:64:04:6D:35:45:16:38:FC Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F4328584AC0163525710364F788ED2D00 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/84b980dc-1b89-371a-8343-16c5dac99a40.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 58580 IP address blocks: 168.245.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:35:25:71:03:64:f7:88:ed:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=32f69906-36e4-4c69-b5e1-535e535615ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e4:be:15:8c:1d:dc:9a:4e:7a:7b:be:d3:50: ea:c6:8e:99:d9:2c:ed:ef:3f:07:44:78:6c:4b:d1: 57:5d:e8:2b:2a:d3:3e:8a:28:0b:f6:24:2d:9c:e6: 9a:d7:37:76:08:dd:f2:f6:f7:b7:4e:dc:c0:be:88: 79:e2:c0:3d:74:c0:db:82:9a:9a:ab:09:a3:2a:d0: 2d:7e:60:8e:bb:3e:72:62:55:39:43:7f:18:34:3b: 36:5d:5e:88:4d:67:f0:12:1b:0f:2a:02:6d:36:8b: 59:68:4d:ea:2e:9b:fd:4a:f5:28:11:d5:4a:88:c7: 6d:bd:16:da:76:04:ae:f1:22:4c:e1:c9:45:62:55: 90:d5:6f:37:79:43:b9:d9:56:ca:1e:b6:e8:33:3c: 64:d4:22:57:4e:ea:04:14:e3:94:d2:30:a9:c9:ca: 69:98:15:71:a1:8f:09:ad:ee:b1:ac:f6:1f:4e:6f: cc:a4:67:67:fb:25:b0:fe:46:79:dd:d1:f6:81:dd: 4f:5b:5a:bd:85:0d:3c:8f:5f:03:eb:e9:dd:4b:77: a2:f4:44:08:8d:1d:d0:b4:72:36:34:2d:49:94:09: f3:25:b5:48:0b:bd:fe:6e:97:0c:c9:60:2c:5a:13: 36:1e:97:d5:78:06:b3:06:8d:80:08:8b:1f:24:63: dc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:29:86:31:DA:A3:34:B6:E2:1B:0E:FA:64:04:6D:35:45:16:38:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/84b980dc-1b89-371a-8343-16c5dac99a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 168.245.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:7f:56:f5:b1:b3:97:b4:dd:38:50:6c:8c:3c:15:f4:72:1d: ba:c4:ea:7a:27:7d:17:e5:8f:c5:29:05:6e:73:e3:71:b6:dd: a2:d6:7a:d8:c5:50:55:20:e4:cf:45:db:46:43:f4:4f:2f:72: e7:84:66:4e:46:31:37:eb:bf:2c:8a:68:c6:d5:3e:4e:f1:72: 63:36:44:96:f6:7e:08:2c:b8:4d:8e:7f:aa:2f:47:90:e8:a9: 75:cd:8d:0e:32:7c:30:40:ac:78:84:97:de:27:ee:41:9b:20: 85:c6:1c:59:90:16:40:a2:93:37:9f:58:68:8e:f2:61:47:4d: c5:7b:97:d8:f7:fb:62:bf:da:72:0c:d4:eb:57:7d:c2:67:a8: 47:fb:22:b3:96:88:9e:f1:46:66:bc:cd:ae:f9:21:cf:1d:6a: 19:5c:1d:58:6b:ee:fa:a4:9e:5f:d1:a1:74:1d:bf:a7:d9:40: 29:ad:0d:7d:a2:0d:74:c6:52:36:71:94:e9:98:d8:14:e9:dd: 8c:1d:68:9f:f3:05:99:ff:35:78:b8:ae:4e:be:9c:55:19:1e: fa:27:5f:f8:55:e4:f7:2f:08:45:c3:32:39:ad:10:52:46:e4: a5:a9:b5:12:8b:8a:93:66:a7:2b:96:5d:90:74:1f:1d:0a:c0: da:94:db:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFjUlcQNk94jtLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MzJmNjk5MDYtMzZlNC00YzY5LWI1ZTEtNTM1ZTUzNTYxNWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuS+FYwd3JpOenu+01Dqxo6Z2Szt7z8HRHhs S9FXXegrKtM+iigL9iQtnOaa1zd2CN3y9ve3TtzAvoh54sA9dMDbgpqaqwmjKtAt fmCOuz5yYlU5Q38YNDs2XV6ITWfwEhsPKgJtNotZaE3qLpv9SvUoEdVKiMdtvRba dgSu8SJM4clFYlWQ1W83eUO52VbKHrboMzxk1CJXTuoEFOOU0jCpycppmBVxoY8J re6xrPYfTm/MpGdn+yWw/kZ53dH2gd1PW1q9hQ08j18D6+ndS3ei9EQIjR3QtHI2 NC1JlAnzJbVIC73+bpcMyWAsWhM2HpfVeAazBo2ACIsfJGPcKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcphjHaozS24hsO+mQEbTVFFjj8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvODRiOTgwZGMtMWI4OS0z NzFhLTgzNDMtMTZjNWRhYzk5YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqPXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt/VvWxs5e03ThQbIw8FfRyHbrE6nonfRflj8UpBW5z43G23aLWetjF UFUg5M9F20ZD9E8vcueEZk5GMTfrvyyKaMbVPk7xcmM2RJb2fggsuE2Of6ovR5Do qXXNjQ4yfDBArHiEl94n7kGbIIXGHFmQFkCikzefWGiO8mFHTcV7l9j3+2K/2nIM 1OtXfcJnqEf7IrOWiJ7xRma8za75Ic8dahlcHVhr7vqknl/RoXQdv6fZQCmtDX2i DXTGUjZxlOmY2BTp3YwdaJ/zBZn/NXi4rk6+nFUZHvonX/hV5PcvCEXDMjmtEFJG 5KWptRKLipNmpyuWXZB0Hx0KwNqU24s= -----END CERTIFICATE-----Generated at Sun Aug 24 04:08:11 2025 by rpki-client