$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/bda6574d-81c2-38f7-b624-cdc878c38860.roa File: bda6574d-81c2-38f7-b624-cdc878c38860.roa (raw, json) Hash identifier: 7Mt8kpjFQBt0E2zVwbYPg/3rINhK6s/1s8mR6kvj0Yk= Subject key identifier: FF:BB:4F:A6:B5:23:0C:F0:4C:7C:9F:C5:DF:AA:D1:87:13:83:4F:36 Certificate issuer: /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Certificate serial: 010D0C9F4328584AE03117CF9DD99354C61D8300 Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/bda6574d-81c2-38f7-b624-cdc878c38860.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 400702 IP address blocks: 192.81.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:17:cf:9d:d9:93:54:c6:1d:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=b3f508da-ba5a-4723-ac98-f98f594c56af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cd:e6:54:ce:f6:87:20:2d:e3:f5:75:ad:35: 43:f6:5d:ec:c9:f3:57:5e:b6:8d:84:a7:ae:58:aa: d5:0c:76:a1:73:7c:cd:24:56:49:3b:77:f3:1a:b9: ef:75:b9:00:06:f1:f9:9f:10:41:85:4e:97:8a:76: 23:6d:bf:82:bd:2a:41:d5:67:c9:d2:a3:40:c2:0c: 2c:ad:85:e6:20:06:37:09:09:5b:f1:34:91:96:6a: 51:e2:c9:20:68:02:4b:b0:c4:06:29:70:89:d8:e4: a0:8c:a1:05:f6:a6:5c:65:76:17:e1:28:d6:49:1e: f0:7a:a5:46:1b:6f:97:ac:d8:15:0f:d8:d2:cf:98: 51:d6:45:ae:a5:07:49:16:fb:bb:b7:5c:81:31:52: 09:61:26:ec:c9:12:e6:54:a6:c2:f5:8e:71:4a:fa: 02:75:e0:96:e9:77:ce:c1:3d:ef:19:3c:34:e2:b1: 31:61:55:37:43:9c:6d:72:9d:5e:60:16:df:e0:e7: 68:57:cf:31:6a:60:ae:c7:1b:41:e3:94:7c:7f:4e: 3e:cd:1a:2b:91:d5:31:4a:b3:0d:ca:ce:11:be:8d: cb:04:42:a8:65:56:76:9d:64:e1:e8:3a:2c:90:8e: b1:e2:1b:b3:2a:0d:b9:17:a4:8c:38:ee:58:2a:c0: 45:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BB:4F:A6:B5:23:0C:F0:4C:7C:9F:C5:DF:AA:D1:87:13:83:4F:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/bda6574d-81c2-38f7-b624-cdc878c38860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl X509v3 Authority Key Identifier: keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer sbgp-ipAddrBlock: critical IPv4: 192.81.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:dc:db:96:06:fa:6c:b7:7a:c9:ea:73:05:52:e8:e5:4b:01: b8:09:2e:32:71:81:4d:45:b8:19:6f:ea:ad:f2:0f:cf:17:35: c1:81:b0:96:80:55:a0:d7:af:27:09:e3:a8:82:26:76:f8:5a: 2c:08:97:01:bc:ec:85:31:76:67:fd:01:53:0c:0c:93:fa:f5: 69:3c:11:dc:ae:2d:29:3e:cc:bd:1d:c2:be:ab:06:99:64:3f: af:36:5b:0e:28:95:07:6f:46:dd:58:8c:ea:31:fd:df:28:24: e8:0d:d0:20:3c:77:0d:7d:27:2c:91:1c:8e:54:fa:42:95:8d: 2e:ea:fe:41:f7:be:9b:00:57:6a:c8:41:55:e6:0b:f0:63:b6: 54:cf:8a:9d:42:c1:cd:97:7f:1b:dc:9d:0f:eb:83:73:e2:54: 84:86:b6:14:48:fa:bc:60:f8:91:36:57:5e:22:29:8c:f8:d8: 5c:d4:71:ac:36:5f:48:a5:37:64:d6:93:fd:d9:41:69:bc:dd: fd:0f:93:95:33:d4:c6:7f:e5:3c:47:75:73:ce:3f:12:d3:7a: 89:d2:0b:fd:1e:f9:04:5b:64:98:32:b2:5d:8e:17:9a:fd:1f: a8:ce:5c:41:1a:aa:81:d1:d6:77:36:b7:31:db:2c:d0:e1:29: 3c:f6:d8:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMRfPndmTVMYdgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyZDJhNTItNWNhNy00YTM2LTg0OWYtYTdkNmI4NzZl Njg3MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk YjNmNTA4ZGEtYmE1YS00NzIzLWFjOTgtZjk4ZjU5NGM1NmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl83mVM72hyAt4/V1rTVD9l3syfNXXraNhKeu WKrVDHahc3zNJFZJO3fzGrnvdbkABvH5nxBBhU6XinYjbb+CvSpB1WfJ0qNAwgws rYXmIAY3CQlb8TSRlmpR4skgaAJLsMQGKXCJ2OSgjKEF9qZcZXYX4SjWSR7weqVG G2+XrNgVD9jSz5hR1kWupQdJFvu7t1yBMVIJYSbsyRLmVKbC9Y5xSvoCdeCW6XfO wT3vGTw04rExYVU3Q5xtcp1eYBbf4OdoV88xamCuxxtB45R8f04+zRorkdUxSrMN ys4Rvo3LBEKoZVZ2nWTh6DoskI6x4huzKg25F6SMOO5YKsBFbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+7T6a1IwzwTHyfxd+q0YcTg082MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJk MmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2Yjg3NmU2ODcvYmRhNjU3NGQtODFjMi0z OGY3LWI2MjQtY2RjODc4YzM4ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYyZDJhNTItNWNhNy00YTM2LTg0 OWYtYTdkNmI4NzZlNjg3L2RmMmQyYTUyLTVjYTctNGEzNi04NDlmLWE3ZDZiODc2 ZTY4Ny5jcmwwHwYDVR0jBBgwFoAUoN/uDKPKmaIvkq/l9lLB35RGlwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJkMmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2 Yjg3NmU2ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwFGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArc25YG+my3esnqcwVS6OVLAbgJLjJxgU1FuBlv6q3yD88XNcGBsJaA VaDXrycJ46iCJnb4WiwIlwG87IUxdmf9AVMMDJP69Wk8EdyuLSk+zL0dwr6rBplk P682Ww4olQdvRt1YjOox/d8oJOgN0CA8dw19JyyRHI5U+kKVjS7q/kH3vpsAV2rI QVXmC/BjtlTPip1Cwc2XfxvcnQ/rg3PiVISGthRI+rxg+JE2V14iKYz42FzUcaw2 X0ilN2TWk/3ZQWm83f0Pk5Uz1MZ/5TxHdXPOPxLTeonSC/0e+QRbZJgysl2OF5r9 H6jOXEEaqoHR1nc2tzHbLNDhKTz22MM= -----END CERTIFICATE-----Generated at Sun Aug 24 05:20:38 2025 by rpki-client