$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/8883f6a0-cd35-3a1a-a3cf-dfd8f7e87101.roa File: 8883f6a0-cd35-3a1a-a3cf-dfd8f7e87101.roa (raw, json) Hash identifier: FmccyGuwqZP0trgDJD/uIhgERLa+EujTN3DF62RJIu4= Subject key identifier: AC:28:1E:AB:CC:87:68:96:C8:B0:D6:42:38:36:6F:6A:A8:5D:C0:0B Certificate issuer: /CN=b8a0e292-3e8f-447b-81c6-cedef4747341 Certificate serial: 010D0C9F4328584AE1968C0BAEC0F22579F4D000 Authority key identifier: 83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/8883f6a0-cd35-3a1a-a3cf-dfd8f7e87101.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 54511 IP address blocks: 64.202.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:8c:0b:ae:c0:f2:25:79:f4:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a0e292-3e8f-447b-81c6-cedef4747341 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=53cf8d60-2307-46b5-8462-b48f7f2fdc84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bb:b7:4f:d9:4c:d6:bf:25:48:c1:1d:0f:9a: a3:b4:ef:ee:e0:17:66:02:c3:ea:b6:e8:9c:52:e9: 1d:21:56:77:84:31:18:7f:25:c9:1b:15:1b:85:10: a7:76:19:87:39:66:0a:7b:7d:37:d2:0b:a1:8d:76: aa:f5:73:72:f3:4c:f9:97:49:e5:81:a8:9b:e3:b5: be:d5:c2:44:f9:89:a0:61:74:9b:31:7b:c6:55:31: 16:60:7d:cd:3e:55:ee:a0:b3:b6:c3:f1:e7:84:4a: b7:61:e4:b3:03:14:20:53:aa:af:24:38:be:34:96: e5:92:c4:e1:9c:75:cc:8a:90:8f:b0:60:61:af:70: aa:d0:66:99:6a:cc:9a:68:1c:02:a9:04:44:de:8a: 42:cd:3f:3d:41:66:16:89:c3:91:fc:f1:b5:8f:2e: 1a:4f:93:df:32:e0:28:0e:a4:32:e8:c2:13:4c:59: 47:36:1c:cd:db:b4:76:87:f5:40:3a:a2:65:d1:53: 40:eb:9e:55:7d:7a:e5:ce:7b:0e:67:9a:f6:45:7a: 86:d8:7f:35:92:7e:96:8f:10:cd:3d:c4:22:d4:ad: 95:fd:b1:e1:40:67:70:ad:2d:e2:3e:b0:48:0e:8e: 4a:53:88:fb:43:d9:e1:0b:da:43:03:1f:1e:2b:fe: 7e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:28:1E:AB:CC:87:68:96:C8:B0:D6:42:38:36:6F:6A:A8:5D:C0:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/8883f6a0-cd35-3a1a-a3cf-dfd8f7e87101.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.crl X509v3 Authority Key Identifier: keyid:83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer sbgp-ipAddrBlock: critical IPv4: 64.202.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:cd:84:57:fe:6f:2f:5f:45:7c:08:67:f1:e6:b2:06:6c:ae: 38:0c:db:7f:5c:10:85:43:1d:0e:24:81:00:63:5b:d8:06:e2: c3:fa:bf:86:85:be:63:70:0c:d8:74:d9:03:3b:29:37:03:0f: 29:98:c9:0c:a4:44:d4:cd:a8:8e:9e:05:4d:87:00:b7:d5:71: cd:b0:95:9e:7f:fa:0b:31:6c:57:61:c0:4b:3a:77:5f:d7:f1: 87:26:c7:d8:0f:e1:4b:e7:55:9d:c7:f6:b1:3b:6a:d9:87:b2: 0c:a0:c8:44:d0:62:85:29:8d:06:0f:40:02:4f:fe:0f:d6:bb: 9a:71:03:51:67:35:60:0a:33:94:99:ad:3d:83:88:34:54:33: 7c:61:c9:83:ae:ef:62:31:fc:a5:10:ea:b3:e6:d2:7f:a2:1b: 8e:de:92:57:37:e6:c8:21:1c:d4:fa:4c:ec:71:58:12:df:cb: 7e:6b:95:bc:54:bf:9b:30:c1:22:13:95:08:21:a8:98:6c:ab: 0f:27:a8:ae:01:82:e3:17:68:d8:16:3a:a5:69:8c:0b:41:4e: 40:1e:60:00:f0:ea:3c:31:f3:f4:b1:9a:27:ee:68:eb:14:d3: 33:a0:a8:b0:c9:b7:ae:78:69:8d:a1:d0:e6:ad:89:f2:42:39: 08:b6:b4:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlowLrsDyJXn00AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMGUyOTItM2U4Zi00NDdiLTgxYzYtY2VkZWY0NzQ3 MzQxMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk NTNjZjhkNjAtMjMwNy00NmI1LTg0NjItYjQ4ZjdmMmZkYzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7u3T9lM1r8lSMEdD5qjtO/u4BdmAsPqtuic UukdIVZ3hDEYfyXJGxUbhRCndhmHOWYKe3030guhjXaq9XNy80z5l0nlgaib47W+ 1cJE+YmgYXSbMXvGVTEWYH3NPlXuoLO2w/HnhEq3YeSzAxQgU6qvJDi+NJblksTh nHXMipCPsGBhr3Cq0GaZasyaaBwCqQRE3opCzT89QWYWicOR/PG1jy4aT5PfMuAo DqQy6MITTFlHNhzN27R2h/VAOqJl0VNA655VfXrlznsOZ5r2RXqG2H81kn6WjxDN PcQi1K2V/bHhQGdwrS3iPrBIDo5KU4j7Q9nhC9pDAx8eK/5+gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwoHqvMh2iWyLDWQjg2b2qoXcALMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iOGEw ZTI5Mi0zZThmLTQ0N2ItODFjNi1jZWRlZjQ3NDczNDEvODg4M2Y2YTAtY2QzNS0z YTFhLWEzY2YtZGZkOGY3ZTg3MTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjhhMGUyOTItM2U4Zi00NDdiLTgx YzYtY2VkZWY0NzQ3MzQxL2I4YTBlMjkyLTNlOGYtNDQ3Yi04MWM2LWNlZGVmNDc0 NzM0MS5jcmwwHwYDVR0jBBgwFoAUg6NsmzDl3oDss6T8QuVSciOI2g8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iOGEwZTI5Mi0zZThmLTQ0N2ItODFjNi1jZWRl ZjQ3NDczNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbNhFf+by9fRXwIZ/HmsgZsrjgM239cEIVDHQ4kgQBjW9gG4sP6v4aF vmNwDNh02QM7KTcDDymYyQykRNTNqI6eBU2HALfVcc2wlZ5/+gsxbFdhwEs6d1/X 8Ycmx9gP4UvnVZ3H9rE7atmHsgygyETQYoUpjQYPQAJP/g/Wu5pxA1FnNWAKM5SZ rT2DiDRUM3xhyYOu72Ix/KUQ6rPm0n+iG47eklc35sghHNT6TOxxWBLfy35rlbxU v5swwSITlQghqJhsqw8nqK4BguMXaNgWOqVpjAtBTkAeYADw6jwx8/SxmifuaOsU 0zOgqLDJt654aY2h0OatifJCOQi2tNc= -----END CERTIFICATE-----Generated at Sun Aug 24 06:14:28 2025 by rpki-client