$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/3cc28a91-f7d9-3cd5-aa0b-d151dd067306.roa File: 3cc28a91-f7d9-3cd5-aa0b-d151dd067306.roa (raw, json) Hash identifier: K/+I5Z54OR22x+mfEDb9lyaAWleLCckDyb2v9xVBfZk= Subject key identifier: 30:B1:C3:7F:C8:19:D7:12:EB:A1:55:79:4B:9A:C3:67:4C:2A:ED:9A Certificate issuer: /CN=f16b1ed2-491f-4ed7-be99-59b20310c475 Certificate serial: 010D0C9F4328584ACE0B9EF1248698BE82B8FE40 Authority key identifier: 10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/3cc28a91-f7d9-3cd5-aa0b-d151dd067306.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 11924 IP address blocks: 208.83.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:9e:f1:24:86:98:be:82:b8:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f16b1ed2-491f-4ed7-be99-59b20310c475 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=85606a32-11dc-4b47-b777-bffbfec8a2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cb:2e:a1:5d:a3:c4:8c:9d:49:0f:9c:ac:81: cd:a2:5f:a1:3b:c7:e9:c8:51:3a:81:c1:72:d3:46: 5b:42:73:e1:ff:74:2e:99:da:96:3f:4a:ff:38:38: 5b:0d:c3:3b:33:6b:42:c4:c4:66:19:2e:73:c4:32: e0:4a:fa:86:73:da:e3:b7:6b:27:49:57:2c:75:59: 0e:4d:bf:72:e3:aa:2b:bc:fd:27:0c:98:62:b9:3d: e0:76:c8:e1:2b:b9:b5:0e:63:1b:fc:8c:3a:d7:bd: 80:09:0a:c5:34:a3:4e:70:07:ef:94:f8:81:5b:df: ed:f7:bc:bf:94:ea:a3:ef:8b:61:11:2b:99:0f:c8: 7d:d0:a4:18:ad:47:fb:19:73:28:a1:1e:6a:63:06: 54:6a:eb:dc:6e:a0:ed:3b:8c:4e:7d:ab:e2:07:51: 5f:13:f2:d4:ad:4d:78:64:3c:2f:11:7e:a7:df:13: 18:49:c3:e9:93:ee:38:70:c0:5e:97:37:3a:b6:69: 3a:cc:ce:2f:f3:df:cb:94:c9:15:49:6a:b4:f3:07: 75:aa:53:9d:85:24:b4:22:39:a8:77:5f:f4:bd:1d: 7b:e5:17:90:f5:d3:70:01:2b:80:c3:58:8b:e9:0b: 14:3a:a9:86:12:82:e1:1f:f6:bf:1d:76:3d:cf:1f: 12:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B1:C3:7F:C8:19:D7:12:EB:A1:55:79:4B:9A:C3:67:4C:2A:ED:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/3cc28a91-f7d9-3cd5-aa0b-d151dd067306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl X509v3 Authority Key Identifier: keyid:10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer sbgp-ipAddrBlock: critical IPv4: 208.83.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:30:7b:90:d8:c3:82:ef:0f:51:98:08:ee:22:92:e8:d0:e0: 6e:bf:37:72:74:68:0d:71:36:f6:37:7b:2f:57:c1:05:32:95: 0e:c4:03:af:9d:c4:a5:81:81:c8:20:dd:d6:9e:d3:75:8c:e6: 7c:5a:06:06:be:4a:bf:17:dc:f0:a1:c4:71:ae:29:87:23:92: c7:05:1f:2b:9a:7c:8f:47:5a:62:73:ea:7a:05:b6:01:93:27: fe:41:2e:f5:40:9e:3e:c2:63:69:e9:0e:9a:cd:30:8e:f1:2a: 1c:04:e2:57:35:b2:5b:5f:a2:10:af:77:43:67:ee:cd:58:e6: d7:78:a8:94:bf:c8:26:46:4b:06:b4:3d:d1:83:cf:7e:24:59: 97:9a:28:3d:a5:47:77:be:84:5a:4a:d5:67:1a:30:37:6a:b5: b1:9d:81:b5:12:39:9d:2c:7e:5f:cf:10:09:1e:e0:18:4b:21: ae:a8:b5:c7:63:91:cb:e6:17:26:c9:7e:6c:1d:a4:88:df:76: 23:27:41:30:b9:9f:81:fe:bc:9c:e8:e2:ec:31:24:65:d9:8c: 0c:cf:6b:bf:74:28:43:a6:13:3a:c6:8f:11:c7:06:ce:2c:f0: 9e:75:f8:1f:2e:6e:e8:99:27:e3:75:db:f9:48:5e:e2:91:0b: 02:c6:73:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC57xJIaYvoK4/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjE2YjFlZDItNDkxZi00ZWQ3LWJlOTktNTliMjAzMTBj NDc1MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk ODU2MDZhMzItMTFkYy00YjQ3LWI3NzctYmZmYmZlYzhhMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcsuoV2jxIydSQ+crIHNol+hO8fpyFE6gcFy 00ZbQnPh/3QumdqWP0r/ODhbDcM7M2tCxMRmGS5zxDLgSvqGc9rjt2snSVcsdVkO Tb9y46orvP0nDJhiuT3gdsjhK7m1DmMb/Iw6172ACQrFNKNOcAfvlPiBW9/t97y/ lOqj74thESuZD8h90KQYrUf7GXMooR5qYwZUauvcbqDtO4xOfaviB1FfE/LUrU14 ZDwvEX6n3xMYScPpk+44cMBelzc6tmk6zM4v89/LlMkVSWq08wd1qlOdhSS0Ijmo d1/0vR175ReQ9dNwASuAw1iL6QsUOqmGEoLhH/a/HXY9zx8SjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCxw3/IGdcS66FVeUuaw2dMKu2aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMTZi MWVkMi00OTFmLTRlZDctYmU5OS01OWIyMDMxMGM0NzUvM2NjMjhhOTEtZjdkOS0z Y2Q1LWFhMGItZDE1MWRkMDY3MzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjE2YjFlZDItNDkxZi00ZWQ3LWJl OTktNTliMjAzMTBjNDc1L2YxNmIxZWQyLTQ5MWYtNGVkNy1iZTk5LTU5YjIwMzEw YzQ3NS5jcmwwHwYDVR0jBBgwFoAUEGObLEoCatgzyXEiJFJcgL5sq9YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mMTZiMWVkMi00OTFmLTRlZDctYmU5OS01OWIy MDMxMGM0NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8we5DYw4LvD1GYCO4ikujQ4G6/N3J0aA1xNvY3ey9XwQUylQ7EA6+d xKWBgcgg3dae03WM5nxaBga+Sr8X3PChxHGuKYcjkscFHyuafI9HWmJz6noFtgGT J/5BLvVAnj7CY2npDprNMI7xKhwE4lc1sltfohCvd0Nn7s1Y5td4qJS/yCZGSwa0 PdGDz34kWZeaKD2lR3e+hFpK1WcaMDdqtbGdgbUSOZ0sfl/PEAke4BhLIa6otcdj kcvmFybJfmwdpIjfdiMnQTC5n4H+vJzo4uwxJGXZjAzPa790KEOmEzrGjxHHBs4s 8J51+B8ubuiZJ+N12/lIXuKRCwLGc5g= -----END CERTIFICATE-----Generated at Sun Aug 24 06:56:46 2025 by rpki-client