$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a4178db3-028e-3c18-9254-d0a090216ba3.roa File: a4178db3-028e-3c18-9254-d0a090216ba3.roa (raw, json) Hash identifier: zkkGVEjg2i0KK51LH4hp699lYsz/6x7WowwJxT9vBzM= Subject key identifier: 08:E2:EC:E9:54:3C:6E:DF:9B:97:88:5E:DB:91:92:09:C4:84:39:01 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AE4611D11C019F57B292E5B80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a4178db3-028e-3c18-9254-d0a090216ba3.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 13576 IP address blocks: 208.53.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:1d:11:c0:19:f5:7b:29:2e:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=f1cc16e6-ffbe-4632-bdac-8112e8c9337d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:17:7e:28:d4:d9:fc:4e:8e:f0:8c:9f:9c:c4: 99:47:98:be:da:c8:6e:73:ad:fb:74:a8:63:ac:ff: dc:90:1f:86:75:31:51:fb:5e:38:ed:e5:f0:fd:ff: a3:55:39:a3:9f:7c:aa:41:c6:35:e7:9e:8d:28:7d: eb:b9:b0:d3:71:fe:20:4d:3d:21:c2:9c:53:0b:d5: 0c:2b:c8:af:4b:45:fc:88:e8:99:58:0a:07:00:e5: d0:86:ea:d7:8a:33:c1:fb:2c:c0:1a:19:65:af:1e: 8c:f6:de:2b:cd:dd:d1:0d:96:cb:9d:b3:4a:58:fb: 15:ab:67:f8:cd:c3:cc:11:6c:23:5a:ca:c8:6b:ef: a5:38:05:0e:a5:c2:12:10:96:45:fd:e1:4f:87:c9: 8e:b4:24:e2:da:c8:71:23:83:8c:77:43:93:0b:ad: 87:23:8c:6a:8d:b5:15:52:2c:eb:c5:f7:c6:2d:ad: 45:ef:a9:4a:e6:07:3c:00:cb:53:6d:db:33:39:a6: 13:07:44:f5:3d:6d:15:fe:75:d7:29:2a:f7:08:ff: cc:d7:b7:b0:27:b6:ac:0a:bd:bc:48:c3:00:7c:87: 6d:3a:6a:a8:fd:a0:95:97:a3:9a:65:79:44:11:df: 09:95:24:13:be:cb:42:a8:01:1e:bc:61:80:66:cb: 1d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E2:EC:E9:54:3C:6E:DF:9B:97:88:5E:DB:91:92:09:C4:84:39:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a4178db3-028e-3c18-9254-d0a090216ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:fa:1d:4b:c5:8f:d4:cf:69:32:6a:84:03:0e:76:03:c3:5b: 1a:10:b6:97:16:f6:aa:1b:0f:25:82:ff:73:16:cb:d7:b1:76: e9:04:36:98:31:b3:60:90:1a:63:5d:11:e1:5f:bc:66:a2:88: 47:a3:c5:0f:d4:7b:f8:7c:50:7e:1c:0e:cf:64:55:ba:57:57: 04:83:90:5e:7f:07:31:44:37:8c:a1:c3:a9:15:11:6a:53:bf: 68:fb:a3:af:2f:8f:e0:a8:ac:71:bb:ee:60:14:58:55:ae:2d: 0b:04:34:10:bc:ce:ff:9b:b0:d5:c2:39:9d:d2:c5:8a:d1:fb: 9a:51:4a:fe:67:c7:75:32:92:da:6f:fd:45:65:9e:5e:bf:7d: 55:4a:50:00:52:13:09:c3:48:6e:d5:d4:82:6d:d1:98:94:a0: c9:80:5c:cf:f9:6e:5c:5e:15:35:7c:c0:52:f9:82:0e:45:12: 90:71:76:93:bb:a8:0b:46:6b:5b:bd:90:53:88:b2:eb:a8:ca: 05:9b:11:1d:b4:da:18:7e:6c:e5:71:79:6e:30:b5:30:20:2e: 42:38:28:d7:eb:38:5b:f0:7e:10:e3:aa:ac:88:02:c5:59:19: 03:cb:02:19:60:79:e5:04:6f:6a:a6:64:24:c7:96:e7:50:74: 6d:e7:7d:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYR0RwBn1eykuW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZjFjYzE2ZTYtZmZiZS00NjMyLWJkYWMtODExMmU4YzkzMzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/hd+KNTZ/E6O8IyfnMSZR5i+2shuc637dKhj rP/ckB+GdTFR+1447eXw/f+jVTmjn3yqQcY1556NKH3rubDTcf4gTT0hwpxTC9UM K8ivS0X8iOiZWAoHAOXQhurXijPB+yzAGhllrx6M9t4rzd3RDZbLnbNKWPsVq2f4 zcPMEWwjWsrIa++lOAUOpcISEJZF/eFPh8mOtCTi2shxI4OMd0OTC62HI4xqjbUV UizrxffGLa1F76lK5gc8AMtTbdszOaYTB0T1PW0V/nXXKSr3CP/M17ewJ7asCr28 SMMAfIdtOmqo/aCVl6OaZXlEEd8JlSQTvstCqAEevGGAZssdHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAji7OlUPG7fm5eIXtuRkgnEhDkBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYTQxNzhkYjMtMDI4ZS0z YzE4LTkyNTQtZDBhMDkwMjE2YmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAND6HUvFj9TPaTJqhAMOdgPDWxoQtpcW9qobDyWC/3MWy9exdukENpgx s2CQGmNdEeFfvGaiiEejxQ/Ue/h8UH4cDs9kVbpXVwSDkF5/BzFEN4yhw6kVEWpT v2j7o68vj+CorHG77mAUWFWuLQsENBC8zv+bsNXCOZ3SxYrR+5pRSv5nx3Uyktpv /UVlnl6/fVVKUABSEwnDSG7V1IJt0ZiUoMmAXM/5blxeFTV8wFL5gg5FEpBxdpO7 qAtGa1u9kFOIsuuoygWbER202hh+bOVxeW4wtTAgLkI4KNfrOFvwfhDjqqyIAsVZ GQPLAhlgeeUEb2qmZCTHludQdG3nfQM= -----END CERTIFICATE-----Generated at Sun Aug 24 03:46:56 2025 by rpki-client