$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0436a35f-9148-3f28-8e51-98ce1b0011b0.roa File: 0436a35f-9148-3f28-8e51-98ce1b0011b0.roa (raw, json) Hash identifier: WA36ybwx+YA4sMr9H2FxDaeDF7Dj1PLh+IzYtNIalQs= Subject key identifier: 41:D4:20:AD:4D:C5:D7:A3:79:FD:A3:9F:34:85:F2:37:8D:50:59:D6 Certificate issuer: /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890 Certificate serial: 010D0C9F4328584AECC128976F07F2F316C6E5F0 Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0436a35f-9148-3f28-8e51-98ce1b0011b0.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 67.231.0.0/20 maxlen: 24 208.94.156.0/22 maxlen: 24 216.82.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:28:97:6f:07:f2:f3:16:c6:e5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=adb90ead-97dd-4240-8074-a9f390ca7e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:dd:95:9e:5f:54:b2:93:ad:22:6c:e3:f8: 71:57:52:07:0a:29:76:5f:7b:1f:8f:e9:e7:9c:c2: 6c:06:fa:28:7f:19:1d:e6:27:69:4c:ed:47:b8:2f: d3:c7:39:21:0b:b9:ed:c4:49:50:69:66:d9:f2:97: 95:4d:c4:ee:ac:c5:ce:93:9a:16:9d:d5:fe:9f:ad: 56:bc:f0:dd:0f:f0:aa:f0:7c:c0:fa:9a:1d:af:6f: 2e:1f:6c:38:da:91:c7:09:be:1c:44:da:5b:e2:5a: 25:a3:63:b3:79:5b:08:6f:00:71:54:70:03:8f:34: 84:a7:65:dd:22:17:06:1a:86:c1:48:d1:7a:5c:3c: 0f:2e:ac:b9:e0:65:8a:93:a6:48:95:c8:40:6b:c1: c8:b7:85:24:cc:c3:e0:1b:b4:f1:d5:c8:a5:61:7e: fd:5b:69:b0:f8:45:b2:14:b0:07:21:52:1e:a7:ba: 43:22:7a:a4:80:cd:a1:5e:bc:cd:59:00:0a:27:30: 90:9e:12:5a:39:49:50:9c:7c:90:fa:f3:88:0a:fa: 31:7a:f4:17:22:7b:67:12:3d:e0:21:a3:dc:e3:ba: 82:19:b5:38:34:c4:f9:d7:c1:12:93:16:b6:38:73: ad:7e:9b:00:0b:12:ad:62:90:d4:99:10:71:33:4d: f3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D4:20:AD:4D:C5:D7:A3:79:FD:A3:9F:34:85:F2:37:8D:50:59:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0436a35f-9148-3f28-8e51-98ce1b0011b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl X509v3 Authority Key Identifier: keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer sbgp-ipAddrBlock: critical IPv4: 67.231.0.0/20 208.94.156.0/22 216.82.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a1:51:66:fe:3d:90:27:73:1f:5b:e0:e1:70:fa:ea:f7:eb: 1d:89:c0:f6:cf:f7:1f:4e:53:bc:1b:b6:b7:f4:4f:10:6d:90: 46:29:10:97:43:23:58:76:19:e0:95:47:80:09:44:6e:57:b0: 6c:44:dd:f3:d0:bc:63:cd:68:b1:e9:65:0f:5a:2a:0b:d3:a2: cd:86:00:af:e3:35:fd:1e:55:48:9a:ca:30:4f:21:d9:c5:07: 47:80:6c:ee:4e:fc:dd:6b:b9:6b:25:f1:f1:9d:e1:eb:a7:c2: 37:de:7b:51:a3:76:71:a3:f4:52:a6:de:9a:da:5f:d6:32:10: 90:6b:bf:fa:27:0f:0f:76:52:d0:a6:2e:2d:fc:e4:48:96:13: 27:a5:cf:b9:92:fe:b0:17:a6:26:4d:2c:9b:18:fa:66:89:99: 1b:ca:14:a1:99:75:db:52:de:9f:53:43:67:da:8f:8d:a5:79: 18:40:3b:af:b0:60:dc:83:93:fb:0e:3b:e1:7b:17:f8:47:76: cd:2b:e7:50:74:28:a8:f4:d8:6b:45:e2:11:af:59:85:7f:79: 32:07:19:05:f2:7a:85:a9:91:a0:94:f1:84:dd:d7:f0:51:91: f4:48:b9:39:3e:6a:42:fc:89:c9:af:17:6c:f1:b9:a3:b8:db: 84:ee:2f:ad -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWErswSiXbwfy8xbG5fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRiZTVlMmQtYjdmOC00ZGJhLWI5N2ItOGI2MTY0ZTgz ODkwMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YWRiOTBlYWQtOTdkZC00MjQwLTgwNzQtYTlmMzkwY2E3ZTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYfdlZ5fVLKTrSJs4/hxV1IHCil2X3sfj+nn nMJsBvoofxkd5idpTO1HuC/TxzkhC7ntxElQaWbZ8peVTcTurMXOk5oWndX+n61W vPDdD/Cq8HzA+podr28uH2w42pHHCb4cRNpb4lolo2OzeVsIbwBxVHADjzSEp2Xd IhcGGobBSNF6XDwPLqy54GWKk6ZIlchAa8HIt4UkzMPgG7Tx1cilYX79W2mw+EWy FLAHIVIep7pDInqkgM2hXrzNWQAKJzCQnhJaOUlQnHyQ+vOICvoxevQXIntnEj3g IaPc47qCGbU4NMT518ESkxa2OHOtfpsACxKtYpDUmRBxM03zcQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFEHUIK1Nxdejef2jnzSF8jeNUFnWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJl NWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYxNjRlODM4OTAvMDQzNmEzNWYtOTE0OC0z ZjI4LThlNTEtOThjZTFiMDAxMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGRiZTVlMmQtYjdmOC00ZGJhLWI5 N2ItOGI2MTY0ZTgzODkwLzhkYmU1ZTJkLWI3ZjgtNGRiYS1iOTdiLThiNjE2NGU4 Mzg5MC5jcmwwHwYDVR0jBBgwFoAUzLDLOqY6j/oqVO/oyOtafTNgXAUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJlNWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYx NjRlODM4OTAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEQ+cAAwQC 0F6cAwQE2FLgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEahUWb+PZAncx9b4OFw+ur36x2JwPbP9x9OU7wb trf0TxBtkEYpEJdDI1h2GeCVR4AJRG5XsGxE3fPQvGPNaLHpZQ9aKgvTos2GAK/j Nf0eVUiayjBPIdnFB0eAbO5O/N1ruWsl8fGd4eunwjfee1GjdnGj9FKm3praX9Yy EJBrv/onDw92UtCmLi385EiWEyelz7mS/rAXpiZNLJsY+maJmRvKFKGZddtS3p9T Q2faj42leRhAO6+wYNyDk/sOO+F7F/hHds0r51B0KKj02GtF4hGvWYV/eTIHGQXy eoWpkaCU8YTd1/BRkfRIuTk+akL8icmvF2zxuaO424TuL60= -----END CERTIFICATE-----Generated at Sat Aug 23 15:30:32 2025 by rpki-client