$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/85393fe7-712a-3e81-ab68-4d49a239e152.roa File: 85393fe7-712a-3e81-ab68-4d49a239e152.roa (raw, json) Hash identifier: CCpzI/05d7hdOBttjq6MKA1DQ+TzTXTz8onfpruqLJk= Subject key identifier: 6B:8A:B1:E0:D5:EA:2B:1B:AE:36:40:16:43:44:71:53:D3:49:27:8E Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F4328584A7A4B481C6C865844D989A040 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/85393fe7-712a-3e81-ab68-4d49a239e152.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 16509 IP address blocks: 168.203.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 31 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:48:1c:6c:86:58:44:d9:89:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=892d5f76-ea43-417a-bc74-9b7f1ef1a209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:86:ab:da:34:96:65:3e:44:34:c4:3a:4d:06: 5f:2c:05:f3:1f:3e:f8:ac:13:63:25:b8:36:1b:c7: 4c:2d:b0:1d:1f:2f:b1:25:5a:22:cb:b8:8d:bd:61: 76:ad:ea:c4:9e:27:ff:0f:3c:34:fb:9b:bd:64:ba: 22:f0:cc:e7:96:7d:72:d0:21:78:4f:42:0c:e1:df: 2c:c1:ad:6c:87:51:97:27:4d:2a:b2:bd:4d:38:5c: 0c:ab:5f:92:82:cc:45:34:7d:4d:5f:0f:c7:79:d5: b4:c1:70:14:48:5c:73:7e:de:2f:3c:d0:5a:1e:75: 5f:a7:50:0c:5d:54:85:c2:21:1b:5d:9b:ca:11:fb: 18:d3:a5:7a:64:f9:64:ff:45:29:26:04:5d:08:77: ba:e5:5f:9d:9c:ee:14:1e:f2:07:9f:d4:df:a7:60: ca:c3:0d:29:4e:e3:5c:c1:d5:5d:24:50:be:11:9f: 1e:c4:ae:39:b5:db:4b:41:8d:3f:3c:e8:d1:79:b3: d5:bb:93:ce:29:ff:12:55:40:0e:c0:df:41:7b:4a: 98:82:63:81:52:f1:25:b8:00:d8:8f:e8:a1:b0:96: a1:1e:ae:9b:20:a8:0d:a9:1e:93:c0:1a:4a:fc:57: c2:f9:83:1d:0b:cb:99:e7:4a:41:00:21:35:d9:81: 9d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8A:B1:E0:D5:EA:2B:1B:AE:36:40:16:43:44:71:53:D3:49:27:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/85393fe7-712a-3e81-ab68-4d49a239e152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:0c:9a:86:45:27:a1:e3:19:ae:9c:ef:57:c2:68:13:4e:79: 1f:30:f9:a8:48:26:1a:8f:fd:fa:fc:da:33:41:ba:00:5a:b6: 05:ee:25:60:5e:30:d2:14:d0:5c:cb:87:7d:16:72:54:c7:ff: 98:90:dc:17:23:8a:50:29:2e:a0:fc:87:a9:e3:40:a7:55:6b: 6b:c9:db:4b:9c:ee:fa:c2:19:92:8a:16:ab:fa:02:68:9d:f3: 9d:b3:e7:c2:fe:e2:e0:e8:ab:ce:ad:cf:1e:63:82:3d:8c:cd: 80:fc:d3:26:9c:c0:b3:6c:7a:e6:da:e7:f5:a8:8c:91:4a:5b: d8:f0:57:1d:08:73:c3:95:8d:8c:5c:b2:27:1f:a4:8b:29:71: a8:84:00:d6:65:08:f1:92:48:42:ec:27:7f:73:3e:f6:9a:68: d6:ef:12:2c:76:05:14:eb:49:17:be:46:77:4e:5f:c7:d9:6d: 99:73:f3:ea:33:d3:ff:c3:83:c9:28:57:ef:12:b2:39:ff:de: 22:70:e5:6b:8e:b3:64:02:96:25:e3:84:89:c4:6b:cf:11:85: 37:ba:7c:de:0b:e1:82:3e:36:1a:b7:75:04:33:d5:fa:80:17: 16:30:15:2c:09:7b:89:68:93:9a:08:04:3a:1a:20:8b:2e:24: 89:58:eb:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0gcbIZYRNmJoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk ODkyZDVmNzYtZWE0My00MTdhLWJjNzQtOWI3ZjFlZjFhMjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYar2jSWZT5ENMQ6TQZfLAXzHz74rBNjJbg2 G8dMLbAdHy+xJVoiy7iNvWF2rerEnif/Dzw0+5u9ZLoi8Mznln1y0CF4T0IM4d8s wa1sh1GXJ00qsr1NOFwMq1+SgsxFNH1NXw/HedW0wXAUSFxzft4vPNBaHnVfp1AM XVSFwiEbXZvKEfsY06V6ZPlk/0UpJgRdCHe65V+dnO4UHvIHn9Tfp2DKww0pTuNc wdVdJFC+EZ8exK45tdtLQY0/POjRebPVu5POKf8SVUAOwN9Be0qYgmOBUvEluADY j+ihsJahHq6bIKgNqR6TwBpK/FfC+YMdC8uZ50pBACE12YGd4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuKseDV6isbrjZAFkNEcVPTSSeOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvODUzOTNmZTctNzEyYS0z ZTgxLWFiNjgtNGQ0OWEyMzllMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMs/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsMmoZFJ6HjGa6c71fCaBNOeR8w+ahIJhqP/fr82jNBugBatgXuJWBe MNIU0FzLh30WclTH/5iQ3BcjilApLqD8h6njQKdVa2vJ20uc7vrCGZKKFqv6Amid 852z58L+4uDoq86tzx5jgj2MzYD80yacwLNseuba5/WojJFKW9jwVx0Ic8OVjYxc sicfpIspcaiEANZlCPGSSELsJ39zPvaaaNbvEix2BRTrSRe+RndOX8fZbZlz8+oz 0//Dg8koV+8Ssjn/3iJw5WuOs2QCliXjhInEa88RhTe6fN4L4YI+Nhq3dQQz1fqA FxYwFSwJe4lok5oIBDoaIIsuJIlY6ws= -----END CERTIFICATE-----Generated at Tue Jul 29 00:46:45 2025 by rpki-client