$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/fdbb518e-6301-32f6-9311-491af1e25efe.roa File: fdbb518e-6301-32f6-9311-491af1e25efe.roa (raw, json) Hash identifier: 41TEja/jOyBjmsjI5mIEOQ4awE00A8b+GWtLE9yXLlc= Subject key identifier: 3D:D2:9F:32:BF:72:6E:41:DA:69:F0:93:54:BE:48:EA:DD:E0:96:DE Certificate issuer: /CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab Certificate serial: 010D0C9F4328584A7780885AC32325D157987700 Authority key identifier: E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/fdbb518e-6301-32f6-9311-491af1e25efe.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 394434 IP address blocks: 168.86.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:88:5a:c3:23:25:d1:57:98:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=d86f36f8-f7a5-4265-a472-f521d62914b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8e:0c:f1:02:7a:a7:b2:25:e2:9e:c0:a0:08: 7e:3f:11:fc:42:f1:89:0a:c4:ca:cb:06:4e:94:45: 66:42:94:02:a1:10:9a:1c:43:87:92:71:62:6f:98: eb:c1:3a:d6:2d:2a:05:e8:c0:59:72:7e:04:33:2e: 8e:88:60:ca:4c:7e:9b:5b:1c:8b:40:b8:99:a1:06: 55:16:3f:29:bf:f5:bb:63:fd:81:d4:56:c8:f2:f7: 23:43:59:e0:8e:62:51:a8:74:8b:11:42:bb:fe:54: 18:34:3b:88:0f:55:0f:f9:d3:65:ac:b8:88:10:75: 65:91:f7:58:d4:80:ac:c3:8e:81:cc:c1:e1:25:50: 12:e1:ac:f2:16:ba:d7:16:0a:14:2a:5a:db:3b:36: 38:39:c2:e4:c0:b7:23:31:4e:49:4b:98:54:ae:f4: 02:3a:99:6a:99:d2:8b:e1:ed:d0:21:cc:38:81:25: 09:96:8b:63:aa:c5:26:2a:89:50:90:77:8b:53:b5: a3:32:4d:09:d5:7b:12:f0:15:7f:43:88:78:46:02: d4:82:a3:36:cd:d1:86:b8:d6:60:85:56:4d:b0:47: 43:6a:e2:ee:98:2c:0c:4d:19:1d:87:05:6b:38:9e: d0:e3:7f:ac:d4:ff:ec:89:bf:01:3c:b6:70:36:a7: 26:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D2:9F:32:BF:72:6E:41:DA:69:F0:93:54:BE:48:EA:DD:E0:96:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/fdbb518e-6301-32f6-9311-491af1e25efe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.crl X509v3 Authority Key Identifier: keyid:E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer sbgp-ipAddrBlock: critical IPv4: 168.86.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:1c:00:be:47:07:52:de:e0:38:72:24:3f:73:fa:d1:fc:10: b5:bc:e7:4e:ec:40:ba:47:c4:e6:db:9e:15:69:31:fd:76:4a: f5:d2:ad:5c:90:6e:2c:20:a6:9f:f3:d4:4a:82:8d:27:8f:d6: 8c:1d:d9:04:58:1a:a5:ff:31:69:f6:94:94:13:e8:12:3d:f9: 25:a2:e1:74:af:8e:03:d0:a7:82:0d:8e:94:77:3d:79:8c:f7: 3c:16:e5:1d:a4:05:11:2e:50:c8:23:55:5a:64:36:b2:f3:98: 02:c8:8d:43:7a:4e:8f:aa:fe:4f:27:b1:9f:ef:1d:52:2b:17: ad:ad:e8:6d:9f:2d:06:37:c6:45:d6:18:cf:60:e6:68:a9:b4: 08:23:56:53:91:a2:fc:10:c6:8d:19:e9:71:3a:ca:3f:16:e2: 6e:e2:38:68:39:db:ad:1a:eb:31:39:e6:33:a6:fa:e7:ea:bc: 6d:29:83:e4:eb:fa:11:b5:84:1d:97:a0:4c:44:c0:26:50:fc: 84:cc:d3:71:c0:39:0d:61:51:db:3d:ac:b7:97:b9:e9:ca:6b: 28:5f:1a:80:77:ea:26:d4:1d:0e:e9:55:67:c9:fd:0d:68:f0: 4d:7b:18:66:7f:0c:f3:a2:15:79:c2:5f:46:89:6a:a3:c6:c6: 63:b8:d9:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIhawyMl0VeYdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRjMzJlNTItNzkxOS00YWQ0LWE0ODYtNGJlZDIzYTVj M2FiMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk ZDg2ZjM2ZjgtZjdhNS00MjY1LWE0NzItZjUyMWQ2MjkxNGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6I4M8QJ6p7Il4p7AoAh+PxH8QvGJCsTKywZO lEVmQpQCoRCaHEOHknFib5jrwTrWLSoF6MBZcn4EMy6OiGDKTH6bWxyLQLiZoQZV Fj8pv/W7Y/2B1FbI8vcjQ1ngjmJRqHSLEUK7/lQYNDuID1UP+dNlrLiIEHVlkfdY 1ICsw46BzMHhJVAS4azyFrrXFgoUKlrbOzY4OcLkwLcjMU5JS5hUrvQCOplqmdKL 4e3QIcw4gSUJlotjqsUmKolQkHeLU7WjMk0J1XsS8BV/Q4h4RgLUgqM2zdGGuNZg hVZNsEdDauLumCwMTRkdhwVrOJ7Q43+s1P/sib8BPLZwNqcmAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3SnzK/cm5B2mnwk1S+SOrd4JbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZGMz MmU1Mi03OTE5LTRhZDQtYTQ4Ni00YmVkMjNhNWMzYWIvZmRiYjUxOGUtNjMwMS0z MmY2LTkzMTEtNDkxYWYxZTI1ZWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGRjMzJlNTItNzkxOS00YWQ0LWE0 ODYtNGJlZDIzYTVjM2FiLzBkYzMyZTUyLTc5MTktNGFkNC1hNDg2LTRiZWQyM2E1 YzNhYi5jcmwwHwYDVR0jBBgwFoAU5f0U87CPcdIf6cpjpPRwU/jwArIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZGMzMmU1Mi03OTE5LTRhZDQtYTQ4Ni00YmVk MjNhNWMzYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqFaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwcAL5HB1Le4DhyJD9z+tH8ELW8507sQLpHxObbnhVpMf12SvXSrVyQ biwgpp/z1EqCjSeP1owd2QRYGqX/MWn2lJQT6BI9+SWi4XSvjgPQp4INjpR3PXmM 9zwW5R2kBREuUMgjVVpkNrLzmALIjUN6To+q/k8nsZ/vHVIrF62t6G2fLQY3xkXW GM9g5miptAgjVlORovwQxo0Z6XE6yj8W4m7iOGg5260a6zE55jOm+ufqvG0pg+Tr +hG1hB2XoExEwCZQ/ITM03HAOQ1hUds9rLeXuenKayhfGoB36ibUHQ7pVWfJ/Q1o 8E17GGZ/DPOiFXnCX0aJaqPGxmO42bI= -----END CERTIFICATE-----Generated at Wed Jul 23 12:16:17 2025 by rpki-client