$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/791354d3-b69a-3f80-9895-25a56bac7468.roa File: 791354d3-b69a-3f80-9895-25a56bac7468.roa (raw, json) Hash identifier: kxuRutkJDNwltBTOus3NsZU7fXvannNiCkngRtJ1qSo= Subject key identifier: 88:41:6D:91:F7:F1:DC:C0:13:69:C9:75:9E:5E:40:9D:3B:D1:F9:35 Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F4328584B0E41531B465E766F1DF9B080 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/791354d3-b69a-3f80-9895-25a56bac7468.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 399091 IP address blocks: 162.218.8.0/22 maxlen: 22 198.22.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:53:1b:46:5e:76:6f:1d:f9:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=2661fbf1-f772-460f-be7b-4b2a74e5bb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:46:b2:d2:4d:99:1c:38:5e:fd:2d:84:3a:4b: d7:8f:60:90:ea:de:6c:53:1d:b8:be:7e:0d:40:a4: 60:f2:89:52:95:ca:c5:ef:1d:f4:0f:b0:20:8a:4d: f7:e0:0d:82:85:c6:4c:f0:00:4f:c3:cc:fb:b5:44: bc:54:6f:58:c3:e9:07:93:09:00:f0:69:b1:07:4f: 0e:01:74:3f:2e:1b:eb:18:c3:d4:af:f0:f3:3b:dd: 9c:be:a7:c4:d4:82:3f:f8:a9:6a:62:5e:97:4d:75: 77:ff:e0:6e:db:63:38:28:9f:b2:20:9e:53:bd:90: 79:84:83:6b:c6:06:4c:85:8c:87:13:8e:bd:63:7d: 85:b4:cd:8f:54:27:0f:fd:a5:dd:83:f6:83:87:ee: 70:7a:e7:4e:e1:e8:b8:9e:fb:24:fd:9a:4a:ed:a4: 16:e7:3a:e4:03:b6:ab:3c:ba:ff:3a:48:32:0f:08: f5:d7:05:22:83:88:ed:16:6c:34:3c:65:dd:c5:b6: 93:1b:dd:e9:c6:2a:78:aa:73:6f:e8:a3:07:67:b5: 08:6a:47:87:87:43:50:ed:0e:c7:8a:c5:44:46:ce: 30:3a:f1:c7:79:1c:a1:1f:6c:03:ce:ce:35:07:4b: 9f:97:90:b4:c6:72:1e:70:9d:b6:e8:2d:2f:5e:33: 08:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:41:6D:91:F7:F1:DC:C0:13:69:C9:75:9E:5E:40:9D:3B:D1:F9:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/791354d3-b69a-3f80-9895-25a56bac7468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 162.218.8.0/22 198.22.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:9b:1c:45:3b:1c:41:9f:b0:ff:94:ae:77:2c:78:7c:06:aa: 4b:1f:8f:8f:44:84:46:b9:87:d6:80:dd:b3:48:50:52:f2:bb: f8:a7:4c:29:11:38:9c:dc:60:75:ec:bb:c3:eb:42:bb:12:d1: a4:19:7b:97:e4:0f:a8:ea:f3:29:7a:88:06:75:0d:f1:d0:d3: f2:bf:43:c5:9f:e6:87:71:72:e9:10:bc:62:59:a5:23:7a:ca: 47:b4:d3:36:dd:1f:16:42:03:4b:23:fe:2d:38:17:1d:a4:01: db:90:2c:b3:81:96:c7:b9:0a:0e:a1:a5:2d:30:4e:c8:78:ce: b6:a5:30:a7:d3:c1:f7:aa:5a:7d:a8:27:61:7b:57:c1:35:0b: 1b:12:09:27:c8:99:3c:db:78:c1:19:eb:40:7f:aa:87:81:2b: cc:26:fa:e6:ad:bb:a6:c1:a4:1c:4f:a0:28:c9:63:58:48:59: 95:d5:45:48:6f:08:df:85:ed:34:6b:05:68:5c:a2:c1:d1:09: 4c:36:f6:e9:15:04:84:30:fb:11:ed:40:e9:d0:ea:31:ba:89: 21:3a:b1:94:ff:a0:ee:72:1e:4a:f9:42:7f:72:53:84:a6:6e: 55:06:08:f3:09:21:92:88:e2:cb:8c:f1:2f:be:e7:39:4a:2d: c6:9d:b5:4e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsOQVMbRl52bx35sIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjY2MWZiZjEtZjc3Mi00NjBmLWJlN2ItNGIyYTc0ZTViYjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0ay0k2ZHDhe/S2EOkvXj2CQ6t5sUx24vn4N QKRg8olSlcrF7x30D7Agik334A2ChcZM8ABPw8z7tUS8VG9Yw+kHkwkA8GmxB08O AXQ/LhvrGMPUr/DzO92cvqfE1II/+KlqYl6XTXV3/+Bu22M4KJ+yIJ5TvZB5hINr xgZMhYyHE469Y32FtM2PVCcP/aXdg/aDh+5weudO4ei4nvsk/ZpK7aQW5zrkA7ar PLr/OkgyDwj11wUig4jtFmw0PGXdxbaTG93pxip4qnNv6KMHZ7UIakeHh0NQ7Q7H isVERs4wOvHHeRyhH2wDzs41B0ufl5C0xnIecJ226C0vXjMIcQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIhBbZH38dzAE2nJdZ5eQJ070fk1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvNzkxMzU0ZDMtYjY5YS0z ZjgwLTk4OTUtMjVhNTZiYWM3NDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCotoIAwQC xhbQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFibHEU7HEGfsP+UrncseHwGqksfj49EhEa5h9aA3bNIUFLy u/inTCkROJzcYHXsu8PrQrsS0aQZe5fkD6jq8yl6iAZ1DfHQ0/K/Q8Wf5odxcukQ vGJZpSN6yke00zbdHxZCA0sj/i04Fx2kAduQLLOBlse5Cg6hpS0wTsh4zralMKfT wfeqWn2oJ2F7V8E1CxsSCSfImTzbeMEZ60B/qoeBK8wm+uatu6bBpBxPoCjJY1hI WZXVRUhvCN+F7TRrBWhcosHRCUw29ukVBIQw+xHtQOnQ6jG6iSE6sZT/oO5yHkr5 Qn9yU4SmblUGCPMJIZKI4suM8S++5zlKLcadtU4= -----END CERTIFICATE-----Generated at Sat Sep 6 16:31:22 2025 by rpki-client