$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/e6669d5b-0dbd-3730-ad4b-10fccde66a7d.roa File: e6669d5b-0dbd-3730-ad4b-10fccde66a7d.roa (raw, json) Hash identifier: z0ylX0468sYPXJcaMXIwujHbnt4gzJpKRE/0ZDAZBko= Subject key identifier: 6A:CE:3A:4B:B9:BE:0B:AD:F7:29:D1:21:A4:CA:E0:CD:B1:B4:5F:7D Certificate issuer: /CN=de0cc6bd-e920-421b-822f-9be354b0d759 Certificate serial: 010D0C9F4328584A90A0A7EE791AF9B061794A00 Authority key identifier: D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/e6669d5b-0dbd-3730-ad4b-10fccde66a7d.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 399888 IP address blocks: 208.75.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:a7:ee:79:1a:f9:b0:61:79:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0cc6bd-e920-421b-822f-9be354b0d759 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=a2ac3a4a-fc5c-46e0-9f38-ebd9139e042b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:34:33:2e:4a:dc:12:dc:92:ba:87:8b:bb:4b: a9:67:5b:bb:44:a0:93:a0:07:25:b9:33:3d:36:4d: 53:2d:86:7d:0e:aa:4f:68:95:81:a6:73:fa:b2:27: de:d6:72:7d:fd:1d:50:53:c4:91:58:72:a9:ec:07: 5a:f2:4f:a9:83:88:e5:8e:30:cd:4e:78:9b:b6:bc: c9:9e:8f:99:b9:b6:83:46:53:96:b9:ac:ed:4d:61: f9:9a:c2:9f:e9:3a:ba:95:6f:f1:7f:74:56:ae:39: 1c:40:61:cb:53:e2:b9:6d:ab:8a:a0:03:62:41:b5: 4e:84:d3:9b:76:b1:75:e9:25:a4:07:2e:c8:c4:4c: f4:78:e1:60:a3:dc:f8:9f:c4:23:23:0d:28:a5:ee: 31:2d:67:96:9c:9b:5a:ed:c7:4f:d8:03:20:70:81: 80:78:b3:fe:7d:96:72:c4:4e:f4:a6:c2:96:73:22: 9c:cc:99:a2:1f:5e:93:e8:aa:2e:0f:99:74:1c:44: 12:dc:7d:cd:2e:42:4d:b2:d9:b9:40:f2:c1:ef:39: 78:0e:a7:ee:61:8b:9b:f6:00:d9:be:5d:34:c1:e4: 73:02:c9:0d:31:61:2c:d1:0f:08:5b:fc:8c:c9:62: 25:0c:57:71:25:29:48:76:4a:f2:da:dc:d2:47:70: 91:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CE:3A:4B:B9:BE:0B:AD:F7:29:D1:21:A4:CA:E0:CD:B1:B4:5F:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/e6669d5b-0dbd-3730-ad4b-10fccde66a7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.crl X509v3 Authority Key Identifier: keyid:D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer sbgp-ipAddrBlock: critical IPv4: 208.75.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:e8:a3:37:84:06:b2:ad:43:73:94:e1:d5:95:07:98:ae:3f: e9:3d:10:cc:9a:4f:b2:3e:e5:a4:d4:78:83:e6:73:6a:8d:d2: 45:3d:64:c2:64:41:3a:47:2c:7a:39:2a:60:b3:be:c8:7e:24: 2f:3b:16:53:2a:a0:b1:96:17:35:2d:1a:2b:7c:5e:84:c4:f6: 60:44:77:c8:5d:a8:58:ce:1b:15:c2:78:da:14:12:db:6b:5f: b4:a3:10:20:f3:73:11:0a:53:66:db:f0:5c:02:d0:0b:8c:22: b4:c3:05:ae:88:9b:ba:74:9f:c5:e6:ea:69:2d:6a:06:ee:5a: 5a:e6:b3:6d:a1:d2:66:0c:c3:3d:91:05:72:70:39:07:e3:96: 0c:10:4d:3d:5e:c4:e8:e9:75:0c:98:f1:4b:cf:e2:11:30:9e: 07:67:16:3b:46:23:e5:40:54:76:17:8d:78:66:c3:17:b9:21: ca:31:66:9b:f3:e8:10:b0:73:a5:49:9a:7c:b8:33:e2:27:77: 27:ba:57:6c:42:60:48:fc:3d:bf:5c:d0:1c:3c:45:72:05:52: 3b:b7:2e:c4:b0:9c:98:e2:70:4d:59:ae:b1:ac:2a:2b:80:16: 19:13:20:9f:9c:32:62:dc:0d:b9:7d:8f:52:6c:ad:f8:4d:30: 9d:96:e4:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoKfueRr5sGF5SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwY2M2YmQtZTkyMC00MjFiLTgyMmYtOWJlMzU0YjBk NzU5MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YTJhYzNhNGEtZmM1Yy00NmUwLTlmMzgtZWJkOTEzOWUwNDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDQzLkrcEtySuoeLu0upZ1u7RKCToAcluTM9 Nk1TLYZ9DqpPaJWBpnP6sife1nJ9/R1QU8SRWHKp7Ada8k+pg4jljjDNTnibtrzJ no+ZubaDRlOWuaztTWH5msKf6Tq6lW/xf3RWrjkcQGHLU+K5bauKoANiQbVOhNOb drF16SWkBy7IxEz0eOFgo9z4n8QjIw0ope4xLWeWnJta7cdP2AMgcIGAeLP+fZZy xE70psKWcyKczJmiH16T6KouD5l0HEQS3H3NLkJNstm5QPLB7zl4DqfuYYub9gDZ vl00weRzAskNMWEs0Q8IW/yMyWIlDFdxJSlIdkry2tzSR3CRqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrOOku5vgut9ynRIaTK4M2xtF99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZTBj YzZiZC1lOTIwLTQyMWItODIyZi05YmUzNTRiMGQ3NTkvZTY2NjlkNWItMGRiZC0z NzMwLWFkNGItMTBmY2NkZTY2YTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGUwY2M2YmQtZTkyMC00MjFiLTgy MmYtOWJlMzU0YjBkNzU5L2RlMGNjNmJkLWU5MjAtNDIxYi04MjJmLTliZTM1NGIw ZDc1OS5jcmwwHwYDVR0jBBgwFoAU0N8F+unbijdSc2pIZnRTxmgQcFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZTBjYzZiZC1lOTIwLTQyMWItODIyZi05YmUz NTRiMGQ3NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7oozeEBrKtQ3OU4dWVB5iuP+k9EMyaT7I+5aTUeIPmc2qN0kU9ZMJk QTpHLHo5KmCzvsh+JC87FlMqoLGWFzUtGit8XoTE9mBEd8hdqFjOGxXCeNoUEttr X7SjECDzcxEKU2bb8FwC0AuMIrTDBa6Im7p0n8Xm6mktagbuWlrms22h0mYMwz2R BXJwOQfjlgwQTT1exOjpdQyY8UvP4hEwngdnFjtGI+VAVHYXjXhmwxe5IcoxZpvz 6BCwc6VJmny4M+Indye6V2xCYEj8Pb9c0Bw8RXIFUju3LsSwnJjicE1ZrrGsKiuA FhkTIJ+cMmLcDbl9j1JsrfhNMJ2W5Gk= -----END CERTIFICATE-----Generated at Sat Jul 26 10:07:03 2025 by rpki-client