$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0df9c686-d3ed-3828-9767-b750494665b8.roa File: 0df9c686-d3ed-3828-9767-b750494665b8.roa (raw, json) Hash identifier: qxC1itrQdHm+w5IyTHBtyUbDK9i+e/IdYeVQlksnGIk= Subject key identifier: 51:78:57:AE:6E:E3:B1:53:46:4E:4F:1A:F8:A3:AF:E7:04:C1:A0:42 Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F4328584A9900C816F2B240767AA5ADE0 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0df9c686-d3ed-3828-9767-b750494665b8.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 5645 IP address blocks: 167.88.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c8:16:f2:b2:40:76:7a:a5:ad:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=256f94b9-31ee-4e10-8eca-6c0cdd96002e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:14:b0:c9:b3:d9:27:ba:4b:ad:58:8d:19:eb: 1a:bb:42:2b:31:6f:34:4a:dc:e5:4b:fd:48:3e:ca: 05:a1:e0:98:9f:63:c8:8a:83:dd:5b:fe:b9:49:ed: 9a:da:05:13:07:64:ba:55:2a:29:b2:c1:df:1e:9c: 9e:29:d9:53:5d:b8:37:54:17:ed:ed:80:20:d5:33: 23:f0:56:36:23:d9:4f:7d:79:f1:c1:1e:b7:18:3a: cb:3e:3a:81:51:f9:fb:f4:61:5b:2b:ed:2a:9d:c8: 83:00:9e:7d:64:79:e2:79:7b:50:99:df:f7:39:aa: 57:f4:1d:3a:cd:dc:f8:8a:c1:06:6d:cf:0b:22:27: 82:d5:89:87:73:ea:86:dc:63:38:6d:cd:4b:57:03: 69:8f:c9:67:9a:ed:43:ab:d5:48:c2:e4:6a:9f:1c: e1:55:dc:ae:1f:5f:7c:27:80:cd:71:94:9c:fe:5e: 4d:12:99:12:0f:74:ca:dd:dd:c8:35:99:cf:74:00: 5b:d5:e5:0a:8f:63:f5:35:21:6a:1e:ad:db:51:88: 67:06:e3:a6:18:f3:97:05:d0:0f:44:06:69:87:9d: db:63:99:e7:f2:5a:5d:60:62:ca:f4:2f:2a:a5:57: e7:6d:64:78:e4:60:06:0b:94:44:be:3b:73:37:89: e5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:78:57:AE:6E:E3:B1:53:46:4E:4F:1A:F8:A3:AF:E7:04:C1:A0:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0df9c686-d3ed-3828-9767-b750494665b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 167.88.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:79:c7:4f:1a:c1:13:5f:a3:81:2f:6a:d9:20:aa:74:c1:68: 73:09:5b:46:d1:f8:c5:3c:12:6a:3e:44:5d:33:f2:ad:07:57: dd:cc:b7:3b:34:49:ed:ae:d5:5f:a7:0d:bc:78:aa:7d:5d:2d: 1b:3b:81:68:ba:53:a1:ae:07:48:d6:eb:15:53:98:7f:47:d0: 2f:41:fc:67:c0:c6:3b:a2:73:20:1d:66:74:3b:23:60:39:07: c7:7d:99:79:e4:5a:58:aa:07:72:86:ca:69:09:19:2d:95:87: d8:2a:79:af:85:c0:81:bd:bc:57:25:fa:3f:d4:90:9b:2c:e4: 06:82:1b:bb:80:e9:d3:79:25:21:b1:9a:ba:be:06:42:76:92: b7:2a:54:59:af:cb:c1:e4:06:1c:36:54:c1:fb:13:37:b8:31: da:98:ea:60:7b:82:40:91:28:7a:e6:ce:02:98:70:df:5a:ad: fa:b4:67:96:6e:b6:26:0b:04:48:c6:76:be:48:35:e3:8f:be: c4:cd:44:af:dc:97:ec:dd:10:65:54:e7:5c:f1:86:83:a0:bf: 54:d6:68:c9:df:9f:24:5d:de:44:e2:ca:af:2e:aa:c6:69:82: b5:ec:fa:03:d7:a8:62:67:e8:d8:fc:f0:9a:5d:b1:bb:f1:ae: 78:de:ac:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMgW8rJAdnqlreAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MjU2Zjk0YjktMzFlZS00ZTEwLThlY2EtNmMwY2RkOTYwMDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhSwybPZJ7pLrViNGesau0IrMW80StzlS/1I PsoFoeCYn2PIioPdW/65Se2a2gUTB2S6VSopssHfHpyeKdlTXbg3VBft7YAg1TMj 8FY2I9lPfXnxwR63GDrLPjqBUfn79GFbK+0qnciDAJ59ZHnieXtQmd/3OapX9B06 zdz4isEGbc8LIieC1YmHc+qG3GM4bc1LVwNpj8lnmu1Dq9VIwuRqnxzhVdyuH198 J4DNcZSc/l5NEpkSD3TK3d3INZnPdABb1eUKj2P1NSFqHq3bUYhnBuOmGPOXBdAP RAZph53bY5nn8lpdYGLK9C8qpVfnbWR45GAGC5REvjtzN4nljwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFF4V65u47FTRk5PGvijr+cEwaBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvMGRmOWM2ODYtZDNlZC0z ODI4LTk3NjctYjc1MDQ5NDY2NWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEp1gQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJN5x08awRNfo4EvatkgqnTBaHMJW0bR+MU8Emo+RF0z8q0HV93Mtzs0 Se2u1V+nDbx4qn1dLRs7gWi6U6GuB0jW6xVTmH9H0C9B/GfAxjuicyAdZnQ7I2A5 B8d9mXnkWliqB3KGymkJGS2Vh9gqea+FwIG9vFcl+j/UkJss5AaCG7uA6dN5JSGx mrq+BkJ2krcqVFmvy8HkBhw2VMH7Eze4MdqY6mB7gkCRKHrmzgKYcN9arfq0Z5Zu tiYLBEjGdr5INeOPvsTNRK/cl+zdEGVU51zxhoOgv1TWaMnfnyRd3kTiyq8uqsZp grXs+gPXqGJn6Nj88JpdsbvxrnjerEs= -----END CERTIFICATE-----Generated at Mon Jul 28 22:20:34 2025 by rpki-client