$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3847a004-c843-39d8-a702-59aa874db591.roa File: 3847a004-c843-39d8-a702-59aa874db591.roa (raw, json) Hash identifier: 4TZ2aUXwTRioS/QgZ4/TCkRpc9H71+nrnlCxkuPJTX4= Subject key identifier: 14:B9:7E:46:D9:65:4D:10:64:45:52:03:EF:D5:DD:4A:DD:E3:F4:18 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AF95150CF46302DB4E203E300 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3847a004-c843-39d8-a702-59aa874db591.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 5650 IP address blocks: 168.93.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:50:cf:46:30:2d:b4:e2:03:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=83f557a1-81e3-4d67-897f-8552685bfc95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:92:93:f8:ca:ca:58:ec:22:0a:e1:b7:e5:9b: 95:9d:64:05:cf:af:7d:19:78:18:0c:81:bd:b9:12: dc:f4:4f:59:72:e0:dd:94:45:25:45:bb:7d:01:c2: 02:f4:ea:ea:68:90:fd:a9:c0:a4:a9:eb:91:97:71: 87:06:8e:52:69:cf:ea:83:f4:39:62:99:51:bb:84: 7d:5a:09:17:ae:25:b3:96:4c:35:01:aa:d8:2e:e6: a1:14:7e:11:ee:f1:1c:5e:b8:38:51:26:dc:b3:0d: fe:76:d0:e2:93:f5:ac:17:35:cd:f3:2d:4f:4d:bb: 86:aa:d9:e9:6f:dc:fe:98:ea:0f:31:9b:68:1d:95: ff:a7:e4:bd:f7:22:0f:f9:d4:15:a7:62:97:61:09: 28:e1:35:37:84:15:d3:9a:4b:e9:d9:b1:3a:7e:e6: fb:cf:33:74:66:23:42:62:26:3e:5e:84:ed:a7:8a: 2d:63:19:e0:ba:9a:ea:f7:d7:82:a6:f9:ff:96:4d: 04:f9:38:97:8e:2c:b0:0b:7a:10:3d:4b:8d:a3:65: 66:49:c6:12:96:cb:b5:2d:bb:a7:7f:b2:c6:45:17: 84:75:f7:9a:ab:f3:56:a7:6d:8a:9b:10:32:f3:d6: 42:44:31:89:67:76:1d:49:57:37:a0:31:c9:ca:fc: 35:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B9:7E:46:D9:65:4D:10:64:45:52:03:EF:D5:DD:4A:DD:E3:F4:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3847a004-c843-39d8-a702-59aa874db591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 168.93.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ee:39:de:23:7f:12:ca:c5:16:56:59:e6:e8:8c:a6:2b:a9: b9:50:8f:27:3a:60:29:42:bd:ed:fb:ab:79:37:73:fd:d4:03: 94:cc:35:21:70:25:34:27:cb:ac:20:af:48:5a:d2:ac:ff:00: a9:7b:fa:c1:28:dd:f0:41:94:44:2e:53:7d:69:4c:33:dc:d4: 6b:99:3e:43:7f:f7:b5:b8:76:94:21:96:99:63:91:e2:cd:95: 1c:22:3c:9f:a7:92:f5:48:0b:b0:a2:d3:d8:6f:87:10:46:8a: 22:7b:aa:96:ea:ca:a4:93:c5:50:a9:ba:1f:6a:f8:be:db:33: e7:e5:8f:b3:66:8b:4c:57:16:80:fe:cb:ec:76:9b:9f:e9:42: 58:4c:2d:1f:4a:8b:aa:44:bb:25:19:ae:55:66:bc:dc:29:c1: 43:4e:1f:ad:00:3e:9e:ae:e1:04:7e:cf:20:fc:8e:20:9e:81: 0b:8a:a8:aa:14:8d:2e:a8:bd:8f:cd:eb:48:71:62:3a:0e:11: d3:e6:08:67:72:f7:54:49:b9:34:1a:82:6f:78:2a:12:d6:06: 99:42:0a:7e:0b:84:89:f5:67:d7:83:a1:7a:e9:84:79:00:cf: 52:83:b3:fc:c3:80:93:e7:82:e7:63:94:0f:c8:51:b8:5a:22: b8:6e:90:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVDPRjAttOID4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ODNmNTU3YTEtODFlMy00ZDY3LTg5N2YtODU1MjY4NWJmYzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJKT+MrKWOwiCuG35ZuVnWQFz699GXgYDIG9 uRLc9E9ZcuDdlEUlRbt9AcIC9OrqaJD9qcCkqeuRl3GHBo5Sac/qg/Q5YplRu4R9 WgkXriWzlkw1AarYLuahFH4R7vEcXrg4USbcsw3+dtDik/WsFzXN8y1PTbuGqtnp b9z+mOoPMZtoHZX/p+S99yIP+dQVp2KXYQko4TU3hBXTmkvp2bE6fub7zzN0ZiNC YiY+XoTtp4otYxnguprq99eCpvn/lk0E+TiXjiywC3oQPUuNo2VmScYSlsu1Lbun f7LGRReEdfeaq/NWp22KmxAy89ZCRDGJZ3YdSVc3oDHJyvw1iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBS5fkbZZU0QZEVSA+/V3Urd4/QYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzg0N2EwMDQtYzg0My0z OWQ4LWE3MDItNTlhYTg3NGRiNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF3rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjuOd4jfxLKxRZWWebojKYrqblQjyc6YClCve37q3k3c/3UA5TMNSFw JTQny6wgr0ha0qz/AKl7+sEo3fBBlEQuU31pTDPc1GuZPkN/97W4dpQhlpljkeLN lRwiPJ+nkvVIC7Ci09hvhxBGiiJ7qpbqyqSTxVCpuh9q+L7bM+flj7Nmi0xXFoD+ y+x2m5/pQlhMLR9Ki6pEuyUZrlVmvNwpwUNOH60APp6u4QR+zyD8jiCegQuKqKoU jS6ovY/N60hxYjoOEdPmCGdy91RJuTQagm94KhLWBplCCn4LhIn1Z9eDoXrphHkA z1KDs/zDgJPngudjlA/IUbhaIrhukGk= -----END CERTIFICATE-----Generated at Tue Aug 26 18:16:24 2025 by rpki-client