$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/85875cc2-88ef-3c86-a479-a01df79c5928.roa File: 85875cc2-88ef-3c86-a479-a01df79c5928.roa (raw, json) Hash identifier: 0F7U7TTVNfa/8b+bd6oa9yfchjWgH5PCe5pse5Rt1tk= Subject key identifier: A1:91:08:40:77:47:90:BA:A7:DE:30:3B:B3:07:2D:A8:EB:2F:6D:E6 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AF9515223B99BFDF7AE0C3D80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/85875cc2-88ef-3c86-a479-a01df79c5928.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 5650 IP address blocks: 168.93.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:52:23:b9:9b:fd:f7:ae:0c:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=856dff31-04fc-4bdd-8c3c-0f853129c990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:79:2f:e8:3e:c9:08:74:ff:7d:24:66:90:95: fc:50:e4:85:4d:6e:c2:70:f2:71:f1:28:ff:fe:a7: f5:b1:5d:a6:23:1f:ae:eb:d1:df:0d:15:04:9e:fd: 7d:9e:3a:84:7f:1e:94:fd:80:f8:a9:7d:ad:a1:dc: 87:a3:25:41:e0:09:25:22:29:3c:6c:8f:2b:f5:43: bc:d6:09:24:41:92:e6:ab:57:38:5e:2c:df:6b:9a: d0:de:28:43:a1:92:dc:53:fe:55:94:7d:79:f8:64: 39:8d:b4:f3:06:85:ce:bb:2d:32:92:3d:dd:9a:62: ed:34:3c:59:8d:9a:2d:2d:6f:68:aa:a4:c7:4f:92: 61:a1:df:b7:1e:3b:08:f0:44:10:67:c9:96:1d:73: 2c:f9:28:8e:86:7e:b0:16:bf:ab:77:5f:b2:96:98: 91:10:75:88:98:d0:26:2b:c0:52:1c:0d:cb:6d:f2: bc:04:61:05:39:32:5d:b0:db:1f:3a:68:9a:71:7f: e0:70:04:1d:4f:10:a5:d3:4c:5d:8f:4a:2c:53:76: 8d:b8:97:51:d8:6b:d4:14:10:79:be:08:4c:26:e9: e5:e7:9a:42:0b:6d:b5:4e:6d:c0:1e:28:81:60:09: 44:67:3a:93:9b:92:d4:6f:cd:4b:6a:07:d7:a0:e1: 69:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:91:08:40:77:47:90:BA:A7:DE:30:3B:B3:07:2D:A8:EB:2F:6D:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/85875cc2-88ef-3c86-a479-a01df79c5928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 168.93.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:71:68:0b:da:77:46:d5:e6:40:3e:7c:01:e6:e9:67:61:6d: 3b:0c:c8:21:0c:4f:17:b9:a1:8d:1e:ad:c2:9a:ed:53:16:eb: 77:e0:aa:71:06:c1:ab:8b:54:6b:03:b4:b7:af:c0:c7:c7:fd: 35:2a:ff:49:e6:20:35:5d:a6:a4:52:73:3e:1e:07:09:2e:28: a1:90:37:f1:99:56:97:2d:82:52:ab:9a:bc:df:02:1e:8d:19: e7:37:d6:ee:e7:f4:1a:7e:97:0e:92:96:93:5b:c9:ab:d3:dd: fb:0d:a4:57:cc:ca:78:0e:1f:4c:24:fc:33:4c:01:b8:95:c2: 51:68:da:9f:83:7e:8b:15:b6:f7:f7:12:e3:ab:72:8b:82:e5: 30:96:26:89:2e:78:b9:8e:c1:bf:70:84:db:3e:62:94:74:11: 59:1b:b0:e9:26:c3:8b:3f:ab:3b:15:79:a5:86:43:ab:a0:82: e3:ab:2e:2d:6f:ce:33:07:03:d1:7f:2d:43:ba:a6:1f:ba:f3: 17:bf:ea:68:aa:72:d6:8a:ee:f7:c3:81:65:4b:69:04:4e:86: 75:39:2f:e7:84:52:8e:d6:48:3b:b6:bd:bc:8d:12:eb:ef:32: 72:ee:a6:62:7c:3d:05:db:e1:26:be:7b:55:5f:f4:41:14:b1: 57:a5:8f:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVIjuZv9964MPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ODU2ZGZmMzEtMDRmYy00YmRkLThjM2MtMGY4NTMxMjljOTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknkv6D7JCHT/fSRmkJX8UOSFTW7CcPJx8Sj/ /qf1sV2mIx+u69HfDRUEnv19njqEfx6U/YD4qX2todyHoyVB4AklIik8bI8r9UO8 1gkkQZLmq1c4Xizfa5rQ3ihDoZLcU/5VlH15+GQ5jbTzBoXOuy0ykj3dmmLtNDxZ jZotLW9oqqTHT5Jhod+3HjsI8EQQZ8mWHXMs+SiOhn6wFr+rd1+ylpiREHWImNAm K8BSHA3LbfK8BGEFOTJdsNsfOmiacX/gcAQdTxCl00xdj0osU3aNuJdR2GvUFBB5 vghMJunl55pCC221Tm3AHiiBYAlEZzqTm5LUb81LagfXoOFpiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGRCEB3R5C6p94wO7MHLajrL23mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODU4NzVjYzItODhlZi0z Yzg2LWE0NzktYTAxZGY3OWM1OTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF39MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpxaAvad0bV5kA+fAHm6WdhbTsMyCEMTxe5oY0ercKa7VMW63fgqnEG wauLVGsDtLevwMfH/TUq/0nmIDVdpqRScz4eBwkuKKGQN/GZVpctglKrmrzfAh6N Gec31u7n9Bp+lw6SlpNbyavT3fsNpFfMyngOH0wk/DNMAbiVwlFo2p+DfosVtvf3 EuOrcouC5TCWJokueLmOwb9whNs+YpR0EVkbsOkmw4s/qzsVeaWGQ6ugguOrLi1v zjMHA9F/LUO6ph+68xe/6miqctaK7vfDgWVLaQROhnU5L+eEUo7WSDu2vbyNEuvv MnLupmJ8PQXb4Sa+e1Vf9EEUsVelj0A= -----END CERTIFICATE-----Generated at Tue Aug 26 18:03:20 2025 by rpki-client