$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa File: 02d4c8c1-811c-301f-ae47-61c6c62035fe.roa (raw, json) Hash identifier: 4FAR/v75fJ7fFNJ+O5j+cnNLlaKPZJ17GymxpxGaGzE= Subject key identifier: 61:DE:A6:A0:6E:0E:72:B9:DC:85:36:9B:86:15:3F:E4:39:8A:17:02 Certificate issuer: /CN=b0217be3-0b99-45d9-9156-e23551753455 Certificate serial: 010D0C9F4328584ADECBB52F27C784957FCC5F00 Authority key identifier: 61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 395019 IP address blocks: 208.76.208.0/22 maxlen: 22 2602:fbfd::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:b5:2f:27:c7:84:95:7f:cc:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0217be3-0b99-45d9-9156-e23551753455 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=08f0c942-8fc8-4ac0-be26-70027fa39f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:1a:cd:83:86:17:1e:d7:2a:ca:34:da:8c: 5f:e7:1b:12:9b:8b:15:66:bd:38:74:58:9a:08:4a: bf:be:f7:56:89:ee:95:d5:03:00:24:49:d6:e5:07: d3:48:a8:60:55:cc:3e:43:97:15:5f:d3:f7:5b:fb: c3:97:1d:33:e9:ff:f4:d3:3f:50:93:39:ba:e9:bf: 8a:25:b8:57:da:14:ef:c7:83:55:05:e0:73:a9:06: 98:5a:26:22:e7:61:c1:a8:54:ad:5c:0a:4a:d6:24: ec:a3:55:68:34:92:09:4b:17:4c:b0:57:67:cd:0e: 21:0d:28:47:a3:ca:84:a9:aa:46:46:c6:0c:76:9d: f8:4c:6d:69:51:48:31:c5:24:6d:e7:c8:83:4c:32: 00:b6:aa:80:06:8c:77:da:b5:7c:7c:56:6a:57:9e: 71:25:80:6d:a7:58:e5:5e:73:d4:e8:fa:d4:47:74: fc:50:8f:00:84:dd:50:e8:58:b4:59:89:41:0b:8a: 1d:cd:b4:1f:5b:1a:45:82:36:a6:e8:77:ab:ff:bb: ef:b1:86:2e:3b:32:45:17:6c:54:c5:16:18:ea:b6: 4c:ff:b5:f3:1e:fe:1e:dc:13:b4:e1:49:47:80:2f: f6:a1:1f:91:c9:c9:32:8a:25:dd:0d:18:fe:bf:df: b0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DE:A6:A0:6E:0E:72:B9:DC:85:36:9B:86:15:3F:E4:39:8A:17:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.crl X509v3 Authority Key Identifier: keyid:61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer sbgp-ipAddrBlock: critical IPv4: 208.76.208.0/22 IPv6: 2602:fbfd::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:f2:ca:e6:6d:b5:17:25:3d:1f:c6:8d:6d:98:a3:02:da:6d: c8:fa:25:de:8e:76:12:97:75:35:94:a6:cc:e1:4f:db:de:40: 61:f0:7e:13:5e:ad:1e:15:2c:91:4d:24:57:e4:44:96:a2:09: d5:35:39:a7:7a:20:2c:b3:86:93:73:1b:b7:c3:79:a4:4b:87: 10:e7:46:76:34:f6:2d:87:a8:52:4f:f6:35:66:88:00:df:93: a7:66:d4:67:46:36:45:5f:83:07:ad:06:59:7f:30:28:cb:33: 7f:22:49:44:00:e1:ba:f2:6b:5e:fe:5a:60:19:06:f5:2d:a8: f8:36:d4:1b:61:d1:f1:b9:56:26:93:7b:75:c0:07:ea:3f:30: eb:c0:a0:af:95:db:d6:8c:3f:e5:f3:97:06:52:47:0a:92:7e: 9b:cc:11:6f:fa:48:76:1a:b1:28:b7:14:da:75:7a:29:f2:b2: 08:b3:49:47:c5:f5:fb:9c:ae:04:06:aa:6b:ba:e8:86:cf:24: a4:55:3a:73:1c:a9:96:90:f7:06:d1:14:ba:6a:f9:46:12:9e: 19:e5:7a:d2:1b:40:80:98:7a:3d:b5:39:bf:7a:77:c8:55:e1: 26:0e:81:9f:8b:84:fd:c4:61:8a:dc:ef:8a:54:f2:3e:f2:bb: 0f:fe:99:3c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWErey7UvJ8eElX/MXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyMTdiZTMtMGI5OS00NWQ5LTkxNTYtZTIzNTUxNzUz NDU1MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MDhmMGM5NDItOGZjOC00YWMwLWJlMjYtNzAwMjdmYTM5ZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgsazYOGFx7XKso02oxf5xsSm4sVZr04dFia CEq/vvdWie6V1QMAJEnW5QfTSKhgVcw+Q5cVX9P3W/vDlx0z6f/00z9Qkzm66b+K JbhX2hTvx4NVBeBzqQaYWiYi52HBqFStXApK1iTso1VoNJIJSxdMsFdnzQ4hDShH o8qEqapGRsYMdp34TG1pUUgxxSRt58iDTDIAtqqABox32rV8fFZqV55xJYBtp1jl XnPU6PrUR3T8UI8AhN1Q6Fi0WYlBC4odzbQfWxpFgjam6Her/7vvsYYuOzJFF2xU xRYY6rZM/7XzHv4e3BO04UlHgC/2oR+RyckyiiXdDRj+v9+wCQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGHepqBuDnK53IU2m4YVP+Q5ihcCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMDIx N2JlMy0wYjk5LTQ1ZDktOTE1Ni1lMjM1NTE3NTM0NTUvMDJkNGM4YzEtODExYy0z MDFmLWFlNDctNjFjNmM2MjAzNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjAyMTdiZTMtMGI5OS00NWQ5LTkx NTYtZTIzNTUxNzUzNDU1L2IwMjE3YmUzLTBiOTktNDVkOS05MTU2LWUyMzU1MTc1 MzQ1NS5jcmwwHwYDVR0jBBgwFoAUYfKSn65vBg21wZxQhXAYY0ne2zYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMDIxN2JlMy0wYjk5LTQ1ZDktOTE1Ni1lMjM1 NTE3NTM0NTUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQC0EzQMA4E AgACMAgDBgQmAvv9ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBF8srmbbUXJT0fxo1tmKMC2m3I+iXejnYS l3U1lKbM4U/b3kBh8H4TXq0eFSyRTSRX5ESWognVNTmneiAss4aTcxu3w3mkS4cQ 50Z2NPYth6hST/Y1ZogA35OnZtRnRjZFX4MHrQZZfzAoyzN/IklEAOG68mte/lpg GQb1Laj4NtQbYdHxuVYmk3t1wAfqPzDrwKCvldvWjD/l85cGUkcKkn6bzBFv+kh2 GrEotxTadXop8rIIs0lHxfX7nK4EBqpruuiGzySkVTpzHKmWkPcG0RS6avlGEp4Z 5XrSG0CAmHo9tTm/enfIVeEmDoGfi4T9xGGK3O+KVPI+8rsP/pk8 -----END CERTIFICATE-----Generated at Thu Aug 21 01:29:56 2025 by rpki-client