$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/8267bd09-4781-3fb5-8a71-7b1f8e7ec73b.roa File: 8267bd09-4781-3fb5-8a71-7b1f8e7ec73b.roa (raw, json) Hash identifier: uy0V23ENiw9rVG/Cmt+C0ToHdaitaqsqfXDbIDwpv5s= Subject key identifier: 28:7A:92:5A:EA:92:AA:1E:A3:5F:AC:6B:20:C4:EA:94:68:9B:BC:A9 Certificate issuer: /CN=19e347cf-c0cb-49a3-b025-5d36006aab3e Certificate serial: 010D0C9F4328584A66C073C0E4326EA6D3BB0F00 Authority key identifier: A3:61:7B:4D:1C:DA:67:81:9B:17:F0:A1:4E:D1:D5:B3:A7:36:D9:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/8267bd09-4781-3fb5-8a71-7b1f8e7ec73b.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 398537 IP address blocks: 204.108.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/19e347cf-c0cb-49a3-b025-5d36006aab3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/19e347cf-c0cb-49a3-b025-5d36006aab3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:73:c0:e4:32:6e:a6:d3:bb:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19e347cf-c0cb-49a3-b025-5d36006aab3e Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=dbb48b80-1001-4fef-b000-e1ce4219d42e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8a:7c:e5:93:a2:c0:71:43:f5:cc:ea:f5:33: 10:c8:94:55:14:90:03:30:99:cc:5c:0b:84:2a:7c: 11:77:c5:69:4e:ed:de:c1:92:92:bd:d4:76:73:50: b5:9e:7a:0a:b5:01:e1:54:66:43:3c:b2:a8:b0:d5: 45:fd:c4:90:31:36:a5:49:3a:80:c7:10:ea:4a:32: 5f:23:c8:ad:46:ff:5b:e0:65:c7:05:f6:fd:d3:b3: b4:eb:00:84:65:e8:2c:a1:2b:84:e8:65:b2:71:69: 66:d9:d2:b5:73:95:72:d4:a9:ff:1b:45:1f:aa:e5: 94:b5:d6:90:16:f0:94:f1:76:ad:7c:89:89:d0:b2: 5f:a8:10:32:9b:d9:16:4f:04:0d:53:5c:2e:45:23: 88:c6:fc:89:46:34:66:85:24:ae:83:26:14:30:13: 44:6d:b5:0d:18:24:f8:4a:3e:7f:e5:47:4c:3e:a4: be:e0:ec:33:29:58:38:ea:7b:0b:08:c2:12:ea:a7: f4:0c:5d:c0:0d:02:65:f1:39:8b:88:65:da:ce:f2: cf:11:a6:69:07:74:c1:8d:9e:e2:9e:61:42:17:89: 9d:6d:d8:8a:a7:48:c3:d5:8c:fd:f1:dd:c5:b8:cb: 6e:66:a4:65:43:09:38:51:ec:8b:a3:cc:90:0a:4c: 56:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7A:92:5A:EA:92:AA:1E:A3:5F:AC:6B:20:C4:EA:94:68:9B:BC:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/8267bd09-4781-3fb5-8a71-7b1f8e7ec73b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/19e347cf-c0cb-49a3-b025-5d36006aab3e.crl X509v3 Authority Key Identifier: keyid:A3:61:7B:4D:1C:DA:67:81:9B:17:F0:A1:4E:D1:D5:B3:A7:36:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e.cer sbgp-ipAddrBlock: critical IPv4: 204.108.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:ac:f1:6c:4b:bb:ea:23:c5:a9:a4:e4:ce:d6:fa:2f:73:9b: 14:cb:12:47:88:86:90:b4:09:e0:d8:4c:d2:58:af:f3:c8:22: 45:83:57:54:d7:ed:90:f5:0c:2b:0f:8b:82:ee:25:0e:6f:0a: 64:63:54:eb:e6:c7:19:9e:0f:bd:b5:b7:45:f2:44:cd:db:ef: d0:ca:dc:4f:3b:c8:1f:7f:24:71:5a:a7:19:8e:29:38:a6:14: b8:e1:00:0a:e4:80:7d:60:12:0f:a6:a5:fd:c7:78:ac:1b:d7: 01:c0:db:45:d0:91:74:f2:b7:92:a8:87:bb:a1:4f:b7:a8:3a: 4b:69:8b:d8:15:fb:e8:5a:6d:f3:6d:43:87:24:db:6c:69:c4: c8:cf:fe:52:55:26:65:0d:a1:d6:d8:61:25:0c:15:6d:98:e6: 21:ba:f4:f4:e4:c2:6e:de:f5:e0:52:99:71:d4:1c:99:e4:f6: da:ef:ef:a9:cf:8a:44:9f:13:bb:52:02:05:b3:d8:27:9d:f9: 6d:9a:db:e2:e6:e2:93:fd:ac:83:1b:36:b4:85:bc:60:2a:8b: e5:e8:04:a9:4f:0b:37:1e:68:02:5a:a1:37:e1:6b:39:b4:a1: 55:df:62:be:e6:8a:da:68:bc:00:76:45:54:de:83:e1:d0:4a: ad:e6:29:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwHPA5DJuptO7DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTllMzQ3Y2YtYzBjYi00OWEzLWIwMjUtNWQzNjAwNmFh YjNlMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk ZGJiNDhiODAtMTAwMS00ZmVmLWIwMDAtZTFjZTQyMTlkNDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ip85ZOiwHFD9czq9TMQyJRVFJADMJnMXAuE KnwRd8VpTu3ewZKSvdR2c1C1nnoKtQHhVGZDPLKosNVF/cSQMTalSTqAxxDqSjJf I8itRv9b4GXHBfb907O06wCEZegsoSuE6GWycWlm2dK1c5Vy1Kn/G0UfquWUtdaQ FvCU8XatfImJ0LJfqBAym9kWTwQNU1wuRSOIxvyJRjRmhSSugyYUMBNEbbUNGCT4 Sj5/5UdMPqS+4OwzKVg46nsLCMIS6qf0DF3ADQJl8TmLiGXazvLPEaZpB3TBjZ7i nmFCF4mdbdiKp0jD1Yz98d3FuMtuZqRlQwk4UeyLo8yQCkxWuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCh6klrqkqoeo1+sayDE6pRom7ypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xOWUz NDdjZi1jMGNiLTQ5YTMtYjAyNS01ZDM2MDA2YWFiM2UvODI2N2JkMDktNDc4MS0z ZmI1LThhNzEtN2IxZjhlN2VjNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTllMzQ3Y2YtYzBjYi00OWEzLWIw MjUtNWQzNjAwNmFhYjNlLzE5ZTM0N2NmLWMwY2ItNDlhMy1iMDI1LTVkMzYwMDZh YWIzZS5jcmwwHwYDVR0jBBgwFoAUo2F7TRzaZ4GbF/ChTtHVs6c22bUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xOWUzNDdjZi1jMGNiLTQ5YTMtYjAyNS01ZDM2 MDA2YWFiM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGykMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGs8WxLu+ojxamk5M7W+i9zmxTLEkeIhpC0CeDYTNJYr/PIIkWDV1TX 7ZD1DCsPi4LuJQ5vCmRjVOvmxxmeD721t0XyRM3b79DK3E87yB9/JHFapxmOKTim FLjhAArkgH1gEg+mpf3HeKwb1wHA20XQkXTyt5Koh7uhT7eoOktpi9gV++habfNt Q4ck22xpxMjP/lJVJmUNodbYYSUMFW2Y5iG69PTkwm7e9eBSmXHUHJnk9trv76nP ikSfE7tSAgWz2Ced+W2a2+Lm4pP9rIMbNrSFvGAqi+XoBKlPCzceaAJaoTfhazm0 oVXfYr7mitpovAB2RVTeg+HQSq3mKTc= -----END CERTIFICATE-----Generated at Sat Aug 2 18:37:30 2025 by rpki-client