$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa File: 88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa (raw, json) Hash identifier: 5Dc/MPl7Jt7z4ikkBvcU8CY5IHsJn4oyF6PMjo0fxSQ= Subject key identifier: 87:A6:17:6D:DA:44:B3:2D:F1:FF:DA:B4:D2:E0:15:AC:D6:CB:39:92 Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Certificate serial: 010D0C9F4328584AB4EB6EF30EE4F42268995640 Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 17017 IP address blocks: 168.245.136.0/24 maxlen: 24 208.70.144.0/21 maxlen: 21 2604:7fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:6e:f3:0e:e4:f4:22:68:99:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=044c0f69-c25d-45ba-a1a5-76d6408d7475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:04:ce:e6:ca:ef:63:24:7d:95:4c:fc:f8:0c: 4e:d9:c5:16:8d:53:89:14:10:65:0c:3b:10:38:20: cd:f5:f9:c4:99:f8:40:47:86:c8:56:ad:ea:b8:73: 56:3f:98:94:c6:4b:e6:81:35:08:77:78:49:9c:f5: 50:c8:db:fa:11:58:91:d8:05:c9:e0:c0:b4:ab:c9: 76:48:a1:f2:58:be:b0:89:2b:b8:b5:c7:aa:f2:af: 44:70:cf:7a:f4:9c:ce:41:56:b5:ff:dc:d5:a2:4e: b0:2a:5e:0c:9a:85:73:68:4b:2d:8f:12:ee:ef:46: 17:f9:74:0d:b7:b3:4d:65:ec:5d:67:65:3f:40:4b: bd:74:28:87:1b:b5:ee:89:46:03:1a:26:ac:d2:58: e8:af:c4:1f:8e:1f:4a:ee:6d:36:3a:75:00:9a:ef: e5:42:1d:f9:a0:92:7c:4c:49:74:32:31:a9:8a:5e: 96:12:a1:3a:fa:2f:98:e4:4e:89:fe:19:0c:c7:d1: 64:2e:76:68:be:b3:f9:cd:79:fb:bf:f5:15:04:5c: ad:c2:03:e7:ba:e7:72:0a:f0:76:24:c2:c4:30:32: 11:ba:f4:c0:b4:0d:dd:81:e0:11:8b:55:7b:e5:f2: 80:7a:f2:2c:95:43:07:a1:ce:1c:25:ad:ba:39:e2: 41:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A6:17:6D:DA:44:B3:2D:F1:FF:DA:B4:D2:E0:15:AC:D6:CB:39:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl X509v3 Authority Key Identifier: keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer sbgp-ipAddrBlock: critical IPv4: 168.245.136.0/24 208.70.144.0/21 IPv6: 2604:7fc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:68:d9:7e:7f:a4:5d:fa:60:fd:3c:1a:3e:5f:34:45:b2:24: 13:58:07:44:21:42:d9:c4:67:16:ba:5a:b9:66:c5:36:0d:30: 5a:b9:cf:3f:fc:6b:67:ff:37:87:dd:3c:c3:33:64:6c:27:b0: 2f:5d:55:3c:41:2c:18:7e:d7:fc:40:0c:a5:f0:ae:d1:58:be: bd:e3:e1:56:de:83:93:87:cc:88:e9:98:20:a0:75:a6:cf:13: 8c:5c:e5:2b:bd:cb:8a:92:41:23:02:60:b1:85:9b:64:19:3a: 4a:e5:a5:cd:e2:a9:8c:ce:03:c8:c0:51:76:f1:18:03:bf:16: 64:92:5c:8f:fa:18:36:37:00:c6:33:33:a1:d9:03:05:fa:83: aa:b5:c1:9a:e2:d0:a1:02:1a:10:a8:cc:d3:56:db:6b:77:18: 83:01:d7:c3:33:65:77:8a:21:da:a2:97:14:56:14:89:74:5d: c4:b6:54:d4:8d:67:0a:a4:26:82:06:39:c2:a5:17:d2:2d:83: c7:0c:32:6e:93:4e:b2:98:02:4e:d2:3b:77:c3:ff:8e:2a:94: 99:2e:6a:6c:1c:71:1b:fd:2d:65:3d:11:2f:ee:36:dc:fa:8b: a9:a4:6d:e8:e9:ca:00:53:7f:f4:8d:ce:d4:ef:6a:3f:1e:07: 5f:ae:a7:f7 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEq0627zDuT0ImiZVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0M2FkZmQtZjZlNC00NTA0LTg2ZjAtMmVmYWRmOWQ0 ZDIxMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MDQ0YzBmNjktYzI1ZC00NWJhLWExYTUtNzZkNjQwOGQ3NDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkATO5srvYyR9lUz8+AxO2cUWjVOJFBBlDDsQ OCDN9fnEmfhAR4bIVq3quHNWP5iUxkvmgTUId3hJnPVQyNv6EViR2AXJ4MC0q8l2 SKHyWL6wiSu4tceq8q9EcM969JzOQVa1/9zVok6wKl4MmoVzaEstjxLu70YX+XQN t7NNZexdZ2U/QEu9dCiHG7XuiUYDGias0ljor8Qfjh9K7m02OnUAmu/lQh35oJJ8 TEl0MjGpil6WEqE6+i+Y5E6J/hkMx9FkLnZovrP5zXn7v/UVBFytwgPnuudyCvB2 JMLEMDIRuvTAtA3dgeARi1V75fKAevIslUMHoc4cJa26OeJBvwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFIemF23aRLMt8f/atNLgFazWyzmSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQz YWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZhZGY5ZDRkMjEvODhlYzEyZjYtN2EwNS0z MGUxLWJhNjQtZjA3M2UyYTkwMGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGQ0M2FkZmQtZjZlNC00NTA0LTg2 ZjAtMmVmYWRmOWQ0ZDIxLzRkNDNhZGZkLWY2ZTQtNDUwNC04NmYwLTJlZmFkZjlk NGQyMS5jcmwwHwYDVR0jBBgwFoAUHLPKVHX2AJyrqb/kFUAJQKHvOZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQzYWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZh ZGY5ZDRkMjEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAqPWIAwQD 0EaQMA0EAgACMAcDBQAmBH/AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFho2X5/pF36YP08Gj5fNEWyJBNY B0QhQtnEZxa6WrlmxTYNMFq5zz/8a2f/N4fdPMMzZGwnsC9dVTxBLBh+1/xADKXw rtFYvr3j4Vbeg5OHzIjpmCCgdabPE4xc5Su9y4qSQSMCYLGFm2QZOkrlpc3iqYzO A8jAUXbxGAO/FmSSXI/6GDY3AMYzM6HZAwX6g6q1wZri0KECGhCozNNW22t3GIMB 18MzZXeKIdqilxRWFIl0XcS2VNSNZwqkJoIGOcKlF9Itg8cMMm6TTrKYAk7SO3fD /44qlJkuamwccRv9LWU9ES/uNtz6i6mkbejpygBTf/SNztTvaj8eB1+up/c= -----END CERTIFICATE-----Generated at Sun Aug 3 15:54:58 2025 by rpki-client