$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/a8cd7728-ce48-3935-9d5c-caec88a0e81d.roa File: a8cd7728-ce48-3935-9d5c-caec88a0e81d.roa (raw, json) Hash identifier: 8YcYdJXviKqYyt4alg6gdRwGawvvmxv1TzE+bpBX5sw= Subject key identifier: 57:DE:4A:18:CC:D7:83:B3:1F:20:B1:2E:39:54:DE:65:F1:B2:DD:B1 Certificate issuer: /CN=731b750c-b48f-4a57-bf26-18e0bc6a456e Certificate serial: 010D0C9F4328584AC5AB840CDB0896CEAC6720C0 Authority key identifier: 13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/a8cd7728-ce48-3935-9d5c-caec88a0e81d.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 393780 IP address blocks: 208.89.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:84:0c:db:08:96:ce:ac:67:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731b750c-b48f-4a57-bf26-18e0bc6a456e Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=c9ceb446-cb6a-46e4-88b1-381e174e575d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2b:ed:c7:10:9c:53:c2:f0:a0:ea:b2:ec:8b: c5:b6:3b:9b:80:19:f0:59:a1:56:8f:12:c8:96:37: 67:fc:a8:ce:a6:77:1d:0b:ac:0c:ae:a6:a8:ee:2f: d2:d3:b4:31:d1:89:d3:dd:01:6e:ed:ee:16:75:4d: 00:80:d9:50:5b:1d:89:4a:82:42:6f:f7:ba:8e:24: 88:53:47:4a:59:81:43:ed:e4:3d:54:ac:71:3c:d1: bd:d3:c4:d1:bd:4e:18:0b:ea:8f:39:a1:11:e8:92: d6:50:4d:6f:85:bc:f6:97:83:a9:3e:30:7c:4e:57: 00:17:da:bb:13:89:d2:79:5d:88:9c:1e:c6:0b:d7: c7:0a:0b:ab:0c:26:7a:e9:99:21:15:f5:a2:97:d2: 9f:87:e2:2e:70:00:b7:23:20:e5:6a:68:11:0a:56: af:56:fc:d8:5e:4a:3f:40:7c:10:62:ac:d0:1d:84: 92:18:d7:3b:27:03:55:05:72:48:a8:7c:52:eb:9e: cb:7b:62:e7:5e:a7:f8:d2:b2:2e:d0:75:77:68:34: 8f:e9:4e:61:66:8f:2b:0a:d0:9d:03:3e:44:1f:c5: 67:a2:58:64:4d:63:cf:39:c6:18:4f:aa:87:2b:35: 81:b5:10:c3:f7:0d:bc:56:fa:6c:2b:8c:f9:f9:df: c1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DE:4A:18:CC:D7:83:B3:1F:20:B1:2E:39:54:DE:65:F1:B2:DD:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/a8cd7728-ce48-3935-9d5c-caec88a0e81d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.crl X509v3 Authority Key Identifier: keyid:13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer sbgp-ipAddrBlock: critical IPv4: 208.89.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:aa:d2:e7:01:8d:bc:1a:5b:68:da:f6:4e:be:77:8e:69:a7: d7:ab:36:69:dc:d7:9d:0d:c2:77:a9:b9:6f:27:12:e4:72:0a: 90:1f:05:1c:ea:64:68:72:18:60:37:d7:c3:30:5d:1e:4f:5c: 4b:be:77:bb:96:27:c5:96:94:8e:5e:20:97:73:d9:d2:17:c2: 99:59:65:d9:4b:f7:01:bb:f6:b4:e0:58:14:60:90:90:05:b6: 6d:58:ba:b4:1b:5a:a9:19:6e:9c:b2:03:72:38:76:2f:91:a8: d0:22:77:ec:cd:b6:6b:e8:23:6f:79:2f:75:b8:99:02:a9:12: b5:19:94:47:37:25:c9:04:c5:db:2a:6e:f4:91:08:dc:f2:b6: 10:24:5e:e8:96:90:ce:db:e5:49:0b:d4:72:fb:5b:20:55:c4: 5a:16:18:59:92:f3:76:95:8d:3d:c8:5d:53:32:7f:82:72:3b: a4:1f:ab:99:7e:75:1a:d8:e3:0c:42:35:de:8a:1b:e0:26:38: 4f:a1:03:c3:42:ca:0d:f2:5a:1b:21:0f:49:8b:66:9f:e1:53: 16:2b:69:4f:d8:ce:c2:0f:e9:92:e9:d4:2b:84:7f:6a:35:2e: 36:12:b2:fa:30:90:51:20:45:78:6a:c7:71:a6:5c:92:74:ec: 2f:06:ba:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq4QM2wiWzqxnIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMxYjc1MGMtYjQ4Zi00YTU3LWJmMjYtMThlMGJjNmE0 NTZlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk YzljZWI0NDYtY2I2YS00NmU0LTg4YjEtMzgxZTE3NGU1NzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyvtxxCcU8LwoOqy7IvFtjubgBnwWaFWjxLI ljdn/KjOpncdC6wMrqao7i/S07Qx0YnT3QFu7e4WdU0AgNlQWx2JSoJCb/e6jiSI U0dKWYFD7eQ9VKxxPNG908TRvU4YC+qPOaER6JLWUE1vhbz2l4OpPjB8TlcAF9q7 E4nSeV2InB7GC9fHCgurDCZ66ZkhFfWil9Kfh+IucAC3IyDlamgRClavVvzYXko/ QHwQYqzQHYSSGNc7JwNVBXJIqHxS657Le2LnXqf40rIu0HV3aDSP6U5hZo8rCtCd Az5EH8VnolhkTWPPOcYYT6qHKzWBtRDD9w28VvpsK4z5+d/B0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfeShjM14OzHyCxLjlU3mXxst2xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83MzFi NzUwYy1iNDhmLTRhNTctYmYyNi0xOGUwYmM2YTQ1NmUvYThjZDc3MjgtY2U0OC0z OTM1LTlkNWMtY2FlYzg4YTBlODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzMxYjc1MGMtYjQ4Zi00YTU3LWJm MjYtMThlMGJjNmE0NTZlLzczMWI3NTBjLWI0OGYtNGE1Ny1iZjI2LTE4ZTBiYzZh NDU2ZS5jcmwwHwYDVR0jBBgwFoAUE+QeciQkWtWazwcMzkInvIBsy1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83MzFiNzUwYy1iNDhmLTRhNTctYmYyNi0xOGUw YmM2YTQ1NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FmmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuq0ucBjbwaW2ja9k6+d45pp9erNmnc150NwnepuW8nEuRyCpAfBRzq ZGhyGGA318MwXR5PXEu+d7uWJ8WWlI5eIJdz2dIXwplZZdlL9wG79rTgWBRgkJAF tm1YurQbWqkZbpyyA3I4di+RqNAid+zNtmvoI295L3W4mQKpErUZlEc3JckExdsq bvSRCNzythAkXuiWkM7b5UkL1HL7WyBVxFoWGFmS83aVjT3IXVMyf4JyO6Qfq5l+ dRrY4wxCNd6KG+AmOE+hA8NCyg3yWhshD0mLZp/hUxYraU/YzsIP6ZLp1CuEf2o1 LjYSsvowkFEgRXhqx3GmXJJ07C8GupM= -----END CERTIFICATE-----Generated at Thu Aug 21 10:27:14 2025 by rpki-client