$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/2d96d3a5-670c-3a8a-91ab-668e000828c7.roa File: 2d96d3a5-670c-3a8a-91ab-668e000828c7.roa (raw, json) Hash identifier: 9fDuCGo4d5DhIbfqoY5nr/H5ZaRuUHYPc3SinDYZIak= Subject key identifier: 44:93:F2:6E:87:4A:FE:49:39:5B:8C:88:B0:77:FF:50:E8:A8:85:47 Certificate issuer: /CN=eccad7f1-567f-47db-a323-ab03604703b0 Certificate serial: 010D0C9F4328584AC2E0D88BDB9F56280550C300 Authority key identifier: B2:1B:6F:48:4F:18:26:14:B5:94:E1:CA:CF:61:89:B8:F3:89:73:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/2d96d3a5-670c-3a8a-91ab-668e000828c7.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 11281 IP address blocks: 204.13.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:d8:8b:db:9f:56:28:05:50:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eccad7f1-567f-47db-a323-ab03604703b0 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=4685350d-924b-4ca9-a9a7-a78a310d7790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e5:8b:0d:84:d1:80:86:fd:27:49:25:dc:1f: 27:2c:c5:91:a1:8a:60:85:20:b7:96:90:a9:e9:29: de:c3:11:8c:3f:48:34:14:5b:6d:62:47:13:1e:e2: 9b:a5:c5:bd:4f:f5:b9:d4:cf:45:39:1d:a8:8e:32: fb:87:b2:93:d7:ae:77:c1:38:39:05:5d:09:77:bb: 62:b7:4d:68:db:5b:3f:24:0f:82:59:58:79:03:fa: 62:a6:f6:c7:16:2e:34:d2:3f:b2:8e:44:8a:9b:82: b9:4f:28:f9:a3:4c:7e:0e:bb:8c:10:4d:36:27:a0: d2:5d:a0:19:87:d8:71:99:41:d9:6e:36:87:d6:4f: 05:9f:8c:c6:a7:00:5f:0f:df:d1:59:96:b9:9f:9b: bf:3a:b3:5b:70:ba:17:38:6a:bf:0e:02:20:1c:e3: f1:49:be:05:92:81:31:59:7b:19:75:52:f5:d8:d5: 10:0e:7f:4f:de:bd:30:64:b9:22:90:ba:d7:60:69: fe:95:6f:b0:96:16:8e:40:8b:e7:1d:41:de:8b:b9: be:4f:98:15:f6:1d:74:d5:f6:51:3b:eb:57:cc:a9: 2b:ee:3a:a4:07:51:a6:da:c1:3a:84:71:96:84:9f: 64:0a:52:3d:bb:a7:dd:ec:55:de:be:92:64:8a:9c: 40:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:93:F2:6E:87:4A:FE:49:39:5B:8C:88:B0:77:FF:50:E8:A8:85:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/2d96d3a5-670c-3a8a-91ab-668e000828c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.crl X509v3 Authority Key Identifier: keyid:B2:1B:6F:48:4F:18:26:14:B5:94:E1:CA:CF:61:89:B8:F3:89:73:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer sbgp-ipAddrBlock: critical IPv4: 204.13.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f1:9d:77:6d:d1:a9:3a:4f:50:96:36:cf:96:bd:01:eb:f1: 9d:dc:f9:51:df:5b:44:9e:aa:6d:c2:d6:f9:b9:20:59:ac:d4: 59:6c:d4:81:5b:8b:d2:42:8d:30:42:ea:45:b6:04:84:74:cc: 34:1d:2f:6a:e7:ab:31:ff:ca:10:93:2d:9f:b5:75:1f:14:73: ed:da:db:bf:77:7c:dc:dd:45:9b:90:f5:d0:f5:bc:a6:fd:7d: 7d:b7:ab:d8:7d:47:f7:78:a4:fc:05:74:5b:a9:25:26:4d:fb: af:b6:ff:c9:0b:75:87:36:1d:7f:36:b9:b5:32:cd:b8:77:19: 98:a1:3e:ef:35:33:8b:14:64:f8:da:1e:ae:8c:e3:4f:ce:45: b4:e8:6c:58:eb:54:0a:48:0b:2b:82:6b:94:da:3a:fe:e2:a8: b0:6e:b3:21:c9:d7:76:19:22:1c:da:64:46:57:1c:5a:00:e7: bd:be:83:94:de:db:27:f8:0e:a0:71:44:0a:90:5b:a5:3b:af: a1:4c:60:d2:94:a2:23:42:c7:49:a3:cf:b2:81:1d:04:00:f4: 7b:ca:4f:6c:df:36:ff:23:f3:ba:c3:ac:fc:1c:24:88:0e:3f: 82:06:bf:73:19:3f:4b:6f:e5:e9:7c:f3:47:8e:fc:68:73:ac: 26:62:cc:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4NiL259WKAVQwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNjYWQ3ZjEtNTY3Zi00N2RiLWEzMjMtYWIwMzYwNDcw M2IwMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NDY4NTM1MGQtOTI0Yi00Y2E5LWE5YTctYTc4YTMxMGQ3NzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeWLDYTRgIb9J0kl3B8nLMWRoYpghSC3lpCp 6SnewxGMP0g0FFttYkcTHuKbpcW9T/W51M9FOR2ojjL7h7KT1653wTg5BV0Jd7ti t01o21s/JA+CWVh5A/pipvbHFi400j+yjkSKm4K5Tyj5o0x+DruMEE02J6DSXaAZ h9hxmUHZbjaH1k8Fn4zGpwBfD9/RWZa5n5u/OrNbcLoXOGq/DgIgHOPxSb4FkoEx WXsZdVL12NUQDn9P3r0wZLkikLrXYGn+lW+wlhaOQIvnHUHei7m+T5gV9h101fZR O+tXzKkr7jqkB1Gm2sE6hHGWhJ9kClI9u6fd7FXevpJkipxAwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEST8m6HSv5JOVuMiLB3/1DoqIVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lY2Nh ZDdmMS01NjdmLTQ3ZGItYTMyMy1hYjAzNjA0NzAzYjAvMmQ5NmQzYTUtNjcwYy0z YThhLTkxYWItNjY4ZTAwMDgyOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWNjYWQ3ZjEtNTY3Zi00N2RiLWEz MjMtYWIwMzYwNDcwM2IwL2VjY2FkN2YxLTU2N2YtNDdkYi1hMzIzLWFiMDM2MDQ3 MDNiMC5jcmwwHwYDVR0jBBgwFoAUshtvSE8YJhS1lOHKz2GJuPOJc6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lY2NhZDdmMS01NjdmLTQ3ZGItYTMyMy1hYjAz NjA0NzAzYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzA2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfxnXdt0ak6T1CWNs+WvQHr8Z3c+VHfW0Seqm3C1vm5IFms1Fls1IFb i9JCjTBC6kW2BIR0zDQdL2rnqzH/yhCTLZ+1dR8Uc+3a2793fNzdRZuQ9dD1vKb9 fX23q9h9R/d4pPwFdFupJSZN+6+2/8kLdYc2HX82ubUyzbh3GZihPu81M4sUZPja Hq6M40/ORbTobFjrVApICyuCa5TaOv7iqLBusyHJ13YZIhzaZEZXHFoA572+g5Te 2yf4DqBxRAqQW6U7r6FMYNKUoiNCx0mjz7KBHQQA9HvKT2zfNv8j87rDrPwcJIgO P4IGv3MZP0tv5el880eO/GhzrCZizKQ= -----END CERTIFICATE-----Generated at Thu Aug 21 03:49:03 2025 by rpki-client