$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/7c82a209-9386-3901-a7b9-57c1f597512b.roa File: 7c82a209-9386-3901-a7b9-57c1f597512b.roa (raw, json) Hash identifier: d84yyILcKhzE8axKT5MUsHOXjKO4MM6AdrxgE60S4ko= Subject key identifier: BB:C2:72:3A:21:E5:C5:18:3E:07:41:EB:2A:BF:68:7F:4A:03:4D:AB Certificate issuer: /CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Certificate serial: 010D0C9F4328584A5FC5E17F4075DEE20A154440 Authority key identifier: 99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/7c82a209-9386-3901-a7b9-57c1f597512b.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 22251 IP address blocks: 208.68.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e1:7f:40:75:de:e2:0a:15:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=cda1be01-e6a9-48f7-ade1-0adb0d6df452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d3:6d:86:7c:35:5f:4a:9c:aa:60:50:fd:5a: 00:53:1f:56:a1:fd:e0:b1:ca:ef:ae:50:23:52:88: af:35:e9:00:0b:81:f2:2f:dc:1e:3f:5e:a2:54:5a: 0c:4e:1b:e3:16:0f:af:91:4d:9b:04:f1:2c:c1:35: 6b:cb:73:f9:3d:1b:dc:73:3f:a7:5b:d6:38:58:97: a7:a4:68:c9:fd:89:5a:5e:64:7e:9c:ca:f4:6b:f6: 5d:c3:a2:99:56:ed:ee:c7:cc:48:fa:40:b2:81:20: 67:27:ff:09:df:2b:4b:ce:67:2d:c2:cf:b3:c6:92: 8d:c6:a2:df:13:fb:e0:0c:66:fa:98:dd:55:bb:46: b7:1c:63:0d:57:86:6a:c9:93:ce:c4:ce:86:dc:28: eb:21:6b:4d:2f:19:4c:ee:85:ec:27:f5:ff:98:ba: 5d:1b:83:11:c0:28:f4:54:3b:36:f9:3a:a5:a8:05: 8f:ef:4f:9d:d5:b6:71:c5:86:89:82:6f:2a:1d:9f: 8d:b2:3b:d2:be:e5:84:7b:f3:93:70:1d:74:42:31: 59:02:6c:5a:ba:97:7a:aa:d2:23:06:a5:0b:72:63: 17:f9:61:69:99:1c:07:04:3b:bd:de:67:50:b6:75: 47:57:04:79:1f:44:76:b1:23:d7:50:c4:fe:7f:f7: bf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C2:72:3A:21:E5:C5:18:3E:07:41:EB:2A:BF:68:7F:4A:03:4D:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/7c82a209-9386-3901-a7b9-57c1f597512b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl X509v3 Authority Key Identifier: keyid:99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer sbgp-ipAddrBlock: critical IPv4: 208.68.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:2d:da:84:db:e2:0b:52:97:5f:a1:b6:9f:65:51:6a:3d:3c: bb:5c:43:09:e8:5d:80:dd:11:e1:36:14:b8:65:2b:7b:c9:ff: 16:a3:6c:1d:c3:5e:53:a9:cc:24:28:f8:89:c6:3a:a7:56:57: 44:20:5e:31:88:99:5c:39:c1:ae:4f:72:6b:01:db:9c:85:3b: d6:24:5a:c9:56:8c:59:d6:fe:f0:6d:5c:b9:fe:bd:74:22:2c: 2f:e9:98:72:7a:23:20:1e:bd:3b:eb:25:d7:a8:f6:2a:e1:91: c9:6d:d1:f1:42:db:5c:ca:f5:46:1f:54:91:72:ec:29:a5:95: 4d:41:27:da:7a:e9:e1:09:cb:33:43:12:ff:7e:80:f6:8e:41: 6a:e0:98:f9:65:25:8b:05:11:82:d6:00:c4:2f:80:9f:be:93: 16:d7:8c:26:61:0a:50:b7:1e:df:ea:24:c5:20:d5:31:c9:bd: bf:2d:8c:01:56:10:62:93:c6:6c:7e:73:cf:d4:2d:05:07:f6: 9c:7d:d9:13:85:7d:5b:83:ba:4b:4f:05:f0:ce:e3:b5:27:36: b8:fe:09:4d:d7:51:ad:cd:c6:a5:a2:5c:e5:21:e0:58:f1:d5: 17:8e:d7:3f:e7:60:e3:2f:ad:03:65:15:cb:4a:50:e9:ed:c1: 3b:10:23:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxeF/QHXe4goVREAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNmODgwN2MtNDk0ZS00MWFiLTg0MmMtYzA2NzJkNjI4 M2IxMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk Y2RhMWJlMDEtZTZhOS00OGY3LWFkZTEtMGFkYjBkNmRmNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNNthnw1X0qcqmBQ/VoAUx9Wof3gscrvrlAj UoivNekAC4HyL9weP16iVFoMThvjFg+vkU2bBPEswTVry3P5PRvccz+nW9Y4WJen pGjJ/YlaXmR+nMr0a/Zdw6KZVu3ux8xI+kCygSBnJ/8J3ytLzmctws+zxpKNxqLf E/vgDGb6mN1Vu0a3HGMNV4ZqyZPOxM6G3CjrIWtNLxlM7oXsJ/X/mLpdG4MRwCj0 VDs2+TqlqAWP70+d1bZxxYaJgm8qHZ+NsjvSvuWEe/OTcB10QjFZAmxaupd6qtIj BqULcmMX+WFpmRwHBDu93mdQtnVHVwR5H0R2sSPXUMT+f/e/0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvCcjoh5cUYPgdB6yq/aH9KA02rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4 ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3MmQ2MjgzYjEvN2M4MmEyMDktOTM4Ni0z OTAxLWE3YjktNTdjMWY1OTc1MTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGNmODgwN2MtNDk0ZS00MWFiLTg0 MmMtYzA2NzJkNjI4M2IxLzhjZjg4MDdjLTQ5NGUtNDFhYi04NDJjLWMwNjcyZDYy ODNiMS5jcmwwHwYDVR0jBBgwFoAUmSK0wlNyF+E9BTJuTe5jaHRRhJgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3 MmQ2MjgzYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkt2oTb4gtSl1+htp9lUWo9PLtcQwnoXYDdEeE2FLhlK3vJ/xajbB3D XlOpzCQo+InGOqdWV0QgXjGImVw5wa5PcmsB25yFO9YkWslWjFnW/vBtXLn+vXQi LC/pmHJ6IyAevTvrJdeo9irhkclt0fFC21zK9UYfVJFy7CmllU1BJ9p66eEJyzND Ev9+gPaOQWrgmPllJYsFEYLWAMQvgJ++kxbXjCZhClC3Ht/qJMUg1THJvb8tjAFW EGKTxmx+c8/ULQUH9px92ROFfVuDuktPBfDO47UnNrj+CU3XUa3NxqWiXOUh4Fjx 1ReO1z/nYOMvrQNlFctKUOntwTsQI9Q= -----END CERTIFICATE-----Generated at Wed Jul 2 13:50:51 2025 by rpki-client