$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/22b2c353-054d-3452-921d-8e3bcce0ab92.roa File: 22b2c353-054d-3452-921d-8e3bcce0ab92.roa (raw, json) Hash identifier: wPKzFtjXQKWcKpk2PPz9e71pxPtKw6LSdhrWvdkrK/Q= Subject key identifier: 12:E1:5E:F5:72:86:1C:EE:B6:03:CB:73:9E:C4:08:64:8E:22:DB:93 Certificate issuer: /CN=8f6f01b8-13ad-4c79-aa72-65cf0dedd899 Certificate serial: 010D0C9F4328584ACF711052FB3724C69B31D7A0 Authority key identifier: D1:83:CB:75:C4:8F:DD:CA:6A:BE:96:34:2E:C7:6C:51:0E:37:FE:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/22b2c353-054d-3452-921d-8e3bcce0ab92.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 53428 IP address blocks: 204.12.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:10:52:fb:37:24:c6:9b:31:d7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f6f01b8-13ad-4c79-aa72-65cf0dedd899 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=7fbc4a33-f1d3-4cf3-9a67-ffdefe1d9095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:be:50:54:cc:78:4c:ea:a0:50:cb:b1:ac:f3: 34:06:38:94:1c:24:fc:47:0b:bc:14:f4:1c:d1:82: 4d:2c:06:8f:3c:b2:0b:df:f7:92:ff:7f:45:a4:e5: f2:de:c3:b7:04:03:4a:eb:17:08:fe:ac:1a:0c:01: b1:0d:0d:37:26:4d:18:79:09:09:01:4d:f9:96:d5: 34:cb:2c:8d:b0:3d:ec:94:00:29:8a:3f:c0:b9:4d: d5:2f:49:dc:28:ce:da:15:c9:d6:0b:cd:17:65:0e: cf:8c:d0:ba:6c:d8:09:99:a7:d4:10:46:5e:d5:10: 52:e9:06:6b:be:99:85:ef:d9:bc:0f:c2:23:40:90: b6:17:1c:8f:35:94:d0:21:14:0a:bb:e9:6a:b1:b8: da:15:f8:e1:22:6b:cb:9b:89:fb:5a:d9:82:e0:74: ee:f5:b9:59:68:a5:59:13:78:1c:32:6b:94:e7:7a: 74:9d:d7:16:62:3b:00:d2:ba:35:19:7e:a9:a7:88: 4c:bd:f5:36:19:01:4d:be:8d:97:ed:56:c2:4f:4a: 42:ee:3f:4f:b5:d7:2b:91:9b:18:29:20:65:9c:7d: 64:74:3d:9a:3b:09:ea:ac:9d:1b:18:bd:9e:b1:d3: d4:22:16:4f:21:83:d2:3f:2e:77:82:b9:da:0d:32: 57:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E1:5E:F5:72:86:1C:EE:B6:03:CB:73:9E:C4:08:64:8E:22:DB:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/22b2c353-054d-3452-921d-8e3bcce0ab92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.crl X509v3 Authority Key Identifier: keyid:D1:83:CB:75:C4:8F:DD:CA:6A:BE:96:34:2E:C7:6C:51:0E:37:FE:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer sbgp-ipAddrBlock: critical IPv4: 204.12.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:fd:c1:8b:7a:e7:22:24:bb:19:0f:fc:44:1f:db:7a:f0:61: 00:f6:69:11:31:d2:96:02:a1:4e:a2:8f:cf:da:a3:57:dc:8c: d0:b7:18:46:67:e0:6c:b7:55:61:b0:1c:2d:77:ce:1a:21:52: ea:af:31:29:a9:81:0e:1c:88:86:a6:53:79:28:75:62:e6:97: ab:5e:6f:8e:bf:72:41:d7:b8:c0:79:02:4e:62:d0:3f:75:ee: 7b:f8:b2:1b:9c:5b:e8:b4:f1:77:2b:bb:06:93:45:f7:c3:fb: b4:bc:7e:ec:24:1c:a1:60:62:ff:d8:64:5f:1d:39:17:bf:60: c5:8a:f0:ca:46:99:0c:bd:96:0d:f3:30:82:a1:4f:51:90:38: 64:75:0b:5d:7c:9a:36:63:5f:9a:06:50:6b:c3:51:47:01:0e: 4b:8e:bb:f0:70:7d:b5:9c:b4:80:e9:8a:5f:71:1f:e7:06:0d: 64:e8:3e:47:32:4e:5b:55:f8:b7:20:60:21:62:5c:48:e8:c3: 19:93:19:d5:51:70:d5:26:3f:8f:bf:04:bd:79:2c:d4:6e:5d: 2d:bf:2a:61:50:0f:4f:35:f0:dd:d0:0e:7a:9e:6e:67:cd:d7: 40:1a:c2:2a:65:9b:74:76:77:d3:f0:ce:9f:09:ee:3f:e1:9a: 5f:37:e5:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcRBS+zckxpsx16AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY2ZjAxYjgtMTNhZC00Yzc5LWFhNzItNjVjZjBkZWRk ODk5MB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk N2ZiYzRhMzMtZjFkMy00Y2YzLTlhNjctZmZkZWZlMWQ5MDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz75QVMx4TOqgUMuxrPM0BjiUHCT8Rwu8FPQc 0YJNLAaPPLIL3/eS/39FpOXy3sO3BANK6xcI/qwaDAGxDQ03Jk0YeQkJAU35ltU0 yyyNsD3slAApij/AuU3VL0ncKM7aFcnWC80XZQ7PjNC6bNgJmafUEEZe1RBS6QZr vpmF79m8D8IjQJC2FxyPNZTQIRQKu+lqsbjaFfjhImvLm4n7WtmC4HTu9blZaKVZ E3gcMmuU53p0ndcWYjsA0ro1GX6pp4hMvfU2GQFNvo2X7VbCT0pC7j9PtdcrkZsY KSBlnH1kdD2aOwnqrJ0bGL2esdPUIhZPIYPSPy53grnaDTJXEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLhXvVyhhzutgPLc57ECGSOItuTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ZjZm MDFiOC0xM2FkLTRjNzktYWE3Mi02NWNmMGRlZGQ4OTkvMjJiMmMzNTMtMDU0ZC0z NDUyLTkyMWQtOGUzYmNjZTBhYjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGY2ZjAxYjgtMTNhZC00Yzc5LWFh NzItNjVjZjBkZWRkODk5LzhmNmYwMWI4LTEzYWQtNGM3OS1hYTcyLTY1Y2YwZGVk ZDg5OS5jcmwwHwYDVR0jBBgwFoAU0YPLdcSP3cpqvpY0LsdsUQ43/gMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ZjZmMDFiOC0xM2FkLTRjNzktYWE3Mi02NWNm MGRlZGQ4OTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzAymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn9wYt65yIkuxkP/EQf23rwYQD2aREx0pYCoU6ij8/ao1fcjNC3GEZn 4Gy3VWGwHC13zhohUuqvMSmpgQ4ciIamU3kodWLml6teb46/ckHXuMB5Ak5i0D91 7nv4shucW+i08XcruwaTRffD+7S8fuwkHKFgYv/YZF8dORe/YMWK8MpGmQy9lg3z MIKhT1GQOGR1C118mjZjX5oGUGvDUUcBDkuOu/BwfbWctIDpil9xH+cGDWToPkcy TltV+LcgYCFiXEjowxmTGdVRcNUmP4+/BL15LNRuXS2/KmFQD0818N3QDnqebmfN 10Aawiplm3R2d9Pwzp8J7j/hml835fM= -----END CERTIFICATE-----Generated at Thu Aug 21 03:57:18 2025 by rpki-client