$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/dd51c628-a0be-34a1-866d-ad0210fafe09.roa File: dd51c628-a0be-34a1-866d-ad0210fafe09.roa (raw, json) Hash identifier: HF8hAU1gwZpYox1uCqid00DvSzC3djiyKT7H+T/FDaY= Subject key identifier: 98:7A:23:CB:96:99:19:58:E0:B3:44:01:1F:E5:C0:FF:94:09:57:0C Certificate issuer: /CN=e04c037d-f06d-4c01-9af5-ef0b2ad3ede8 Certificate serial: 010D0C9F4328584B153C14E68C8E90A7A6DD1D00 Authority key identifier: 83:5B:F9:D0:F2:7D:65:2D:96:86:2F:E8:56:AA:BA:1D:9F:C5:60:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/dd51c628-a0be-34a1-866d-ad0210fafe09.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 30967 IP address blocks: 146.88.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:14:e6:8c:8e:90:a7:a6:dd:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e04c037d-f06d-4c01-9af5-ef0b2ad3ede8 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=f8eaed6e-9f90-4543-9ded-084fb1d79bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9e:4d:b3:f1:e7:72:ab:6b:8f:a0:ed:45:f9: a0:f5:e3:a0:ec:9f:f0:1c:44:a1:cd:dc:fd:4e:2c: 63:06:81:8b:9d:e5:ec:03:a8:6d:e0:09:f2:3c:7f: 40:42:7a:90:e8:15:c7:76:36:0f:51:41:66:bb:04: 54:04:cf:36:6c:78:d0:69:0f:84:06:8b:40:28:ef: 12:ec:aa:2b:7a:c9:21:78:81:9b:be:37:aa:0f:e9: a5:a3:25:56:8c:c2:b0:c4:c3:2e:13:ab:97:2a:dd: 6c:33:0f:bb:65:c1:fc:a4:1f:90:dc:29:40:79:ca: 4f:00:3f:2d:69:5a:40:86:00:b4:9c:3f:30:bf:fd: c2:d8:2d:36:b9:e0:aa:ab:55:95:36:dd:03:65:00: 97:fc:5a:8b:62:dd:f7:aa:2f:85:84:2e:43:a6:d5: 83:1a:55:e1:94:6d:e2:bb:00:9c:1e:e8:dd:57:66: c2:11:f9:de:08:9e:27:4d:1a:7d:bf:59:b6:86:93: c0:15:03:28:72:bf:3f:00:0c:97:7a:33:49:98:2f: c0:e8:d6:3e:b9:37:cc:2d:65:a1:3e:2c:b4:2f:d1: ec:76:40:41:46:17:8e:f5:c5:dd:43:83:e3:7d:41: 88:12:c3:9a:a0:3f:58:09:09:04:f5:33:1d:ba:51: bd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7A:23:CB:96:99:19:58:E0:B3:44:01:1F:E5:C0:FF:94:09:57:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/dd51c628-a0be-34a1-866d-ad0210fafe09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.crl X509v3 Authority Key Identifier: keyid:83:5B:F9:D0:F2:7D:65:2D:96:86:2F:E8:56:AA:BA:1D:9F:C5:60:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer sbgp-ipAddrBlock: critical IPv4: 146.88.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ac:3c:70:2b:8d:bf:00:83:52:61:e7:e0:4a:a3:63:c6:2a: 21:ef:4d:d4:18:71:23:be:17:88:54:23:65:f1:5a:14:51:02: 93:be:53:e0:86:fc:ec:d2:21:fd:df:5b:0f:9a:c3:91:0a:dd: e8:b4:07:72:92:9b:49:0d:11:a3:9e:b5:07:21:bf:1c:e1:a4: bb:ae:34:4d:ce:c5:70:e6:e4:fd:51:ea:f1:c6:3b:c5:60:79: 1d:d7:29:6d:cf:ca:f9:65:e9:e3:94:2e:bc:58:7a:0b:c4:fb: 74:8d:b1:25:88:e8:d2:a6:d9:18:33:e5:c1:73:14:fe:b4:b2: de:f5:a2:f5:64:88:db:79:18:70:21:6d:3a:b5:af:ed:41:84: ef:bc:6e:9f:3f:2d:eb:d5:f4:66:e3:85:77:2a:78:51:0f:94: 4b:64:0f:d1:58:20:3f:3b:6f:33:81:b1:1c:cd:99:9d:0e:08: 34:30:4a:f0:66:7c:59:64:d3:6a:cc:25:59:b1:ed:d7:25:ef: a8:ca:7c:52:7b:3a:fd:bf:52:61:bb:e5:8f:7b:ea:c9:60:1e: 4a:40:99:ff:6f:48:23:19:dc:74:74:b5:68:9d:70:a5:72:92: e0:c5:5d:a3:d4:85:fb:60:8b:02:ec:4a:21:3c:d3:24:b8:a2: fd:ac:a5:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBTmjI6Qp6bdHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA0YzAzN2QtZjA2ZC00YzAxLTlhZjUtZWYwYjJhZDNl ZGU4MB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk ZjhlYWVkNmUtOWY5MC00NTQzLTlkZWQtMDg0ZmIxZDc5YmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ5Ns/Hncqtrj6DtRfmg9eOg7J/wHEShzdz9 TixjBoGLneXsA6ht4AnyPH9AQnqQ6BXHdjYPUUFmuwRUBM82bHjQaQ+EBotAKO8S 7KoreskheIGbvjeqD+mloyVWjMKwxMMuE6uXKt1sMw+7ZcH8pB+Q3ClAecpPAD8t aVpAhgC0nD8wv/3C2C02ueCqq1WVNt0DZQCX/FqLYt33qi+FhC5DptWDGlXhlG3i uwCcHujdV2bCEfneCJ4nTRp9v1m2hpPAFQMocr8/AAyXejNJmC/A6NY+uTfMLWWh Piy0L9HsdkBBRheO9cXdQ4PjfUGIEsOaoD9YCQkE9TMdulG9TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJh6I8uWmRlY4LNEAR/lwP+UCVcMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lMDRj MDM3ZC1mMDZkLTRjMDEtOWFmNS1lZjBiMmFkM2VkZTgvZGQ1MWM2MjgtYTBiZS0z NGExLTg2NmQtYWQwMjEwZmFmZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTA0YzAzN2QtZjA2ZC00YzAxLTlh ZjUtZWYwYjJhZDNlZGU4L2UwNGMwMzdkLWYwNmQtNGMwMS05YWY1LWVmMGIyYWQz ZWRlOC5jcmwwHwYDVR0jBBgwFoAUg1v50PJ9ZS2Whi/oVqq6HZ/FYIMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lMDRjMDM3ZC1mMDZkLTRjMDEtOWFmNS1lZjBi MmFkM2VkZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkljQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOsPHArjb8Ag1Jh5+BKo2PGKiHvTdQYcSO+F4hUI2XxWhRRApO+U+CG /OzSIf3fWw+aw5EK3ei0B3KSm0kNEaOetQchvxzhpLuuNE3OxXDm5P1R6vHGO8Vg eR3XKW3Pyvll6eOULrxYegvE+3SNsSWI6NKm2Rgz5cFzFP60st71ovVkiNt5GHAh bTq1r+1BhO+8bp8/LevV9GbjhXcqeFEPlEtkD9FYID87bzOBsRzNmZ0OCDQwSvBm fFlk02rMJVmx7dcl76jKfFJ7Ov2/UmG75Y976slgHkpAmf9vSCMZ3HR0tWidcKVy kuDFXaPUhftgiwLsSiE80yS4ov2speI= -----END CERTIFICATE-----Generated at Tue Sep 9 04:02:48 2025 by rpki-client