$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa File: 34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa (raw, json) Hash identifier: VI9UmGG0yTluzUVrLmasDZxMVJUSuct7x3WCxZ4IQgU= Subject key identifier: AF:B0:C7:25:EA:D1:AC:BB:D6:F4:49:81:2B:B0:3A:2C:44:64:6A:71 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584AC0162681DB27FC173EBF762C Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 21766 IP address blocks: 69.8.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:26:81:db:27:fc:17:3e:bf:76:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=8be3e5ee-a745-4875-8dea-1257bcf783c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:63:60:4c:88:54:f1:a3:77:cd:a4:6d:fa:e5: 40:75:62:e5:c6:f2:37:9b:b5:64:69:30:10:2c:f7: 9d:e3:44:9e:ba:4d:5d:e1:5f:7a:27:a0:60:43:14: 9f:8e:1c:42:f3:e8:e2:08:42:ec:ea:c5:eb:3b:eb: e5:e7:eb:98:81:79:4d:6e:d4:f4:70:2e:3f:d8:6d: 5f:8b:48:35:a4:6b:3a:9e:e3:da:16:58:6d:16:53: 02:38:03:3e:1c:e7:07:a5:15:58:a8:00:51:77:c8: 80:e2:ef:5e:fe:ca:4c:35:69:50:b0:55:91:ab:09: 8a:8c:ea:dc:17:bf:58:0a:0b:1b:8d:d5:a5:52:ef: ff:af:af:4a:69:1c:fc:25:c1:40:89:18:b3:d8:c4: 59:ea:73:68:77:1a:50:32:83:24:d1:f5:89:9e:79: 99:1c:18:da:b5:5d:d1:53:7b:b5:0e:db:b5:e0:a0: bb:8e:8a:f2:a5:d4:d0:f8:51:bb:9e:06:e9:0a:df: bb:bd:ad:78:19:c0:eb:5d:80:dc:1e:e3:b5:3b:da: 68:ed:19:b7:b0:13:72:65:ce:ea:36:6a:1b:3b:00: f8:a9:45:d9:0f:5d:68:fe:e8:61:9f:eb:77:3d:a2: d7:cb:e3:fe:b6:7c:72:73:6c:68:82:d5:a5:79:76: 9e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B0:C7:25:EA:D1:AC:BB:D6:F4:49:81:2B:B0:3A:2C:44:64:6A:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 69.8.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:79:60:fc:7a:35:bd:78:77:94:d3:dd:2f:45:df:5b:f4:2d: f2:ed:93:65:db:88:db:c8:a3:6f:b6:e8:5f:93:bf:46:e9:5e: f6:34:3d:46:73:19:b0:63:c8:11:e2:24:5d:12:05:5e:d4:ce: f0:79:e3:57:32:76:02:1b:6b:04:5e:10:c9:56:cd:21:15:4b: 81:88:52:e8:49:3f:7a:9b:ec:d7:a0:46:d7:48:b9:9f:42:1c: 4b:9d:94:01:f8:90:b5:75:49:71:17:d3:71:5b:5e:90:8d:8f: 04:fa:94:f7:ed:cf:6e:9e:10:e3:b2:ba:9d:52:7c:32:9a:67: 2e:a0:99:86:e5:af:1d:43:9a:79:71:6e:e7:ee:39:1e:81:28: b2:32:aa:23:56:f3:9e:f0:13:3d:7b:73:1c:a5:82:a7:c0:3d: 24:4d:26:9b:e6:4b:77:47:fb:95:06:d2:89:57:be:75:f7:69: 24:f9:96:f9:76:f3:82:1b:62:76:5d:9d:32:e2:5a:fe:87:25: 2e:b4:fb:de:1b:58:1c:c6:a2:80:99:b8:e5:73:98:a9:de:16: c0:90:5f:ad:2d:f2:47:91:b7:ad:ea:e9:da:73:6c:f2:e7:9f: 01:f6:b2:66:63:59:46:c9:70:d8:6b:69:2d:6f:37:29:5d:cf: 53:e6:86:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFiaB2yf8Fz6/diwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk OGJlM2U1ZWUtYTc0NS00ODc1LThkZWEtMTI1N2JjZjc4M2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWNgTIhU8aN3zaRt+uVAdWLlxvI3m7VkaTAQ LPed40Seuk1d4V96J6BgQxSfjhxC8+jiCELs6sXrO+vl5+uYgXlNbtT0cC4/2G1f i0g1pGs6nuPaFlhtFlMCOAM+HOcHpRVYqABRd8iA4u9e/spMNWlQsFWRqwmKjOrc F79YCgsbjdWlUu//r69KaRz8JcFAiRiz2MRZ6nNodxpQMoMk0fWJnnmZHBjatV3R U3u1Dtu14KC7jorypdTQ+FG7ngbpCt+7va14GcDrXYDcHuO1O9po7Rm3sBNyZc7q NmobOwD4qUXZD11o/uhhn+t3PaLXy+P+tnxyc2xogtWleXaeIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+wxyXq0ay71vRJgSuwOixEZGpxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvMzRiNzQ0MGYtZmE5ZC0z ZjQwLTljODctZjRlNzQ4NGM1Mjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERQigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH95YPx6Nb14d5TT3S9F31v0LfLtk2XbiNvIo2+26F+Tv0bpXvY0PUZz GbBjyBHiJF0SBV7UzvB541cydgIbawReEMlWzSEVS4GIUuhJP3qb7NegRtdIuZ9C HEudlAH4kLV1SXEX03FbXpCNjwT6lPftz26eEOOyup1SfDKaZy6gmYblrx1Dmnlx bufuOR6BKLIyqiNW857wEz17cxylgqfAPSRNJpvmS3dH+5UG0olXvnX3aST5lvl2 84IbYnZdnTLiWv6HJS60+94bWBzGooCZuOVzmKneFsCQX60t8keRt63q6dpzbPLn nwH2smZjWUbJcNhraS1vNyldz1PmhkM= -----END CERTIFICATE-----Generated at Wed Aug 20 18:41:27 2025 by rpki-client