$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa File: 3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa (raw, json) Hash identifier: 2aCUO4/IaXeIsglSf6QsxPa98jM/AiV1IBQqPu5HE0Q= Subject key identifier: A8:C1:95:AE:FB:DA:E9:42:53:6F:0B:30:BE:0C:B7:44:74:6D:EA:BD Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584AC2E10EC453E79778587A6EC0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 13781 IP address blocks: 8.8.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:0e:c4:53:e7:97:78:58:7a:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=d4eafe02-9c9e-4f1f-8e51-7eb6f415f89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:21:29:57:ac:77:5d:de:7e:db:61:e5:bf:00: 3b:33:25:be:08:76:c6:e9:b7:3d:f0:fe:68:80:95: 4e:0b:82:41:4a:4e:c8:a9:a2:cb:cc:68:36:f1:4f: 50:12:a0:b4:c5:da:3d:74:20:30:81:b8:f9:40:55: 23:5c:c8:5e:14:be:83:21:88:03:6d:e5:e5:a1:ce: f1:04:0d:27:a0:9c:b3:60:36:da:0f:60:fe:21:7f: ee:98:a1:58:49:71:d2:90:5a:56:bb:59:44:40:52: 6e:22:60:0e:0a:06:97:b8:c5:62:70:c1:58:63:2e: 26:a4:88:19:60:84:30:22:49:60:ad:54:87:30:5f: 6d:f1:0c:64:84:50:06:2f:38:a3:53:21:0a:90:f5: 4b:d3:fc:7c:36:16:bd:a3:b1:bb:cc:e9:73:75:ab: 8b:3f:8d:12:0f:b1:95:a5:eb:f2:c3:ad:52:7d:4d: 09:4e:8e:4e:e5:4c:04:b9:ae:6c:67:ba:e9:d8:80: ae:86:1d:b9:5a:08:0e:42:ca:56:6c:5d:cf:bd:7f: 59:bc:98:8b:14:77:5e:41:59:da:73:20:c2:8f:bf: 58:89:77:83:95:60:09:11:92:a9:f0:4e:b1:52:ae: c1:18:ce:6e:6e:d2:87:d5:fc:44:08:3a:39:46:9e: 01:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C1:95:AE:FB:DA:E9:42:53:6F:0B:30:BE:0C:B7:44:74:6D:EA:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.8.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:08:85:2f:51:70:63:38:da:96:e5:a7:2e:ed:69:2f:e2:ba: 7e:fb:26:32:ce:7f:aa:0a:b0:f1:2b:86:38:81:a4:45:ac:08: e9:5b:25:ce:4f:19:b4:92:4b:b4:6c:72:6e:a7:c7:56:15:09: 2f:b4:3d:4d:e8:6f:ff:0b:aa:7b:bb:7c:5f:08:e1:c2:a8:8e: b1:d1:33:70:41:18:23:42:76:67:5e:33:32:c0:fc:0a:6b:b7: 4a:67:f5:1e:a6:14:07:45:e8:76:7e:7d:fa:2b:68:5b:33:fc: e3:06:c1:8d:55:d7:60:37:9f:ca:62:af:79:74:96:94:51:fc: c3:ba:5c:47:56:37:c4:89:15:d7:0a:f4:99:a8:ce:a3:f0:3b: c2:a6:ad:2e:cc:e1:1d:25:cb:76:cc:7e:88:08:19:70:b7:c1: 51:3d:95:26:39:21:bf:26:a5:df:09:b8:cb:a1:3a:95:a3:07: ca:92:6b:f4:97:30:aa:83:3e:36:15:3d:5a:d1:ea:be:5d:3f: 7d:16:69:4d:99:b5:ce:2c:0b:e9:74:4a:3e:5f:cf:07:d1:74: ba:5f:af:84:11:1e:f9:43:3a:87:82:c6:8e:f3:25:33:d0:8a: 4c:51:e1:86:76:66:7c:23:a0:ec:e8:b5:4f:da:c9:d6:e4:a3: 69:5f:7e:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Q7EU+eXeFh6bsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDRlYWZlMDItOWM5ZS00ZjFmLThlNTEtN2ViNmY0MTVmODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCEpV6x3Xd5+22HlvwA7MyW+CHbG6bc98P5o gJVOC4JBSk7IqaLLzGg28U9QEqC0xdo9dCAwgbj5QFUjXMheFL6DIYgDbeXloc7x BA0noJyzYDbaD2D+IX/umKFYSXHSkFpWu1lEQFJuImAOCgaXuMVicMFYYy4mpIgZ YIQwIklgrVSHMF9t8QxkhFAGLzijUyEKkPVL0/x8Nha9o7G7zOlzdauLP40SD7GV pevyw61SfU0JTo5O5UwEua5sZ7rp2ICuhh25WggOQspWbF3PvX9ZvJiLFHdeQVna cyDCj79YiXeDlWAJEZKp8E6xUq7BGM5ubtKH1fxECDo5Rp4B+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjBla772ulCU28LML4Mt0R0beq9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzM5M2RmNzEtYmQ0Yi0z YzBmLTkyODAtYzE3ZjFmMmZkODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCCAjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcIhS9RcGM42pblpy7taS/iun77JjLOf6oKsPErhjiBpEWsCOlbJc5P GbSSS7Rscm6nx1YVCS+0PU3ob/8Lqnu7fF8I4cKojrHRM3BBGCNCdmdeMzLA/Apr t0pn9R6mFAdF6HZ+fforaFsz/OMGwY1V12A3n8pir3l0lpRR/MO6XEdWN8SJFdcK 9JmozqPwO8KmrS7M4R0ly3bMfogIGXC3wVE9lSY5Ib8mpd8JuMuhOpWjB8qSa/SX MKqDPjYVPVrR6r5dP30WaU2Ztc4sC+l0Sj5fzwfRdLpfr4QRHvlDOoeCxo7zJTPQ ikxR4YZ2ZnwjoOzotU/aydbko2lffk8= -----END CERTIFICATE-----Generated at Thu Aug 7 04:27:00 2025 by rpki-client