$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa File: 4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa (raw, json) Hash identifier: qwSUV/9ALjdQikOS1lYR3UmvVCksDdeKB0H4Th/idUo= Subject key identifier: C1:6D:E1:70:C2:60:CE:88:98:2A:13:BB:47:70:79:38:71:79:90:0E Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584AC2E10ED2F3D8D918E8E1F280 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 13781 IP address blocks: 8.8.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:0e:d2:f3:d8:d9:18:e8:e1:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=87f9ac3e-b491-4f71-b7ac-03718e262798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a5:c1:01:5a:f6:76:49:25:8b:b8:6e:fd:b7: 10:42:b6:2b:cd:d5:14:b9:82:e2:e6:0c:75:6a:6e: 80:13:cb:df:5f:71:e1:34:43:79:a1:5d:98:f3:0c: af:59:62:ff:39:a8:4b:f4:29:47:97:cf:27:cc:30: 21:68:01:39:9b:45:89:a7:8f:ca:05:83:42:67:19: fe:e0:77:5e:8b:ab:47:5f:2f:b8:43:27:97:e8:35: 25:69:fa:e1:a5:92:76:5b:83:81:2e:45:00:3f:a0: d7:52:da:de:86:a9:77:7d:f6:4a:b7:11:0a:69:4b: 09:55:55:fc:6a:5e:4b:38:51:2d:67:8e:1b:d1:0e: 67:af:24:5e:f9:5e:ca:00:5a:1d:17:e7:e6:70:97: 71:3e:fc:84:24:54:55:62:76:80:6c:7b:92:a1:cd: 31:7a:8f:d1:d9:5e:60:0c:9d:19:fa:61:99:e0:6c: 24:63:98:17:92:69:3c:40:0e:b7:36:b9:8a:67:43: 84:1f:e5:67:3c:03:89:7d:78:d2:0b:2f:da:5b:a6: 49:86:b3:83:0a:2b:18:71:34:22:66:2a:3d:76:55: 41:d2:82:28:62:17:ed:51:2b:f8:bd:22:89:72:0b: c6:70:34:29:8d:eb:15:79:5f:44:fa:63:97:8f:c5: 1b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6D:E1:70:C2:60:CE:88:98:2A:13:BB:47:70:79:38:71:79:90:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.8.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:66:24:82:29:62:a1:3b:e5:49:a2:eb:90:7b:f6:23:63:06: 80:b7:67:dd:52:ad:29:47:af:37:03:36:89:0a:d1:e6:91:47: 3d:4a:e5:e4:d5:87:b7:06:3a:5e:a5:b3:b1:e9:ef:96:e4:dd: 97:f5:c0:b5:00:fa:10:3d:30:4d:0a:6c:2c:bb:46:b0:64:b7: df:86:1c:65:5c:86:ba:86:af:ad:b1:60:ae:2d:d2:14:36:69: c6:41:38:fe:60:43:c7:20:24:0a:25:af:51:31:17:d2:80:00: 88:9d:d4:21:8f:6f:45:7d:64:f8:db:72:66:47:ae:96:39:21: 5b:e5:56:ae:91:4d:33:f3:49:bc:3e:52:7d:9c:05:a0:e9:8a: 80:92:1b:19:58:12:ba:68:9a:a3:1c:88:cf:74:26:89:23:88: 5c:a9:e7:d5:9d:0b:25:a9:15:a8:02:a3:49:79:7d:6c:74:4d: e9:3d:52:48:71:e2:64:bf:7f:f2:6d:5a:3c:e3:69:3f:3d:50: 35:6e:99:a0:8a:51:11:ed:05:24:7c:fe:bf:d7:34:af:e4:cd: 5b:e8:93:9b:26:00:1c:3d:7e:1a:20:72:30:75:5c:d9:05:bf: 50:5d:0b:b0:4a:cf:86:23:b5:12:28:4e:88:29:22:e5:f4:51: 40:62:83:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Q7S89jZGOjh8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ODdmOWFjM2UtYjQ5MS00ZjcxLWI3YWMtMDM3MThlMjYyNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaXBAVr2dkkli7hu/bcQQrYrzdUUuYLi5gx1 am6AE8vfX3HhNEN5oV2Y8wyvWWL/OahL9ClHl88nzDAhaAE5m0WJp4/KBYNCZxn+ 4Hdei6tHXy+4QyeX6DUlafrhpZJ2W4OBLkUAP6DXUtrehql3ffZKtxEKaUsJVVX8 al5LOFEtZ44b0Q5nryRe+V7KAFodF+fmcJdxPvyEJFRVYnaAbHuSoc0xeo/R2V5g DJ0Z+mGZ4GwkY5gXkmk8QA63NrmKZ0OEH+VnPAOJfXjSCy/aW6ZJhrODCisYcTQi Zio9dlVB0oIoYhftUSv4vSKJcgvGcDQpjesVeV9E+mOXj8UbcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFt4XDCYM6ImCoTu0dweThxeZAOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDAwMGVlM2MtNDZlNS0z NDg3LWFhNjUtYTNiZDNkZTk2NWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCCAjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALtmJIIpYqE75Umi65B79iNjBoC3Z91SrSlHrzcDNokK0eaRRz1K5eTV h7cGOl6ls7Hp75bk3Zf1wLUA+hA9ME0KbCy7RrBkt9+GHGVchrqGr62xYK4t0hQ2 acZBOP5gQ8cgJAolr1ExF9KAAIid1CGPb0V9ZPjbcmZHrpY5IVvlVq6RTTPzSbw+ Un2cBaDpioCSGxlYErpomqMciM90JokjiFyp59WdCyWpFagCo0l5fWx0Tek9Ukhx 4mS/f/JtWjzjaT89UDVumaCKURHtBSR8/r/XNK/kzVvok5smABw9fhogcjB1XNkF v1BdC7BKz4YjtRIoTogpIuX0UUBig9E= -----END CERTIFICATE-----Generated at Thu Aug 7 04:23:46 2025 by rpki-client