$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2d8ee973-4f04-3f39-80ec-35239969bcee.roa File: 2d8ee973-4f04-3f39-80ec-35239969bcee.roa (raw, json) Hash identifier: YifHByHtXHwx9K2FfGGXS4eHbq97VJiSts+LdYl5pzA= Subject key identifier: E6:E5:4C:BE:75:74:D4:1D:25:D2:A0:AC:B4:08:5D:8C:2C:0D:EC:D8 Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584A8BF475E75620FEBFEC7F9F00 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2d8ee973-4f04-3f39-80ec-35239969bcee.roa Signing time: Thu 17 Jul 2025 08:50:41 +0000 ROA not before: Thu 17 Jul 2025 08:50:41 +0000 ROA not after: Wed 15 Oct 2025 08:50:41 +0000 asID: 11892 IP address blocks: 168.146.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:f4:75:e7:56:20:fe:bf:ec:7f:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Jul 17 08:50:41 2025 GMT Not After : Oct 15 08:50:41 2025 GMT Subject: CN=20c8702c-c0be-4c55-8d6d-157e269b259d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:7f:3c:0a:32:c8:e4:85:f7:9b:07:8a:40: 0b:91:ef:7c:d1:0a:9b:6a:7e:92:4e:0b:b5:7d:60: 50:37:22:e0:6e:3a:f3:24:da:b5:c2:90:ee:f1:de: b7:28:e7:a1:92:90:4d:dd:f1:16:15:2d:15:b4:2e: d8:7e:3c:fb:c3:c9:72:72:66:01:74:8a:7b:f2:82: 86:72:d6:20:0f:4e:89:18:bf:9d:47:68:c6:34:44: 21:98:98:31:6c:7b:fc:ef:61:38:50:67:f4:0b:9b: 6a:be:11:13:98:d4:43:65:fe:df:ca:5a:e7:da:67: df:a2:a4:ca:34:c8:ba:1c:9f:3b:55:7e:17:29:81: 41:68:b6:ef:20:a1:61:9e:62:47:a4:09:8b:67:c6: ed:b1:ab:0a:47:68:50:b1:e1:7c:9a:ac:81:4b:fd: b4:a6:ac:d2:11:10:d8:61:72:6a:71:2e:cb:91:a4: 43:eb:b7:69:7c:7a:5b:96:84:a8:7f:c8:7f:52:f9: a0:de:be:61:59:3b:9e:bf:78:c7:02:ad:97:2d:22: 4e:63:0d:63:0d:2d:25:b6:4c:90:36:c5:21:10:65: 3e:da:5c:f3:15:61:0f:27:83:06:19:3d:11:11:64: 29:0a:2a:f4:23:db:a9:ab:55:62:58:f3:85:ad:21: 7e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E5:4C:BE:75:74:D4:1D:25:D2:A0:AC:B4:08:5D:8C:2C:0D:EC:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2d8ee973-4f04-3f39-80ec-35239969bcee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 168.146.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:40:43:0d:5f:9d:00:f1:86:6f:a4:b4:35:b9:5b:91:23:e6: ad:d2:5e:bc:23:82:45:bb:0a:c1:64:a3:56:a4:45:cb:71:d9: c5:f0:90:28:b8:73:08:39:94:2f:79:c7:13:8e:b0:94:16:5f: d7:3e:be:03:7e:76:ce:c0:1b:e7:c5:36:74:e0:e9:25:fe:66: 9b:79:b7:c9:eb:22:98:9d:83:7d:75:60:9d:54:1e:52:68:43: 93:51:95:c1:df:b9:00:e6:37:f4:cd:85:1c:51:66:bc:56:15: 8f:b4:14:4e:41:56:74:4a:23:cb:da:97:5e:8e:88:54:11:13: 95:3e:a1:9e:d9:0c:a4:55:79:b3:de:40:9f:13:c0:02:ae:6f: c2:e8:67:09:8b:a3:65:6a:48:f7:93:ed:a3:2e:56:3a:22:33: 63:df:00:d7:df:a2:e7:24:10:01:2a:b9:96:6f:7d:41:58:40: 92:05:26:73:44:75:35:fe:a9:6d:96:b5:b2:ab:b5:4b:fa:bb: 68:e6:a1:4b:09:e7:76:16:63:be:e9:43:42:84:30:38:32:e3: fc:3e:2a:c3:2f:a9:a9:b2:e7:b1:00:ba:d0:65:68:fb:db:3e: 81:76:4c:ac:39:b3:d3:00:33:43:ac:b0:74:a6:35:95:a1:77: e5:9c:84:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqL9HXnViD+v+x/nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI1MDcxNzA4NTA0MVoXDTI1MTAxNTA4NTA0MVowLzEtMCsGA1UEAxMk MjBjODcwMmMtYzBiZS00YzU1LThkNmQtMTU3ZTI2OWIyNTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKZ/PAoyyOSF95sHikALke980Qqban6STgu1 fWBQNyLgbjrzJNq1wpDu8d63KOehkpBN3fEWFS0VtC7Yfjz7w8lycmYBdIp78oKG ctYgD06JGL+dR2jGNEQhmJgxbHv872E4UGf0C5tqvhETmNRDZf7fylrn2mffoqTK NMi6HJ87VX4XKYFBaLbvIKFhnmJHpAmLZ8btsasKR2hQseF8mqyBS/20pqzSERDY YXJqcS7LkaRD67dpfHpbloSof8h/Uvmg3r5hWTuev3jHAq2XLSJOYw1jDS0ltkyQ NsUhEGU+2lzzFWEPJ4MGGT0REWQpCir0I9upq1ViWPOFrSF+NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOblTL51dNQdJdKgrLQIXYwsDezYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvMmQ4ZWU5NzMtNGYwNC0z ZjM5LTgwZWMtMzUyMzk5NjliY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqJJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlAQw1fnQDxhm+ktDW5W5Ej5q3SXrwjgkW7CsFko1akRctx2cXwkCi4 cwg5lC95xxOOsJQWX9c+vgN+ds7AG+fFNnTg6SX+Zpt5t8nrIpidg311YJ1UHlJo Q5NRlcHfuQDmN/TNhRxRZrxWFY+0FE5BVnRKI8val16OiFQRE5U+oZ7ZDKRVebPe QJ8TwAKub8LoZwmLo2VqSPeT7aMuVjoiM2PfANffouckEAEquZZvfUFYQJIFJnNE dTX+qW2WtbKrtUv6u2jmoUsJ53YWY77pQ0KEMDgy4/w+KsMvqamy57EAutBlaPvb PoF2TKw5s9MAM0OssHSmNZWhd+WchAo= -----END CERTIFICATE-----Generated at Tue Aug 5 17:12:30 2025 by rpki-client