$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a3c913bd-38a7-3113-91a3-43cfa8207222.roa File: a3c913bd-38a7-3113-91a3-43cfa8207222.roa (raw, json) Hash identifier: IEyMp5odCa458tS1VMvXXzdy7tYp7scJNycvoAvJ600= Subject key identifier: E8:D4:07:DF:5F:15:36:8D:FB:75:D7:B9:0F:A7:43:99:A4:DD:67:EE Certificate issuer: /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6 Certificate serial: 010D0C9F4328584AA160CFDB861C09D7EDD18660 Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a3c913bd-38a7-3113-91a3-43cfa8207222.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 33717 IP address blocks: 208.70.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:cf:db:86:1c:09:d7:ed:d1:86:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=b57a47f0-94e5-448a-9224-7da663173fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:76:42:6c:e6:b3:29:ec:91:f3:9d:c1:f5:de: 93:10:2a:3f:b1:48:96:81:b1:33:33:52:b4:67:c5: d4:4a:44:41:ec:6c:b0:0b:da:aa:f8:31:45:c4:4d: 70:38:a5:d7:2f:47:dc:d8:57:7a:5b:d7:e5:5c:06: f9:0c:88:2f:d2:41:2e:4e:69:62:eb:2d:24:77:ea: d0:ad:66:0a:72:ec:6d:67:a3:b6:85:1d:ec:d6:91: 1f:49:73:85:85:01:04:37:5b:cc:b2:a1:d4:3f:cf: 30:99:96:16:a8:41:53:c0:2a:35:ef:86:c4:f4:55: aa:2c:13:82:c4:1c:27:3e:f2:c1:6d:04:aa:93:36: f5:3b:89:85:b5:45:1c:13:e2:fa:e3:ed:d8:27:d6: 15:d5:a3:0d:01:e8:d6:42:a1:46:71:89:b8:d7:dc: a1:1f:c8:f6:b1:bf:02:bd:6b:32:6c:13:e3:cc:ed: 36:d6:dc:2f:c2:72:ba:9b:6a:27:f7:15:bd:de:be: 79:85:87:bb:49:a4:f5:21:d0:a6:9a:2a:2f:04:09: 89:14:4a:8a:1b:69:4c:67:1b:ce:dd:40:4c:a9:cd: 50:8f:70:d3:54:77:e9:a2:38:81:f0:5b:7b:ba:62: 48:85:ec:01:a0:65:10:af:e3:15:94:cc:6e:24:30: 23:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D4:07:DF:5F:15:36:8D:FB:75:D7:B9:0F:A7:43:99:A4:DD:67:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a3c913bd-38a7-3113-91a3-43cfa8207222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl X509v3 Authority Key Identifier: keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer sbgp-ipAddrBlock: critical IPv4: 208.70.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:f3:d1:ab:c3:24:1d:23:46:0c:9f:2f:82:c3:92:0e:72:f5: 77:34:14:98:44:75:de:37:e5:a3:ed:d5:77:bf:1b:2d:61:a9: c6:2a:c6:25:7a:3a:05:30:77:c4:6b:ed:c7:98:43:f8:c0:0e: e1:4f:77:24:50:50:9f:94:16:80:54:1b:77:44:d8:8b:5f:48: d7:d2:12:34:82:c3:90:8b:48:dd:90:a9:b9:5f:c2:9b:05:3d: da:54:45:97:30:34:ec:cb:6b:39:79:ab:2a:f0:bb:1b:ac:58: c0:e0:ff:d6:25:b9:cf:99:4d:ca:20:26:57:0c:7f:ac:e4:52: 05:80:ab:66:5a:2c:4e:36:c4:28:da:33:a6:a6:28:9e:ac:e8: 8b:07:d0:e8:0e:98:d7:1f:7a:e7:92:2d:1f:67:d7:b9:19:bc: 60:d7:70:34:b1:d6:1a:b4:26:19:f5:9f:0f:e6:9a:97:1f:db: e5:2a:d1:01:cc:d4:65:a2:d0:7a:e1:a7:2c:ce:7a:d8:1c:eb: 5b:9f:dd:18:18:88:44:08:78:bb:25:ca:f1:04:b8:e3:ea:af: 17:17:fb:ef:f0:3e:57:8f:a5:96:7d:e0:53:bd:80:e1:bf:ea: 26:af:4d:c5:cd:9f:a4:9e:1f:7c:52:ec:dd:63:71:0e:52:6e: 23:2e:0e:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYM/bhhwJ1+3RhmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzdjNGM2MmEtM2Y2ZC00YzFjLThiZGItMzcwNjI0NmNi ZmQ2MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk YjU3YTQ3ZjAtOTRlNS00NDhhLTkyMjQtN2RhNjYzMTczZmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3ZCbOazKeyR853B9d6TECo/sUiWgbEzM1K0 Z8XUSkRB7GywC9qq+DFFxE1wOKXXL0fc2Fd6W9flXAb5DIgv0kEuTmli6y0kd+rQ rWYKcuxtZ6O2hR3s1pEfSXOFhQEEN1vMsqHUP88wmZYWqEFTwCo174bE9FWqLBOC xBwnPvLBbQSqkzb1O4mFtUUcE+L64+3YJ9YV1aMNAejWQqFGcYm419yhH8j2sb8C vWsybBPjzO021twvwnK6m2on9xW93r55hYe7SaT1IdCmmiovBAmJFEqKG2lMZxvO 3UBMqc1Qj3DTVHfpojiB8Ft7umJIhewBoGUQr+MVlMxuJDAjSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjUB99fFTaN+3XXuQ+nQ5mk3WfuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0 YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2MjQ2Y2JmZDYvYTNjOTEzYmQtMzhhNy0z MTEzLTkxYTMtNDNjZmE4MjA3MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzdjNGM2MmEtM2Y2ZC00YzFjLThi ZGItMzcwNjI0NmNiZmQ2Lzc3YzRjNjJhLTNmNmQtNGMxYy04YmRiLTM3MDYyNDZj YmZkNi5jcmwwHwYDVR0jBBgwFoAU4p3oDYbgi/0iz/5leJQg8L1y3xMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2 MjQ2Y2JmZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/z0avDJB0jRgyfL4LDkg5y9Xc0FJhEdd435aPt1Xe/Gy1hqcYqxiV6 OgUwd8Rr7ceYQ/jADuFPdyRQUJ+UFoBUG3dE2ItfSNfSEjSCw5CLSN2QqblfwpsF PdpURZcwNOzLazl5qyrwuxusWMDg/9Yluc+ZTcogJlcMf6zkUgWAq2ZaLE42xCja M6amKJ6s6IsH0OgOmNcfeueSLR9n17kZvGDXcDSx1hq0Jhn1nw/mmpcf2+Uq0QHM 1GWi0HrhpyzOetgc61uf3RgYiEQIeLslyvEEuOPqrxcX++/wPlePpZZ94FO9gOG/ 6iavTcXNn6SeH3xS7N1jcQ5SbiMuDoE= -----END CERTIFICATE-----Generated at Mon Aug 4 15:30:55 2025 by rpki-client