$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa File: afec4958-f90c-324d-8365-1b0c02b836a3.roa (raw, json) Hash identifier: MCH7xdkZNXgS3piiX0B533X4Ft+xZW3ROw9qZUzGgSg= Subject key identifier: F4:72:93:39:10:6C:8B:86:89:84:E6:D1:D5:59:CA:45:A8:A6:99:3D Certificate issuer: /CN=8765e137-e0cd-4574-8e57-7cf87cfec9de Certificate serial: 010D0C9F4328584A7FE090A393EF59DEE2603090 Authority key identifier: 01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 14618 IP address blocks: 168.100.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:90:a3:93:ef:59:de:e2:60:30:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8765e137-e0cd-4574-8e57-7cf87cfec9de Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=144c8fca-dea4-4aa7-a791-749fbd23a3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:83:44:a5:82:9a:d4:2c:b2:be:2f:f9:49: b2:36:f0:22:75:29:e1:f9:46:e2:0b:ed:f7:97:25: eb:a9:b8:fa:31:91:45:71:3c:7b:c7:1f:fb:8f:78: f7:a8:ce:e7:3a:2f:d3:dd:f2:2f:84:dc:cd:c5:dc: 58:38:aa:b1:11:2e:3b:6f:4a:d6:86:72:20:1c:88: 92:80:99:c5:64:f6:6e:d6:e7:f9:55:23:87:46:0e: ec:13:0a:2e:c9:af:ca:5a:59:cd:f8:41:85:7d:0e: 02:79:db:64:f8:47:54:20:c5:67:23:7d:3f:c8:4c: c7:3a:9c:75:60:ff:c4:84:c9:fd:e4:a1:0b:c8:10: 85:f0:9e:6a:58:8c:ba:49:d9:97:82:f1:26:34:49: 9d:af:df:9a:3c:27:4d:90:85:8a:92:47:35:73:7f: 0c:c5:b8:53:46:64:79:08:72:50:87:da:ea:88:4b: 1f:d4:a3:0c:01:b5:8d:88:b7:48:69:53:fd:b1:14: 3a:c7:a5:54:af:db:e1:2a:89:e6:f1:a5:2e:62:c2: a3:a7:3d:8a:02:65:e9:73:19:e6:56:5d:39:c0:a4: 86:ee:b0:17:22:0c:c4:c4:07:c8:2f:f3:19:2d:1c: ce:aa:30:82:48:5a:5e:e5:1b:72:a0:4d:b9:15:7c: cf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:72:93:39:10:6C:8B:86:89:84:E6:D1:D5:59:CA:45:A8:A6:99:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl X509v3 Authority Key Identifier: keyid:01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer sbgp-ipAddrBlock: critical IPv4: 168.100.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:fa:6e:b7:73:4f:6d:4e:8e:cf:4d:08:cd:62:16:88:c1:34: 09:5d:f7:17:cf:4b:6c:f4:29:56:21:5a:47:4f:f3:01:ef:14: 59:05:42:ca:6a:6c:d0:f3:a9:dc:ad:ac:0a:4b:20:86:83:13: ef:06:c1:fd:bb:3b:ab:14:6c:1e:8a:73:34:5c:1c:71:1c:a0: 1d:3b:7e:f5:42:7d:78:1d:43:18:33:82:29:23:fa:c2:eb:98: 2d:b2:26:03:d8:a9:c7:3f:ab:76:62:55:7e:f7:c4:d2:b9:db: 1a:2e:41:df:4a:36:fd:c2:ea:dd:a3:c9:b4:93:e8:0d:26:b2: c7:4e:41:c2:0d:14:7f:18:70:b2:a7:34:79:5e:11:dc:03:9b: b3:95:a6:43:17:61:b9:d6:3a:9e:5f:10:ce:79:d6:cc:b0:81: fa:13:91:5d:c5:71:e5:4d:3c:5e:90:c7:63:92:03:e7:97:f3: 85:84:7b:cd:93:ad:32:d0:da:45:dd:0c:2d:38:71:86:2e:d8: 90:da:93:64:0a:27:80:1e:7c:70:ba:62:ef:59:5d:a7:ac:b9: a3:6a:ab:18:7b:a8:b6:40:00:65:70:eb:e7:12:cd:f8:c1:fd: ad:31:66:fd:01:8f:c3:cd:a6:29:7b:29:9b:23:8b:47:99:85: 26:d7:b4:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JCjk+9Z3uJgMJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc2NWUxMzctZTBjZC00NTc0LThlNTctN2NmODdjZmVj OWRlMB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk MTQ0YzhmY2EtZGVhNC00YWE3LWE3OTEtNzQ5ZmJkMjNhM2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto+DRKWCmtQssr4v+UmyNvAidSnh+UbiC+33 lyXrqbj6MZFFcTx7xx/7j3j3qM7nOi/T3fIvhNzNxdxYOKqxES47b0rWhnIgHIiS gJnFZPZu1uf5VSOHRg7sEwouya/KWlnN+EGFfQ4Cedtk+EdUIMVnI30/yEzHOpx1 YP/EhMn95KELyBCF8J5qWIy6SdmXgvEmNEmdr9+aPCdNkIWKkkc1c38MxbhTRmR5 CHJQh9rqiEsf1KMMAbWNiLdIaVP9sRQ6x6VUr9vhKonm8aUuYsKjpz2KAmXpcxnm Vl05wKSG7rAXIgzExAfIL/MZLRzOqjCCSFpe5RtyoE25FXzPmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRykzkQbIuGiYTm0dVZykWoppk9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NzY1 ZTEzNy1lMGNkLTQ1NzQtOGU1Ny03Y2Y4N2NmZWM5ZGUvYWZlYzQ5NTgtZjkwYy0z MjRkLTgzNjUtMWIwYzAyYjgzNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODc2NWUxMzctZTBjZC00NTc0LThl NTctN2NmODdjZmVjOWRlLzg3NjVlMTM3LWUwY2QtNDU3NC04ZTU3LTdjZjg3Y2Zl YzlkZS5jcmwwHwYDVR0jBBgwFoAUARLXI6RxkM4q4G4Zf5FshAvr6M8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NzY1ZTEzNy1lMGNkLTQ1NzQtOGU1Ny03Y2Y4 N2NmZWM5ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX6brdzT21Ojs9NCM1iFojBNAld9xfPS2z0KVYhWkdP8wHvFFkFQspq bNDzqdytrApLIIaDE+8Gwf27O6sUbB6KczRcHHEcoB07fvVCfXgdQxgzgikj+sLr mC2yJgPYqcc/q3ZiVX73xNK52xouQd9KNv3C6t2jybST6A0mssdOQcINFH8YcLKn NHleEdwDm7OVpkMXYbnWOp5fEM551sywgfoTkV3FceVNPF6Qx2OSA+eX84WEe82T rTLQ2kXdDC04cYYu2JDak2QKJ4AefHC6Yu9ZXaesuaNqqxh7qLZAAGVw6+cSzfjB /a0xZv0Bj8PNpil7KZsji0eZhSbXtBc= -----END CERTIFICATE-----Generated at Wed Aug 6 11:04:59 2025 by rpki-client