$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/88824dc8-612f-344f-98c5-1b7608353512.roa File: 88824dc8-612f-344f-98c5-1b7608353512.roa (raw, json) Hash identifier: MTX6NET4CjaIUEUhKjptWV3oNy0NWJq0TaGAwHZl4ks= Subject key identifier: B1:81:12:FE:7A:40:4C:03:F4:01:0A:11:C3:EB:75:B5:2F:B8:B1:9A Certificate issuer: /CN=fd61a214-d867-444e-b2f4-ca291d4c4419 Certificate serial: 010D0C9F4328584A8840AB4DDFFF240D0A3912C0 Authority key identifier: 92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/88824dc8-612f-344f-98c5-1b7608353512.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 174 IP address blocks: 207.167.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:ab:4d:df:ff:24:0d:0a:39:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd61a214-d867-444e-b2f4-ca291d4c4419 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=b78f1a99-e44c-41b7-bbf3-d98661425dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d7:85:6d:64:11:b1:4c:c2:e2:02:f0:96:64: e4:8e:f0:8f:b8:6a:70:fe:33:55:8b:db:8d:e0:fd: b4:25:d9:5b:7b:b5:a7:56:2f:75:f2:06:9c:31:da: 82:ec:41:50:17:fc:bf:e3:fe:91:4a:34:58:49:f6: 55:a8:f4:5d:b9:c4:58:5d:0e:46:31:f1:42:cd:d4: 16:0e:28:aa:69:65:12:7e:06:3a:a0:28:37:3c:76: c9:79:82:0d:24:73:c6:b6:b9:10:17:ae:39:76:04: 3b:f8:40:f2:e4:6c:bf:7d:f3:12:96:f4:7c:d3:c9: f1:38:fa:b8:3d:66:f6:6a:4f:32:1b:fe:7d:cd:e4: d7:cd:d1:03:ad:5b:f8:86:9d:5f:53:a8:97:04:29: 16:61:ae:39:9e:e6:ef:27:20:6d:1d:33:9c:4e:f2: 4a:23:a5:93:40:17:00:4b:13:81:35:04:57:c7:d0: 8f:3a:95:9b:c1:11:aa:8f:34:ff:88:91:5f:f2:96: b9:a4:77:20:fa:d5:eb:c9:0e:3a:53:cf:66:0f:84: df:07:ee:7f:ac:6a:cf:2c:e3:69:62:61:67:e8:8a: 07:c6:63:f5:d7:11:53:79:cd:b3:2d:99:86:3c:43: 5a:11:10:8c:3f:03:62:01:06:73:04:f7:64:82:cf: 29:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:81:12:FE:7A:40:4C:03:F4:01:0A:11:C3:EB:75:B5:2F:B8:B1:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/88824dc8-612f-344f-98c5-1b7608353512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl X509v3 Authority Key Identifier: keyid:92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer sbgp-ipAddrBlock: critical IPv4: 207.167.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:c0:8b:7c:4f:09:63:b7:92:10:21:d3:6d:03:c7:d1:ac:0b: bf:04:89:4a:11:c5:7d:f8:60:b5:5a:c6:c3:db:59:35:74:d2: d6:e8:92:d2:ec:9d:d3:99:ca:60:80:3b:a4:b7:ac:f6:48:6e: 52:f9:89:b4:d6:cb:68:c6:d4:24:b9:84:79:02:c3:0e:43:3c: 77:30:64:3b:59:6b:17:8b:95:e9:89:ae:65:db:93:f8:ba:28: 26:9a:1f:c4:ea:cb:38:b4:c3:6f:39:d3:be:f0:e5:d3:b4:dc: 80:84:d0:87:87:a5:60:5e:78:24:4d:bd:34:27:6e:fa:69:8c: ff:5c:f5:f3:2d:19:e0:a4:81:e7:22:92:1f:33:6d:61:d9:84: a9:fa:1e:06:d7:19:43:aa:07:37:22:58:4a:d1:bc:90:2a:d5: 61:77:7a:ea:d1:1f:25:b0:d2:c4:a6:08:18:41:ef:2a:ce:2a: 66:b2:e8:cb:92:db:b1:43:93:d2:51:11:fd:9f:c3:66:f4:1b: 9a:48:59:8d:5b:32:01:aa:e5:5a:3b:76:3c:9e:aa:97:84:92: e9:66:76:4d:8f:d7:69:3f:e0:42:d8:11:c5:f1:8a:9c:c5:da: 69:4d:e9:01:cf:35:c1:41:1e:44:22:a1:2c:a6:b8:a9:eb:11: 9c:92:39:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQKtN3/8kDQo5EsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ2MWEyMTQtZDg2Ny00NDRlLWIyZjQtY2EyOTFkNGM0 NDE5MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk Yjc4ZjFhOTktZTQ0Yy00MWI3LWJiZjMtZDk4NjYxNDI1ZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqteFbWQRsUzC4gLwlmTkjvCPuGpw/jNVi9uN 4P20Jdlbe7WnVi918gacMdqC7EFQF/y/4/6RSjRYSfZVqPRducRYXQ5GMfFCzdQW DiiqaWUSfgY6oCg3PHbJeYINJHPGtrkQF645dgQ7+EDy5Gy/ffMSlvR808nxOPq4 PWb2ak8yG/59zeTXzdEDrVv4hp1fU6iXBCkWYa45nubvJyBtHTOcTvJKI6WTQBcA SxOBNQRXx9CPOpWbwRGqjzT/iJFf8pa5pHcg+tXryQ46U89mD4TfB+5/rGrPLONp YmFn6IoHxmP11xFTec2zLZmGPENaERCMPwNiAQZzBPdkgs8pAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGBEv56QEwD9AEKEcPrdbUvuLGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZDYx YTIxNC1kODY3LTQ0NGUtYjJmNC1jYTI5MWQ0YzQ0MTkvODg4MjRkYzgtNjEyZi0z NDRmLTk4YzUtMWI3NjA4MzUzNTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmQ2MWEyMTQtZDg2Ny00NDRlLWIy ZjQtY2EyOTFkNGM0NDE5L2ZkNjFhMjE0LWQ4NjctNDQ0ZS1iMmY0LWNhMjkxZDRj NDQxOS5jcmwwHwYDVR0jBBgwFoAUksvOm7LOK/AGOs800+OjDwhvc1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZDYxYTIxNC1kODY3LTQ0NGUtYjJmNC1jYTI5 MWQ0YzQ0MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz6dUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALAi3xPCWO3khAh020Dx9GsC78EiUoRxX34YLVaxsPbWTV00tboktLs ndOZymCAO6S3rPZIblL5ibTWy2jG1CS5hHkCww5DPHcwZDtZaxeLlemJrmXbk/i6 KCaaH8Tqyzi0w285077w5dO03ICE0IeHpWBeeCRNvTQnbvppjP9c9fMtGeCkgeci kh8zbWHZhKn6HgbXGUOqBzciWErRvJAq1WF3eurRHyWw0sSmCBhB7yrOKmay6MuS 27FDk9JREf2fw2b0G5pIWY1bMgGq5Vo7djyeqpeEkulmdk2P12k/4ELYEcXxipzF 2mlN6QHPNcFBHkQioSymuKnrEZySOfY= -----END CERTIFICATE-----Generated at Wed Aug 6 14:11:30 2025 by rpki-client