$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa File: db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa (raw, json) Hash identifier: 8KvVC6qnxrt+PgRchwPD3bXilR1G8iaGk4XIaaruL0w= Subject key identifier: EB:31:8A:31:C0:8D:1C:77:05:C2:4E:E1:56:5A:F4:38:3F:B6:A2:81 Certificate issuer: /CN=647216b7-a938-45d2-8264-7d448a4eaad9 Certificate serial: 010D0C9F4328584A9900BFA6231E441786B65EC0 Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 398143 IP address blocks: 208.103.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:bf:a6:23:1e:44:17:86:b6:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=046bb513-d56e-4077-9870-32607c21a73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:20:1e:25:da:b4:92:35:33:00:85:a9:00: f0:dc:67:16:07:0e:a7:03:50:36:b8:d3:c9:2d:af: 14:61:64:9c:8a:85:e6:46:a6:24:74:96:ae:9a:51: 66:0f:02:c9:5c:ea:b3:00:b9:a7:f5:05:56:0d:77: 0b:73:ea:e9:c7:43:2c:5d:47:6b:0f:e7:4e:10:f1: 68:61:b3:f3:b0:98:9a:ef:91:cd:10:f5:0f:cd:ea: e1:1e:db:b6:7a:ec:cb:99:a7:e4:bd:31:4c:5c:29: 34:b1:44:9b:41:c6:ce:c5:b1:07:7e:84:b8:b7:b7: 7d:44:ee:29:b9:55:b9:21:11:4f:a0:27:ed:96:a4: 2a:df:68:bb:05:39:86:7e:f9:bb:5f:e2:65:79:f0: 3a:30:c5:20:c0:0f:d0:d7:03:c8:bb:a1:56:42:b0: cc:b4:25:ee:20:0a:fe:93:d0:d7:85:8a:2f:3b:b7: 78:b2:a3:dd:13:0a:c7:db:23:c3:e8:8b:b8:f8:d4: 7f:03:87:96:be:32:c5:01:32:12:84:4f:75:bb:1e: 1f:7d:fa:48:0e:68:98:29:91:69:df:86:ec:ab:42: 40:aa:6c:75:ea:61:39:e4:50:50:5c:16:ec:c1:c1: a2:19:8f:40:96:b6:75:0c:f4:17:cc:f0:03:0c:cd: 9d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:31:8A:31:C0:8D:1C:77:05:C2:4E:E1:56:5A:F4:38:3F:B6:A2:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl X509v3 Authority Key Identifier: keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer sbgp-ipAddrBlock: critical IPv4: 208.103.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:32:bb:3f:92:5b:e7:4e:8b:c8:9f:49:51:8c:a7:8a:5b:28: 58:f7:9b:b8:01:66:94:c6:dd:b8:cf:7f:61:3f:ed:9a:50:ed: 2a:09:b9:e2:ca:82:99:f9:de:6e:b2:e3:88:f6:97:14:db:8b: 6f:7d:11:48:4c:6f:9f:85:1f:83:cb:cd:67:0e:1b:7a:ab:77: fe:ac:38:ee:6b:e7:a2:63:a2:09:49:6d:2d:39:8c:87:43:6d: 54:b5:8d:63:5f:b0:dc:38:1d:1c:27:9c:77:51:9f:be:4c:5a: ca:ac:6d:44:19:5d:cb:59:ec:f6:5b:54:f5:a4:49:f0:fb:09: a1:7c:d7:53:a9:cf:d6:69:f8:d0:fb:f6:0f:88:3b:3d:f7:a3: 8d:7e:a3:67:8a:0b:e4:4b:2b:17:71:8f:bd:0a:dc:67:9e:12: 31:00:0d:b6:5a:96:41:54:a1:78:9b:80:e2:83:39:fa:1f:4b: 6a:5b:fc:63:d0:69:a9:91:6f:48:b2:85:a7:b1:ea:12:e5:49: d7:df:e7:ef:f2:37:2f:4e:ed:d2:6c:c7:8f:7c:6a:2e:7c:6c: 43:65:1d:6f:f5:31:5d:3f:19:88:4a:41:b3:dd:a1:96:e7:7e: 66:0d:a4:a9:02:6f:32:b1:58:a4:67:3f:5c:f7:50:af:a7:81: 9b:4f:30:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAL+mIx5EF4a2XsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ3MjE2YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhhNGVh YWQ5MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MDQ2YmI1MTMtZDU2ZS00MDc3LTk4NzAtMzI2MDdjMjFhNzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxcgHiXatJI1MwCFqQDw3GcWBw6nA1A2uNPJ La8UYWScioXmRqYkdJaumlFmDwLJXOqzALmn9QVWDXcLc+rpx0MsXUdrD+dOEPFo YbPzsJia75HNEPUPzerhHtu2euzLmafkvTFMXCk0sUSbQcbOxbEHfoS4t7d9RO4p uVW5IRFPoCftlqQq32i7BTmGfvm7X+JlefA6MMUgwA/Q1wPIu6FWQrDMtCXuIAr+ k9DXhYovO7d4sqPdEwrH2yPD6Iu4+NR/A4eWvjLFATIShE91ux4fffpIDmiYKZFp 34bsq0JAqmx16mE55FBQXBbswcGiGY9AlrZ1DPQXzPADDM2dCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsxijHAjRx3BcJO4VZa9Dg/tqKBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDcy MTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0OGE0ZWFhZDkvZGIyNzZkNWUtZDYxOS0z ZTJhLWJjYzAtZWY0YWE5YTdlNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2YjctYTkzOC00NWQyLTgy NjQtN2Q0NDhhNGVhYWQ5LzY0NzIxNmI3LWE5MzgtNDVkMi04MjY0LTdkNDQ4YTRl YWFkOS5jcmwwHwYDVR0jBBgwFoAUIvIMhMMKGr3ejeHfHF8TeMPZRF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDcyMTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0 OGE0ZWFhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0GeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcyuz+SW+dOi8ifSVGMp4pbKFj3m7gBZpTG3bjPf2E/7ZpQ7SoJueLK gpn53m6y44j2lxTbi299EUhMb5+FH4PLzWcOG3qrd/6sOO5r56JjoglJbS05jIdD bVS1jWNfsNw4HRwnnHdRn75MWsqsbUQZXctZ7PZbVPWkSfD7CaF811Opz9Zp+ND7 9g+IOz33o41+o2eKC+RLKxdxj70K3GeeEjEADbZalkFUoXibgOKDOfofS2pb/GPQ aamRb0iyhaex6hLlSdff5+/yNy9O7dJsx498ai58bENlHW/1MV0/GYhKQbPdoZbn fmYNpKkCbzKxWKRnP1z3UK+ngZtPMJM= -----END CERTIFICATE-----Generated at Wed Aug 6 18:45:07 2025 by rpki-client