$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/c8848bc7-8bf1-3131-955e-28f2a47bfa0a.roa File: c8848bc7-8bf1-3131-955e-28f2a47bfa0a.roa (raw, json) Hash identifier: +qKkWOkoSykqRQbx8mUoZ99ZlCvOWjMqrRqCm5DzFeI= Subject key identifier: C1:E1:D9:A7:34:E8:E4:89:8F:B6:62:4C:29:47:E6:54:3B:26:98:7B Certificate issuer: /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8 Certificate serial: 010D0C9F4328584AA85BB2DFCB2EB2D6C97184B0 Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/c8848bc7-8bf1-3131-955e-28f2a47bfa0a.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 54994 IP address blocks: 174.35.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b2:df:cb:2e:b2:d6:c9:71:84:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=b3b792f5-9c77-4dbe-b5d2-7c1cef4e2b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:bc:43:57:ba:82:52:5f:ad:aa:38:17:45: a5:da:5c:17:da:79:cd:0c:3f:65:c4:c0:0b:38:35: 47:d4:a1:c8:ff:b0:b6:69:5d:3f:45:6f:d4:14:99: 0b:9d:d3:e5:d0:69:9b:8e:27:7a:56:86:9e:ae:2f: 98:cd:dc:07:f9:0a:99:ed:f2:a2:92:e5:b5:10:c3: 6f:97:49:55:b7:1d:6a:b6:a2:b1:3e:f6:14:98:69: 28:d5:2f:4f:be:b0:dc:1e:57:8c:38:f9:72:e4:23: c6:99:a8:d0:80:bc:79:6b:56:d2:7c:dc:35:4f:a2: 44:fd:40:a5:2f:ef:91:b7:a0:ef:80:82:8a:ce:03: 87:fb:82:42:32:fd:76:f7:c4:ad:c5:05:e3:f6:94: f3:3c:bb:3f:e9:e6:84:d3:59:71:a4:62:b9:39:69: f6:7f:eb:0d:18:c3:12:b6:b2:3a:f8:ea:a6:9d:fb: 5b:8f:61:ae:5e:4d:a0:a8:4e:0d:a2:b2:6d:96:77: d9:1a:67:9d:c4:90:fe:9d:88:7a:81:5b:67:07:2d: 97:74:54:77:54:28:ae:91:dd:74:34:16:e7:31:1d: 64:8a:38:6d:38:38:20:63:d0:40:74:61:3c:2f:9e: eb:1b:60:62:0f:5f:ca:f6:fb:d2:74:b8:6e:c1:b2: e8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E1:D9:A7:34:E8:E4:89:8F:B6:62:4C:29:47:E6:54:3B:26:98:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/c8848bc7-8bf1-3131-955e-28f2a47bfa0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl X509v3 Authority Key Identifier: keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer sbgp-ipAddrBlock: critical IPv4: 174.35.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:14:b0:be:3c:bc:fc:49:f8:3d:e9:c2:9c:f8:ea:8f:cf:d8: a5:e5:f0:96:3d:7c:e6:be:31:c3:4f:48:29:7c:a1:10:f6:fc: d3:4c:71:b9:06:a1:d9:da:9d:73:be:ec:f6:8f:4e:09:e8:12: 87:55:87:75:f9:87:34:8b:9b:0f:74:0e:69:ae:ad:53:71:b6: 1f:3f:c9:98:c0:78:ca:1d:57:d5:ae:8a:ef:51:b4:23:8a:94: 8b:01:5d:98:1c:36:49:ed:5e:0e:af:e4:cc:f7:fc:a3:65:13: 25:42:c1:11:71:4d:fc:11:ab:c7:57:7c:dd:ec:cb:9f:c6:29: 3b:01:f2:84:a8:ab:8c:5e:c5:44:ac:74:65:50:93:0c:5b:4f: 19:85:9e:5a:e0:a9:5e:dd:23:38:bc:3f:09:14:22:47:a3:b8: 3a:72:a0:2b:d1:4a:cf:b9:cf:b3:a1:ab:90:09:b6:b1:6f:ae: 0b:8e:3c:8b:0f:31:c8:ab:22:83:e1:25:c7:45:3a:34:2a:06: 1a:44:d6:83:19:2b:5c:98:78:17:64:8a:81:7c:be:a9:9d:85: 5e:c0:8b:9d:df:63:e9:a2:04:8d:1d:f4:04:4e:15:9e:52:9c: 1b:c4:97:2e:9e:49:94:81:f2:58:3d:8e:4e:f5:b1:92:b1:69: 3e:8e:d9:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7Lfyy6y1slxhLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3 MGE4MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk YjNiNzkyZjUtOWM3Ny00ZGJlLWI1ZDItN2MxY2VmNGUyYjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8K8Q1e6glJfrao4F0Wl2lwX2nnNDD9lxMAL ODVH1KHI/7C2aV0/RW/UFJkLndPl0Gmbjid6Voaeri+YzdwH+QqZ7fKikuW1EMNv l0lVtx1qtqKxPvYUmGko1S9PvrDcHleMOPly5CPGmajQgLx5a1bSfNw1T6JE/UCl L++Rt6DvgIKKzgOH+4JCMv1298StxQXj9pTzPLs/6eaE01lxpGK5OWn2f+sNGMMS trI6+Oqmnftbj2GuXk2gqE4NorJtlnfZGmedxJD+nYh6gVtnBy2XdFR3VCiukd10 NBbnMR1kijhtODggY9BAdGE8L57rG2BiD1/K9vvSdLhuwbLoFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHh2ac06OSJj7ZiTClH5lQ7Jph7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvYzg4NDhiYzctOGJmMS0z MTMxLTk1NWUtMjhmMmE0N2JmYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0 NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriNOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgUsL48vPxJ+D3pwpz46o/P2KXl8JY9fOa+McNPSCl8oRD2/NNMcbkG odnanXO+7PaPTgnoEodVh3X5hzSLmw90DmmurVNxth8/yZjAeModV9Wuiu9RtCOK lIsBXZgcNkntXg6v5Mz3/KNlEyVCwRFxTfwRq8dXfN3sy5/GKTsB8oSoq4xexUSs dGVQkwxbTxmFnlrgqV7dIzi8PwkUIkejuDpyoCvRSs+5z7Ohq5AJtrFvrguOPIsP McirIoPhJcdFOjQqBhpE1oMZK1yYeBdkioF8vqmdhV7Ai53fY+miBI0d9AROFZ5S nBvEly6eSZSB8lg9jk71sZKxaT6O2aA= -----END CERTIFICATE-----Generated at Tue Aug 5 16:45:13 2025 by rpki-client