$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa File: 8f41887f-e02f-3b1f-9011-a36a71b35c82.roa (raw, json) Hash identifier: AgnyQJV6mnHZr/JxhHxbBtkLfebI4RBktzihWapDTUY= Subject key identifier: EA:43:8E:DB:BA:C5:9A:51:71:53:2D:53:FF:DE:1C:79:E9:07:1C:67 Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F4328584AC0162AE638F7138004DCC900 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 58580 IP address blocks: 199.101.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:2a:e6:38:f7:13:80:04:dc:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=e28fbf6d-9531-4bef-a7df-51643258ca71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c2:e5:be:29:cd:10:7c:3c:d3:91:22:30:cc: 84:f0:dc:1c:b4:3a:fa:d7:14:ae:7c:62:73:5e:e2: 99:be:53:f4:ad:03:c9:c8:b2:25:86:c3:c9:3e:9e: c7:f9:07:55:bb:23:be:43:7f:e1:dc:c7:8b:2e:35: 6f:d2:d3:b9:01:2a:a3:ae:54:ed:15:9f:71:bf:2c: f4:6d:b6:fe:9d:af:9b:89:68:e9:f6:7e:25:1d:e3: 3f:e8:bf:ad:e6:ee:66:f6:78:00:7c:5f:1a:33:a3: 96:fb:7c:31:3b:d9:4e:08:60:d4:db:65:66:b2:4c: ee:51:81:d5:60:c9:7d:35:07:aa:af:49:73:dd:1b: 85:d6:5b:8a:32:d6:79:66:81:1f:2e:7d:36:e1:f4: 62:c1:7f:2d:a6:34:49:09:8d:dd:41:95:c1:df:75: 06:a6:c0:44:ed:48:fd:d3:5f:b1:f2:98:02:ff:a4: 0c:c5:4f:70:19:12:e1:cb:dc:9d:1b:27:5a:7c:d0: 4b:4c:e6:a4:fe:0c:04:dd:ca:2a:18:b2:8c:86:8f: b3:6d:8e:fc:75:f0:0d:2f:d7:67:36:9d:46:21:84: d4:ed:68:33:50:21:21:f2:ba:f4:50:6c:ad:df:8a: 72:30:bf:e0:da:a3:5a:56:fb:80:9b:16:f7:ea:8d: da:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:43:8E:DB:BA:C5:9A:51:71:53:2D:53:FF:DE:1C:79:E9:07:1C:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 199.101.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ab:d5:d5:43:71:a8:52:83:78:d8:42:35:6a:72:de:61:be: 18:43:86:a1:47:ad:58:bd:b4:91:88:9b:38:33:60:54:05:4e: 8f:ef:a9:e8:bf:10:fc:2b:29:f6:d2:8e:92:82:d2:e3:b4:d1: 4e:d4:4f:b0:bb:7e:aa:3a:d6:20:52:30:fe:c7:64:ea:06:26: 93:7e:c8:fb:28:f6:77:02:5a:a2:69:e9:d2:48:a4:31:dd:22: 71:cc:4c:8c:3e:8f:e5:a8:65:fc:e2:75:69:27:a4:b2:e4:85: 17:f6:1b:96:d4:3b:88:d9:de:a2:a1:e4:74:39:66:dd:05:af: 98:ce:37:97:ed:5b:5a:82:a9:be:b7:27:37:7a:00:0c:f1:cd: 61:96:c7:8e:29:ca:a2:96:66:b4:f0:a7:26:d1:8c:b1:8f:11: fa:78:7f:fd:0e:02:b2:6d:23:a9:78:06:0e:65:bf:f5:b3:75: 84:41:82:30:fe:78:53:4e:48:1f:3b:63:1e:53:dc:b7:52:9b: 59:f3:d9:07:ea:9b:23:aa:50:25:9f:d4:20:83:f3:9b:17:59: 53:d6:de:17:5e:92:14:76:a1:8d:64:80:b7:cc:59:e2:35:d0: 9b:10:42:c4:69:ed:90:0b:16:43:9b:d9:78:bb:bf:cb:10:b3: ae:00:07:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFirmOPcTgATcyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZTI4ZmJmNmQtOTUzMS00YmVmLWE3ZGYtNTE2NDMyNThjYTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsLlvinNEHw805EiMMyE8NwctDr61xSufGJz XuKZvlP0rQPJyLIlhsPJPp7H+QdVuyO+Q3/h3MeLLjVv0tO5ASqjrlTtFZ9xvyz0 bbb+na+biWjp9n4lHeM/6L+t5u5m9ngAfF8aM6OW+3wxO9lOCGDU22VmskzuUYHV YMl9NQeqr0lz3RuF1luKMtZ5ZoEfLn024fRiwX8tpjRJCY3dQZXB33UGpsBE7Uj9 01+x8pgC/6QMxU9wGRLhy9ydGydafNBLTOak/gwE3coqGLKMho+zbY78dfANL9dn Np1GIYTU7WgzUCEh8rr0UGyt34pyML/g2qNaVvuAmxb36o3a4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpDjtu6xZpRcVMtU//eHHnpBxxnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvOGY0MTg4N2YtZTAyZi0z YjFmLTkwMTEtYTM2YTcxYjM1YzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2VsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGr1dVDcahSg3jYQjVqct5hvhhDhqFHrVi9tJGImzgzYFQFTo/vqei/ EPwrKfbSjpKC0uO00U7UT7C7fqo61iBSMP7HZOoGJpN+yPso9ncCWqJp6dJIpDHd InHMTIw+j+WoZfzidWknpLLkhRf2G5bUO4jZ3qKh5HQ5Zt0Fr5jON5ftW1qCqb63 Jzd6AAzxzWGWx44pyqKWZrTwpybRjLGPEfp4f/0OArJtI6l4Bg5lv/WzdYRBgjD+ eFNOSB87Yx5T3LdSm1nz2QfqmyOqUCWf1CCD85sXWVPW3hdekhR2oY1kgLfMWeI1 0JsQQsRp7ZALFkOb2Xi7v8sQs64AB0o= -----END CERTIFICATE-----Generated at Thu Aug 7 01:21:41 2025 by rpki-client