$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa File: 8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa (raw, json) Hash identifier: G7Ss2w3tgIzepBTgxCLnsiaxqrYJuGa5KFido17D8YI= Subject key identifier: 36:4A:06:B2:4D:17:17:B3:AE:C3:3D:10:1D:E7:DC:91:F2:68:CE:55 Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Certificate serial: 010D0C9F4328584A8B0B5D15B16AF4485EC9F800 Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 14618 IP address blocks: 208.88.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:5d:15:b1:6a:f4:48:5e:c9:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=4e8cf35c-2c3a-4282-9653-4e12cecaf9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:10:2d:26:da:11:02:b7:4d:ca:06:50:29: 0d:65:db:6c:27:2b:9a:eb:ee:eb:9f:87:62:86:41: 98:31:23:2a:f1:0b:6a:96:c2:f0:bc:d6:ef:e0:d8: 4a:f8:77:c0:e2:8f:29:90:c7:95:0b:a6:1b:d5:2f: a0:de:4b:3c:ec:f1:eb:a3:52:1e:c6:84:82:3d:9d: 25:36:60:ea:96:a8:2d:0e:01:0d:b1:96:47:3b:db: 9e:c5:83:fb:f7:33:26:5d:7a:ac:49:96:ba:79:17: fa:ec:a6:68:8a:97:09:be:f7:58:72:5e:ec:6a:1f: cb:41:a7:af:ce:77:32:ea:ff:15:67:4a:67:69:76: 85:8a:90:26:aa:01:c7:41:52:79:ab:ca:0c:b9:f3: 12:85:d9:0d:12:c8:47:3a:d8:2c:aa:62:af:f4:e9: 08:13:72:17:5e:75:93:80:e1:d8:ec:ce:1c:f5:1f: d9:08:70:fe:a6:51:ac:95:a4:6f:51:14:43:e0:3f: 43:d4:36:d0:c0:ea:da:78:8c:d6:d7:c9:0d:fe:3e: be:0b:ef:55:2d:d2:21:5e:8c:a7:c3:31:6c:78:36: cd:4a:25:c7:d4:31:cb:bf:e4:af:88:48:04:81:27: af:b2:b2:7f:7e:3c:60:65:4d:f7:a3:03:b7:58:a0: a1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4A:06:B2:4D:17:17:B3:AE:C3:3D:10:1D:E7:DC:91:F2:68:CE:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/8f5dcde3-cde7-377c-a19d-736f822a5fbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl X509v3 Authority Key Identifier: keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer sbgp-ipAddrBlock: critical IPv4: 208.88.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:fd:a7:7c:50:5f:29:2c:5b:43:b8:46:c0:00:35:73:e5:1f: bf:d8:8b:e6:32:cd:1f:c7:e5:51:bb:3b:8d:7e:8a:09:f9:a4: 28:ff:66:ec:a1:f1:8b:58:ba:82:5b:64:6d:95:12:dd:8f:3d: 36:a8:85:8c:2a:db:f8:ed:0c:e3:de:23:c9:60:fa:43:6d:28: 5d:b1:c6:e0:f2:7f:e3:be:2f:73:f3:d4:ce:78:e0:b3:8b:f0: 79:84:71:d1:66:82:0a:4d:a6:6b:a3:e5:a3:de:bb:dc:ca:b7: 13:cf:db:45:c5:75:3c:25:25:78:ab:5f:30:79:a4:8f:d2:1b: 04:da:a7:f0:d9:ce:dc:e1:61:a1:ec:35:fb:16:de:5e:ed:d8: 11:f0:8c:19:69:e4:43:38:a5:3b:c3:5e:c5:02:9a:1a:7d:e5: 16:22:33:7f:f6:4d:e0:46:a2:3c:00:e6:1e:4f:c5:dd:23:10: 95:d5:c8:75:f2:e8:25:91:3e:b5:23:7d:20:d2:aa:e5:18:47: 3a:fd:2e:e8:8e:42:72:8b:4a:35:cd:24:2a:9f:fb:46:af:dd: 92:dd:4e:2b:e0:80:51:53:fc:65:64:70:86:4a:ec:cb:11:f0: d9:a4:1b:ae:51:8c:2f:d1:bb:c5:df:8d:10:11:1f:f9:f7:de: ea:2c:26:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC10VsWr0SF7J+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2ZGI0ZWItNDA0MS00YWY4LWI2NGQtZjJlOGI3YmMw NDhiMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk NGU4Y2YzNWMtMmMzYS00MjgyLTk2NTMtNGUxMmNlY2FmOWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYoQLSbaEQK3TcoGUCkNZdtsJyua6+7rn4di hkGYMSMq8QtqlsLwvNbv4NhK+HfA4o8pkMeVC6Yb1S+g3ks87PHro1IexoSCPZ0l NmDqlqgtDgENsZZHO9uexYP79zMmXXqsSZa6eRf67KZoipcJvvdYcl7sah/LQaev zncy6v8VZ0pnaXaFipAmqgHHQVJ5q8oMufMShdkNEshHOtgsqmKv9OkIE3IXXnWT gOHY7M4c9R/ZCHD+plGslaRvURRD4D9D1DbQwOraeIzW18kN/j6+C+9VLdIhXoyn wzFseDbNSiXH1DHLv+SviEgEgSevsrJ/fjxgZU33owO3WKChDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZKBrJNFxezrsM9EB3n3JHyaM5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZk YjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4YjdiYzA0OGIvOGY1ZGNkZTMtY2RlNy0z NzdjLWExOWQtNzM2ZjgyMmE1ZmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2ZGI0ZWItNDA0MS00YWY4LWI2 NGQtZjJlOGI3YmMwNDhiL2I4NmRiNGViLTQwNDEtNGFmOC1iNjRkLWYyZThiN2Jj MDQ4Yi5jcmwwHwYDVR0jBBgwFoAUa8ITUOp05WaWTNRMgjyklz6m1dMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZkYjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4 YjdiYzA0OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJX9p3xQXyksW0O4RsAANXPlH7/Yi+YyzR/H5VG7O41+ign5pCj/Zuyh 8YtYuoJbZG2VEt2PPTaohYwq2/jtDOPeI8lg+kNtKF2xxuDyf+O+L3Pz1M544LOL 8HmEcdFmggpNpmuj5aPeu9zKtxPP20XFdTwlJXirXzB5pI/SGwTap/DZztzhYaHs NfsW3l7t2BHwjBlp5EM4pTvDXsUCmhp95RYiM3/2TeBGojwA5h5Pxd0jEJXVyHXy 6CWRPrUjfSDSquUYRzr9LuiOQnKLSjXNJCqf+0av3ZLdTivggFFT/GVkcIZK7MsR 8NmkG65RjC/Ru8XfjRARH/n33uosJuk= -----END CERTIFICATE-----Generated at Mon Aug 4 13:59:34 2025 by rpki-client