$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa File: 4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa (raw, json) Hash identifier: TBol3KmkwFc5aAWaVi76rrlzAnrl4y/cM8yA7BSrVrA= Subject key identifier: 18:19:27:57:F0:48:EA:CA:6D:7E:94:2D:6D:46:54:C6:CD:47:C1:54 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584AB4EB6EAA6CC7F86DB954F580 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 25649 IP address blocks: 208.86.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:6e:aa:6c:c7:f8:6d:b9:54:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=6951d3e9-d4fb-4b4a-8df0-d9557f99ac00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:2a:28:75:5a:bc:71:2e:64:90:b1:82:cb: 6a:33:b3:c2:4e:bf:76:6f:0a:eb:5c:78:1d:4c:8a: d5:75:cf:1b:45:5c:58:fc:77:11:fb:59:5f:df:c0: 91:d2:8a:ec:4f:f3:65:a5:f4:44:83:af:b4:39:a2: d3:48:61:5e:c7:5f:c7:2d:65:3e:3a:98:43:06:9f: 22:ed:d5:e4:c6:3e:69:7e:6b:0f:93:26:02:ab:a3: 9f:06:f7:2e:58:5a:6a:fe:cd:5b:04:94:24:ba:79: 98:24:64:9e:ec:ac:f0:59:63:a7:1c:14:6f:31:e1: d8:cc:da:ca:67:a0:59:58:32:7a:09:a0:d1:82:07: 5d:8b:89:82:e3:b2:1f:8c:e1:4c:32:e6:5d:af:39: 55:78:52:fc:dc:7f:de:52:2b:64:16:b0:e2:10:88: 32:bf:0b:26:85:4b:59:fb:b4:2b:63:31:73:cc:3c: 09:65:bf:01:26:5b:9a:5a:9e:03:be:dc:55:0e:a1: 7f:6b:99:4b:8d:0e:2f:09:ad:56:d8:88:24:07:79: fc:34:3a:4d:c0:e4:54:1f:84:03:42:05:2a:9b:73: 02:13:e4:3f:22:87:03:01:06:26:0e:6f:83:82:60: 6f:64:c6:39:0a:de:55:66:6b:8f:a7:d4:c5:15:23: 15:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:19:27:57:F0:48:EA:CA:6D:7E:94:2D:6D:46:54:C6:CD:47:C1:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 208.86.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:4c:6d:65:67:f0:ba:3b:75:79:a0:0c:ea:c6:d2:d1:a7:cd: 79:12:f9:77:90:10:18:a4:a3:2d:6d:d3:4a:c0:d4:42:5c:9a: 43:20:b3:44:19:33:98:3c:65:c6:4f:80:48:8a:4f:c8:e8:47: 8d:4d:01:85:4b:51:37:d1:f0:d4:ef:4b:1b:3d:a4:87:c4:82: ae:ab:40:68:45:18:db:e3:ae:68:fe:dd:29:7a:d8:eb:2b:9c: f2:a2:e6:65:e0:b5:2b:cc:74:cf:0c:0c:25:68:e9:45:8d:49: 60:d3:0b:97:dd:ea:d3:5a:ea:45:67:6b:f4:8b:aa:65:8f:cd: b2:2b:5c:cb:3b:b0:90:81:0b:c2:1f:ea:8f:47:51:b6:2a:cc: fa:95:91:10:e7:77:6e:51:61:37:40:5f:c4:42:be:ec:27:c4: 86:c8:e6:77:ea:b3:43:4c:e9:79:29:3e:7f:00:d0:70:d8:19: 9b:99:00:a1:c7:10:8c:9d:67:d3:d5:70:af:18:ab:b2:bf:a9: 3e:76:16:74:27:c8:ce:57:4d:d6:55:32:7e:3c:e7:28:22:90: 49:b5:56:71:76:44:b8:76:f7:79:5e:1f:8b:5a:dd:4d:55:95: cb:57:d4:30:c0:f6:95:3d:e4:70:82:a8:2b:4d:b6:84:fe:61: 16:cd:b0:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0626qbMf4bblU9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk Njk1MWQzZTktZDRmYi00YjRhLThkZjAtZDk1NTdmOTlhYzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukEqKHVavHEuZJCxgstqM7PCTr92bwrrXHgd TIrVdc8bRVxY/HcR+1lf38CR0orsT/NlpfREg6+0OaLTSGFex1/HLWU+OphDBp8i 7dXkxj5pfmsPkyYCq6OfBvcuWFpq/s1bBJQkunmYJGSe7KzwWWOnHBRvMeHYzNrK Z6BZWDJ6CaDRggddi4mC47IfjOFMMuZdrzlVeFL83H/eUitkFrDiEIgyvwsmhUtZ +7QrYzFzzDwJZb8BJluaWp4DvtxVDqF/a5lLjQ4vCa1W2IgkB3n8NDpNwORUH4QD QgUqm3MCE+Q/IocDAQYmDm+DgmBvZMY5Ct5VZmuPp9TFFSMVsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgZJ1fwSOrKbX6ULW1GVMbNR8FUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNGRmYjJlYTctMmMxNC0z MWFkLTk4ZGEtMGFlNzY0MGUyZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FYsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABMbWVn8Lo7dXmgDOrG0tGnzXkS+XeQEBikoy1t00rA1EJcmkMgs0QZ M5g8ZcZPgEiKT8joR41NAYVLUTfR8NTvSxs9pIfEgq6rQGhFGNvjrmj+3Sl62Osr nPKi5mXgtSvMdM8MDCVo6UWNSWDTC5fd6tNa6kVna/SLqmWPzbIrXMs7sJCBC8If 6o9HUbYqzPqVkRDnd25RYTdAX8RCvuwnxIbI5nfqs0NM6XkpPn8A0HDYGZuZAKHH EIydZ9PVcK8Yq7K/qT52FnQnyM5XTdZVMn485ygikEm1VnF2RLh293leH4ta3U1V lctX1DDA9pU95HCCqCtNtoT+YRbNsAI= -----END CERTIFICATE-----Generated at Mon Aug 4 14:54:33 2025 by rpki-client