$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa File: f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa (raw, json) Hash identifier: I/XbBnTgK7FUXNOAwspAWR6615OVJERas1Xq59yWQzU= Subject key identifier: 88:B8:AC:EE:6E:8C:06:69:04:8E:51:B1:37:9D:F6:6F:09:2D:83:2E Certificate issuer: /CN=208dcf74-3dce-4384-beaf-70319895fc4b Certificate serial: 010D0C9F4328584AB650F0ACDF727ACE372E8D00 Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 14618 IP address blocks: 134.65.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f0:ac:df:72:7a:ce:37:2e:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=def417eb-725f-4452-b50c-7fe46cd9b748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0f:b8:ca:22:37:50:b4:18:40:37:68:87:07: 18:50:4b:07:2b:e2:5c:c9:fa:e1:9f:67:d6:53:19: 2a:a7:9a:36:b6:d3:6f:e7:1e:74:95:e0:d1:a9:23: 08:c2:c0:7e:3e:6e:da:8f:c5:1c:49:90:64:e8:b5: f6:3e:50:6d:39:68:42:15:4e:89:f1:72:8c:33:b3: fa:0c:9c:7d:4c:38:d0:5b:0b:88:db:26:ff:26:ba: 18:e0:5f:f6:9c:73:23:76:51:6a:5d:df:c4:97:1a: 83:9b:86:6d:d5:11:ca:fb:b2:38:30:0f:92:dc:07: ec:3b:c1:f6:4e:10:8e:2e:62:c4:c0:42:a8:02:16: e0:a4:00:71:01:1a:f3:5e:ae:b5:4c:0f:08:a2:b8: 64:0e:48:78:0e:04:bc:df:7f:93:fe:6f:05:43:76: dc:b9:48:99:38:bd:a8:7d:34:1f:11:8c:cc:fe:58: 04:32:47:17:7a:2a:cb:5e:57:98:82:37:1b:41:e2: c3:7b:44:5b:7e:56:8d:08:a8:12:fd:cd:f6:ee:d9: 3a:44:95:2c:98:2e:91:f8:9d:3b:f2:b0:92:45:76: c2:ed:e4:62:e3:69:6e:7c:fa:07:e3:22:fb:c1:24: ea:e0:3f:7b:56:9d:9c:ae:a0:30:eb:bb:60:7a:c7: 05:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B8:AC:EE:6E:8C:06:69:04:8E:51:B1:37:9D:F6:6F:09:2D:83:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl X509v3 Authority Key Identifier: keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer sbgp-ipAddrBlock: critical IPv4: 134.65.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:80:5d:36:1a:3e:cb:e2:05:75:2b:cc:f0:b8:03:53:64:6d: eb:9b:ee:9c:9d:4b:5e:d5:6d:28:27:bd:e2:8c:ec:02:f4:62: ad:d8:00:63:d8:9f:5c:2f:94:8e:fe:ba:ea:16:ff:e1:3e:18: 48:00:d8:67:3e:67:bf:3e:b8:d8:04:1c:db:23:0f:33:ca:3b: 40:06:6c:a1:fb:0e:16:c6:f0:c6:a3:79:2c:66:41:36:9f:67: 30:b2:d7:94:34:d5:f2:76:38:c0:e4:9f:69:3f:6e:9f:d8:fd: 5f:0b:64:63:7c:25:f0:ba:25:c4:56:f1:1b:d2:70:fc:08:a8: 1a:8a:8d:ad:53:7a:0f:64:55:90:87:69:6e:3e:e3:c2:09:40: 1a:25:0a:e4:8a:e4:5b:47:c2:ea:51:a7:72:ad:9d:56:38:56: 4b:a7:b7:f4:3d:40:d5:f1:f3:b1:cd:96:84:3f:57:22:6c:24: d8:95:d8:fb:69:2a:08:cd:46:fb:e5:81:bc:9e:c2:c3:3b:3b: 35:60:5e:3d:77:ce:54:28:8a:2d:a5:d2:9a:39:b0:5c:2f:a8: 4a:05:e3:17:c6:97:cd:46:40:e9:07:52:d2:8c:90:ae:2c:7c: dd:ca:a7:be:d9:67:a6:5a:00:0c:c0:5a:55:cc:cf:62:78:4b: e2:6e:48:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPCs33J6zjcujQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4ZGNmNzQtM2RjZS00Mzg0LWJlYWYtNzAzMTk4OTVm YzRiMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZGVmNDE3ZWItNzI1Zi00NDUyLWI1MGMtN2ZlNDZjZDliNzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw+4yiI3ULQYQDdohwcYUEsHK+Jcyfrhn2fW Uxkqp5o2ttNv5x50leDRqSMIwsB+Pm7aj8UcSZBk6LX2PlBtOWhCFU6J8XKMM7P6 DJx9TDjQWwuI2yb/JroY4F/2nHMjdlFqXd/ElxqDm4Zt1RHK+7I4MA+S3AfsO8H2 ThCOLmLEwEKoAhbgpABxARrzXq61TA8IorhkDkh4DgS833+T/m8FQ3bcuUiZOL2o fTQfEYzM/lgEMkcXeirLXleYgjcbQeLDe0RbflaNCKgS/c327tk6RJUsmC6R+J07 8rCSRXbC7eRi42lufPoH4yL7wSTq4D97Vp2crqAw67tgescFuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIi4rO5ujAZpBI5RsTed9m8JLYMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMDhk Y2Y3NC0zZGNlLTQzODQtYmVhZi03MDMxOTg5NWZjNGIvZjBlZTljYzgtZWEwMy0z MmQ4LThhZjItNmJkMGI0ZWNlYzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjA4ZGNmNzQtM2RjZS00Mzg0LWJl YWYtNzAzMTk4OTVmYzRiLzIwOGRjZjc0LTNkY2UtNDM4NC1iZWFmLTcwMzE5ODk1 ZmM0Yi5jcmwwHwYDVR0jBBgwFoAUtFZe+2BitOcxIpuQ8WaNOb1jB1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMDhkY2Y3NC0zZGNlLTQzODQtYmVhZi03MDMx OTg5NWZjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChkGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+AXTYaPsviBXUrzPC4A1Nkbeub7pydS17VbSgnveKM7AL0Yq3YAGPY n1wvlI7+uuoW/+E+GEgA2Gc+Z78+uNgEHNsjDzPKO0AGbKH7DhbG8MajeSxmQTaf ZzCy15Q01fJ2OMDkn2k/bp/Y/V8LZGN8JfC6JcRW8RvScPwIqBqKja1Teg9kVZCH aW4+48IJQBolCuSK5FtHwupRp3KtnVY4Vkunt/Q9QNXx87HNloQ/VyJsJNiV2Ptp KgjNRvvlgbyewsM7OzVgXj13zlQoii2l0po5sFwvqEoF4xfGl81GQOkHUtKMkK4s fN3Kp77ZZ6ZaAAzAWlXMz2J4S+JuSAc= -----END CERTIFICATE-----Generated at Mon Aug 4 16:14:13 2025 by rpki-client