$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa File: 1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa (raw, json) Hash identifier: 9NdV+uFsgNfiNXbAfFYOS5emnm1GGVGW1/qEfLGc7+c= Subject key identifier: 3A:77:29:9D:B3:A0:44:6A:2D:60:89:E7:C2:E3:DB:D9:51:48:2D:91 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584A8575F4356A300F0B81011280 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 16433 IP address blocks: 208.76.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:f4:35:6a:30:0f:0b:81:01:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=79db2c2e-0ec7-401e-b8e0-428d8f587e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:03:32:47:70:4e:46:eb:a3:d4:dd:52:0a:5a: d5:84:c4:70:7e:9a:47:b1:a4:96:d3:6f:94:1e:dc: e2:a9:30:3e:6f:85:c7:97:25:7a:36:d5:a2:39:94: c0:7e:86:aa:e5:24:4a:ec:43:48:4a:56:11:81:3a: ed:ec:21:c6:d8:09:16:78:40:b1:58:86:4a:44:33: ef:75:2e:1a:7d:b0:18:2f:10:14:19:f3:16:07:24: b1:ac:e8:6a:fb:16:9b:d9:e5:cf:9c:01:99:f1:ce: d9:6e:81:28:6c:75:50:ea:fb:2a:ec:bc:d5:28:d8: 61:97:4a:2b:92:8a:ec:65:d4:cd:55:92:05:eb:ab: f7:d9:2c:a6:28:cd:df:d2:ba:86:e0:73:47:d5:a8: 48:32:7e:41:ae:5f:b3:80:43:65:9c:f6:fb:57:15: 6a:75:11:c5:3c:4b:c1:71:bc:4b:48:dc:c4:f2:b8: 32:83:0b:82:31:f5:94:40:28:e3:9d:30:d6:80:5b: 62:cc:bc:79:ec:b6:77:16:8b:9b:15:91:1c:da:8c: 35:a3:67:83:ab:87:2b:5a:9c:1a:5b:3d:73:d6:95: 8a:9e:60:8b:16:c6:54:70:b8:70:7a:1d:01:38:7b: 9b:b4:82:d7:66:ee:0d:cd:28:af:f6:ef:f9:8a:47: cb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:77:29:9D:B3:A0:44:6A:2D:60:89:E7:C2:E3:DB:D9:51:48:2D:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 208.76.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:2b:cb:52:25:e8:d8:e7:80:c5:3e:bb:7c:e4:3d:ba:5f:52: 72:ac:11:47:cd:42:c1:45:54:31:0c:d1:58:37:f4:42:c4:fa: 2d:5e:86:c9:fa:9a:f9:40:53:f7:8a:ca:e9:b3:c4:c0:60:d7: 6b:18:d9:75:24:ed:c7:79:50:fa:a4:98:a4:2c:41:fb:43:16: c5:84:df:d2:ce:19:f4:40:0e:52:02:fc:2f:aa:6d:07:95:62: ba:cb:d5:fc:bd:8e:0f:6c:f4:bd:ae:0c:64:ee:f4:2d:6b:65: fd:5e:90:5c:7c:70:ea:6e:1c:50:36:e1:e8:ec:80:ff:1f:be: 5e:7e:fb:31:74:01:a8:bd:9e:75:53:1e:3e:a5:07:73:43:a3: c0:93:7e:ed:d1:e8:2e:25:82:a3:f2:07:a1:af:56:ac:bd:5b: 03:fc:61:47:62:1f:a4:12:13:f4:ce:6c:d9:cb:90:27:bd:c2: f1:ca:62:f8:60:a5:91:4e:b8:ee:66:e1:2b:85:f7:7d:41:48: 3c:5c:4f:ed:64:17:ad:0c:f2:2c:ae:15:dc:85:d9:ab:28:5e: 7b:51:18:c0:25:35:05:d8:88:82:69:da:cf:57:4d:8e:9f:ba: 97:1f:d2:45:75:8d:6c:8b:90:f0:02:33:b8:40:35:1f:18:cc: 55:0a:67:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdfQ1ajAPC4EBEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk NzlkYjJjMmUtMGVjNy00MDFlLWI4ZTAtNDI4ZDhmNTg3ZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwMyR3BORuuj1N1SClrVhMRwfppHsaSW02+U HtziqTA+b4XHlyV6NtWiOZTAfoaq5SRK7ENISlYRgTrt7CHG2AkWeECxWIZKRDPv dS4afbAYLxAUGfMWBySxrOhq+xab2eXPnAGZ8c7ZboEobHVQ6vsq7LzVKNhhl0or korsZdTNVZIF66v32SymKM3f0rqG4HNH1ahIMn5Brl+zgENlnPb7VxVqdRHFPEvB cbxLSNzE8rgygwuCMfWUQCjjnTDWgFtizLx57LZ3FoubFZEc2ow1o2eDq4crWpwa Wz1z1pWKnmCLFsZUcLhweh0BOHubtILXZu4NzSiv9u/5ikfLewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDp3KZ2zoERqLWCJ58Lj29lRSC2RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMWM2ZWU2Y2EtODIzZC0z OTNhLTlkMmQtMGM3Mzk0ZTE5NzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIry1Il6NjngMU+u3zkPbpfUnKsEUfNQsFFVDEM0Vg39ELE+i1ehsn6 mvlAU/eKyumzxMBg12sY2XUk7cd5UPqkmKQsQftDFsWE39LOGfRADlIC/C+qbQeV YrrL1fy9jg9s9L2uDGTu9C1rZf1ekFx8cOpuHFA24ejsgP8fvl5++zF0Aai9nnVT Hj6lB3NDo8CTfu3R6C4lgqPyB6GvVqy9WwP8YUdiH6QSE/TObNnLkCe9wvHKYvhg pZFOuO5m4SuF931BSDxcT+1kF60M8iyuFdyF2asoXntRGMAlNQXYiIJp2s9XTY6f upcf0kV1jWyLkPACM7hANR8YzFUKZ50= -----END CERTIFICATE-----Generated at Tue Aug 5 17:10:47 2025 by rpki-client