$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa File: e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa (raw, json) Hash identifier: 884OyGkbWJq9LJBOWEge4PlaZ+hwaamc8M9LaJ2/tDE= Subject key identifier: C8:78:34:3B:28:6C:30:C3:64:A0:FE:34:C7:55:BD:F6:70:2E:4C:FC Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Certificate serial: 010D0C9F4328584A5CFB33203BE3B7FB3C1B2280 Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 16509 IP address blocks: 208.64.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:33:20:3b:e3:b7:fb:3c:1b:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=a051f27e-a3fa-4f28-af79-ec287cdbe81d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:03:b7:40:47:01:d1:90:fe:39:ad:a5:c4:56: 6e:c3:26:0a:5b:57:cb:8b:e6:f0:44:51:e0:43:fa: da:6e:29:7d:47:77:b7:33:a8:eb:c1:7e:4d:57:d5: 33:d7:e7:57:f7:64:d8:0e:cb:2c:cf:c4:27:c5:fc: db:dc:2a:d0:29:97:80:9c:a7:7c:d2:4a:f0:35:a8: 2a:24:9a:09:59:54:7d:82:66:8a:d5:ed:0d:85:28: b9:e1:05:b6:10:68:47:55:b2:5c:f2:e5:07:d7:ea: d9:ac:bb:1a:b8:34:2e:12:4a:72:39:08:24:f4:d5: af:86:35:a0:3f:49:d6:a0:e7:d5:f7:7b:11:bf:8a: 8c:81:74:a2:e8:fa:ef:97:f2:4d:2e:08:aa:bf:19: f7:da:81:ba:0c:8d:a3:99:af:19:ba:3e:e6:7d:2e: dd:32:24:52:79:45:3d:6f:fb:e0:40:5b:a4:e5:b5: 06:f7:95:22:a9:58:3f:da:fe:aa:29:ae:8e:cd:d3: 1a:82:8c:9c:fd:f3:25:44:2a:a3:66:37:d8:a4:a9: 4f:ff:3d:43:48:fe:3b:63:5e:4c:ca:22:73:8d:bd: 2d:59:72:dc:9b:e0:73:87:1b:85:b0:55:6b:8d:f9: 95:27:3b:b7:ec:08:12:ce:ef:62:2a:e4:7a:6a:a5: 30:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:78:34:3B:28:6C:30:C3:64:A0:FE:34:C7:55:BD:F6:70:2E:4C:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl X509v3 Authority Key Identifier: keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer sbgp-ipAddrBlock: critical IPv4: 208.64.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:32:ba:6b:e4:8b:4c:c9:c0:fc:e6:6e:a3:d0:24:40:b4:53: f0:0a:8f:38:36:61:0b:24:48:a5:81:21:de:32:52:ef:e3:cc: 63:ad:77:3b:91:70:d8:dc:f8:7f:73:0e:00:1a:f4:56:66:1c: 2b:11:42:43:19:fd:d3:fb:42:85:fc:6c:64:64:5c:24:c1:fa: 23:19:cf:fe:1d:cb:90:85:29:d6:43:9d:a4:87:96:ab:f3:9c: f8:44:b6:20:e0:51:9d:88:1d:76:e9:52:bd:3e:ac:10:65:26: 4c:85:24:b8:28:b6:32:03:68:5c:b5:c1:a2:f9:28:ff:81:d3: 37:bc:ac:be:9a:a2:92:06:a9:d9:0c:b9:69:4e:7d:61:24:bb: 30:71:c8:71:53:ab:3f:80:3b:aa:45:11:16:08:ab:1c:04:c5: f0:8d:c9:ea:f6:53:93:29:1a:ba:47:26:63:dc:bd:68:53:51: d8:e5:fa:5b:8e:8f:ab:c1:f5:dd:d7:16:9f:24:7d:89:37:84: 95:a1:a9:b0:61:50:97:d4:de:ad:05:27:8f:da:a3:e4:b6:af: 20:50:e8:28:62:8b:00:69:fb:e8:d3:cc:e2:ab:29:09:5c:01: 5f:21:8f:79:d5:6a:c2:fd:8a:7d:24:60:5e:e4:ed:e5:d3:0f: 95:78:fe:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+zMgO+O3+zwbIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl MDYxMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YTA1MWYyN2UtYTNmYS00ZjI4LWFmNzktZWMyODdjZGJlODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwO3QEcB0ZD+Oa2lxFZuwyYKW1fLi+bwRFHg Q/rabil9R3e3M6jrwX5NV9Uz1+dX92TYDsssz8Qnxfzb3CrQKZeAnKd80krwNagq JJoJWVR9gmaK1e0NhSi54QW2EGhHVbJc8uUH1+rZrLsauDQuEkpyOQgk9NWvhjWg P0nWoOfV93sRv4qMgXSi6Prvl/JNLgiqvxn32oG6DI2jma8Zuj7mfS7dMiRSeUU9 b/vgQFuk5bUG95UiqVg/2v6qKa6OzdMagoyc/fMlRCqjZjfYpKlP/z1DSP47Y15M yiJzjb0tWXLcm+BzhxuFsFVrjfmVJzu37AgSzu9iKuR6aqUw3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMh4NDsobDDDZKD+NMdVvfZwLkz8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3 YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvZTIwODUxMGUtOTE5Yi0z YWNjLWEwMmEtOWU2Y2M5YmE1YWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk ZjBkMGUwNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0yumvki0zJwPzmbqPQJEC0U/AKjzg2YQskSKWBId4yUu/jzGOtdzuR cNjc+H9zDgAa9FZmHCsRQkMZ/dP7QoX8bGRkXCTB+iMZz/4dy5CFKdZDnaSHlqvz nPhEtiDgUZ2IHXbpUr0+rBBlJkyFJLgotjIDaFy1waL5KP+B0ze8rL6aopIGqdkM uWlOfWEkuzBxyHFTqz+AO6pFERYIqxwExfCNyer2U5MpGrpHJmPcvWhTUdjl+luO j6vB9d3XFp8kfYk3hJWhqbBhUJfU3q0FJ4/ao+S2ryBQ6ChiiwBp++jTzOKrKQlc AV8hj3nVasL9in0kYF7k7eXTD5V4/g0= -----END CERTIFICATE-----Generated at Tue Aug 5 16:52:56 2025 by rpki-client