$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/2b1f63dc-d0f1-3c17-bdd7-e07d78d9b56d.roa File: 2b1f63dc-d0f1-3c17-bdd7-e07d78d9b56d.roa (raw, json) Hash identifier: wqsdoeLytDGSzG4+6hQua7ePXdbuErXqi7yzRHrOBos= Subject key identifier: C7:E1:B1:BF:6A:20:9B:E5:AE:94:23:EC:07:F8:75:96:75:41:A2:80 Certificate issuer: /CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Certificate serial: 010D0C9F4328584AB91B972A2D0E452E80275D80 Authority key identifier: 99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/2b1f63dc-d0f1-3c17-bdd7-e07d78d9b56d.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 22251 IP address blocks: 208.68.24.0/24 maxlen: 24 208.68.25.0/24 maxlen: 24 208.68.26.0/24 maxlen: 24 208.68.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:97:2a:2d:0e:45:2e:80:27:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=aca1f0c0-cda4-46db-b43b-8bc59e1f238b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8d:70:e0:3d:7b:d7:b1:98:1f:9a:77:8a:e8: 43:32:34:d0:73:85:94:04:64:17:09:bb:df:22:fa: dc:00:5c:3d:60:ce:67:22:d9:f8:5e:7c:9d:8a:cf: 12:9f:c2:d5:49:88:d8:6e:23:02:c0:d5:44:b1:52: 80:50:e7:80:17:b1:ea:12:12:f3:48:5c:d5:b4:c3: be:f3:73:24:74:c9:09:96:61:54:6b:c6:d8:a8:ba: ba:79:76:18:82:ee:ee:9d:ac:df:21:fe:b5:46:75: f9:c6:69:e3:0d:68:bf:86:a1:9e:b9:ee:02:e0:97: af:34:1a:25:63:6f:12:70:3a:55:ac:83:52:de:1b: 53:84:92:a9:57:fd:f5:e0:a0:a4:05:f9:d6:0b:d4: bd:ab:6c:94:66:89:ce:fd:36:a0:26:76:b8:c9:e8: d8:1c:97:6b:69:97:0c:30:14:1b:ad:04:c0:74:2e: 46:48:01:f5:96:59:5d:70:b4:bd:e0:de:7d:ef:32: f0:b6:15:6d:3e:30:25:e9:54:30:55:dd:d3:31:58: 0e:a7:05:28:64:bd:aa:80:2a:2f:82:d7:c8:b8:db: 78:0f:8c:04:32:72:77:9b:5d:d8:4f:9f:90:c0:99: 36:a9:48:73:03:15:09:7c:60:9d:c4:f1:e7:50:38: 57:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E1:B1:BF:6A:20:9B:E5:AE:94:23:EC:07:F8:75:96:75:41:A2:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/2b1f63dc-d0f1-3c17-bdd7-e07d78d9b56d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl X509v3 Authority Key Identifier: keyid:99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer sbgp-ipAddrBlock: critical IPv4: 208.68.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:46:99:2f:19:76:28:e4:b1:4a:44:16:18:c7:1e:b3:12:b4: a5:9b:5f:7e:b5:90:34:88:71:03:84:28:a8:32:62:17:69:66: 47:f6:63:65:7c:7b:0e:af:0e:1d:ad:80:35:a2:8c:e6:ee:f6: f6:57:8f:35:1d:8d:4c:73:de:5c:f1:ee:e8:dd:00:b7:1e:c5: 3d:c9:66:ae:80:47:47:87:b4:76:48:fc:9e:bb:16:6d:4e:7f: 5d:28:14:3d:09:32:c0:b8:c3:5b:84:8f:b1:5c:52:96:3b:54: b4:25:0a:2b:d6:90:56:5d:c8:db:93:94:51:af:5b:d5:3b:39: 9c:fa:41:29:2e:04:8a:31:c7:5c:4d:4a:6a:9e:eb:71:af:b1: 60:85:ec:fa:5e:f5:7e:83:9b:5b:ee:f8:f6:44:b0:08:bf:85: 6d:43:59:de:32:a9:be:cc:af:c2:7c:12:f1:90:2e:9f:15:44: 07:01:b9:ae:d1:6d:eb:a2:af:c0:81:1a:54:c2:8a:20:82:a8: c9:b7:7d:9c:dd:39:ce:75:8f:59:61:ec:56:c0:09:5d:ea:b1: 89:04:6c:13:98:7d:46:ba:18:a2:f1:57:72:92:8d:af:b0:aa: 19:26:5b:29:d0:14:d6:9e:9c:2e:b3:3e:c1:16:b7:69:bf:4c: 28:39:d1:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G5cqLQ5FLoAnXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNmODgwN2MtNDk0ZS00MWFiLTg0MmMtYzA2NzJkNjI4 M2IxMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YWNhMWYwYzAtY2RhNC00NmRiLWI0M2ItOGJjNTllMWYyMzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I1w4D1717GYH5p3iuhDMjTQc4WUBGQXCbvf IvrcAFw9YM5nItn4Xnydis8Sn8LVSYjYbiMCwNVEsVKAUOeAF7HqEhLzSFzVtMO+ 83MkdMkJlmFUa8bYqLq6eXYYgu7unazfIf61RnX5xmnjDWi/hqGeue4C4JevNBol Y28ScDpVrINS3htThJKpV/314KCkBfnWC9S9q2yUZonO/TagJna4yejYHJdraZcM MBQbrQTAdC5GSAH1llldcLS94N597zLwthVtPjAl6VQwVd3TMVgOpwUoZL2qgCov gtfIuNt4D4wEMnJ3m13YT5+QwJk2qUhzAxUJfGCdxPHnUDhXIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfhsb9qIJvlrpQj7Af4dZZ1QaKAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4 ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3MmQ2MjgzYjEvMmIxZjYzZGMtZDBmMS0z YzE3LWJkZDctZTA3ZDc4ZDliNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGNmODgwN2MtNDk0ZS00MWFiLTg0 MmMtYzA2NzJkNjI4M2IxLzhjZjg4MDdjLTQ5NGUtNDFhYi04NDJjLWMwNjcyZDYy ODNiMS5jcmwwHwYDVR0jBBgwFoAUmSK0wlNyF+E9BTJuTe5jaHRRhJgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3 MmQ2MjgzYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJGmS8ZdijksUpEFhjHHrMStKWbX361kDSIcQOEKKgyYhdpZkf2Y2V8 ew6vDh2tgDWijObu9vZXjzUdjUxz3lzx7ujdALcexT3JZq6AR0eHtHZI/J67Fm1O f10oFD0JMsC4w1uEj7FcUpY7VLQlCivWkFZdyNuTlFGvW9U7OZz6QSkuBIoxx1xN Smqe63GvsWCF7Ppe9X6Dm1vu+PZEsAi/hW1DWd4yqb7Mr8J8EvGQLp8VRAcBua7R beuir8CBGlTCiiCCqMm3fZzdOc51j1lh7FbACV3qsYkEbBOYfUa6GKLxV3KSja+w qhkmWynQFNaenC6zPsEWt2m/TCg50WU= -----END CERTIFICATE-----Generated at Mon Aug 4 14:08:57 2025 by rpki-client