$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/abfd22fc-71d6-3554-8616-e76f2c05b55a.roa File: abfd22fc-71d6-3554-8616-e76f2c05b55a.roa (raw, json) Hash identifier: kjCmmGun4uTOaCBqi4U3RW0yxFifKIVhXBOU57rwMjw= Subject key identifier: AF:B3:AA:6A:2A:41:D6:98:E0:D4:E8:E8:83:FA:A3:90:F6:4E:20:5E Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584A9A662A75D59434B38181A720 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/abfd22fc-71d6-3554-8616-e76f2c05b55a.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 203724 IP address blocks: 208.65.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:2a:75:d5:94:34:b3:81:81:a7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=48512819-a5ba-4c31-9ab9-066faa63880a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:00:d2:b8:e7:bb:09:7a:41:9b:e2:c6:ae:df: 4f:55:98:c6:7a:7c:6a:22:90:93:11:4f:f6:10:31: 16:31:27:4b:fe:12:42:c1:ce:f8:16:d2:34:22:ec: 83:3f:8d:40:ff:37:b9:04:55:9d:ec:3b:cd:8a:ef: c9:f9:16:29:13:f5:c7:5c:df:3c:b4:71:7c:9b:df: 3f:f5:41:1f:7a:2b:1f:c4:f7:94:90:82:11:f3:d3: 5d:88:2d:3d:77:20:86:4a:ab:6e:91:4d:52:2a:74: 64:62:00:8c:86:bd:84:65:04:61:c9:0d:48:a3:ab: 00:c5:a6:90:40:bf:31:8c:c7:8d:50:de:f8:40:c7: 4f:be:4d:2f:1b:5c:12:14:3a:9c:8b:61:b5:e0:cd: 42:7f:c7:06:ac:d1:f4:f1:c4:39:04:75:b4:b5:20: df:d7:7e:d6:c1:a7:ec:5d:ec:af:09:e8:65:c5:50: 9a:cd:25:52:83:3e:81:df:b6:d3:70:91:27:aa:25: 5b:41:03:a9:7c:3a:56:48:a3:4f:98:7d:d6:cc:d3: 1b:ed:bc:d8:4d:a5:2e:24:da:1b:6c:f3:be:87:70: 64:7a:0a:0c:63:c5:76:9c:10:7b:36:a9:ee:8b:d6: 32:c0:f2:da:cb:7b:0a:85:4f:23:88:98:bb:d7:36: cb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B3:AA:6A:2A:41:D6:98:E0:D4:E8:E8:83:FA:A3:90:F6:4E:20:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/abfd22fc-71d6-3554-8616-e76f2c05b55a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 208.65.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:8d:d4:30:d6:2e:d1:f3:be:28:34:83:e5:4e:58:57:2a:92: db:03:bc:6b:86:56:d8:a8:80:ab:fd:ea:71:ed:d4:23:ef:47: 0f:b9:1c:40:dc:77:9c:89:7c:b8:d4:00:c1:f8:15:cb:b2:8e: 04:0c:e1:85:82:16:85:2e:66:0a:da:6e:ff:ac:64:50:f7:f1: 1a:64:39:38:54:4e:51:0b:56:8c:a5:a8:b5:ae:19:69:85:e5: 85:a9:ee:77:e6:38:f5:30:21:89:f5:92:2e:9a:d4:94:3d:82: d1:06:1b:2f:06:1b:8b:c2:e3:aa:0f:f9:07:94:d9:e8:cb:2e: ee:33:62:ef:bd:b7:1e:d4:86:ff:c7:33:26:b9:56:42:fc:be: 3e:45:c2:b7:6f:84:81:bd:d3:49:a5:ad:d7:e7:d4:44:36:66: 9f:a0:6d:fa:50:29:18:10:b1:d1:38:cd:fb:35:5f:73:7b:52: 7f:32:f7:ca:ef:02:bd:aa:72:d5:78:28:ec:21:34:65:a2:41: 45:fb:78:69:cd:de:f4:c6:f5:61:4f:fe:87:a1:41:a0:6c:d7: 5c:09:7f:37:28:e2:4a:d7:13:66:9c:93:7f:bd:e9:08:96:6e: 32:9d:2b:b7:59:d8:2f:d0:40:13:7b:e6:51:30:8a:a0:79:fb: d6:8b:50:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZip11ZQ0s4GBpyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk NDg1MTI4MTktYTViYS00YzMxLTlhYjktMDY2ZmFhNjM4ODBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ADSuOe7CXpBm+LGrt9PVZjGenxqIpCTEU/2 EDEWMSdL/hJCwc74FtI0IuyDP41A/ze5BFWd7DvNiu/J+RYpE/XHXN88tHF8m98/ 9UEfeisfxPeUkIIR89NdiC09dyCGSqtukU1SKnRkYgCMhr2EZQRhyQ1Io6sAxaaQ QL8xjMeNUN74QMdPvk0vG1wSFDqci2G14M1Cf8cGrNH08cQ5BHW0tSDf137Wwafs XeyvCehlxVCazSVSgz6B37bTcJEnqiVbQQOpfDpWSKNPmH3WzNMb7bzYTaUuJNob bPO+h3BkegoMY8V2nBB7Nqnui9YywPLay3sKhU8jiJi71zbLiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+zqmoqQdaY4NTo6IP6o5D2TiBeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYWJmZDIyZmMtNzFkNi0z NTU0LTg2MTYtZTc2ZjJjMDViNTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABON1DDWLtHzvig0g+VOWFcqktsDvGuGVtiogKv96nHt1CPvRw+5HEDc d5yJfLjUAMH4FcuyjgQM4YWCFoUuZgrabv+sZFD38RpkOThUTlELVoylqLWuGWmF 5YWp7nfmOPUwIYn1ki6a1JQ9gtEGGy8GG4vC46oP+QeU2ejLLu4zYu+9tx7Uhv/H Mya5VkL8vj5FwrdvhIG900mlrdfn1EQ2Zp+gbfpQKRgQsdE4zfs1X3N7Un8y98rv Ar2qctV4KOwhNGWiQUX7eGnN3vTG9WFP/oehQaBs11wJfzco4krXE2ack3+96QiW bjKdK7dZ2C/QQBN75lEwiqB5+9aLUKc= -----END CERTIFICATE-----Generated at Mon Aug 4 16:11:57 2025 by rpki-client