$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa File: bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa (raw, json) Hash identifier: jlB7J7lygjCQ+93vfAw82TDIt4EsOEAPuxvEC0ucx58= Subject key identifier: 5C:5B:C7:12:7C:38:51:EE:E9:FC:C5:21:69:21:41:89:3B:66:FE:83 Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F4328584AA322105A296875E7807EA480 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa Signing time: Fri 25 Jul 2025 16:06:09 +0000 ROA not before: Fri 25 Jul 2025 16:06:09 +0000 ROA not after: Thu 23 Oct 2025 16:06:09 +0000 asID: 91 IP address blocks: 204.76.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a3:22:10:5a:29:68:75:e7:80:7e:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Jul 25 16:06:09 2025 GMT Not After : Oct 23 16:06:09 2025 GMT Subject: CN=f2fc59cb-889e-4a6e-ad55-8e10da2df47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a1:b9:59:d6:dd:8e:b5:73:86:fa:28:d0:54: d9:53:a8:03:00:86:b5:ad:61:fe:e7:04:e9:3c:90: ce:55:54:de:b9:1f:a9:fc:64:9c:23:46:d7:96:cd: 97:5f:c4:de:13:8e:ad:70:15:32:45:60:48:30:0a: 79:e3:ea:c1:35:95:63:c5:f6:bb:4b:5a:e6:b0:d8: 69:26:24:50:15:0e:23:ba:5a:e1:5d:ac:e1:4f:fc: 79:f3:ea:54:a1:ad:a0:7d:dc:7b:d9:d5:cc:d6:f7: 6d:f8:c6:88:96:81:c1:db:4f:53:3c:62:db:a0:b1: 7c:59:51:92:0f:ee:2e:f1:46:74:8e:55:53:1a:38: 6b:ba:b0:52:49:d3:23:aa:24:89:96:42:35:d0:48: 65:2b:db:54:20:ed:99:16:e4:86:2c:2e:07:ed:4c: 78:80:20:e7:30:3f:00:96:1b:6f:49:7d:3a:03:11: 0d:9e:6e:16:00:26:0e:96:e1:5a:12:fc:b4:fe:cd: 92:b1:48:f9:d4:77:8f:55:14:42:d8:2e:86:11:b1: 00:38:c9:98:02:d2:66:09:90:43:49:60:2c:8d:de: d6:2e:28:8b:27:7f:28:e9:f2:4c:b9:0c:5b:51:e2: 74:83:c0:a2:2e:c8:43:83:c3:4f:93:ad:67:ef:28: f6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5B:C7:12:7C:38:51:EE:E9:FC:C5:21:69:21:41:89:3B:66:FE:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 204.76.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:39:06:5f:df:ab:97:0f:74:32:04:08:da:56:34:f5:d1:49: fa:fd:46:bd:56:f3:82:c7:83:67:59:92:05:eb:9c:3e:b1:a6: 3d:0d:bf:3b:72:41:fd:9d:51:f7:27:4e:33:59:a3:eb:d4:9b: 1c:70:56:c5:50:8c:e9:16:2c:42:14:fd:01:fc:35:3a:43:4a: 02:85:22:ec:cf:0a:33:88:69:6d:96:f8:bd:31:67:c0:b8:04: 36:e0:96:45:67:f9:4d:fb:c1:03:ce:72:63:62:b5:40:9b:5f: c6:e5:e0:49:58:4a:b7:e2:b4:49:05:c5:02:df:0b:67:2d:06: 5d:46:71:63:c3:dc:78:aa:b8:ec:53:62:3b:1f:31:7f:58:5d: 2a:da:cd:be:02:0e:5f:67:e3:a3:06:c0:d0:50:4a:eb:43:f8: 99:11:0a:3b:8a:00:cb:66:b8:de:e6:67:cc:c2:24:fe:07:34: d1:a9:fd:4b:5e:e7:cd:f8:37:34:6c:d6:dd:66:49:85:34:62: 15:93:69:a8:9a:10:c7:3c:14:30:82:e2:51:56:06:ce:9c:0c: c0:0a:95:a2:e6:c1:14:3c:92:00:35:da:5b:45:47:5a:d3:ea: 84:48:05:e3:98:e3:22:0f:82:ad:7e:1b:8e:4f:47:8e:d2:49: 0a:4e:85:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqjIhBaKWh154B+pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI1MDcyNTE2MDYwOVoXDTI1MTAyMzE2MDYwOVowLzEtMCsGA1UEAxMk ZjJmYzU5Y2ItODg5ZS00YTZlLWFkNTUtOGUxMGRhMmRmNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKG5WdbdjrVzhvoo0FTZU6gDAIa1rWH+5wTp PJDOVVTeuR+p/GScI0bXls2XX8TeE46tcBUyRWBIMAp54+rBNZVjxfa7S1rmsNhp JiRQFQ4julrhXazhT/x58+pUoa2gfdx72dXM1vdt+MaIloHB209TPGLboLF8WVGS D+4u8UZ0jlVTGjhrurBSSdMjqiSJlkI10EhlK9tUIO2ZFuSGLC4H7Ux4gCDnMD8A lhtvSX06AxENnm4WACYOluFaEvy0/s2SsUj51HePVRRC2C6GEbEAOMmYAtJmCZBD SWAsjd7WLiiLJ38o6fJMuQxbUeJ0g8CiLshDg8NPk61n7yj2SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxbxxJ8OFHu6fzFIWkhQYk7Zv6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvYmVmNDdjNmYtMzE5OS0z ZmE1LTgyZGYtY2UzYTUzY2M0Nzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEzeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ05Bl/fq5cPdDIECNpWNPXRSfr9Rr1W84LHg2dZkgXrnD6xpj0Nvzty Qf2dUfcnTjNZo+vUmxxwVsVQjOkWLEIU/QH8NTpDSgKFIuzPCjOIaW2W+L0xZ8C4 BDbglkVn+U37wQPOcmNitUCbX8bl4ElYSrfitEkFxQLfC2ctBl1GcWPD3HiquOxT YjsfMX9YXSrazb4CDl9n46MGwNBQSutD+JkRCjuKAMtmuN7mZ8zCJP4HNNGp/Ute 5834NzRs1t1mSYU0YhWTaaiaEMc8FDCC4lFWBs6cDMAKlaLmwRQ8kgA12ltFR1rT 6oRIBeOY4yIPgq1+G45PR47SSQpOhf8= -----END CERTIFICATE-----Generated at Thu Aug 7 23:55:40 2025 by rpki-client