$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/87b7e59e-3ad6-3ec4-a781-ac547ef85a8e.roa File: 87b7e59e-3ad6-3ec4-a781-ac547ef85a8e.roa (raw, json) Hash identifier: R6NV22mAHhhgFvkhcHo0t1o6RUCVSQ8SgpqBf/g1xhw= Subject key identifier: F1:F4:4A:31:3E:F9:DC:9C:02:10:32:00:08:CA:B6:E4:F0:40:37:3A Certificate issuer: /CN=d416e28d-79e4-4432-b727-97e9702afe09 Certificate serial: 010D0C9F4328584AADF11EA7515E77F972D21BE0 Authority key identifier: AC:C0:26:32:04:53:92:DE:62:BB:D8:A7:6C:D2:76:DB:05:52:3A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/87b7e59e-3ad6-3ec4-a781-ac547ef85a8e.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 134098 IP address blocks: 208.73.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/d416e28d-79e4-4432-b727-97e9702afe09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/d416e28d-79e4-4432-b727-97e9702afe09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:1e:a7:51:5e:77:f9:72:d2:1b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d416e28d-79e4-4432-b727-97e9702afe09 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=2c841869-8d8e-4d46-b088-aab19318bc08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3c:9f:99:80:ab:11:52:bf:6d:45:0c:65:43: ce:35:6e:31:ef:69:0a:a5:95:97:01:ff:77:48:f5: 69:29:7c:fe:2e:84:0d:29:b0:f2:bb:ca:57:fb:d0: f4:6d:9b:33:8a:31:79:74:fb:f4:0c:50:09:cd:7f: 21:4b:5d:c1:bc:3e:aa:58:32:ae:6d:31:8f:30:51: a4:14:89:fe:01:ec:0b:e3:59:80:a7:0a:73:9b:95: 2e:72:b9:f8:ca:53:17:81:42:49:26:cd:ea:d1:dc: 5f:de:80:f8:28:fa:01:0d:39:be:a8:de:47:f8:e1: 4c:29:4b:83:3e:0c:50:fc:19:34:11:2b:45:c8:df: f9:4f:81:14:ae:8a:ee:b2:dd:81:ee:d2:92:c0:52: ad:a5:f4:04:9a:e5:a7:4f:e3:af:d2:bc:cc:54:d3: 85:43:54:fd:a0:ed:bf:7f:53:7b:29:08:4c:a6:97: b8:b0:ec:4c:e8:33:b3:c4:54:67:0d:3a:f4:a6:03: 02:2f:bd:55:11:2a:46:22:9f:91:0c:25:ca:0b:ea: 37:bb:2b:9d:56:94:74:42:70:a9:1b:ea:42:78:f0: 2a:2a:cd:44:bb:62:8d:4c:81:2a:6a:88:52:3f:dd: 66:56:01:2a:2e:45:9a:e5:f8:6e:61:54:b3:4f:35: 27:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F4:4A:31:3E:F9:DC:9C:02:10:32:00:08:CA:B6:E4:F0:40:37:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/87b7e59e-3ad6-3ec4-a781-ac547ef85a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/d416e28d-79e4-4432-b727-97e9702afe09.crl X509v3 Authority Key Identifier: keyid:AC:C0:26:32:04:53:92:DE:62:BB:D8:A7:6C:D2:76:DB:05:52:3A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09.cer sbgp-ipAddrBlock: critical IPv4: 208.73.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:a5:af:d0:eb:d4:a5:82:2f:32:2c:b6:48:ff:84:ad:c9:70: 7b:77:c0:17:1c:c4:cd:93:d7:a6:86:d6:c5:1b:e8:a8:90:0d: cf:c4:90:2b:3b:ba:85:d8:43:d5:e6:ac:65:29:cb:6b:ad:4a: 77:cf:f4:85:13:f5:78:f5:71:9e:55:ea:8a:06:f7:60:a9:09: 22:ad:9d:18:d5:85:c8:c5:4f:93:47:ca:de:c7:f1:9d:e1:26: 2b:ff:6f:96:26:93:bf:c3:96:54:d5:5d:7e:f0:93:c8:a2:36: d8:68:ad:f5:8d:de:ed:42:e3:c4:a7:f5:c4:ca:88:7c:29:3d: 03:53:a0:11:b5:49:61:55:a1:1e:14:1e:17:7c:47:9d:15:30: 8f:40:e2:9e:71:19:f0:fd:a0:4c:8c:2c:c6:42:bd:83:28:0f: 0d:f3:b2:fa:cf:75:e8:ec:03:41:71:19:ea:8f:f0:8a:71:dc: 15:2a:cf:3e:0c:5c:61:90:b5:95:d8:8c:9d:62:92:f9:75:46: 44:6d:3e:4c:36:d1:ed:1a:06:c7:1f:24:51:f2:ce:72:f0:c2: 97:f9:9a:fb:ff:77:f3:9b:59:bb:7f:7b:96:30:9b:61:54:43: f5:e7:e9:1a:b5:46:bf:03:a0:07:0d:eb:e3:ce:62:28:e4:46: 1c:62:24:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8R6nUV53+XLSG+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxNmUyOGQtNzllNC00NDMyLWI3MjctOTdlOTcwMmFm ZTA5MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MmM4NDE4NjktOGQ4ZS00ZDQ2LWIwODgtYWFiMTkzMThiYzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDyfmYCrEVK/bUUMZUPONW4x72kKpZWXAf93 SPVpKXz+LoQNKbDyu8pX+9D0bZszijF5dPv0DFAJzX8hS13BvD6qWDKubTGPMFGk FIn+AewL41mApwpzm5Uucrn4ylMXgUJJJs3q0dxf3oD4KPoBDTm+qN5H+OFMKUuD PgxQ/Bk0EStFyN/5T4EUrorust2B7tKSwFKtpfQEmuWnT+Ov0rzMVNOFQ1T9oO2/ f1N7KQhMppe4sOxM6DOzxFRnDTr0pgMCL71VESpGIp+RDCXKC+o3uyudVpR0QnCp G+pCePAqKs1Eu2KNTIEqaohSP91mVgEqLkWa5fhuYVSzTzUnbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPH0SjE++dycAhAyAAjKtuTwQDc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDE2 ZTI4ZC03OWU0LTQ0MzItYjcyNy05N2U5NzAyYWZlMDkvODdiN2U1OWUtM2FkNi0z ZWM0LWE3ODEtYWM1NDdlZjg1YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQxNmUyOGQtNzllNC00NDMyLWI3 MjctOTdlOTcwMmFmZTA5L2Q0MTZlMjhkLTc5ZTQtNDQzMi1iNzI3LTk3ZTk3MDJh ZmUwOS5jcmwwHwYDVR0jBBgwFoAUrMAmMgRTkt5iu9inbNJ22wVSOrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDE2ZTI4ZC03OWU0LTQ0MzItYjcyNy05N2U5 NzAyYWZlMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EnXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWlr9Dr1KWCLzIstkj/hK3JcHt3wBccxM2T16aG1sUb6KiQDc/EkCs7 uoXYQ9XmrGUpy2utSnfP9IUT9Xj1cZ5V6ooG92CpCSKtnRjVhcjFT5NHyt7H8Z3h Jiv/b5Ymk7/DllTVXX7wk8iiNthorfWN3u1C48Sn9cTKiHwpPQNToBG1SWFVoR4U Hhd8R50VMI9A4p5xGfD9oEyMLMZCvYMoDw3zsvrPdejsA0FxGeqP8Ipx3BUqzz4M XGGQtZXYjJ1ikvl1RkRtPkw20e0aBscfJFHyznLwwpf5mvv/d/ObWbt/e5Ywm2FU Q/Xn6Rq1Rr8DoAcN6+POYijkRhxiJKE= -----END CERTIFICATE-----Generated at Sun Aug 10 10:42:10 2025 by rpki-client