$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/a73e168d-7b30-3863-a850-c6259591b98c.roa File: a73e168d-7b30-3863-a850-c6259591b98c.roa (raw, json) Hash identifier: 6s90ZBjOBbXM+zehnQVPUsPod+T0sCzQ22QRX6VOEy4= Subject key identifier: A3:01:04:66:8F:1A:9B:D1:4E:16:69:8B:86:9F:91:62:06:77:4E:B0 Certificate issuer: /CN=0f24aff1-87f5-4ba7-be1d-e6e87e0a6605 Certificate serial: 010D0C9F4328584AA01EB870ADD68F7B7D169D80 Authority key identifier: 9C:8A:68:F5:7C:D3:47:5B:14:F0:63:E0:7E:00:C0:10:B6:BB:01:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/a73e168d-7b30-3863-a850-c6259591b98c.roa Signing time: Thu 24 Jul 2025 14:12:00 +0000 ROA not before: Thu 24 Jul 2025 14:12:00 +0000 ROA not after: Wed 22 Oct 2025 14:12:00 +0000 asID: 46890 IP address blocks: 164.163.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a0:1e:b8:70:ad:d6:8f:7b:7d:16:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f24aff1-87f5-4ba7-be1d-e6e87e0a6605 Validity Not Before: Jul 24 14:12:00 2025 GMT Not After : Oct 22 14:12:00 2025 GMT Subject: CN=83638443-7025-4c57-baf3-0306879f50c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:04:cc:27:66:f8:f9:b9:4f:f7:3f:04:25:b7: 0f:f4:1e:ef:b7:97:66:29:5c:1f:3f:a7:23:1c:93: 91:73:b0:df:56:1b:48:6c:a0:26:1f:11:ac:91:62: e0:9f:da:82:50:a2:f9:d9:f2:c2:16:58:65:17:d2: cc:91:5a:af:79:a1:ee:b5:42:c7:5f:85:a1:f3:18: 74:6b:52:9b:53:3b:c1:c7:ae:c1:ee:c8:5c:e9:8a: 71:36:d3:f4:bf:38:0b:d0:0b:27:02:ae:08:ec:21: 79:75:cb:7b:b9:cf:24:4b:8c:64:99:d6:0f:5f:33: bf:2b:20:75:e6:1d:c7:61:96:94:15:c4:57:f3:e9: 67:71:fe:62:21:f2:17:e7:cc:e6:22:3b:58:a3:1e: 74:75:7e:fc:bb:ce:0c:3f:46:c5:d9:2c:f5:ba:d9: a7:ed:35:30:e9:6e:64:de:97:76:b5:77:99:4e:9e: 1f:9f:fd:d8:5b:a5:6e:8f:22:2d:cd:b8:da:a7:fb: 26:44:d8:b8:47:dd:80:10:0b:44:5e:59:6b:11:c4: e9:ef:42:ab:1b:99:ab:cb:53:16:eb:3c:4c:24:4d: 27:a0:19:bb:13:fb:55:aa:8f:eb:05:2b:0d:2e:30: 81:a6:31:fc:8f:4b:47:e4:7c:39:16:48:1d:da:21: 43:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:01:04:66:8F:1A:9B:D1:4E:16:69:8B:86:9F:91:62:06:77:4E:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/a73e168d-7b30-3863-a850-c6259591b98c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.crl X509v3 Authority Key Identifier: keyid:9C:8A:68:F5:7C:D3:47:5B:14:F0:63:E0:7E:00:C0:10:B6:BB:01:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.cer sbgp-ipAddrBlock: critical IPv4: 164.163.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:76:25:2f:8a:b1:39:9f:62:83:db:c8:75:0c:63:02:ea:c8: 1a:70:99:56:6a:42:32:cc:28:7a:cf:92:ba:a3:01:0e:a5:93: 57:33:04:50:da:96:a1:a5:e8:71:a8:40:a8:27:c7:f4:dd:9f: 2b:5a:ef:6f:45:47:29:10:2b:01:ee:5c:40:37:7a:bf:17:5f: 6f:73:3d:1c:75:a7:54:70:b9:c3:be:fb:1b:c4:48:e1:a6:d3: af:34:16:17:50:cc:b3:02:8b:ce:26:89:96:4a:50:82:14:c1: 88:6d:49:12:3d:bc:ad:7b:bf:91:a0:0f:f4:53:64:84:2a:a3: 1a:87:47:c0:82:39:e5:65:fa:0e:0b:eb:0d:ef:2f:d6:a8:1f: ad:67:f0:8f:27:12:a8:93:99:82:1c:ae:9f:90:5b:97:1c:00: eb:ec:1e:30:18:db:86:00:54:64:51:06:54:1f:e8:a4:60:60: 09:e5:3d:4d:23:4b:9f:44:4a:df:58:3a:99:01:09:20:c4:25: ed:86:79:42:b9:0f:2c:ae:c1:8f:a0:f4:56:ec:03:26:b3:8c: 58:82:cb:40:df:fc:ba:83:da:45:05:00:b6:58:5e:11:73:c7: 5c:06:86:7d:93:9c:47:58:ff:82:e6:6d:e0:cd:34:79:e0:eb: a1:a8:10:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqgHrhwrdaPe30WnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYyNGFmZjEtODdmNS00YmE3LWJlMWQtZTZlODdlMGE2 NjA1MB4XDTI1MDcyNDE0MTIwMFoXDTI1MTAyMjE0MTIwMFowLzEtMCsGA1UEAxMk ODM2Mzg0NDMtNzAyNS00YzU3LWJhZjMtMDMwNjg3OWY1MGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQTMJ2b4+blP9z8EJbcP9B7vt5dmKVwfP6cj HJORc7DfVhtIbKAmHxGskWLgn9qCUKL52fLCFlhlF9LMkVqveaHutULHX4Wh8xh0 a1KbUzvBx67B7shc6YpxNtP0vzgL0AsnAq4I7CF5dct7uc8kS4xkmdYPXzO/KyB1 5h3HYZaUFcRX8+lncf5iIfIX58zmIjtYox50dX78u84MP0bF2Sz1utmn7TUw6W5k 3pd2tXeZTp4fn/3YW6VujyItzbjap/smRNi4R92AEAtEXllrEcTp70KrG5mry1MW 6zxMJE0noBm7E/tVqo/rBSsNLjCBpjH8j0tH5Hw5Fkgd2iFDtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMBBGaPGpvRThZpi4afkWIGd06wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZjI0 YWZmMS04N2Y1LTRiYTctYmUxZC1lNmU4N2UwYTY2MDUvYTczZTE2OGQtN2IzMC0z ODYzLWE4NTAtYzYyNTk1OTFiOThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGYyNGFmZjEtODdmNS00YmE3LWJl MWQtZTZlODdlMGE2NjA1LzBmMjRhZmYxLTg3ZjUtNGJhNy1iZTFkLWU2ZTg3ZTBh NjYwNS5jcmwwHwYDVR0jBBgwFoAUnIpo9XzTR1sU8GPgfgDAELa7AS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZjI0YWZmMS04N2Y1LTRiYTctYmUxZC1lNmU4 N2UwYTY2MDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpKNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJ2JS+KsTmfYoPbyHUMYwLqyBpwmVZqQjLMKHrPkrqjAQ6lk1czBFDa lqGl6HGoQKgnx/Tdnyta729FRykQKwHuXEA3er8XX29zPRx1p1RwucO++xvESOGm 0680FhdQzLMCi84miZZKUIIUwYhtSRI9vK17v5GgD/RTZIQqoxqHR8CCOeVl+g4L 6w3vL9aoH61n8I8nEqiTmYIcrp+QW5ccAOvsHjAY24YAVGRRBlQf6KRgYAnlPU0j S59ESt9YOpkBCSDEJe2GeUK5DyyuwY+g9FbsAyazjFiCy0Df/LqD2kUFALZYXhFz x1wGhn2TnEdY/4LmbeDNNHng66GoEBU= -----END CERTIFICATE-----Generated at Thu Aug 7 04:04:13 2025 by rpki-client