$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/408e275f-c077-3b66-9a3f-a4e43e87657a.roa File: 408e275f-c077-3b66-9a3f-a4e43e87657a.roa (raw, json) Hash identifier: sQ8UadXyio/wQ/YEAIura+QDk6342rBQGtCje1nxyGk= Subject key identifier: C4:11:29:C1:8C:1F:E8:E7:42:D4:C1:5D:1C:51:D9:33:28:BE:CA:74 Certificate issuer: /CN=5c24b227-71d8-4de3-9a17-e538fd673530 Certificate serial: 010D0C9F4328584AA160DD4BB7258462178D96C0 Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/408e275f-c077-3b66-9a3f-a4e43e87657a.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 22418 IP address blocks: 208.96.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:dd:4b:b7:25:84:62:17:8d:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=6e77481a-32b7-4577-8a04-074a2a6663b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:61:56:3b:46:6b:f1:fb:5a:0b:2a:ac:2a: e1:dc:df:21:f1:b5:75:58:2e:fa:b2:78:d8:43:6d: c8:73:1e:dd:2e:eb:0a:04:d6:07:5b:b4:ce:27:d2: 63:b1:a7:db:c1:54:7e:a6:5e:cb:16:e4:43:9e:8a: 28:34:7b:02:85:ca:a5:03:8e:f8:88:fa:25:ac:92: f9:11:e5:59:15:bb:c3:6f:35:74:2d:0e:34:9f:62: d4:a0:35:bc:86:79:64:4c:13:2d:73:01:87:12:ca: 26:dd:81:9c:79:d7:95:50:05:2b:bd:a8:64:71:13: d1:2c:8f:e5:fd:37:76:5b:b4:42:67:d0:38:b7:1e: 3c:f6:e4:85:7e:85:df:5a:6f:45:17:98:60:c8:8f: cc:c7:7d:5e:34:53:03:ae:9a:2a:cb:8f:c3:c3:31: 9a:4e:ce:14:96:86:9d:4a:9a:65:b0:d5:5d:b2:f9: df:9e:79:a1:af:c6:5c:41:b2:20:3f:0c:92:a7:d4: 0f:fa:87:6c:3c:29:0f:d2:42:46:da:7b:ae:f0:9b: 4b:79:5f:64:26:4b:1b:0a:02:7c:44:58:22:1e:e0: ac:c3:24:bd:98:99:49:be:91:21:5b:03:37:cd:ac: 73:88:f2:86:1e:86:f4:ba:40:77:4b:6c:f7:c3:95: 4a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:11:29:C1:8C:1F:E8:E7:42:D4:C1:5D:1C:51:D9:33:28:BE:CA:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/408e275f-c077-3b66-9a3f-a4e43e87657a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl X509v3 Authority Key Identifier: keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer sbgp-ipAddrBlock: critical IPv4: 208.96.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a0:b4:8c:22:1b:16:20:46:24:c9:4e:54:3e:a0:98:67:3f: a3:3c:d6:5e:0c:f6:d7:27:fa:2b:45:d7:e7:23:7f:83:ad:ee: 13:43:b3:18:41:46:e8:07:63:38:03:22:1a:92:d7:2b:9c:70: d2:c8:f4:65:a3:d2:9b:e5:a2:ac:d4:07:71:b5:fe:e5:e0:b6: 38:c9:73:c8:f1:a6:93:5c:85:98:e6:18:db:8c:3e:3e:7f:e9: dc:37:bf:6c:87:96:98:2c:fa:68:c4:37:d5:05:e2:2b:dc:3e: ab:0a:d5:c7:a4:a4:42:c5:ea:7a:76:c9:3e:27:68:b4:c8:5a: 2e:06:02:ee:55:ba:c8:ab:c4:7f:5d:8c:c7:bd:59:09:a8:17: ab:17:58:03:5a:8e:71:94:83:51:a4:09:ba:25:52:9f:ef:52: 7d:3e:58:d7:3b:ba:f6:ef:61:33:a1:f5:4a:e2:b6:ed:f1:f1: 16:80:d8:e7:28:ce:6b:d1:0d:ca:01:b0:27:04:a0:8c:7e:d4: 09:39:14:32:50:5d:ef:c8:de:7c:2a:e3:ee:2e:ee:bc:e5:a2: 78:fa:71:f6:47:63:f8:36:1b:07:95:e0:4c:89:13:14:da:76: c0:5d:07:34:8f:28:62:d6:23:c5:a7:5f:66:a6:5d:b0:cd:45: e5:ff:94:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYN1LtyWEYheNlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNGIyMjctNzFkOC00ZGUzLTlhMTctZTUzOGZkNjcz NTMwMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NmU3NzQ4MWEtMzJiNy00NTc3LThhMDQtMDc0YTJhNjY2M2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWJhVjtGa/H7WgsqrCrh3N8h8bV1WC76snjY Q23Icx7dLusKBNYHW7TOJ9JjsafbwVR+pl7LFuRDnoooNHsChcqlA474iPolrJL5 EeVZFbvDbzV0LQ40n2LUoDW8hnlkTBMtcwGHEsom3YGcedeVUAUrvahkcRPRLI/l /Td2W7RCZ9A4tx489uSFfoXfWm9FF5hgyI/Mx31eNFMDrpoqy4/DwzGaTs4Uload SpplsNVdsvnfnnmhr8ZcQbIgPwySp9QP+odsPCkP0kJG2nuu8JtLeV9kJksbCgJ8 RFgiHuCswyS9mJlJvpEhWwM3zaxziPKGHob0ukB3S2z3w5VKvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQRKcGMH+jnQtTBXRxR2TMovsp0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YzI0 YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4ZmQ2NzM1MzAvNDA4ZTI3NWYtYzA3Ny0z YjY2LTlhM2YtYTRlNDNlODc2NTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWMyNGIyMjctNzFkOC00ZGUzLTlh MTctZTUzOGZkNjczNTMwLzVjMjRiMjI3LTcxZDgtNGRlMy05YTE3LWU1MzhmZDY3 MzUzMC5jcmwwHwYDVR0jBBgwFoAURxw2+fK+zH6557f46lGtvMrC1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzI0YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4 ZmQ2NzM1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0GCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmgtIwiGxYgRiTJTlQ+oJhnP6M81l4M9tcn+itF1+cjf4Ot7hNDsxhB RugHYzgDIhqS1yuccNLI9GWj0pvloqzUB3G1/uXgtjjJc8jxppNchZjmGNuMPj5/ 6dw3v2yHlpgs+mjEN9UF4ivcPqsK1cekpELF6np2yT4naLTIWi4GAu5VusirxH9d jMe9WQmoF6sXWANajnGUg1GkCbolUp/vUn0+WNc7uvbvYTOh9Uritu3x8RaA2Oco zmvRDcoBsCcEoIx+1Ak5FDJQXe/I3nwq4+4u7rzlonj6cfZHY/g2GweV4EyJExTa dsBdBzSPKGLWI8WnX2amXbDNReX/lJg= -----END CERTIFICATE-----Generated at Mon Aug 4 14:53:00 2025 by rpki-client