$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/254b380b-2877-3b52-9210-faa230df58ef.roa File: 254b380b-2877-3b52-9210-faa230df58ef.roa (raw, json) Hash identifier: u8Cfh0IYBpdbASS5ueUnWsCZH2gBS6ymY4C+C04LrCc= Subject key identifier: B6:81:C1:96:D6:EF:53:15:6D:E9:E9:9F:C4:0F:6E:D0:08:BA:11:84 Certificate issuer: /CN=b769440d-4a7e-478f-82a5-04834c8887fe Certificate serial: 010D0C9F4328584AC710E7D0F8EAE25E72BAF6E4 Authority key identifier: B0:CF:FC:49:E8:8E:7A:E5:0C:08:D4:BA:F5:55:72:38:C0:84:97:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/254b380b-2877-3b52-9210-faa230df58ef.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 10980 IP address blocks: 198.167.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/b769440d-4a7e-478f-82a5-04834c8887fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/b769440d-4a7e-478f-82a5-04834c8887fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:10:e7:d0:f8:ea:e2:5e:72:ba:f6:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b769440d-4a7e-478f-82a5-04834c8887fe Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=24bfa648-e3d3-4253-b734-97b79f7895d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:95:a3:dd:60:51:69:03:fd:ed:84:ff:62:20: ab:3c:00:34:84:d5:32:16:ef:26:b0:ab:21:8c:1d: 9b:26:11:50:5b:35:c9:75:17:de:85:b1:25:12:ea: 08:46:8d:3b:df:2e:10:22:bc:23:39:76:3e:66:49: ae:38:ba:8f:71:f1:27:30:1b:f6:e9:44:be:b6:1e: 60:72:6a:14:96:e8:33:d1:62:f1:16:7d:b8:25:f6: 6f:44:2e:76:84:83:27:10:46:3f:28:2c:d0:7d:e5: 91:12:9e:e3:3c:40:c5:f4:1e:7b:87:5a:7c:bb:da: ae:76:f5:7f:3d:b9:42:5b:fe:6d:e7:4b:03:80:41: a6:3b:a6:c8:c4:98:a1:2b:28:28:41:48:04:f8:ec: eb:02:21:65:94:cc:5e:86:48:56:73:b4:d3:03:3b: 02:c6:30:92:92:54:f2:1f:78:84:c5:7a:06:75:39: 98:97:86:1f:3e:19:48:29:d0:c8:5e:55:65:86:b8: 33:14:f3:fc:6c:01:46:4f:01:d7:da:c6:98:de:b6: da:7c:22:5f:e8:d3:90:dd:fb:c7:e9:42:b5:b0:b9: ea:c4:09:1f:b2:6d:01:13:42:43:da:5e:54:d8:3d: b8:b0:53:76:a1:0b:58:6e:bf:25:a1:58:12:c1:78: 65:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:81:C1:96:D6:EF:53:15:6D:E9:E9:9F:C4:0F:6E:D0:08:BA:11:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/254b380b-2877-3b52-9210-faa230df58ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/b769440d-4a7e-478f-82a5-04834c8887fe.crl X509v3 Authority Key Identifier: keyid:B0:CF:FC:49:E8:8E:7A:E5:0C:08:D4:BA:F5:55:72:38:C0:84:97:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe.cer sbgp-ipAddrBlock: critical IPv4: 198.167.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:9a:a0:b2:dd:7e:7c:84:6b:64:dc:07:34:67:2e:1b:30:b4: 16:7a:af:4a:ed:3e:49:cd:3c:56:a5:7d:46:e4:d8:02:84:db: b4:db:75:56:e9:cc:bc:26:e7:9e:b5:f7:bc:06:b7:70:67:2d: b8:6c:02:f1:8c:58:a7:bd:18:f2:ad:c7:50:9e:ec:d8:44:a6: 8d:63:5e:2d:a1:a1:5e:b1:ea:8c:56:cb:bf:6b:2a:a5:51:e5: 0d:e3:ba:57:e7:60:a1:de:02:fd:0c:af:da:8b:c3:c8:10:51: 9d:d8:2e:fa:17:1f:08:8c:e8:a2:00:2e:08:2c:24:fd:05:b0: 93:7f:33:24:29:40:cc:24:c7:35:e9:22:61:82:ce:96:f9:d1: 61:82:a1:13:ab:75:7b:69:0c:fc:e1:a2:45:96:be:0d:88:cf: eb:de:4f:56:2c:46:de:88:de:ba:c4:41:ef:d3:9d:0a:07:ef: 7c:9d:33:ba:be:10:51:7d:d9:59:f1:c8:fb:77:ed:c3:52:21: bb:44:2b:f2:6a:1e:c9:63:9e:46:17:d3:74:f7:43:f0:eb:d3: be:2a:d0:3e:67:de:54:e6:f7:79:d5:f2:e0:e2:cf:ca:e1:94: 11:f8:78:49:6e:59:36:e3:50:f7:f3:a6:be:96:a1:a7:87:2e: f7:08:ab:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEOfQ+OriXnK69uQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2OTQ0MGQtNGE3ZS00NzhmLTgyYTUtMDQ4MzRjODg4 N2ZlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MjRiZmE2NDgtZTNkMy00MjUzLWI3MzQtOTdiNzlmNzg5NWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpWj3WBRaQP97YT/YiCrPAA0hNUyFu8msKsh jB2bJhFQWzXJdRfehbElEuoIRo073y4QIrwjOXY+ZkmuOLqPcfEnMBv26US+th5g cmoUlugz0WLxFn24JfZvRC52hIMnEEY/KCzQfeWREp7jPEDF9B57h1p8u9qudvV/ PblCW/5t50sDgEGmO6bIxJihKygoQUgE+OzrAiFllMxehkhWc7TTAzsCxjCSklTy H3iExXoGdTmYl4YfPhlIKdDIXlVlhrgzFPP8bAFGTwHX2saY3rbafCJf6NOQ3fvH 6UK1sLnqxAkfsm0BE0JD2l5U2D24sFN2oQtYbr8loVgSwXhl1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaBwZbW71MVbenpn8QPbtAIuhGEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNzY5 NDQwZC00YTdlLTQ3OGYtODJhNS0wNDgzNGM4ODg3ZmUvMjU0YjM4MGItMjg3Ny0z YjUyLTkyMTAtZmFhMjMwZGY1OGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjc2OTQ0MGQtNGE3ZS00NzhmLTgy YTUtMDQ4MzRjODg4N2ZlL2I3Njk0NDBkLTRhN2UtNDc4Zi04MmE1LTA0ODM0Yzg4 ODdmZS5jcmwwHwYDVR0jBBgwFoAUsM/8SeiOeuUMCNS69VVyOMCEl58wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNzY5NDQwZC00YTdlLTQ3OGYtODJhNS0wNDgz NGM4ODg3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxqekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKaoLLdfnyEa2TcBzRnLhswtBZ6r0rtPknNPFalfUbk2AKE27TbdVbp zLwm556197wGt3BnLbhsAvGMWKe9GPKtx1Ce7NhEpo1jXi2hoV6x6oxWy79rKqVR 5Q3julfnYKHeAv0Mr9qLw8gQUZ3YLvoXHwiM6KIALggsJP0FsJN/MyQpQMwkxzXp ImGCzpb50WGCoROrdXtpDPzhokWWvg2Iz+veT1YsRt6I3rrEQe/TnQoH73ydM7q+ EFF92VnxyPt37cNSIbtEK/JqHsljnkYX03T3Q/Dr074q0D5n3lTm93nV8uDiz8rh lBH4eEluWTbjUPfzpr6WoaeHLvcIq+c= -----END CERTIFICATE-----Generated at Fri Aug 8 00:13:24 2025 by rpki-client