$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/392c15e9-05de-39d4-832e-bb708494e16c.roa File: 392c15e9-05de-39d4-832e-bb708494e16c.roa (raw, json) Hash identifier: X/x7FVaeG0CBr1rODs6sCmygfWmR/yS2Q+kHgkxv2eo= Subject key identifier: 5E:E1:C1:45:AC:65:89:CC:7C:7F:B5:DE:F8:CB:E8:1B:58:11:82:13 Certificate issuer: /CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6 Certificate serial: 010D0C9F4328584AA160C23868E91F69D0FB5AC0 Authority key identifier: 43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/392c15e9-05de-39d4-832e-bb708494e16c.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 18604 IP address blocks: 65.181.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:c2:38:68:e9:1f:69:d0:fb:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=044ee9f4-a4c7-4849-9105-390a61312022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:32:0c:07:f6:8c:14:14:88:4b:12:ed:57:ef: f5:86:50:11:84:61:7c:f5:20:8f:65:45:7e:4e:50: cf:6a:fd:e2:5d:f2:3e:3b:0e:c0:cb:3f:0a:3b:31: f6:9b:66:72:e5:7e:df:2e:69:a3:0d:24:98:26:3b: 76:b9:cf:8f:a5:25:2b:0a:d0:a3:e7:0a:24:3e:e2: 1c:f3:4a:b4:d1:64:dc:39:c8:d1:f1:b1:cb:68:dd: 83:90:19:fb:b2:34:a6:e4:86:aa:77:a2:85:66:a1: ff:26:19:bc:d1:65:24:2f:1c:6c:94:22:02:b9:ac: 7e:ba:ae:2a:36:05:cb:02:db:43:f2:5d:10:f6:40: 8a:90:1f:7c:77:f8:83:58:20:cd:7e:6f:9a:c4:db: c8:7f:fc:2e:1b:af:52:f6:d2:7f:90:2a:0c:d0:de: 98:89:e9:e6:90:f8:5c:e7:7e:a6:dd:e9:21:39:eb: fd:89:4b:65:49:2d:ab:44:61:48:a5:d9:e2:06:31: 7b:f5:7f:39:b0:21:39:ef:83:b1:b5:ea:95:ce:ce: 29:2f:6e:e7:c8:34:2c:d8:4a:5a:16:98:b6:6d:b3: 54:e2:ed:15:6b:84:35:64:b5:de:6b:b4:19:53:d5: 8b:d5:d2:fe:9e:58:09:92:83:59:51:d6:bf:4c:19: b5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E1:C1:45:AC:65:89:CC:7C:7F:B5:DE:F8:CB:E8:1B:58:11:82:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/392c15e9-05de-39d4-832e-bb708494e16c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl X509v3 Authority Key Identifier: keyid:43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer sbgp-ipAddrBlock: critical IPv4: 65.181.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:0a:9f:6f:ab:25:81:0c:57:dc:3e:66:34:7f:a7:fb:db:2b: f3:55:f4:be:7f:bb:83:6e:1e:1b:37:28:e1:25:74:45:8d:e3: 47:d1:2a:1f:a3:a8:36:0e:f8:02:41:86:79:07:5a:e3:dd:ed: f2:04:a1:3f:af:e7:55:71:69:8c:43:6e:16:da:2c:bd:54:22: 22:d9:bf:c0:69:60:0b:9b:01:b7:fd:b8:df:75:07:f9:a1:3e: 74:a3:41:55:61:e8:3c:f0:34:ef:b4:0b:65:a7:ef:52:1e:c1: a6:db:43:61:2d:ac:9e:42:42:ef:74:51:48:2e:51:0c:35:3f: e2:42:7f:96:7a:7b:5a:00:2a:db:3c:3d:5e:aa:77:8c:49:dc: 75:74:a0:a8:ba:1e:7e:5c:f8:6d:37:b9:0c:50:98:e1:9e:ae: d4:8e:15:35:fa:e6:8a:f6:ab:55:8e:6e:57:e1:69:b1:23:03: 88:3a:8f:5a:da:d4:14:ee:43:9a:92:fc:1a:42:39:d7:8d:76: f6:d9:4d:e4:48:0d:8a:63:1d:bd:d9:2e:09:8e:ac:e0:af:27: 08:e7:b5:08:01:62:9e:90:9e:74:e4:29:60:df:4a:a0:7c:6a: fa:1b:4b:66:d0:ba:1a:76:d4:ee:38:8b:97:d9:68:00:62:cc: 31:e5:e0:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYMI4aOkfadD7WsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJmZjJiYmQtZmFiMC00ZjQ4LWE2MjUtZDUzYzYzZjFi YmU2MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk MDQ0ZWU5ZjQtYTRjNy00ODQ5LTkxMDUtMzkwYTYxMzEyMDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDIMB/aMFBSISxLtV+/1hlARhGF89SCPZUV+ TlDPav3iXfI+Ow7Ayz8KOzH2m2Zy5X7fLmmjDSSYJjt2uc+PpSUrCtCj5wokPuIc 80q00WTcOcjR8bHLaN2DkBn7sjSm5Iaqd6KFZqH/Jhm80WUkLxxslCICuax+uq4q NgXLAttD8l0Q9kCKkB98d/iDWCDNfm+axNvIf/wuG69S9tJ/kCoM0N6YienmkPhc 536m3ekhOev9iUtlSS2rRGFIpdniBjF79X85sCE574OxteqVzs4pL27nyDQs2Epa Fpi2bbNU4u0Va4Q1ZLXea7QZU9WL1dL+nlgJkoNZUda/TBm19QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7hwUWsZYnMfH+13vjL6BtYEYITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lYmZm MmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNjNjNmMWJiZTYvMzkyYzE1ZTktMDVkZS0z OWQ0LTgzMmUtYmI3MDg0OTRlMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWJmZjJiYmQtZmFiMC00ZjQ4LWE2 MjUtZDUzYzYzZjFiYmU2L2ViZmYyYmJkLWZhYjAtNGY0OC1hNjI1LWQ1M2M2M2Yx YmJlNi5jcmwwHwYDVR0jBBgwFoAUQ97c+J/FjW48YfiAP3IO1Qx0ppMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lYmZmMmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNj NjNmMWJiZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQbVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0Kn2+rJYEMV9w+ZjR/p/vbK/NV9L5/u4NuHhs3KOEldEWN40fRKh+j qDYO+AJBhnkHWuPd7fIEoT+v51VxaYxDbhbaLL1UIiLZv8BpYAubAbf9uN91B/mh PnSjQVVh6DzwNO+0C2Wn71IewabbQ2EtrJ5CQu90UUguUQw1P+JCf5Z6e1oAKts8 PV6qd4xJ3HV0oKi6Hn5c+G03uQxQmOGertSOFTX65or2q1WOblfhabEjA4g6j1ra 1BTuQ5qS/BpCOdeNdvbZTeRIDYpjHb3ZLgmOrOCvJwjntQgBYp6QnnTkKWDfSqB8 avobS2bQuhp21O44i5fZaABizDHl4IY= -----END CERTIFICATE-----Generated at Mon Aug 4 19:10:11 2025 by rpki-client