$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/b22abd72-0314-3d31-bb53-c6c482f407aa.roa File: b22abd72-0314-3d31-bb53-c6c482f407aa.roa (raw, json) Hash identifier: 1C/8jqImn/4gISixhH1VlUNTA9dSgeGir/xuppUDq+8= Subject key identifier: 8C:06:13:10:03:70:8F:FA:DF:A9:F8:86:D7:23:33:55:E1:99:58:10 Certificate issuer: /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Certificate serial: 010D0C9F4328584AA42B7BE52CE49E180E952340 Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/b22abd72-0314-3d31-bb53-c6c482f407aa.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 16509 IP address blocks: 208.79.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:7b:e5:2c:e4:9e:18:0e:95:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=b91677ee-ee3d-4eca-a4ca-da182ac9b124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:28:5e:01:89:2a:f5:c5:46:4d:79:26:c6:e0: 45:14:21:68:67:55:73:72:da:08:48:87:b3:b0:8e: 82:45:f4:64:71:7a:3c:12:28:5c:7f:ad:7d:23:83: 52:62:95:a4:6e:fc:5e:18:d7:41:4f:7c:90:fb:ef: 72:88:b2:01:fc:49:65:65:69:64:07:9d:a2:91:ae: 80:08:9d:c0:58:87:c2:b4:e2:52:c1:3d:90:02:3a: d1:f5:28:24:ea:04:d6:f1:4a:e2:15:13:44:80:34: 7d:82:88:b4:e2:be:b0:6b:10:ac:22:95:47:65:76: 96:1e:c3:33:ce:8e:82:1b:73:21:c7:dd:6c:c9:8c: 9f:9f:84:2b:ce:7c:b6:42:79:c3:42:94:8b:ae:ac: 5f:71:4b:d2:f0:ac:86:cf:64:07:b2:d0:fa:5e:60: e0:31:10:ea:d4:d7:f1:da:41:49:d2:b1:ea:54:35: d7:f9:60:bc:4f:19:cd:17:a8:dc:dd:0e:64:fb:b4: fa:15:29:f2:fe:8a:a9:72:81:91:b9:af:0b:a8:da: 31:40:d0:e0:1f:9c:c7:6e:0d:a7:9d:da:34:7a:af: b5:46:bd:8a:18:84:5a:22:f3:8f:7d:97:a3:9e:fa: ec:47:2b:5a:3a:31:53:49:0b:ff:a8:7f:cc:61:a4: e4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:06:13:10:03:70:8F:FA:DF:A9:F8:86:D7:23:33:55:E1:99:58:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/b22abd72-0314-3d31-bb53-c6c482f407aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl X509v3 Authority Key Identifier: keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer sbgp-ipAddrBlock: critical IPv4: 208.79.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a0:bc:33:d5:c1:6b:ef:d1:14:69:7a:9b:56:36:b2:d6:8f: 99:4f:94:75:b7:dd:70:14:df:b8:84:ac:bb:fa:63:35:56:48: 98:d6:c7:90:38:8d:dd:27:1a:14:e0:5d:bf:db:ed:25:45:92: b9:d2:9a:01:ae:4c:eb:de:ed:30:49:08:a4:77:b1:ed:ab:30: db:be:d1:90:91:ec:ba:56:1c:c0:f8:35:bc:fe:de:ae:5b:cf: 3a:bb:ea:a1:58:28:6a:0b:0f:4d:d9:89:3b:7c:48:7c:7c:5d: b5:08:54:e0:95:68:de:54:31:40:2e:ea:03:fc:ff:c5:2f:bf: 29:b7:30:c5:d7:f4:b5:50:2a:c9:61:72:d4:37:0e:c2:da:33: 87:15:14:02:77:b2:fc:68:9d:37:8d:85:1c:9c:ea:6c:a0:23: eb:f3:99:df:f9:75:3f:32:72:c6:99:9e:d1:16:6b:d7:62:c2: 97:1c:ba:51:4f:14:cd:76:fe:29:18:cc:df:1f:e6:ef:ae:9d: 78:64:46:52:82:83:e7:6e:42:5b:10:c2:d3:ca:6c:78:88:b6: 93:95:f2:e1:77:08:40:be:fc:56:76:bf:a0:19:b6:a4:7e:1f: 74:79:ea:a5:80:ec:ae:b3:68:41:31:4b:26:90:39:47:53:9b: 39:3c:77:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK3vlLOSeGA6VI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzNGRhNDItNzUzZS00YjlhLWFiNzYtMzdmZDZjZmQ3 NjVkMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YjkxNjc3ZWUtZWUzZC00ZWNhLWE0Y2EtZGExODJhYzliMTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSheAYkq9cVGTXkmxuBFFCFoZ1VzctoISIez sI6CRfRkcXo8Eihcf619I4NSYpWkbvxeGNdBT3yQ++9yiLIB/EllZWlkB52ika6A CJ3AWIfCtOJSwT2QAjrR9Sgk6gTW8UriFRNEgDR9goi04r6waxCsIpVHZXaWHsMz zo6CG3Mhx91syYyfn4Qrzny2QnnDQpSLrqxfcUvS8KyGz2QHstD6XmDgMRDq1Nfx 2kFJ0rHqVDXX+WC8TxnNF6jc3Q5k+7T6FSny/oqpcoGRua8LqNoxQNDgH5zHbg2n ndo0eq+1Rr2KGIRaIvOPfZejnvrsRytaOjFTSQv/qH/MYaTktQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwGExADcI/636n4htcjM1XhmVgQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0 ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2ZkNmNmZDc2NWQvYjIyYWJkNzItMDMxNC0z ZDMxLWJiNTMtYzZjNDgyZjQwN2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2UzNGRhNDItNzUzZS00YjlhLWFi NzYtMzdmZDZjZmQ3NjVkLzNlMzRkYTQyLTc1M2UtNGI5YS1hYjc2LTM3ZmQ2Y2Zk NzY1ZC5jcmwwHwYDVR0jBBgwFoAUyczkBMk8UbylYUVW4zKa/Jhk+IwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2Zk NmNmZDc2NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E8sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGgvDPVwWvv0RRpeptWNrLWj5lPlHW33XAU37iErLv6YzVWSJjWx5A4 jd0nGhTgXb/b7SVFkrnSmgGuTOve7TBJCKR3se2rMNu+0ZCR7LpWHMD4Nbz+3q5b zzq76qFYKGoLD03ZiTt8SHx8XbUIVOCVaN5UMUAu6gP8/8Uvvym3MMXX9LVQKslh ctQ3DsLaM4cVFAJ3svxonTeNhRyc6mygI+vzmd/5dT8ycsaZntEWa9diwpcculFP FM12/ikYzN8f5u+unXhkRlKCg+duQlsQwtPKbHiItpOV8uF3CEC+/FZ2v6AZtqR+ H3R56qWA7K6zaEExSyaQOUdTmzk8d4c= -----END CERTIFICATE-----Generated at Tue Aug 5 23:06:51 2025 by rpki-client