$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa File: dfac5974-f75e-3282-b330-4ac930e4be2c.roa (raw, json) Hash identifier: jTy+ewTnaiqURyq/nQ+wZoF/gqJFtDo1JoMlHrHKSXE= Subject key identifier: A8:9E:71:D7:9A:11:0B:82:F5:DA:5A:CE:36:DB:37:30:07:0B:9A:C2 Certificate issuer: /CN=e0222b33-d953-40bd-9e16-838d515a3e80 Certificate serial: 010D0C9F4328584AA42B7E0D03884B9331E3C010 Authority key identifier: 53:EB:13:69:3B:D7:1E:45:8A:7B:81:DF:7C:FB:F4:D4:63:23:1C:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 30708 IP address blocks: 208.86.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:7e:0d:03:88:4b:93:31:e3:c0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0222b33-d953-40bd-9e16-838d515a3e80 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=977609db-70a5-4375-adc2-160c023e3b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e0:c6:79:a3:66:98:ff:33:8c:97:8b:db:f4: 2d:64:50:11:38:d3:cb:94:3e:52:01:a4:d8:a5:cc: 49:51:18:42:d3:93:fa:34:5d:1c:39:b2:bf:5d:55: ca:a0:3c:ce:cd:b8:1d:ef:b5:63:63:47:c9:e7:bb: 65:65:67:8f:7a:5e:90:80:0f:b9:ba:64:7f:37:36: 4d:08:a8:3f:81:47:4b:d9:a4:54:6e:84:6f:16:ac: d9:ec:ab:ea:ad:98:03:1f:41:6f:49:93:c6:d8:64: 83:d0:46:99:d0:41:75:cc:d9:7e:01:a1:e6:f2:90: fc:1f:3c:5d:1a:2c:eb:39:41:4e:6e:56:5e:1c:a6: 0a:81:4c:f3:5b:8e:f6:c7:fa:31:54:44:34:be:89: fa:ac:b0:6d:22:dd:1d:65:b9:17:61:ca:3a:8b:0f: 27:e7:8b:d9:f4:44:97:37:6b:8c:b5:93:c2:72:d2: 67:64:7c:a0:c9:4f:5f:c7:02:5e:51:cf:f4:e1:5a: a8:12:33:13:73:60:79:a6:bc:2f:c8:f9:50:af:8e: ad:8a:f4:30:7c:eb:69:90:08:76:a8:0a:2a:5e:22: 8d:2f:47:b9:5f:b1:09:19:f4:7c:08:04:23:2c:a5: d1:46:b4:19:dd:8c:b3:86:19:5a:30:ec:ae:34:fe: c3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9E:71:D7:9A:11:0B:82:F5:DA:5A:CE:36:DB:37:30:07:0B:9A:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.crl X509v3 Authority Key Identifier: keyid:53:EB:13:69:3B:D7:1E:45:8A:7B:81:DF:7C:FB:F4:D4:63:23:1C:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer sbgp-ipAddrBlock: critical IPv4: 208.86.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:3a:c5:ec:4d:85:db:0e:f4:10:3f:60:df:fa:93:57:e8:3c: 90:d9:4c:4f:ab:d5:3f:af:b0:85:96:dd:9b:dd:29:2f:af:ff: 05:4a:66:42:f5:07:3b:4c:f6:d6:58:ba:20:bd:d1:0f:d7:32: cb:ac:48:c4:7e:9e:d2:14:0b:2e:cd:f8:6c:3d:7d:0e:88:ba: e2:4d:5d:4d:53:04:0c:4b:fc:86:f1:dc:62:c8:c3:28:d2:12: 6a:b6:89:21:50:0a:17:8b:9f:ee:2c:d9:34:c6:b4:b5:b1:f8: 9e:f0:50:94:65:d6:e4:be:0e:ac:03:58:98:86:0c:f6:41:cb: 40:a8:cb:3a:32:0d:e1:a7:42:1c:9b:c3:df:1d:c3:37:da:90: 0f:be:e5:db:85:a2:52:6a:86:a2:0f:5b:6a:50:d7:83:6c:79: 7b:1b:21:f0:a9:12:4a:02:e5:08:81:3c:07:ba:6a:22:18:5f: 43:b4:ed:17:8e:46:80:e0:81:58:01:b2:55:9c:fd:67:1a:dd: 70:54:84:d9:c7:a9:b6:52:eb:94:ba:1c:30:19:e7:f1:a5:c3: 38:5e:fe:c1:84:0e:a1:6f:a0:16:2d:f9:8d:c1:bc:2f:09:af: de:90:7d:f7:a4:83:7c:6f:72:ac:e2:47:9a:3c:cf:79:d0:79: 99:8d:c2:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK34NA4hLkzHjwBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyMjJiMzMtZDk1My00MGJkLTllMTYtODM4ZDUxNWEz ZTgwMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk OTc3NjA5ZGItNzBhNS00Mzc1LWFkYzItMTYwYzAyM2UzYjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ODGeaNmmP8zjJeL2/QtZFARONPLlD5SAaTY pcxJURhC05P6NF0cObK/XVXKoDzOzbgd77VjY0fJ57tlZWePel6QgA+5umR/NzZN CKg/gUdL2aRUboRvFqzZ7KvqrZgDH0FvSZPG2GSD0EaZ0EF1zNl+AaHm8pD8Hzxd GizrOUFOblZeHKYKgUzzW472x/oxVEQ0von6rLBtIt0dZbkXYco6iw8n54vZ9ESX N2uMtZPCctJnZHygyU9fxwJeUc/04VqoEjMTc2B5prwvyPlQr46tivQwfOtpkAh2 qAoqXiKNL0e5X7EJGfR8CAQjLKXRRrQZ3YyzhhlaMOyuNP7DhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiecdeaEQuC9dpazjbbNzAHC5rCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMDIy MmIzMy1kOTUzLTQwYmQtOWUxNi04MzhkNTE1YTNlODAvZGZhYzU5NzQtZjc1ZS0z MjgyLWIzMzAtNGFjOTMwZTRiZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTAyMjJiMzMtZDk1My00MGJkLTll MTYtODM4ZDUxNWEzZTgwL2UwMjIyYjMzLWQ5NTMtNDBiZC05ZTE2LTgzOGQ1MTVh M2U4MC5jcmwwHwYDVR0jBBgwFoAUU+sTaTvXHkWKe4HffPv01GMjHOYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMDIyMmIzMy1kOTUzLTQwYmQtOWUxNi04Mzhk NTE1YTNlODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FZcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM6xexNhdsO9BA/YN/6k1foPJDZTE+r1T+vsIWW3ZvdKS+v/wVKZkL1 BztM9tZYuiC90Q/XMsusSMR+ntIUCy7N+Gw9fQ6IuuJNXU1TBAxL/Ibx3GLIwyjS Emq2iSFQCheLn+4s2TTGtLWx+J7wUJRl1uS+DqwDWJiGDPZBy0CoyzoyDeGnQhyb w98dwzfakA++5duFolJqhqIPW2pQ14NseXsbIfCpEkoC5QiBPAe6aiIYX0O07ReO RoDggVgBslWc/Wca3XBUhNnHqbZS65S6HDAZ5/Glwzhe/sGEDqFvoBYt+Y3BvC8J r96Qffekg3xvcqziR5o8z3nQeZmNwto= -----END CERTIFICATE-----Generated at Sat Aug 9 20:35:00 2025 by rpki-client