$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d24168f5-a980-3a14-a89b-7351a9920158.roa File: d24168f5-a980-3a14-a89b-7351a9920158.roa (raw, json) Hash identifier: Fgph15wbHFbLWWUQYAjx2BnV7i+QSVwh023v1wjWxhU= Subject key identifier: 1C:2A:0C:16:7D:B4:94:8E:1A:4D:EA:F9:BC:6D:C7:9A:CC:44:67:95 Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584AAB2658C55E42CCDF292ABD00 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d24168f5-a980-3a14-a89b-7351a9920158.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 22147 IP address blocks: 208.118.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:58:c5:5e:42:cc:df:29:2a:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=40b9ff49-ba99-4776-8e19-b33e758b935f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:05:4f:27:8f:26:bf:55:63:9a:16:a1:20:dc: bd:a7:8f:98:c6:88:e8:9d:8a:59:e1:37:f0:25:1f: 0c:65:da:ca:cd:ee:7c:d9:01:8b:9e:35:43:f3:9b: 08:73:7a:f1:33:33:89:45:0e:21:33:e0:21:ff:28: bf:9d:ff:71:f7:ea:4d:43:9a:71:9b:97:82:c7:b3: 40:17:b4:e9:2c:b6:7a:89:e5:94:28:25:2a:e3:7b: c3:90:7f:fd:20:27:32:b3:3b:80:23:b4:cc:37:7f: 46:ba:07:30:b1:09:f1:32:81:3f:17:14:60:bb:a0: 5c:b0:e4:f7:33:7c:34:c1:65:96:16:40:e7:c6:5c: 50:65:43:59:1c:bb:ee:eb:25:ca:89:10:87:4d:58: 15:6b:63:a6:2e:70:3b:8a:bd:27:a3:46:1c:20:26: e1:1d:06:5e:ef:a5:90:e1:a8:db:1c:88:65:dd:35: 1c:ee:7a:29:41:f6:ff:65:ee:d6:0f:9b:d9:9f:f6: 17:28:7a:81:7c:e2:9c:14:4a:55:b4:46:d4:92:de: 4c:2d:70:17:99:29:6a:22:2d:55:ef:b1:b0:6d:71: 4d:1b:bb:d4:9e:e5:93:44:35:e9:9f:a9:da:50:2a: 1a:43:16:f8:18:fe:0f:e1:8e:a8:a0:cf:c2:d3:5e: be:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2A:0C:16:7D:B4:94:8E:1A:4D:EA:F9:BC:6D:C7:9A:CC:44:67:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d24168f5-a980-3a14-a89b-7351a9920158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 208.118.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a4:b6:42:7b:7c:37:fe:22:38:f2:99:b6:2c:97:61:8b:49: 3c:61:7d:7a:bd:47:b9:13:52:a1:ad:a1:4a:61:4b:65:5e:5a: b4:97:42:3b:b5:4d:d0:97:a8:53:ad:b1:7c:59:e1:d8:ab:99: 39:91:c7:ab:0f:c7:f4:9f:26:d8:0e:78:fe:73:e3:9e:40:fb: 60:bf:43:3e:d4:92:99:16:b9:45:f9:21:f5:8e:a5:02:69:72: d7:3c:b8:86:1c:49:16:d6:44:14:9e:d8:bd:11:a0:80:6b:33: fa:c3:5a:06:c2:40:70:2a:08:59:22:af:04:e6:20:1a:f0:30: 6b:c3:ae:b2:48:8e:cc:be:73:79:ba:12:43:64:3c:e8:91:8e: 24:01:f4:b7:75:11:5f:dc:99:d6:8c:84:5f:5c:0c:74:6c:9e: d8:ec:eb:13:ad:34:b8:57:c1:5b:45:c1:25:fd:86:cd:78:30: a9:73:a9:20:f9:dd:fd:43:c0:73:2a:c8:f4:90:ba:ff:61:be: 8e:6b:99:02:21:8e:a1:96:45:51:52:b2:03:ac:c4:cf:81:3c: 54:8c:fb:e3:26:b2:ec:36:46:49:2d:50:58:ab:d3:e7:3c:93: ab:ac:71:84:07:d5:c3:2f:05:70:c5:f8:4e:70:7d:11:48:33: f7:de:6e:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJljFXkLM3ykqvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk NDBiOWZmNDktYmE5OS00Nzc2LThlMTktYjMzZTc1OGI5MzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngVPJ48mv1VjmhahINy9p4+YxojonYpZ4Tfw JR8MZdrKze582QGLnjVD85sIc3rxMzOJRQ4hM+Ah/yi/nf9x9+pNQ5pxm5eCx7NA F7TpLLZ6ieWUKCUq43vDkH/9ICcyszuAI7TMN39GugcwsQnxMoE/FxRgu6BcsOT3 M3w0wWWWFkDnxlxQZUNZHLvu6yXKiRCHTVgVa2OmLnA7ir0no0YcICbhHQZe76WQ 4ajbHIhl3TUc7nopQfb/Ze7WD5vZn/YXKHqBfOKcFEpVtEbUkt5MLXAXmSlqIi1V 77GwbXFNG7vUnuWTRDXpn6naUCoaQxb4GP4P4Y6ooM/C016+xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwqDBZ9tJSOGk3q+bxtx5rMRGeVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvZDI0MTY4ZjUtYTk4MC0z YTE0LWE4OWItNzM1MWE5OTIwMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HbsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuktkJ7fDf+IjjymbYsl2GLSTxhfXq9R7kTUqGtoUphS2VeWrSXQju1 TdCXqFOtsXxZ4dirmTmRx6sPx/SfJtgOeP5z455A+2C/Qz7UkpkWuUX5IfWOpQJp ctc8uIYcSRbWRBSe2L0RoIBrM/rDWgbCQHAqCFkirwTmIBrwMGvDrrJIjsy+c3m6 EkNkPOiRjiQB9Ld1EV/cmdaMhF9cDHRsntjs6xOtNLhXwVtFwSX9hs14MKlzqSD5 3f1DwHMqyPSQuv9hvo5rmQIhjqGWRVFSsgOsxM+BPFSM++Mmsuw2RkktUFir0+c8 k6uscYQH1cMvBXDF+E5wfRFIM/febus= -----END CERTIFICATE-----Generated at Mon Aug 4 19:11:38 2025 by rpki-client