$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/36e54ae1-0dad-36c9-85d3-8d41fa168234.roa File: 36e54ae1-0dad-36c9-85d3-8d41fa168234.roa (raw, json) Hash identifier: OuraMwVDLEgGMHrxJQ5wfZKOEnNLtdqJrN3QsfgFM9U= Subject key identifier: 80:AF:82:FE:10:D1:BE:D2:86:76:97:70:E7:D1:BB:A0:4B:15:CF:C1 Certificate issuer: /CN=88bfa348-1db4-4c2b-8cd7-df6655cb7023 Certificate serial: 010D0C9F4328584A9E6FF043F4E2A4D56785DEE0 Authority key identifier: 64:73:BC:A6:EA:35:23:F8:50:FB:98:8D:F3:07:70:7A:51:41:59:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/36e54ae1-0dad-36c9-85d3-8d41fa168234.roa Signing time: Wed 23 Jul 2025 23:44:01 +0000 ROA not before: Wed 23 Jul 2025 23:44:01 +0000 ROA not after: Tue 21 Oct 2025 23:44:01 +0000 asID: 395412 IP address blocks: 204.8.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/88bfa348-1db4-4c2b-8cd7-df6655cb7023.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/88bfa348-1db4-4c2b-8cd7-df6655cb7023.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:6f:f0:43:f4:e2:a4:d5:67:85:de:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88bfa348-1db4-4c2b-8cd7-df6655cb7023 Validity Not Before: Jul 23 23:44:01 2025 GMT Not After : Oct 21 23:44:01 2025 GMT Subject: CN=ae648aa3-7688-412e-ba1c-1ab8496183f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dd:73:9f:26:c8:1c:6f:f2:72:59:4a:aa:02: ae:39:64:9b:50:d8:2f:b6:8c:f8:d3:00:23:b8:0a: 28:3b:d5:05:4b:78:0b:7e:59:06:07:f6:bc:7e:2d: de:82:fb:2d:1d:c4:31:ca:f7:42:3e:f6:3f:cf:b1: 54:dc:54:59:06:a4:3e:77:eb:3e:d5:25:ab:bd:56: 0c:a4:bd:74:f7:08:e2:9a:6b:45:dd:38:d8:97:d1: 72:e1:51:d3:8e:65:bb:48:ac:33:71:0e:a7:97:e6: 61:aa:9c:69:12:0d:e0:52:3f:c5:80:1f:fe:6e:45: 0d:bd:71:af:12:84:cc:97:a8:a9:41:a4:a3:3a:70: 11:b7:d6:62:b8:07:30:44:90:a0:75:a1:c0:eb:65: 9c:8a:4c:a5:e8:3e:e3:34:c4:45:43:56:2d:38:aa: ba:8f:5e:2b:2f:25:90:be:fc:87:d0:5e:e4:36:a6: 52:37:15:96:77:a9:31:86:de:cd:18:61:42:b9:b0: 8f:19:1c:9c:36:bf:21:12:f9:13:7f:48:7a:c9:3e: 74:24:dd:ab:cd:8d:5f:4e:a6:06:0d:1b:3f:76:7b: 83:e5:3a:ae:c5:1f:75:bb:5c:94:86:01:78:0e:29: 8c:c1:e9:aa:2e:74:ce:10:43:6b:d3:bd:93:60:8d: d9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:AF:82:FE:10:D1:BE:D2:86:76:97:70:E7:D1:BB:A0:4B:15:CF:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/36e54ae1-0dad-36c9-85d3-8d41fa168234.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/88bfa348-1db4-4c2b-8cd7-df6655cb7023.crl X509v3 Authority Key Identifier: keyid:64:73:BC:A6:EA:35:23:F8:50:FB:98:8D:F3:07:70:7A:51:41:59:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023.cer sbgp-ipAddrBlock: critical IPv4: 204.8.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ce:14:f0:82:1e:d3:07:78:e6:0a:d1:46:96:37:ee:30:d1: 43:5d:dc:d0:c5:b2:0b:25:d9:a6:5f:59:a3:f6:d5:d3:07:be: 7d:fa:9d:45:35:cc:48:41:3e:cd:29:29:1f:7c:bc:2a:5c:a1: 6a:51:07:03:f8:a8:fa:79:18:8d:49:a3:84:5d:17:34:92:b7: c8:2a:e6:93:57:df:76:9a:bb:45:cd:a9:d8:43:17:55:37:7e: 10:32:00:c6:b3:c8:a6:fd:8d:43:be:2e:29:8f:4f:a4:2c:3d: 10:49:31:bb:84:a7:09:ab:df:ed:6a:5b:98:e0:80:5a:79:c9: 00:66:fb:eb:9d:c2:59:4b:24:cd:d8:5b:be:7d:ab:3f:ed:01: 0f:d4:4c:1d:79:de:8d:30:a8:60:e6:1f:87:70:85:f9:3f:32: be:e5:d9:14:b6:a0:5a:22:0e:79:48:a9:41:db:4f:28:19:60: 03:d8:09:0f:7b:3d:64:5c:2d:e7:04:82:f4:b5:0f:8b:2f:c2: 49:19:bd:65:38:7c:5e:69:66:0a:5f:8a:52:c6:9d:1e:f4:3a: 36:e9:40:ec:bf:2d:92:9f:f8:e8:0f:3c:72:0b:c0:f0:cc:ce: a3:b4:59:85:d2:56:d8:11:01:f8:1b:eb:be:16:86:00:43:50: 66:d0:81:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqeb/BD9OKk1WeF3uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhiZmEzNDgtMWRiNC00YzJiLThjZDctZGY2NjU1Y2I3 MDIzMB4XDTI1MDcyMzIzNDQwMVoXDTI1MTAyMTIzNDQwMVowLzEtMCsGA1UEAxMk YWU2NDhhYTMtNzY4OC00MTJlLWJhMWMtMWFiODQ5NjE4M2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi91znybIHG/ycllKqgKuOWSbUNgvtoz40wAj uAooO9UFS3gLflkGB/a8fi3egvstHcQxyvdCPvY/z7FU3FRZBqQ+d+s+1SWrvVYM pL109wjimmtF3TjYl9Fy4VHTjmW7SKwzcQ6nl+ZhqpxpEg3gUj/FgB/+bkUNvXGv EoTMl6ipQaSjOnARt9ZiuAcwRJCgdaHA62Wcikyl6D7jNMRFQ1YtOKq6j14rLyWQ vvyH0F7kNqZSNxWWd6kxht7NGGFCubCPGRycNr8hEvkTf0h6yT50JN2rzY1fTqYG DRs/dnuD5TquxR91u1yUhgF4DimMwemqLnTOEENr072TYI3ZzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICvgv4Q0b7ShnaXcOfRu6BLFc/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84OGJm YTM0OC0xZGI0LTRjMmItOGNkNy1kZjY2NTVjYjcwMjMvMzZlNTRhZTEtMGRhZC0z NmM5LTg1ZDMtOGQ0MWZhMTY4MjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODhiZmEzNDgtMWRiNC00YzJiLThj ZDctZGY2NjU1Y2I3MDIzLzg4YmZhMzQ4LTFkYjQtNGMyYi04Y2Q3LWRmNjY1NWNi NzAyMy5jcmwwHwYDVR0jBBgwFoAUZHO8puo1I/hQ+5iN8wdwelFBWXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84OGJmYTM0OC0xZGI0LTRjMmItOGNkNy1kZjY2 NTVjYjcwMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAjqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLOFPCCHtMHeOYK0UaWN+4w0UNd3NDFsgsl2aZfWaP21dMHvn36nUU1 zEhBPs0pKR98vCpcoWpRBwP4qPp5GI1Jo4RdFzSSt8gq5pNX33aau0XNqdhDF1U3 fhAyAMazyKb9jUO+LimPT6QsPRBJMbuEpwmr3+1qW5jggFp5yQBm++udwllLJM3Y W759qz/tAQ/UTB153o0wqGDmH4dwhfk/Mr7l2RS2oFoiDnlIqUHbTygZYAPYCQ97 PWRcLecEgvS1D4svwkkZvWU4fF5pZgpfilLGnR70OjbpQOy/LZKf+OgPPHILwPDM zqO0WYXSVtgRAfgb674WhgBDUGbQgZ8= -----END CERTIFICATE-----Generated at Mon Aug 11 07:24:12 2025 by rpki-client