$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/ac8bfafd-782d-3f2a-bada-8f51073a92ef.roa File: ac8bfafd-782d-3f2a-bada-8f51073a92ef.roa (raw, json) Hash identifier: MCgJWFOK+2uFZeFmUusJP0WFgei75FNuCyWBpRniNvs= Subject key identifier: 25:F8:D4:DD:D1:6E:6C:18:07:3E:14:2E:E9:B9:E3:15:4A:36:C5:8F Certificate issuer: /CN=f229bba4-1d66-4a9f-8e40-159e94bdd015 Certificate serial: 010D0C9F4328584AADF10BC1180F9A6D3151F080 Authority key identifier: 56:41:D8:48:AC:B9:29:79:0A:18:8C:CD:74:E2:54:9C:3D:F5:86:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/ac8bfafd-782d-3f2a-bada-8f51073a92ef.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 206.198.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/f229bba4-1d66-4a9f-8e40-159e94bdd015.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/f229bba4-1d66-4a9f-8e40-159e94bdd015.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:0b:c1:18:0f:9a:6d:31:51:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f229bba4-1d66-4a9f-8e40-159e94bdd015 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=aa62a884-d39e-4652-8e0b-864e00583f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ac:be:75:76:42:34:7b:42:44:7e:4c:30:df: b0:75:54:99:15:cd:da:80:1c:0f:c4:5b:4c:39:12: f1:c7:90:e8:28:45:6b:4c:7c:42:54:5e:46:d9:13: e2:86:2c:ad:d2:65:d7:61:66:63:2f:dd:58:03:c6: de:b9:0d:c2:02:86:82:23:0c:b2:02:f4:28:72:c1: bb:a0:d2:ce:11:26:5e:c2:64:7b:cd:d4:fe:b8:4e: 2c:de:b6:40:19:7d:7e:d3:ae:8c:17:6a:8b:fa:04: d3:7e:50:c7:3a:fe:07:67:7a:2b:30:05:c9:a6:e7: 02:6a:cd:60:37:7a:18:53:e4:3d:f3:4e:04:59:bc: 9b:29:35:20:56:0d:ba:67:20:cd:2e:b0:80:42:8c: c0:c6:76:dc:db:5f:53:c4:32:3c:86:cd:07:ec:2c: d0:4b:45:ec:7f:b4:35:eb:39:50:93:f2:de:a0:e2: be:0d:4d:3d:ed:16:21:81:21:de:a0:77:c4:9d:59: 13:ed:63:9c:19:03:a1:a3:82:6f:36:e7:1e:35:2c: 95:b4:8a:c7:f1:3d:04:6a:25:f0:1a:28:92:9f:8e: 64:16:e6:2e:ee:5d:f0:c0:04:01:4f:6a:39:46:b1: e4:ea:ff:a8:55:b7:81:dc:a5:40:28:fa:46:fa:1a: a0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F8:D4:DD:D1:6E:6C:18:07:3E:14:2E:E9:B9:E3:15:4A:36:C5:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/ac8bfafd-782d-3f2a-bada-8f51073a92ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/f229bba4-1d66-4a9f-8e40-159e94bdd015.crl X509v3 Authority Key Identifier: keyid:56:41:D8:48:AC:B9:29:79:0A:18:8C:CD:74:E2:54:9C:3D:F5:86:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015.cer sbgp-ipAddrBlock: critical IPv4: 206.198.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c4:b6:32:73:bc:1e:a1:e9:b5:1d:0e:31:9c:05:bc:cb:c7: fc:e4:e1:cf:50:20:38:87:1e:29:00:c9:df:94:f1:01:1d:d6: 08:29:98:08:fc:b4:f1:8b:be:34:82:40:a4:86:de:39:e5:07: d2:e7:7f:6f:55:c0:32:d8:db:e1:48:48:91:8e:6b:c7:4c:a6: 9b:df:c8:1b:e3:35:e6:a9:e3:f9:a5:2d:ce:97:56:a2:3f:e8: 34:54:0d:bd:e8:52:fe:8d:98:1a:eb:5d:73:79:c0:87:e2:ac: ed:f7:70:7b:58:34:0d:8a:33:2b:19:31:f2:f8:82:f4:53:c0: b6:c7:a5:9f:ec:b7:d9:f5:23:6d:30:c4:00:60:4f:b9:da:eb: e0:9b:c1:f9:c7:73:9d:32:09:81:90:90:cc:b4:61:de:9f:0a: 0c:0e:af:82:8a:60:01:0b:77:29:73:37:e8:d0:46:00:8b:20: 4c:b3:e5:e2:f7:c9:40:6e:b1:8e:76:c6:b5:45:a3:ff:bb:0f: 1c:3e:e5:9e:8d:ca:8e:64:6a:6e:ae:e0:ac:8c:09:2a:cd:41: 23:af:fd:f0:7b:99:1a:ee:27:8e:84:f0:cc:89:62:31:01:0b: 6e:93:fe:ba:21:93:d6:73:36:4b:58:f9:27:e3:51:ff:9d:60: fa:e4:6c:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QvBGA+abTFR8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjIyOWJiYTQtMWQ2Ni00YTlmLThlNDAtMTU5ZTk0YmRk MDE1MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk YWE2MmE4ODQtZDM5ZS00NjUyLThlMGItODY0ZTAwNTgzZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnay+dXZCNHtCRH5MMN+wdVSZFc3agBwPxFtM ORLxx5DoKEVrTHxCVF5G2RPihiyt0mXXYWZjL91YA8beuQ3CAoaCIwyyAvQocsG7 oNLOESZewmR7zdT+uE4s3rZAGX1+066MF2qL+gTTflDHOv4HZ3orMAXJpucCas1g N3oYU+Q9804EWbybKTUgVg26ZyDNLrCAQozAxnbc219TxDI8hs0H7CzQS0Xsf7Q1 6zlQk/LeoOK+DU097RYhgSHeoHfEnVkT7WOcGQOho4JvNuceNSyVtIrH8T0EaiXw GiiSn45kFuYu7l3wwAQBT2o5RrHk6v+oVbeB3KVAKPpG+hqgewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCX41N3RbmwYBz4ULum54xVKNsWPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjI5 YmJhNC0xZDY2LTRhOWYtOGU0MC0xNTllOTRiZGQwMTUvYWM4YmZhZmQtNzgyZC0z ZjJhLWJhZGEtOGY1MTA3M2E5MmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjIyOWJiYTQtMWQ2Ni00YTlmLThl NDAtMTU5ZTk0YmRkMDE1L2YyMjliYmE0LTFkNjYtNGE5Zi04ZTQwLTE1OWU5NGJk ZDAxNS5jcmwwHwYDVR0jBBgwFoAUVkHYSKy5KXkKGIzNdOJUnD31htkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjI5YmJhNC0xZDY2LTRhOWYtOGU0MC0xNTll OTRiZGQwMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsYlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPEtjJzvB6h6bUdDjGcBbzLx/zk4c9QIDiHHikAyd+U8QEd1ggpmAj8 tPGLvjSCQKSG3jnlB9Lnf29VwDLY2+FISJGOa8dMppvfyBvjNeap4/mlLc6XVqI/ 6DRUDb3oUv6NmBrrXXN5wIfirO33cHtYNA2KMysZMfL4gvRTwLbHpZ/st9n1I20w xABgT7na6+CbwfnHc50yCYGQkMy0Yd6fCgwOr4KKYAELdylzN+jQRgCLIEyz5eL3 yUBusY52xrVFo/+7Dxw+5Z6Nyo5kam6u4KyMCSrNQSOv/fB7mRruJ46E8MyJYjEB C26T/rohk9ZzNktY+SfjUf+dYPrkbOQ= -----END CERTIFICATE-----Generated at Wed Aug 6 00:49:02 2025 by rpki-client