$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/6a7a93a8-1167-3683-ae00-db1af6c93f5b.roa File: 6a7a93a8-1167-3683-ae00-db1af6c93f5b.roa (raw, json) Hash identifier: UM8eCw25YFYib6c7oVjdNALvYT0xLBBsUEr+ZPLX1c0= Subject key identifier: DE:C0:59:D7:9C:1C:D3:BD:54:4A:0D:9F:88:10:5F:DE:24:3F:1C:22 Certificate issuer: /CN=0499e690-23fd-496a-a697-cd290d3127f5 Certificate serial: 010D0C9F4328584AA160DB057CD9C6E23D4A11C0 Authority key identifier: DA:5F:09:D2:65:70:25:FA:D8:84:DB:A1:73:46:12:52:10:55:DE:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/6a7a93a8-1167-3683-ae00-db1af6c93f5b.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 7311 IP address blocks: 205.210.158.0/24 maxlen: 24 205.210.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:db:05:7c:d9:c6:e2:3d:4a:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0499e690-23fd-496a-a697-cd290d3127f5 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=f75fdd86-7dbc-4eb3-b5dc-ca6ada946ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c0:d2:71:3c:e9:37:b5:a6:7b:ed:5e:c8:21: 3e:cc:5c:ac:cb:6f:cd:4e:db:c9:d2:18:58:55:66: f7:db:ac:db:81:c7:ae:05:27:b5:cb:f5:37:ed:6c: 3a:32:75:5e:ac:04:b9:e6:49:59:70:1f:3b:36:ca: 57:9d:59:20:eb:d0:49:a6:5d:0d:2c:11:ba:f1:ab: d3:52:6d:5d:99:f3:bf:f6:a3:9e:f4:46:27:69:76: d0:f0:22:f1:a9:d8:49:e2:b2:77:49:5c:98:c9:6f: 82:c4:17:ef:73:29:c4:43:96:4a:14:68:61:d9:7e: ca:67:31:33:3c:73:03:82:c0:d2:6e:d9:c0:d5:10: 4b:02:68:3f:16:12:71:66:7e:ef:58:29:be:9b:ca: ce:29:0b:b4:b8:b4:85:59:d5:69:87:f4:a3:bb:1d: 85:ef:7e:35:d7:b8:af:1e:a1:c9:de:34:99:c1:a7: 27:5b:e6:51:c3:90:a2:8b:97:91:70:65:84:48:d3: f8:c3:19:74:e0:6c:ca:dd:1e:13:0b:9c:13:20:28: 96:81:15:37:42:48:76:07:bd:54:81:36:2c:24:a8: 41:d8:bb:b7:84:ff:0f:52:62:c7:6e:7f:26:96:65: 80:d9:b2:b8:06:9d:81:48:ec:63:fa:f2:a6:95:7b: f0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C0:59:D7:9C:1C:D3:BD:54:4A:0D:9F:88:10:5F:DE:24:3F:1C:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/6a7a93a8-1167-3683-ae00-db1af6c93f5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5/0499e690-23fd-496a-a697-cd290d3127f5.crl X509v3 Authority Key Identifier: keyid:DA:5F:09:D2:65:70:25:FA:D8:84:DB:A1:73:46:12:52:10:55:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0499e690-23fd-496a-a697-cd290d3127f5.cer sbgp-ipAddrBlock: critical IPv4: 205.210.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d6:07:9f:c8:bf:d4:f8:30:1d:8b:0c:64:3f:21:82:61:d4: 0a:bb:c2:52:97:7b:38:1f:5a:30:26:eb:0b:97:4b:b5:bc:46: 58:62:bc:8f:d8:9b:78:d4:b4:9a:94:20:c7:5e:41:bb:8b:ad: ca:23:d9:6e:4d:44:b2:72:43:c1:ae:58:5f:b0:20:ce:dd:70: b1:99:fa:7f:01:d5:94:4a:48:73:f3:36:94:fd:60:d5:08:8a: cd:aa:22:cd:75:d5:81:ad:1d:1e:f7:ff:80:c6:50:16:47:13: f4:42:ee:65:9c:a8:a6:36:32:9e:f2:89:34:97:f6:f3:ac:e9: 6b:0c:36:0c:a1:93:03:95:2f:56:71:23:86:d9:ea:f7:43:e8: 37:c9:e3:9d:ab:4e:1d:bf:69:d1:91:1a:96:ff:38:31:b2:5d: 4b:2e:ce:7c:c4:62:06:e8:3b:f5:f6:9f:c6:bc:ea:f8:8b:f3: ad:4c:e9:86:94:b1:fc:93:8d:f2:43:d2:57:b9:af:69:ef:54: bc:86:d4:95:24:e3:ba:e0:b1:39:01:04:99:d4:ca:83:10:36: e9:46:0a:aa:b3:f4:5d:ab:10:d2:0f:2c:5f:90:43:65:44:1c: f2:a7:3d:a4:26:14:d0:b6:31:db:07:78:89:6b:ca:21:b4:ff: 11:96:59:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYNsFfNnG4j1KEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ5OWU2OTAtMjNmZC00OTZhLWE2OTctY2QyOTBkMzEy N2Y1MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk Zjc1ZmRkODYtN2RiYy00ZWIzLWI1ZGMtY2E2YWRhOTQ2ZGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8DScTzpN7Wme+1eyCE+zFysy2/NTtvJ0hhY VWb326zbgceuBSe1y/U37Ww6MnVerAS55klZcB87NspXnVkg69BJpl0NLBG68avT Um1dmfO/9qOe9EYnaXbQ8CLxqdhJ4rJ3SVyYyW+CxBfvcynEQ5ZKFGhh2X7KZzEz PHMDgsDSbtnA1RBLAmg/FhJxZn7vWCm+m8rOKQu0uLSFWdVph/Sjux2F734117iv HqHJ3jSZwacnW+ZRw5Cii5eRcGWESNP4wxl04GzK3R4TC5wTICiWgRU3Qkh2B71U gTYsJKhB2Lu3hP8PUmLHbn8mlmWA2bK4Bp2BSOxj+vKmlXvwnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7AWdecHNO9VEoNn4gQX94kPxwiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNDk5 ZTY5MC0yM2ZkLTQ5NmEtYTY5Ny1jZDI5MGQzMTI3ZjUvNmE3YTkzYTgtMTE2Ny0z NjgzLWFlMDAtZGIxYWY2YzkzZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDQ5OWU2OTAtMjNmZC00OTZhLWE2 OTctY2QyOTBkMzEyN2Y1LzA0OTllNjkwLTIzZmQtNDk2YS1hNjk3LWNkMjkwZDMx MjdmNS5jcmwwHwYDVR0jBBgwFoAU2l8J0mVwJfrYhNuhc0YSUhBV3owwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNDk5ZTY5MC0yM2ZkLTQ5NmEtYTY5Ny1jZDI5 MGQzMTI3ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/WB5/Iv9T4MB2LDGQ/IYJh1Aq7wlKXezgfWjAm6wuXS7W8RlhivI/Y m3jUtJqUIMdeQbuLrcoj2W5NRLJyQ8GuWF+wIM7dcLGZ+n8B1ZRKSHPzNpT9YNUI is2qIs111YGtHR73/4DGUBZHE/RC7mWcqKY2Mp7yiTSX9vOs6WsMNgyhkwOVL1Zx I4bZ6vdD6DfJ452rTh2/adGRGpb/ODGyXUsuznzEYgboO/X2n8a86viL861M6YaU sfyTjfJD0le5r2nvVLyG1JUk47rgsTkBBJnUyoMQNulGCqqz9F2rENIPLF+QQ2VE HPKnPaQmFNC2MdsHeIlryiG0/xGWWX0= -----END CERTIFICATE-----Generated at Mon Aug 4 15:38:48 2025 by rpki-client