$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa File: f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa (raw, json) Hash identifier: A0GIZbm/bhIfVYB8zpwhTq9mLnnqQFPYuvtAbHI50U0= Subject key identifier: 1E:79:5D:84:24:1C:0F:68:4C:87:D9:EB:88:EC:D3:F3:F9:67:16:20 Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e Certificate serial: 010D0C9F4328584A9FFBAA3081D423FEC6C246C0 Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 33211 IP address blocks: 206.41.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:aa:30:81:d4:23:fe:c6:c2:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=f17fcbaf-e57f-42ef-97e9-b560077ba1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:12:eb:30:ff:04:38:69:83:a7:d7:57:92: a1:b3:09:df:b7:4b:34:93:86:98:4d:6e:d2:11:34: 6a:d1:06:7e:81:dc:a0:b2:4e:bc:54:80:79:49:29: 7a:40:c9:37:15:ce:27:f5:ed:26:33:b8:72:cd:81: da:8c:26:69:b8:e9:ea:17:98:77:3d:45:78:a1:78: 26:73:f2:e7:99:43:42:53:75:d7:d7:b1:56:0a:8c: 2d:4a:da:02:41:2e:f1:f9:fd:65:22:f4:c1:c6:63: ba:09:f6:57:3d:ac:66:17:5c:fb:1b:52:a5:20:fa: e2:b7:34:6f:de:fb:ab:0d:bf:0a:2d:57:c5:3d:a8: bd:d7:7d:d1:01:0e:15:24:d4:28:43:97:62:51:ab: 1f:9e:fd:37:4b:7c:62:47:ff:48:25:9c:ac:6c:74: 11:d4:22:b8:8b:04:e6:0a:d1:00:1a:7a:22:5d:47: 1c:b3:fc:9c:05:ab:e8:0b:70:5f:b6:95:ae:0e:ce: 77:22:b6:42:06:a7:e3:29:f8:9c:37:1b:25:4b:02: 5e:e7:9b:dd:6d:16:d1:1d:a9:1d:9b:7c:6b:86:35: f6:ad:4b:50:92:ab:19:c5:ba:7f:f7:0f:c8:0b:29: 18:8a:ca:53:69:34:12:79:db:cd:3b:2d:4e:4c:a2: f4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:79:5D:84:24:1C:0F:68:4C:87:D9:EB:88:EC:D3:F3:F9:67:16:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl X509v3 Authority Key Identifier: keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer sbgp-ipAddrBlock: critical IPv4: 206.41.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:00:8b:fb:7c:5b:d2:c3:7b:f7:30:90:50:ec:b1:d9:55:f1: cb:c2:ab:25:b1:c2:39:70:6d:31:c1:9d:85:f1:5e:0c:67:ed: 0e:d4:ce:8b:49:b7:a5:ff:b1:ab:92:44:5a:56:ff:8d:d4:01: 06:a6:40:26:f0:b6:70:f8:eb:4d:d9:4f:5b:79:05:b5:4e:17: ef:6d:98:12:a4:ef:c0:1e:29:18:c2:06:1b:d7:3b:8b:d1:92: 99:ed:18:ef:87:cb:17:8d:77:21:94:ec:4e:d0:92:0e:d5:01: 0b:6c:33:49:d2:f0:93:bb:c5:ba:01:83:87:c3:f3:99:b4:d4: 95:66:93:7e:1f:27:fc:6a:65:4b:1a:53:05:ac:ea:5d:aa:90: 86:cc:73:a9:7c:0a:7c:4f:1a:bc:ec:c9:95:3b:ec:fc:a0:3f: c9:15:ff:b2:3e:67:ee:a4:3b:e2:5f:28:f9:54:03:55:f5:a4: ae:b3:b1:39:bf:5c:cb:70:92:03:fc:fd:86:77:90:8d:16:31: 43:2c:0e:31:2d:8c:7a:40:8c:97:fa:05:b5:75:e7:eb:a4:39: db:de:b0:30:15:d3:63:ef:f6:8c:5e:c9:d8:bd:60:0f:cf:40: 5d:24:28:24:36:15:0c:0a:fd:82:7e:0c:52:48:4a:a6:7c:6e: f5:49:90:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6owgdQj/sbCRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMzE0NjMtOTc0Yi00Njc2LTkzMjgtMjAwMjAyYWU0 ZDZlMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ZjE3ZmNiYWYtZTU3Zi00MmVmLTk3ZTktYjU2MDA3N2JhMWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwES6zD/BDhpg6fXV5Khswnft0s0k4aYTW7S ETRq0QZ+gdygsk68VIB5SSl6QMk3Fc4n9e0mM7hyzYHajCZpuOnqF5h3PUV4oXgm c/LnmUNCU3XX17FWCowtStoCQS7x+f1lIvTBxmO6CfZXPaxmF1z7G1KlIPritzRv 3vurDb8KLVfFPai9133RAQ4VJNQoQ5diUasfnv03S3xiR/9IJZysbHQR1CK4iwTm CtEAGnoiXUccs/ycBavoC3BftpWuDs53IrZCBqfjKficNxslSwJe55vdbRbRHakd m3xrhjX2rUtQkqsZxbp/9w/ICykYispTaTQSedvNOy1OTKL0iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB55XYQkHA9oTIfZ64js0/P5ZxYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWMz MTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAyMDJhZTRkNmUvZjQ4MWNiNWEtMGU3NC0z N2ZlLTk1ZmYtNmI4ODY3YTZmZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFjMzE0NjMtOTc0Yi00Njc2LTkz MjgtMjAwMjAyYWU0ZDZlLzhhYzMxNDYzLTk3NGItNDY3Ni05MzI4LTIwMDIwMmFl NGQ2ZS5jcmwwHwYDVR0jBBgwFoAUZkrPeoeALtWWaZNuDr1s6kFXZvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84YWMzMTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAy MDJhZTRkNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzil/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMAi/t8W9LDe/cwkFDssdlV8cvCqyWxwjlwbTHBnYXxXgxn7Q7UzotJ t6X/sauSRFpW/43UAQamQCbwtnD4603ZT1t5BbVOF+9tmBKk78AeKRjCBhvXO4vR kpntGO+HyxeNdyGU7E7Qkg7VAQtsM0nS8JO7xboBg4fD85m01JVmk34fJ/xqZUsa UwWs6l2qkIbMc6l8CnxPGrzsyZU77PygP8kV/7I+Z+6kO+JfKPlUA1X1pK6zsTm/ XMtwkgP8/YZ3kI0WMUMsDjEtjHpAjJf6BbV15+ukOdvesDAV02Pv9oxeydi9YA/P QF0kKCQ2FQwK/YJ+DFJISqZ8bvVJkLY= -----END CERTIFICATE-----Generated at Sun Aug 10 03:47:24 2025 by rpki-client