$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/5458418a-7b5f-37fa-a1a9-87b0cc6b1108.roa File: 5458418a-7b5f-37fa-a1a9-87b0cc6b1108.roa (raw, json) Hash identifier: /ZsIh0+7WnmbUdy0s8AJmzCVY3+1lsUOdIGEV7FZiT0= Subject key identifier: 2E:68:F0:8E:E4:2A:87:27:0F:98:7B:EE:89:21:A1:66:0B:6F:34:0F Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584AB4EB7F554FA4884C2ED74080 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/5458418a-7b5f-37fa-a1a9-87b0cc6b1108.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 53508 IP address blocks: 206.255.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:7f:55:4f:a4:88:4c:2e:d7:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=6480ac1f-dfe3-4a85-b1e7-ad4a28a513da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bb:8f:70:c8:23:e7:01:dd:43:d3:f9:19:45: 87:7d:57:40:81:a8:c4:da:ca:d4:5f:2a:c1:1e:2e: e1:cd:cd:34:45:79:82:29:96:de:67:5a:61:99:6a: ba:b5:ff:c8:c5:bf:04:87:ab:cf:ff:e7:80:c6:ea: df:ba:bc:01:ea:f0:86:33:cf:de:4b:15:4e:90:22: ec:d6:b6:52:f2:f4:dd:b9:8e:1f:68:4a:2b:06:a9: 3b:3b:d7:a7:bc:58:27:b3:50:bb:5f:45:4d:46:59: d6:61:75:68:56:da:a0:cb:35:11:e7:6b:c8:6c:81: c8:8e:0f:a6:08:0a:40:3b:59:c8:c2:64:15:6f:13: 91:31:ec:69:d4:d0:ba:7d:0c:a8:ed:17:30:d2:20: c0:00:40:75:2a:0c:78:60:23:06:94:f4:4f:da:7c: 62:83:a5:fc:0d:d8:1d:85:f3:70:d5:d6:cc:3b:59: c4:09:77:7b:2c:a3:01:c0:f4:15:be:a6:a1:f4:bd: 1f:ee:32:c6:d9:bc:97:0b:8d:e9:a6:a0:1d:73:32: 87:57:17:d8:7d:60:04:41:92:6b:64:c8:55:a2:b4: eb:a1:5c:44:2d:b3:b2:87:bb:42:51:a1:ea:09:61: c0:f0:3b:3b:07:b2:a6:52:d1:71:c9:c6:c2:c8:d3: 53:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:68:F0:8E:E4:2A:87:27:0F:98:7B:EE:89:21:A1:66:0B:6F:34:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/5458418a-7b5f-37fa-a1a9-87b0cc6b1108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:1b:b7:81:27:88:c9:8d:8f:ec:ce:f1:b3:9e:85:64:c0:f5: a9:a6:f3:a7:3a:f3:4c:0f:fa:d4:b2:7c:02:2b:4b:b8:e2:7f: 18:66:77:df:7f:61:63:7e:70:04:df:5c:22:ec:c5:fd:7a:24: 6a:82:6a:35:68:02:ce:7e:41:8d:8d:df:6f:03:e3:b0:49:7d: ab:c7:38:db:78:71:d4:bc:a7:f5:ec:d3:2a:35:a1:07:ab:9d: 0f:cb:8d:ad:71:ff:39:39:0b:dd:4c:0b:37:9d:78:cb:2a:fe: f8:82:9f:3b:bc:a8:11:61:a6:a8:b9:af:80:22:77:4c:b7:23: 59:b3:92:57:c7:75:21:e2:8c:55:5d:67:a2:93:0d:08:37:ce: 6a:94:ea:b4:d3:8a:39:b6:ea:7b:e9:c5:27:a2:76:e0:07:8d: 5c:8e:2f:4c:e1:d4:82:d1:b5:0f:f5:65:9a:f4:69:74:b8:27: c7:27:0c:ec:c0:2f:fe:40:70:58:c8:b7:bb:dd:b9:bd:9e:fa: 62:cc:26:8e:51:4c:7d:8f:42:26:86:af:c8:fe:9e:be:48:2c: 10:b3:7b:31:4f:98:9b:de:b1:4a:5f:89:50:14:07:2f:91:3d: ce:37:53:1a:53:86:fd:ef:31:ea:11:38:51:08:f8:db:8a:60: 32:7c:48:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0639VT6SITC7XQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NjQ4MGFjMWYtZGZlMy00YTg1LWIxZTctYWQ0YTI4YTUxM2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7uPcMgj5wHdQ9P5GUWHfVdAgajE2srUXyrB Hi7hzc00RXmCKZbeZ1phmWq6tf/Ixb8Eh6vP/+eAxurfurwB6vCGM8/eSxVOkCLs 1rZS8vTduY4faEorBqk7O9envFgns1C7X0VNRlnWYXVoVtqgyzUR52vIbIHIjg+m CApAO1nIwmQVbxORMexp1NC6fQyo7Rcw0iDAAEB1Kgx4YCMGlPRP2nxig6X8Ddgd hfNw1dbMO1nECXd7LKMBwPQVvqah9L0f7jLG2byXC43ppqAdczKHVxfYfWAEQZJr ZMhVorTroVxELbOyh7tCUaHqCWHA8Ds7B7KmUtFxycbCyNNTuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5o8I7kKocnD5h77okhoWYLbzQPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNTQ1ODQxOGEtN2I1Zi0z N2ZhLWExYTktODdiMGNjNmIxMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwbt4EniMmNj+zO8bOehWTA9amm86c680wP+tSyfAIrS7jifxhmd99/ YWN+cATfXCLsxf16JGqCajVoAs5+QY2N328D47BJfavHONt4cdS8p/Xs0yo1oQer nQ/Lja1x/zk5C91MCzedeMsq/viCnzu8qBFhpqi5r4Aid0y3I1mzklfHdSHijFVd Z6KTDQg3zmqU6rTTijm26nvpxSeiduAHjVyOL0zh1ILRtQ/1ZZr0aXS4J8cnDOzA L/5AcFjIt7vdub2e+mLMJo5RTH2PQiaGr8j+nr5ILBCzezFPmJvesUpfiVAUBy+R Pc43UxpThv3vMeoROFEI+NuKYDJ8SMc= -----END CERTIFICATE-----Generated at Thu Aug 7 01:11:08 2025 by rpki-client