$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/4aa5123c-6460-370b-961f-4cb42fed2c48.roa File: 4aa5123c-6460-370b-961f-4cb42fed2c48.roa (raw, json) Hash identifier: YpVChzVatDNb4nCWFpE3zvKt4K+sIW9MsVmmE7xp9/k= Subject key identifier: 13:2B:A1:FD:78:8C:94:7E:16:C5:9F:44:CA:6D:A5:2C:F5:CC:10:6D Certificate issuer: /CN=07516521-ca1d-4a06-bb11-289a5545b790 Certificate serial: 010D0C9F4328584AA85BB321659E93DD073BA360 Authority key identifier: 11:D6:05:C3:5D:E0:5F:3A:30:EB:26:2C:A7:6A:62:75:4E:4C:CD:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/4aa5123c-6460-370b-961f-4cb42fed2c48.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 15040 IP address blocks: 206.183.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/07516521-ca1d-4a06-bb11-289a5545b790.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/07516521-ca1d-4a06-bb11-289a5545b790.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b3:21:65:9e:93:dd:07:3b:a3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07516521-ca1d-4a06-bb11-289a5545b790 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=29ea397e-3760-4f16-8863-ee62fe7012ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c7:2f:a0:58:63:e6:67:3a:44:e0:59:01:4b: 7e:f3:1e:f0:ea:f7:27:ca:23:27:eb:ed:42:36:01: b2:de:9b:a4:41:f8:d0:a7:14:5e:d6:6b:c8:6c:a1: 16:1c:08:cc:49:d1:38:99:5d:9f:99:02:c6:b6:e0: 22:7a:85:95:21:86:21:76:78:81:56:74:4a:b2:07: 6a:ac:18:f2:89:db:1c:48:b2:96:1d:a4:42:a3:41: a8:7f:d8:65:7c:a6:c8:3e:a6:02:1a:a3:e8:61:5d: a4:48:19:d2:63:84:2f:8a:ee:98:16:27:30:eb:35: be:33:bf:af:31:30:e1:a2:e3:74:24:1e:e5:4d:b9: 2b:ff:d9:46:4a:ae:e6:14:d9:32:07:97:8a:17:72: 2c:24:29:c0:06:75:e3:08:1e:25:62:e7:ce:4a:55: 75:5b:b8:a4:c2:0a:b7:75:4a:45:5c:89:da:9a:87: 5d:72:2f:2e:7e:bb:20:eb:fb:20:d5:b0:54:f9:ee: f3:b7:1e:a2:f4:08:2c:ca:e5:ec:f4:09:56:61:29: 83:cd:9a:54:27:dd:31:ec:5b:80:f0:aa:9f:64:b2: 1c:c4:7a:e4:82:1c:6b:b8:db:d7:32:83:8f:c5:f8: 71:72:d8:70:16:7d:59:46:bf:fc:36:3e:a8:d2:f4: 51:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2B:A1:FD:78:8C:94:7E:16:C5:9F:44:CA:6D:A5:2C:F5:CC:10:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/4aa5123c-6460-370b-961f-4cb42fed2c48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/07516521-ca1d-4a06-bb11-289a5545b790.crl X509v3 Authority Key Identifier: keyid:11:D6:05:C3:5D:E0:5F:3A:30:EB:26:2C:A7:6A:62:75:4E:4C:CD:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer sbgp-ipAddrBlock: critical IPv4: 206.183.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:c1:e8:3f:e2:75:41:fd:ad:f8:ba:09:0f:57:9c:fb:7d:60: 9a:18:26:7c:1c:cf:de:5c:24:1f:16:7a:7f:3e:ec:8a:ff:56: 26:e7:29:f5:5a:45:45:db:08:16:b6:7f:7c:89:1b:5b:38:6f: af:ff:90:92:b1:79:a0:61:95:02:0a:d3:f8:37:3d:74:92:57: aa:62:33:cb:68:c1:bd:79:bb:1c:c6:9c:e7:9f:8c:12:b6:ec: e3:19:15:14:07:d8:ca:8b:23:61:a9:2f:50:8c:ef:98:67:e3: 8a:78:17:13:85:e0:77:90:3a:3e:43:f4:e2:0c:46:29:34:a8: a7:d0:31:d1:50:ba:c2:89:42:45:71:c8:d8:fe:e5:34:e4:03: 18:bc:e9:f7:67:4e:28:bd:f0:ff:75:21:9a:f3:59:05:98:73: 9a:20:5c:11:36:f1:27:36:5d:04:be:e6:13:55:30:7b:92:1a: 56:ce:72:f2:7a:59:9b:77:1c:59:51:c1:ac:1f:69:32:db:35: c8:63:d5:3e:9a:49:5e:25:a3:4c:d2:0b:fe:ac:f2:3f:f1:c2: 81:f9:10:88:b0:d8:fa:0b:81:b3:cf:61:61:fe:e0:32:c7:60: 5c:31:ca:5f:78:0f:5f:8e:bc:9b:66:a1:f1:2c:a9:4a:e4:ec: 14:ea:4c:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7MhZZ6T3Qc7o2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDc1MTY1MjEtY2ExZC00YTA2LWJiMTEtMjg5YTU1NDVi NzkwMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MjllYTM5N2UtMzc2MC00ZjE2LTg4NjMtZWU2MmZlNzAxMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnccvoFhj5mc6ROBZAUt+8x7w6vcnyiMn6+1C NgGy3pukQfjQpxRe1mvIbKEWHAjMSdE4mV2fmQLGtuAieoWVIYYhdniBVnRKsgdq rBjyidscSLKWHaRCo0Gof9hlfKbIPqYCGqPoYV2kSBnSY4Qviu6YFicw6zW+M7+v MTDhouN0JB7lTbkr/9lGSq7mFNkyB5eKF3IsJCnABnXjCB4lYufOSlV1W7ikwgq3 dUpFXInamoddci8ufrsg6/sg1bBU+e7ztx6i9AgsyuXs9AlWYSmDzZpUJ90x7FuA 8KqfZLIcxHrkghxruNvXMoOPxfhxcthwFn1ZRr/8Nj6o0vRRpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMrof14jJR+FsWfRMptpSz1zBBtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNzUx NjUyMS1jYTFkLTRhMDYtYmIxMS0yODlhNTU0NWI3OTAvNGFhNTEyM2MtNjQ2MC0z NzBiLTk2MWYtNGNiNDJmZWQyYzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDc1MTY1MjEtY2ExZC00YTA2LWJi MTEtMjg5YTU1NDViNzkwLzA3NTE2NTIxLWNhMWQtNGEwNi1iYjExLTI4OWE1NTQ1 Yjc5MC5jcmwwHwYDVR0jBBgwFoAUEdYFw13gXzow6yYsp2pidU5MzTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNzUxNjUyMS1jYTFkLTRhMDYtYmIxMS0yODlh NTU0NWI3OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzreeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7B6D/idUH9rfi6CQ9XnPt9YJoYJnwcz95cJB8Wen8+7Ir/VibnKfVa RUXbCBa2f3yJG1s4b6//kJKxeaBhlQIK0/g3PXSSV6piM8towb15uxzGnOefjBK2 7OMZFRQH2MqLI2GpL1CM75hn44p4FxOF4HeQOj5D9OIMRik0qKfQMdFQusKJQkVx yNj+5TTkAxi86fdnTii98P91IZrzWQWYc5ogXBE28Sc2XQS+5hNVMHuSGlbOcvJ6 WZt3HFlRwawfaTLbNchj1T6aSV4lo0zSC/6s8j/xwoH5EIiw2PoLgbPPYWH+4DLH YFwxyl94D1+OvJtmofEsqUrk7BTqTOc= -----END CERTIFICATE-----Generated at Sun Aug 10 05:36:20 2025 by rpki-client