$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/3ac695ae-0338-38d6-af38-2884b857a1a2.roa File: 3ac695ae-0338-38d6-af38-2884b857a1a2.roa (raw, json) Hash identifier: RZCzP2IrTvCq3orgrP7Ra5lIlK3wxtPHMEd5sV1f6ww= Subject key identifier: 5D:DD:38:3E:42:67:3E:99:C6:75:6E:39:9A:BC:78:AF:A8:7E:AE:85 Certificate issuer: /CN=7398f99d-b512-4640-b38b-2c84db430afb Certificate serial: 010D0C9F4328584A761B47910DFD4C5668C83200 Authority key identifier: 85:E7:90:76:06:2E:D4:6A:D3:62:FA:9E:CE:72:56:42:9A:B6:CF:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/3ac695ae-0338-38d6-af38-2884b857a1a2.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 206.204.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:47:91:0d:fd:4c:56:68:c8:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7398f99d-b512-4640-b38b-2c84db430afb Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=97b99303-345e-4a6c-988d-8b80acc9bc1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:eb:89:5f:91:a1:de:6a:8e:7c:3c:92:fa:dd: 4f:7b:c3:52:39:45:6a:e3:be:a2:09:45:8d:6f:c8: 45:ed:c1:d1:77:b3:57:09:6b:43:26:86:02:2a:b0: 2b:3b:8c:61:1a:ef:79:2e:57:d9:15:b3:88:4c:ae: 71:b3:15:d9:40:00:a5:36:b3:ec:51:95:c0:8a:dc: f7:d0:28:5f:2c:39:e2:10:f6:11:2b:33:8e:cc:f5: 3d:0f:14:38:58:04:32:71:e8:8d:a5:d3:9a:20:98: 88:e2:02:10:c7:99:80:38:c6:cf:c6:c5:d0:f6:58: 5c:6a:ae:52:4c:69:61:a8:06:9b:37:88:35:a4:e3: 84:3f:5f:82:cc:93:f8:de:19:30:47:53:d8:3a:c1: e1:b6:fe:fc:f6:a3:b2:cd:d9:3b:8e:05:02:bd:da: 96:4e:52:a7:07:08:b6:e8:8c:48:83:2b:73:cb:08: 9c:1f:db:15:58:22:3f:70:42:6c:8e:45:46:68:22: 81:a3:a4:f8:1e:59:3b:c1:fc:8e:25:5a:b5:f8:6e: 0a:8c:eb:42:52:33:bb:fc:85:08:7c:30:f9:0a:d9: 5f:2d:cd:19:3d:e4:55:aa:3b:68:05:dc:f6:4e:f9: 73:98:74:68:25:2a:77:fe:e2:11:9f:02:07:bd:e8: d1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DD:38:3E:42:67:3E:99:C6:75:6E:39:9A:BC:78:AF:A8:7E:AE:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/3ac695ae-0338-38d6-af38-2884b857a1a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.crl X509v3 Authority Key Identifier: keyid:85:E7:90:76:06:2E:D4:6A:D3:62:FA:9E:CE:72:56:42:9A:B6:CF:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer sbgp-ipAddrBlock: critical IPv4: 206.204.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e8:c2:e9:03:26:c9:d6:86:d0:82:83:94:48:7f:39:8f:d7: 74:03:76:6c:b9:7e:e3:2d:3f:72:f4:03:9e:6e:7f:13:1b:e1: 75:d1:4d:af:45:ff:da:11:6e:ce:2e:27:7f:6b:28:b7:77:fb: f7:a6:19:03:64:a4:d6:74:11:bc:e9:83:98:c2:c2:73:be:25: ba:3b:d2:2a:85:08:a9:87:15:b6:92:40:a8:60:18:f2:03:c2: 98:55:c0:e9:df:76:19:a3:53:a1:e1:35:31:ee:02:8e:0a:cf: 89:b1:e3:e9:05:46:3a:7b:e2:20:83:4e:5d:c6:57:80:1a:3e: 9c:31:70:16:f4:27:a0:12:2a:cb:31:87:c5:d5:18:65:31:5d: 9f:cd:91:86:60:76:aa:ff:6b:21:71:57:47:8e:77:14:71:86: ea:5c:98:8f:e3:58:11:00:17:e8:9d:fc:84:17:64:a4:96:d8: b5:7d:0d:ca:f2:6b:b1:29:6f:cc:e0:f1:55:f5:0b:63:38:93: 88:8e:b3:49:68:85:43:77:3f:aa:d5:da:a5:8d:f3:d9:b4:49: 39:c4:e5:17:67:89:b5:73:1b:37:d8:08:f0:db:13:68:3a:e2: 07:85:20:db:a3:5e:4d:7c:77:67:57:1a:c7:1c:58:3e:38:3c: bb:4b:5b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2G0eRDf1MVmjIMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzM5OGY5OWQtYjUxMi00NjQwLWIzOGItMmM4NGRiNDMw YWZiMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk OTdiOTkzMDMtMzQ1ZS00YTZjLTk4OGQtOGI4MGFjYzliYzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOuJX5Gh3mqOfDyS+t1Pe8NSOUVq476iCUWN b8hF7cHRd7NXCWtDJoYCKrArO4xhGu95LlfZFbOITK5xsxXZQAClNrPsUZXAitz3 0ChfLDniEPYRKzOOzPU9DxQ4WAQyceiNpdOaIJiI4gIQx5mAOMbPxsXQ9lhcaq5S TGlhqAabN4g1pOOEP1+CzJP43hkwR1PYOsHhtv789qOyzdk7jgUCvdqWTlKnBwi2 6IxIgytzywicH9sVWCI/cEJsjkVGaCKBo6T4Hlk7wfyOJVq1+G4KjOtCUjO7/IUI fDD5CtlfLc0ZPeRVqjtoBdz2TvlzmHRoJSp3/uIRnwIHvejReQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3dOD5CZz6ZxnVuOZq8eK+ofq6FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83Mzk4 Zjk5ZC1iNTEyLTQ2NDAtYjM4Yi0yYzg0ZGI0MzBhZmIvM2FjNjk1YWUtMDMzOC0z OGQ2LWFmMzgtMjg4NGI4NTdhMWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzM5OGY5OWQtYjUxMi00NjQwLWIz OGItMmM4NGRiNDMwYWZiLzczOThmOTlkLWI1MTItNDY0MC1iMzhiLTJjODRkYjQz MGFmYi5jcmwwHwYDVR0jBBgwFoAUheeQdgYu1GrTYvqeznJWQpq2z8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83Mzk4Zjk5ZC1iNTEyLTQ2NDAtYjM4Yi0yYzg0 ZGI0MzBhZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsz6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvowukDJsnWhtCCg5RIfzmP13QDdmy5fuMtP3L0A55ufxMb4XXRTa9F /9oRbs4uJ39rKLd3+/emGQNkpNZ0Ebzpg5jCwnO+Jbo70iqFCKmHFbaSQKhgGPID wphVwOnfdhmjU6HhNTHuAo4Kz4mx4+kFRjp74iCDTl3GV4AaPpwxcBb0J6ASKssx h8XVGGUxXZ/NkYZgdqr/ayFxV0eOdxRxhupcmI/jWBEAF+id/IQXZKSW2LV9Dcry a7Epb8zg8VX1C2M4k4iOs0lohUN3P6rV2qWN89m0STnE5RdnibVzGzfYCPDbE2g6 4geFINujXk18d2dXGsccWD44PLtLW34= -----END CERTIFICATE-----Generated at Mon Aug 4 16:15:07 2025 by rpki-client