$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/aec5fabf-32ef-3915-b438-fa268b84862f.roa File: aec5fabf-32ef-3915-b438-fa268b84862f.roa (raw, json) Hash identifier: QDiIAi+Dc5GMYlKMfDZfQlTjbNmvQN/yGbpAaUw7Zro= Subject key identifier: F1:D2:29:D3:DD:BC:CF:69:24:66:EE:D3:63:90:57:F1:19:8E:A5:E7 Certificate issuer: /CN=d426c818-fe62-465f-8184-d4f8176e2692 Certificate serial: 010D0C9F4328584AB4EB71B4E73CB4E0A076C400 Authority key identifier: F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/aec5fabf-32ef-3915-b438-fa268b84862f.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 6507 IP address blocks: 192.207.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:71:b4:e7:3c:b4:e0:a0:76:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d426c818-fe62-465f-8184-d4f8176e2692 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=5485f0a9-1360-4e6e-8a09-44ee01179d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d6:f0:b7:09:c9:83:0b:30:59:43:5d:39:fd: b1:96:b9:e0:cb:98:f4:35:bc:95:f3:3b:66:5b:8b: e0:cb:b0:93:56:5d:74:9f:23:39:dc:56:a3:0e:41: 78:cb:8a:8b:69:43:c8:e1:2b:d5:1d:1a:b5:35:c0: 45:aa:4c:e7:02:97:d6:aa:b5:1a:fe:bd:65:5b:7b: eb:43:5c:fd:92:55:6a:07:ae:44:a6:c5:58:59:a3: 2b:fd:54:f1:df:be:c4:b8:72:18:88:97:fd:5c:6f: e6:b8:74:f9:a9:46:1f:f8:d6:38:6a:b7:0a:6f:78: 70:2c:ec:03:9a:80:f0:0e:08:b9:18:29:ec:8d:81: 27:6c:0d:fa:9e:b3:66:52:8b:7e:0d:95:c3:1a:9c: 77:97:e0:69:1d:b9:61:cb:07:f2:ea:92:01:9f:c7: e5:e8:0e:a9:48:1d:0c:ef:94:21:e6:d9:72:52:bc: af:47:e9:62:27:93:f7:25:3a:ed:2e:d6:2e:e7:55: fe:f1:59:31:37:28:da:73:0e:0f:4e:32:ab:29:dc: 3b:c3:40:b5:b5:e3:82:87:60:47:64:32:3e:0d:1c: c6:81:2d:70:02:b9:ce:ea:d9:34:fc:45:ba:e6:d9: 58:c7:3d:a2:34:80:11:c9:6b:9a:bc:03:04:ce:93: f9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D2:29:D3:DD:BC:CF:69:24:66:EE:D3:63:90:57:F1:19:8E:A5:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/aec5fabf-32ef-3915-b438-fa268b84862f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl X509v3 Authority Key Identifier: keyid:F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer sbgp-ipAddrBlock: critical IPv4: 192.207.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ec:31:76:0b:da:a9:6a:ef:56:d6:7a:18:bd:34:75:15:d6:f0: 9d:6b:c0:65:c3:c4:a7:38:6b:58:42:9c:16:aa:6c:8c:7d:d5: a6:91:d1:cf:00:73:5d:01:02:80:f2:42:fb:9b:14:32:a4:e0: ef:91:57:41:35:6f:cc:48:4f:3d:a5:92:86:a1:da:28:4b:e1: eb:37:0c:f0:dd:94:c2:48:aa:93:ff:bd:00:ce:11:0c:4d:ee: 4e:90:10:45:da:0e:76:36:e6:2f:5d:be:b7:b2:07:48:6d:93: 48:9a:d1:bb:da:69:06:f4:94:6b:07:b3:d2:59:27:92:90:25: 2b:b7:42:78:f6:27:7a:60:34:e7:47:fb:a6:96:6e:a1:85:01: 5b:90:d5:61:81:b1:d9:c3:7b:e4:7a:02:67:0f:cc:22:46:bb: 9c:df:45:64:8d:20:5f:d2:d3:d4:f4:9d:db:36:74:d5:53:10: 37:ad:15:7d:79:30:6f:f1:bb:7d:cb:4a:c9:3b:2f:d6:a5:24: 7e:9d:0a:95:36:5a:98:ea:5a:cf:7f:9d:28:ac:c2:87:9b:05: 66:9a:4c:d0:24:8f:2c:57:43:32:22:9b:75:78:1c:c2:dd:f3: ec:a0:af:d9:93:c9:9c:f4:a9:75:d0:60:e0:30:0f:7a:68:a0: d7:3c:b8:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq063G05zy04KB2xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQyNmM4MTgtZmU2Mi00NjVmLTgxODQtZDRmODE3NmUy NjkyMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NTQ4NWYwYTktMTM2MC00ZTZlLThhMDktNDRlZTAxMTc5ZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9bwtwnJgwswWUNdOf2xlrngy5j0NbyV8ztm W4vgy7CTVl10nyM53FajDkF4y4qLaUPI4SvVHRq1NcBFqkznApfWqrUa/r1lW3vr Q1z9klVqB65EpsVYWaMr/VTx377EuHIYiJf9XG/muHT5qUYf+NY4arcKb3hwLOwD moDwDgi5GCnsjYEnbA36nrNmUot+DZXDGpx3l+BpHblhywfy6pIBn8fl6A6pSB0M 75Qh5tlyUryvR+liJ5P3JTrtLtYu51X+8VkxNyjacw4PTjKrKdw7w0C1teOCh2BH ZDI+DRzGgS1wArnO6tk0/EW65tlYxz2iNIARyWuavAMEzpP54wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHSKdPdvM9pJGbu02OQV/EZjqXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2 YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4MTc2ZTI2OTIvYWVjNWZhYmYtMzJlZi0z OTE1LWI0MzgtZmEyNjhiODQ4NjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDQyNmM4MTgtZmU2Mi00NjVmLTgx ODQtZDRmODE3NmUyNjkyL2Q0MjZjODE4LWZlNjItNDY1Zi04MTg0LWQ0ZjgxNzZl MjY5Mi5jcmwwHwYDVR0jBBgwFoAU8F+ppzkydlY4j5FgaWTWQCUOPLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4 MTc2ZTI2OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOwxdgvaqWrvVtZ6GL00dRXW8J1rwGXDxKc4a1hCnBaqbIx91aaR0c8A c10BAoDyQvubFDKk4O+RV0E1b8xITz2lkoah2ihL4es3DPDdlMJIqpP/vQDOEQxN 7k6QEEXaDnY25i9dvreyB0htk0ia0bvaaQb0lGsHs9JZJ5KQJSu3Qnj2J3pgNOdH +6aWbqGFAVuQ1WGBsdnDe+R6AmcPzCJGu5zfRWSNIF/S09T0nds2dNVTEDetFX15 MG/xu33LSsk7L9alJH6dCpU2WpjqWs9/nSiswoebBWaaTNAkjyxXQzIim3V4HMLd 8+ygr9mTyZz0qXXQYOAwD3pooNc8uKE= -----END CERTIFICATE-----Generated at Thu Aug 7 17:30:59 2025 by rpki-client