$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/ec1b47d6-640d-3ce9-8480-4b6ced255fd3.roa File: ec1b47d6-640d-3ce9-8480-4b6ced255fd3.roa (raw, json) Hash identifier: ThsmKYo1R+p/sa/opw+TD0qvU4CxxZMRO+y5eNrVDj0= Subject key identifier: 5C:0E:67:27:90:E0:86:2F:EF:54:8B:10:A9:C5:70:D6:A9:29:60:05 Certificate issuer: /CN=d6b690dc-d325-42b2-9834-06e4a779b209 Certificate serial: 010D0C9F4328584AD7D120F66B06E870A4BD8360 Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/ec1b47d6-640d-3ce9-8480-4b6ced255fd3.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 8987 IP address blocks: 198.252.136.0/24 maxlen: 24 204.152.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:20:f6:6b:06:e8:70:a4:bd:83:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=21251d87-5b1f-4f34-9b5a-873949652dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cb:af:57:39:62:57:31:13:63:ac:24:3b:f9: ec:05:e1:19:3a:2f:6c:69:ec:f1:47:2d:04:5e:22: d0:ac:a2:82:e5:63:31:d7:09:64:e0:37:b8:93:6c: 2f:d4:7b:cf:7e:dd:79:53:36:0a:bb:cd:db:f2:89: 3a:f5:4b:9a:1d:95:52:ac:8a:d1:26:03:15:10:39: 3c:7f:28:ab:61:66:48:a5:5f:2b:43:e9:25:bc:5b: aa:e2:f4:69:07:ed:19:90:16:cd:d4:0a:23:59:22: 82:f5:12:8a:0c:62:10:42:30:b5:49:19:fe:08:3c: 1e:11:0b:10:59:14:cd:f3:f5:68:2a:28:5b:fa:eb: 62:f1:cb:63:a9:19:e4:92:c9:83:e4:81:93:fd:31: 51:db:34:71:b9:22:36:9b:77:4f:32:9a:2b:71:15: f1:d9:e0:2f:df:c9:b3:a0:fb:43:fb:cf:74:8f:31: 32:66:72:a8:0b:8f:5f:b5:ba:36:c7:76:d2:3c:c2: 9f:3b:96:eb:fe:4f:51:19:71:32:94:00:96:d7:a0: ee:c5:70:ca:9d:df:6f:af:6b:c8:1f:23:01:7d:57: 57:ab:57:4d:a6:53:09:c9:de:00:03:95:4c:27:36: 04:ae:f3:4c:e1:a8:a7:db:0f:de:a3:50:04:15:08: bd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0E:67:27:90:E0:86:2F:EF:54:8B:10:A9:C5:70:D6:A9:29:60:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/ec1b47d6-640d-3ce9-8480-4b6ced255fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl X509v3 Authority Key Identifier: keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer sbgp-ipAddrBlock: critical IPv4: 198.252.136.0/24 204.152.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d9:23:f6:a1:e6:f5:e4:ac:7e:0d:c9:85:c7:a2:97:7f:8f: 9e:87:a9:a0:9a:12:92:6a:c8:c7:f2:54:13:43:aa:c9:13:5b: d1:31:47:15:db:b1:0b:2c:4e:70:59:2b:d3:24:39:4b:a9:12: 51:82:3e:00:c4:b9:56:af:3a:ca:37:c5:56:3a:cf:0f:fb:41: 7d:6e:76:9d:30:b2:b1:6c:7b:13:85:14:9b:bb:ea:6f:d5:73: 1e:16:58:9e:cd:64:06:d6:ed:50:08:93:f8:51:19:96:c9:3c: 8b:59:ed:f1:9b:13:a4:4b:cc:0f:06:27:c0:54:a6:ad:b2:62: 85:d5:45:2d:51:06:39:5f:e5:d6:c9:6f:ed:12:48:17:04:a3: f1:b5:f4:ce:1b:b5:3a:d3:41:c1:ff:7b:46:24:24:b0:57:b1: 78:02:39:c9:5c:a1:12:19:33:28:d5:14:2f:d8:39:23:9e:2f: 32:58:55:e0:69:d1:02:4c:aa:ae:68:52:05:87:16:5c:88:57: e6:80:b8:e6:9f:0a:89:17:7f:1c:65:f1:44:84:4d:b2:1c:45: ed:ab:5b:36:c4:89:84:b2:72:29:17:5f:f9:72:b6:e9:05:05: e4:55:67:2a:08:33:c7:a6:63:ca:46:60:fc:d2:3c:7c:ea:ad: 70:b2:77:63 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErX0SD2awbocKS9g2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNjkwZGMtZDMyNS00MmIyLTk4MzQtMDZlNGE3Nzli MjA5MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MjEyNTFkODctNWIxZi00ZjM0LTliNWEtODczOTQ5NjUyZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMuvVzliVzETY6wkO/nsBeEZOi9saezxRy0E XiLQrKKC5WMx1wlk4De4k2wv1HvPft15UzYKu83b8ok69UuaHZVSrIrRJgMVEDk8 fyirYWZIpV8rQ+klvFuq4vRpB+0ZkBbN1AojWSKC9RKKDGIQQjC1SRn+CDweEQsQ WRTN8/VoKihb+uti8ctjqRnkksmD5IGT/TFR2zRxuSI2m3dPMporcRXx2eAv38mz oPtD+890jzEyZnKoC49ftbo2x3bSPMKfO5br/k9RGXEylACW16DuxXDKnd9vr2vI HyMBfVdXq1dNplMJyd4AA5VMJzYErvNM4ain2w/eo1AEFQi9cQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFwOZyeQ4IYv71SLEKnFcNapKWAFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNmI2 OTBkYy1kMzI1LTQyYjItOTgzNC0wNmU0YTc3OWIyMDkvZWMxYjQ3ZDYtNjQwZC0z Y2U5LTg0ODAtNGI2Y2VkMjU1ZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDZiNjkwZGMtZDMyNS00MmIyLTk4 MzQtMDZlNGE3NzliMjA5L2Q2YjY5MGRjLWQzMjUtNDJiMi05ODM0LTA2ZTRhNzc5 YjIwOS5jcmwwHwYDVR0jBBgwFoAU7UQThqHLnfMmsjfCW7+YxO/SX4wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNmI2OTBkYy1kMzI1LTQyYjItOTgzNC0wNmU0 YTc3OWIyMDkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxvyIAwQA zJh3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADjZI/ah5vXkrH4NyYXHopd/j56HqaCaEpJqyMfyVBNDqskT W9ExRxXbsQssTnBZK9MkOUupElGCPgDEuVavOso3xVY6zw/7QX1udp0wsrFsexOF FJu76m/Vcx4WWJ7NZAbW7VAIk/hRGZbJPItZ7fGbE6RLzA8GJ8BUpq2yYoXVRS1R Bjlf5dbJb+0SSBcEo/G19M4btTrTQcH/e0YkJLBXsXgCOclcoRIZMyjVFC/YOSOe LzJYVeBp0QJMqq5oUgWHFlyIV+aAuOafCokXfxxl8USETbIcRe2rWzbEiYSycikX X/lytukFBeRVZyoIM8emY8pGYPzSPHzqrXCyd2M= -----END CERTIFICATE-----Generated at Sat Aug 23 17:02:12 2025 by rpki-client