$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/acad1d7d-111c-3859-8be3-9dc66b4d4b4c.roa File: acad1d7d-111c-3859-8be3-9dc66b4d4b4c.roa (raw, json) Hash identifier: QVRz7zTKj02z49pW4XehAI8R0DCsm/KNAdHMI5cVnWI= Subject key identifier: A9:94:BE:29:2F:90:A2:4C:65:74:33:F4:2A:8C:2B:1E:D8:7E:35:90 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584AE46108B68A7901377A07B780 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/acad1d7d-111c-3859-8be3-9dc66b4d4b4c.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 14061 IP address blocks: 198.211.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:08:b6:8a:79:01:37:7a:07:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=e2fb68ad-3f3f-4df1-a1c9-47dc3eb907fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:12:f2:8a:c9:91:c0:49:4c:cc:89:28:c6:d5: 56:3a:9e:44:43:96:44:d4:28:1f:a1:0e:9f:be:da: 37:18:93:b5:d8:4e:26:b4:cd:1f:4a:a8:4b:7a:42: cc:07:0a:5f:c2:77:74:81:50:65:fb:6a:4b:4f:71: d0:fb:24:b7:3c:95:78:d2:f2:9a:49:eb:c6:5f:34: 87:e2:8a:f2:71:8e:55:33:13:b5:b1:b1:fe:3d:58: 0e:88:2e:55:a0:e3:f9:28:36:5e:fc:07:8d:0d:96: a9:36:0f:7c:be:b6:23:00:70:d7:bf:73:24:5a:48: ca:a5:a8:d6:10:26:f9:87:6a:75:8d:3f:f5:e0:d7: cf:87:ad:87:f5:0c:42:46:70:a2:c2:17:6e:b4:05: 87:c8:87:90:1c:90:81:2e:c2:3b:47:cd:6a:72:e2: 50:a6:49:dd:9f:68:e9:8b:9c:19:bd:fd:24:81:c4: dc:ba:57:40:c4:8a:35:67:8a:74:b8:48:e5:de:26: 75:c1:07:84:66:72:8d:a9:01:6b:2c:e5:ae:ef:88: ef:2d:0c:0f:b9:38:67:f9:fe:c3:37:af:c8:dc:25: 00:a6:83:e7:65:ea:41:80:59:38:8e:f3:23:f3:8f: 94:da:c1:3a:d6:d7:a8:90:be:f4:20:c1:27:c3:b5: 36:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:94:BE:29:2F:90:A2:4C:65:74:33:F4:2A:8C:2B:1E:D8:7E:35:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/acad1d7d-111c-3859-8be3-9dc66b4d4b4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 198.211.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:6e:cd:fd:4d:71:a6:6f:d7:32:82:a4:9f:16:1b:1b:4c:6c: 36:09:a0:98:2e:f8:a6:ad:a5:74:d5:1a:67:99:24:bb:bb:f0: 86:44:8f:e8:76:13:22:81:2e:91:ad:40:7a:e9:e3:33:86:79: 40:4f:34:d3:6a:d1:41:02:64:3d:f0:3a:d9:ed:27:04:76:cb: e0:6d:f0:61:09:b4:e9:91:61:59:42:8e:3d:84:aa:d9:cd:08: 8d:23:6a:39:84:0e:62:08:9c:9a:da:44:e2:8f:07:24:9a:b5: a2:0b:86:22:fc:05:fe:84:0a:c9:93:bd:b7:92:64:d8:7e:47: 5f:80:75:38:ee:26:7e:5f:61:e6:2e:52:bf:73:ed:47:bb:8a: c9:43:6e:d0:97:d0:72:09:e5:c0:a6:54:3a:92:a2:c8:c5:8a: de:a4:4c:35:31:a6:3b:4b:07:2f:b0:98:33:da:22:e1:eb:f0: 1f:83:08:6d:9f:c2:9a:2c:c1:fe:ec:e8:12:ee:fb:3d:ae:e4: 07:21:d0:0d:10:1e:cd:94:62:7e:e4:43:3c:02:8c:d0:38:22: 21:6c:fd:c2:1c:42:66:8d:ac:29:d6:3f:85:0d:7c:87:3c:10: 08:b3:76:d2:1f:af:39:23:14:2e:75:28:0e:da:a9:3b:2e:ee: de:5e:32:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYQi2inkBN3oHt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZTJmYjY4YWQtM2YzZi00ZGYxLWExYzktNDdkYzNlYjkwN2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRLyismRwElMzIkoxtVWOp5EQ5ZE1CgfoQ6f vto3GJO12E4mtM0fSqhLekLMBwpfwnd0gVBl+2pLT3HQ+yS3PJV40vKaSevGXzSH 4orycY5VMxO1sbH+PVgOiC5VoOP5KDZe/AeNDZapNg98vrYjAHDXv3MkWkjKpajW ECb5h2p1jT/14NfPh62H9QxCRnCiwhdutAWHyIeQHJCBLsI7R81qcuJQpkndn2jp i5wZvf0kgcTculdAxIo1Z4p0uEjl3iZ1wQeEZnKNqQFrLOWu74jvLQwPuThn+f7D N6/I3CUApoPnZepBgFk4jvMj84+U2sE61teokL70IMEnw7U2jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmUvikvkKJMZXQz9CqMKx7YfjWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvYWNhZDFkN2QtMTExYy0z ODU5LThiZTMtOWRjNjZiNGQ0YjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxtNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJuzf1NcaZv1zKCpJ8WGxtMbDYJoJgu+KatpXTVGmeZJLu78IZEj+h2 EyKBLpGtQHrp4zOGeUBPNNNq0UECZD3wOtntJwR2y+Bt8GEJtOmRYVlCjj2EqtnN CI0jajmEDmIInJraROKPBySataILhiL8Bf6ECsmTvbeSZNh+R1+AdTjuJn5fYeYu Ur9z7Ue7islDbtCX0HIJ5cCmVDqSosjFit6kTDUxpjtLBy+wmDPaIuHr8B+DCG2f wposwf7s6BLu+z2u5Ach0A0QHs2UYn7kQzwCjNA4IiFs/cIcQmaNrCnWP4UNfIc8 EAizdtIfrzkjFC51KA7aqTsu7t5eMiY= -----END CERTIFICATE-----Generated at Sat Aug 23 17:48:50 2025 by rpki-client