$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa File: ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa (raw, json) Hash identifier: 1sPKnbXdWbv3xUCSYkrYewUnqqLEZhTvCrw5kQNWjpw= Subject key identifier: 8F:5E:2C:03:1B:4F:BB:29:90:CE:B8:BC:63:BD:8E:B7:D7:C6:84:2E Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584AC5AB91EEE2D32F385C364000 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 16696 IP address blocks: 208.101.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:91:ee:e2:d3:2f:38:5c:36:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=5f304ebb-1673-4c0e-ace6-96f807228ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b3:51:6b:24:d1:32:4b:75:cc:1e:16:7f:14: 87:86:ca:de:e2:93:42:32:85:90:11:58:4d:f0:4a: d9:8f:16:43:91:57:7e:ef:66:49:fa:86:0d:90:66: 45:3a:2f:9a:59:43:86:b4:ca:18:ce:af:93:6a:e9: ba:c7:97:7b:28:ff:46:bf:fc:42:e3:a9:db:d0:39: 25:f9:16:80:6a:8f:1a:55:f3:97:9a:12:99:6e:32: a3:2f:36:95:f9:3c:4c:ad:c1:5b:db:f6:fd:85:3b: 97:18:10:53:72:d5:d9:24:eb:a7:a0:b7:90:3d:3f: d1:0c:ae:b8:dc:c3:ef:c6:16:40:7a:54:de:35:6b: 8f:a9:70:5a:78:74:59:6d:30:71:a7:ba:5e:b1:8d: 3f:74:db:ca:12:d0:0c:c3:c8:ff:ba:26:39:4e:3a: da:5a:df:bd:f4:aa:f7:95:63:65:16:b3:46:63:0f: 70:ff:c0:c5:4c:9d:c5:d9:5e:6a:10:90:45:52:47: 40:30:20:99:68:1e:20:be:5f:55:98:11:c9:39:e9: e6:89:ff:b9:23:1e:bf:c9:f0:3c:72:36:77:4e:ba: 6b:3f:ff:e3:d4:11:0a:23:97:58:f9:04:77:86:56: 3c:8b:8b:7f:33:81:e1:a6:17:9b:8f:66:1b:16:ac: 16:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5E:2C:03:1B:4F:BB:29:90:CE:B8:BC:63:BD:8E:B7:D7:C6:84:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 208.101.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:47:a6:84:a9:70:ea:3e:c8:50:cd:5a:a9:5a:dc:a5:b5:3c: ee:fe:a0:93:94:05:4e:2d:8b:4e:e4:95:79:43:94:7f:c3:ae: 13:5e:05:6c:4b:63:47:ce:5b:be:88:1e:3b:62:4c:1c:e6:a4: 06:72:88:03:6f:a9:bf:90:57:9f:41:9d:e8:12:4b:de:67:c5: 6e:d6:dc:c5:5e:e7:ac:9f:0b:73:a2:79:8e:b7:41:cd:cb:71: c6:90:23:59:02:b7:cc:d8:aa:6d:8d:8a:02:19:c7:8e:d2:75: c6:5c:32:7a:a6:e9:54:cf:66:14:a8:7e:ef:32:47:b7:91:e5: 06:c2:58:1e:60:46:5f:7e:71:64:e7:0c:8c:8c:ea:2d:fc:18: 24:cf:88:d2:b7:97:ff:47:88:54:8a:41:4e:81:39:d2:fd:80: 9e:a1:d5:3e:62:36:b9:3d:5c:1e:a6:02:73:2a:4c:8e:14:a1: 0f:32:ba:41:1d:0d:cc:08:3e:bf:47:0f:9f:41:dd:47:4f:6e: d4:d5:81:8c:31:5e:f2:45:61:7f:c5:0a:cf:ae:b1:a5:8d:bc: 4c:a8:06:ee:bc:09:4a:4f:f1:a7:54:4d:68:48:d7:d5:70:c7: 98:9a:8b:c1:39:a7:5b:89:2b:9b:62:51:c9:5a:91:22:c6:d8: 73:d3:a8:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5Hu4tMvOFw2QAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk NWYzMDRlYmItMTY3My00YzBlLWFjZTYtOTZmODA3MjI4ZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrNRayTRMkt1zB4WfxSHhsre4pNCMoWQEVhN 8ErZjxZDkVd+72ZJ+oYNkGZFOi+aWUOGtMoYzq+Taum6x5d7KP9Gv/xC46nb0Dkl +RaAao8aVfOXmhKZbjKjLzaV+TxMrcFb2/b9hTuXGBBTctXZJOunoLeQPT/RDK64 3MPvxhZAelTeNWuPqXBaeHRZbTBxp7pesY0/dNvKEtAMw8j/uiY5TjraWt+99Kr3 lWNlFrNGYw9w/8DFTJ3F2V5qEJBFUkdAMCCZaB4gvl9VmBHJOenmif+5Ix6/yfA8 cjZ3TrprP//j1BEKI5dY+QR3hlY8i4t/M4Hhphebj2YbFqwWHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9eLAMbT7spkM64vGO9jrfXxoQuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZmY1NWFhMWQtNWY5My0z MjE3LTg1MzYtNGFmNzg2ZjZmZGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GXpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFHpoSpcOo+yFDNWqla3KW1PO7+oJOUBU4ti07klXlDlH/DrhNeBWxL Y0fOW76IHjtiTBzmpAZyiANvqb+QV59BnegSS95nxW7W3MVe56yfC3OieY63Qc3L ccaQI1kCt8zYqm2NigIZx47SdcZcMnqm6VTPZhSofu8yR7eR5QbCWB5gRl9+cWTn DIyM6i38GCTPiNK3l/9HiFSKQU6BOdL9gJ6h1T5iNrk9XB6mAnMqTI4UoQ8yukEd DcwIPr9HD59B3UdPbtTVgYwxXvJFYX/FCs+usaWNvEyoBu68CUpP8adUTWhI19Vw x5iai8E5p1uJK5tiUclakSLG2HPTqO4= -----END CERTIFICATE-----Generated at Sun Aug 24 05:39:13 2025 by rpki-client