$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/6aa5ffe9-2c06-36ee-8129-d66c21390799.roa File: 6aa5ffe9-2c06-36ee-8129-d66c21390799.roa (raw, json) Hash identifier: nzenWmuPgWyU7lnYdn9AfFN2ER0HfMvn8yQekCMKm7E= Subject key identifier: 1E:D2:16:8B:0C:6D:B8:18:55:78:12:DC:C7:2C:DC:3B:4D:D4:FE:19 Certificate issuer: /CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902 Certificate serial: 010D0C9F4328584AD7D126A4542F6ACAADA25D90 Authority key identifier: 51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/6aa5ffe9-2c06-36ee-8129-d66c21390799.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 26461 IP address blocks: 208.91.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:26:a4:54:2f:6a:ca:ad:a2:5d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=738851a8-2c45-46c8-8647-8b3ab34dbdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6d:ee:ab:40:fb:f9:60:f7:23:17:b9:c4:07: 9e:d2:23:5d:1d:ae:72:3e:ac:47:2d:53:ed:47:45: 43:7c:ec:bd:cd:46:0d:18:f5:04:a7:bd:0c:3f:46: 9e:b1:7d:9b:02:85:2b:fc:0f:c3:67:30:82:ab:f8: 38:3a:a7:a8:0e:a7:d9:c0:0f:09:17:8c:85:ce:85: 14:e0:a8:cd:99:6e:c7:5c:d1:e5:a0:ec:dc:0d:4d: b7:b0:90:5f:1a:b3:91:31:56:7c:2c:41:68:4c:0f: 1e:fc:6e:a2:16:78:08:72:7f:48:2d:6f:9a:ac:43: 8b:0e:82:db:21:07:64:be:4e:eb:42:e2:62:57:fc: 99:72:6d:0f:25:f2:96:9c:c1:98:ad:eb:7e:87:f7: 38:34:bd:4d:d5:11:dc:b9:11:eb:0e:b9:eb:c9:03: 9e:f2:b4:70:19:c7:c0:63:39:e8:1f:59:06:7e:60: 45:45:16:04:c7:48:fe:04:bd:4c:05:68:88:e8:18: 3d:56:f2:16:d8:8f:f6:7a:c7:9e:9c:df:41:f8:01: b0:6a:66:d8:13:42:53:7c:aa:ea:4f:29:9b:92:f4: 9c:be:95:03:25:59:99:e8:ec:1b:97:b6:b5:d8:23: ff:50:80:62:ed:c1:82:e1:6d:13:5d:66:29:c4:86: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D2:16:8B:0C:6D:B8:18:55:78:12:DC:C7:2C:DC:3B:4D:D4:FE:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/6aa5ffe9-2c06-36ee-8129-d66c21390799.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl X509v3 Authority Key Identifier: keyid:51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer sbgp-ipAddrBlock: critical IPv4: 208.91.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d7:a3:e8:93:ac:1e:4a:dc:bf:35:44:e5:d1:4f:10:9e:6e: 20:f1:bf:da:2e:f8:75:b9:88:83:d0:36:2b:92:57:99:a2:ba: f1:97:25:26:9b:86:58:85:60:c9:3b:1d:a7:88:a5:76:c3:7d: d9:cb:bf:fb:73:a6:3a:4d:e8:b1:37:0c:87:df:8b:3a:47:8c: 33:ca:91:19:ca:3c:77:dc:7e:5c:31:04:14:d1:b9:8c:01:21: 0c:a5:94:a3:a1:2e:64:ab:1d:f0:0a:88:fe:05:52:36:17:3f: 0c:3b:1d:06:4f:41:0c:17:c2:d0:4a:d1:fb:75:ee:6c:0a:bf: ef:04:d6:fa:5f:b9:e2:77:dd:63:91:67:2a:cc:b0:92:60:86: 6f:15:37:b9:bc:62:21:08:be:d5:10:7b:b9:47:bd:de:07:2e: ec:c4:92:85:65:85:ea:27:2c:39:77:f6:93:05:0e:3c:fc:6e: 57:80:68:79:28:bf:13:db:8d:85:54:71:fc:ee:5e:51:61:0b: 37:8e:f0:3d:7c:be:83:df:18:74:8a:a9:9d:e7:f3:a5:e2:4b: dc:e9:e1:57:65:51:01:ac:6c:00:77:e8:7d:cc:64:c4:5d:d6: 98:8a:cf:16:db:d9:3b:26:8e:a4:1a:57:67:9e:64:54:fe:62: 23:55:60:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SakVC9qyq2iXZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRlZTliMDAtN2Y5ZS00ZDJjLThlMTctNDk0ZGZmYTY2 OTAyMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NzM4ODUxYTgtMmM0NS00NmM4LTg2NDctOGIzYWIzNGRiZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW3uq0D7+WD3Ixe5xAee0iNdHa5yPqxHLVPt R0VDfOy9zUYNGPUEp70MP0aesX2bAoUr/A/DZzCCq/g4OqeoDqfZwA8JF4yFzoUU 4KjNmW7HXNHloOzcDU23sJBfGrORMVZ8LEFoTA8e/G6iFngIcn9ILW+arEOLDoLb IQdkvk7rQuJiV/yZcm0PJfKWnMGYret+h/c4NL1N1RHcuRHrDrnryQOe8rRwGcfA YznoH1kGfmBFRRYEx0j+BL1MBWiI6Bg9VvIW2I/2eseenN9B+AGwambYE0JTfKrq TymbkvScvpUDJVmZ6Owbl7a12CP/UIBi7cGC4W0TXWYpxIYnSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7SFosMbbgYVXgS3Mcs3DtN1P4ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZGVl OWIwMC03ZjllLTRkMmMtOGUxNy00OTRkZmZhNjY5MDIvNmFhNWZmZTktMmMwNi0z NmVlLTgxMjktZDY2YzIxMzkwNzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmRlZTliMDAtN2Y5ZS00ZDJjLThl MTctNDk0ZGZmYTY2OTAyLzJkZWU5YjAwLTdmOWUtNGQyYy04ZTE3LTQ5NGRmZmE2 NjkwMi5jcmwwHwYDVR0jBBgwFoAUUW9nf41XwHp/1O/IOs/yMVPvGmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZGVlOWIwMC03ZjllLTRkMmMtOGUxNy00OTRk ZmZhNjY5MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FvpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7Xo+iTrB5K3L81ROXRTxCebiDxv9ou+HW5iIPQNiuSV5miuvGXJSab hliFYMk7HaeIpXbDfdnLv/tzpjpN6LE3DIffizpHjDPKkRnKPHfcflwxBBTRuYwB IQyllKOhLmSrHfAKiP4FUjYXPww7HQZPQQwXwtBK0ft17mwKv+8E1vpfueJ33WOR ZyrMsJJghm8VN7m8YiEIvtUQe7lHvd4HLuzEkoVlheonLDl39pMFDjz8bleAaHko vxPbjYVUcfzuXlFhCzeO8D18voPfGHSKqZ3n86XiS9zp4VdlUQGsbAB36H3MZMRd 1piKzxbb2TsmjqQaV2eeZFT+YiNVYBU= -----END CERTIFICATE-----Generated at Sat Aug 23 22:58:13 2025 by rpki-client