$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/99a0fa77-1eec-3eec-a0e9-aa8fb4c2abd3.roa File: 99a0fa77-1eec-3eec-a0e9-aa8fb4c2abd3.roa (raw, json) Hash identifier: ICqh7CQn2TvoSc3CjT0CYxO3SMQAWLH4qjVirZ/VBjU= Subject key identifier: D5:A0:52:8B:0B:33:AF:7B:77:0D:E2:6E:6B:5E:B4:8F:2A:37:58:68 Certificate issuer: /CN=3555956f-7142-453a-8aea-177a684dd7aa Certificate serial: 010D0C9F4328584AD23BAC0C442FFB2AD8226E70 Authority key identifier: 4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/99a0fa77-1eec-3eec-a0e9-aa8fb4c2abd3.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 13821 IP address blocks: 206.218.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ac:0c:44:2f:fb:2a:d8:22:6e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3555956f-7142-453a-8aea-177a684dd7aa Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=1d6c53df-cb94-4907-9c14-39d4b879ca1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1e:3c:c5:e4:bf:3e:5e:b3:87:c3:7b:18:15: 56:99:e2:97:8d:b5:6e:c2:2a:cf:f0:cb:46:e6:57: 5f:e2:4e:e6:9a:1b:64:01:31:81:cb:66:e9:37:12: b4:76:c6:24:d1:b0:8d:43:2c:26:27:18:d7:7f:15: b1:68:60:70:d6:9b:3e:97:b8:f3:b5:64:f2:16:3b: 8d:6e:9d:ff:32:ab:ca:2b:6b:cc:58:65:53:2b:b9: d0:29:f4:a5:6c:54:51:ba:6b:c6:da:0c:4e:3f:43: 96:73:13:73:50:5b:57:a5:84:40:f3:5d:d7:aa:96: 75:09:4d:88:de:fd:d6:ed:75:9e:72:54:85:af:bc: e0:4c:b6:3f:2c:21:2e:64:2e:8c:19:6e:e0:cc:dc: 16:14:8f:6a:e0:78:ef:24:6c:92:4f:16:e3:65:87: 7c:60:9f:b2:37:42:86:db:ec:9f:0c:6b:af:e1:76: 74:9e:91:f5:d4:45:4d:46:91:ba:b4:92:94:5d:ce: 4c:6e:f2:ba:6a:32:56:13:e3:ba:37:c5:f6:8d:81: 52:5b:df:95:ef:3e:f5:38:b8:7f:36:b4:20:a9:0b: 76:fd:35:a8:9d:2d:0e:b4:53:8f:fd:d5:f0:8a:35: bf:51:d1:01:67:04:8f:73:b9:1d:fc:b7:ce:97:1e: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A0:52:8B:0B:33:AF:7B:77:0D:E2:6E:6B:5E:B4:8F:2A:37:58:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/99a0fa77-1eec-3eec-a0e9-aa8fb4c2abd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl X509v3 Authority Key Identifier: keyid:4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer sbgp-ipAddrBlock: critical IPv4: 206.218.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:bd:21:c8:71:f5:e8:18:82:33:3f:d2:d0:09:3d:15:e7:f3: be:e5:14:28:e8:fb:6f:89:95:56:e0:24:da:58:92:3b:df:15: d5:b5:3e:af:2f:bb:bc:2f:f6:26:7b:7d:32:88:cf:a5:5a:2d: 82:4d:68:8f:06:3a:df:81:02:a6:96:62:97:75:fb:96:8e:c9: d7:c4:ef:50:69:ab:1b:2b:bf:a6:70:24:5e:98:e5:6c:49:6b: fa:6d:61:34:b4:be:3f:17:61:68:b3:4f:8b:d2:ec:eb:28:93: 45:3b:b8:55:9a:b6:02:3e:89:27:52:ca:d5:54:1e:7d:bf:ad: a2:66:cc:a8:02:53:bc:a3:06:09:f0:36:a9:54:dd:13:b3:d3: 27:38:0d:10:57:92:d0:1c:33:c5:b8:62:f0:bf:33:4d:64:a9: 83:9d:da:f2:bd:95:7c:d6:75:7b:6d:1f:e0:cb:ba:b8:68:e1: 1e:6b:95:fb:58:15:36:50:a7:e2:69:f2:d1:e9:65:b1:03:f6: f5:d8:d0:ac:bd:ab:24:5d:9c:e2:9e:6f:38:09:8b:00:f1:63: 44:c3:7b:4f:e1:f4:05:47:1c:98:48:f1:1e:48:e6:07:c7:8b: 67:8b:8e:63:f0:82:5f:66:9e:51:0c:9c:66:00:44:8a:ab:7b: 74:cc:c5:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO6wMRC/7KtgibnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzU1NTk1NmYtNzE0Mi00NTNhLThhZWEtMTc3YTY4NGRk N2FhMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MWQ2YzUzZGYtY2I5NC00OTA3LTljMTQtMzlkNGI4NzljYTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx48xeS/Pl6zh8N7GBVWmeKXjbVuwirP8MtG 5ldf4k7mmhtkATGBy2bpNxK0dsYk0bCNQywmJxjXfxWxaGBw1ps+l7jztWTyFjuN bp3/MqvKK2vMWGVTK7nQKfSlbFRRumvG2gxOP0OWcxNzUFtXpYRA813XqpZ1CU2I 3v3W7XWeclSFr7zgTLY/LCEuZC6MGW7gzNwWFI9q4HjvJGySTxbjZYd8YJ+yN0KG 2+yfDGuv4XZ0npH11EVNRpG6tJKUXc5MbvK6ajJWE+O6N8X2jYFSW9+V7z71OLh/ NrQgqQt2/TWonS0OtFOP/dXwijW/UdEBZwSPc7kd/LfOlx7KVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWgUosLM697dw3ibmtetI8qN1hoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNTU1 OTU2Zi03MTQyLTQ1M2EtOGFlYS0xNzdhNjg0ZGQ3YWEvOTlhMGZhNzctMWVlYy0z ZWVjLWEwZTktYWE4ZmI0YzJhYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzU1NTk1NmYtNzE0Mi00NTNhLThh ZWEtMTc3YTY4NGRkN2FhLzM1NTU5NTZmLTcxNDItNDUzYS04YWVhLTE3N2E2ODRk ZDdhYS5jcmwwHwYDVR0jBBgwFoAUTnp2SaFOHZM02c2odqnRmGb0SA8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNTU1OTU2Zi03MTQyLTQ1M2EtOGFlYS0xNzdh Njg0ZGQ3YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztr2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG9Ichx9egYgjM/0tAJPRXn877lFCjo+2+JlVbgJNpYkjvfFdW1Pq8v u7wv9iZ7fTKIz6VaLYJNaI8GOt+BAqaWYpd1+5aOydfE71Bpqxsrv6ZwJF6Y5WxJ a/ptYTS0vj8XYWizT4vS7Osok0U7uFWatgI+iSdSytVUHn2/raJmzKgCU7yjBgnw NqlU3ROz0yc4DRBXktAcM8W4YvC/M01kqYOd2vK9lXzWdXttH+DLurho4R5rlftY FTZQp+Jp8tHpZbED9vXY0Ky9qyRdnOKebzgJiwDxY0TDe0/h9AVHHJhI8R5I5gfH i2eLjmPwgl9mnlEMnGYARIqre3TMxcc= -----END CERTIFICATE-----Generated at Sun Aug 24 09:38:25 2025 by rpki-client