$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/6284af02-d42e-3b40-8748-6bee172ebf9c.roa File: 6284af02-d42e-3b40-8748-6bee172ebf9c.roa (raw, json) Hash identifier: 2SNwoloLfUNUyaE8/eox/0JOvgxVtoqFySf+yLEvAxA= Subject key identifier: 2D:F2:21:65:62:62:12:95:F8:87:F3:14:2A:35:35:E0:FD:E7:B2:97 Certificate issuer: /CN=581a8b49-a06e-4497-972f-fd8792bfe9dd Certificate serial: 010D0C9F4328584AECC123652097951BA9C9FF60 Authority key identifier: 70:5F:04:3F:F0:07:01:E7:30:D4:3C:E7:1B:F9:84:EB:62:53:4A:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/6284af02-d42e-3b40-8748-6bee172ebf9c.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 396845 IP address blocks: 141.193.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:23:65:20:97:95:1b:a9:c9:ff:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581a8b49-a06e-4497-972f-fd8792bfe9dd Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=84c00f6c-41dd-4cbf-ba97-08354c7a4ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8c:7b:b9:5e:97:a7:77:b0:38:17:da:56:0f: 3b:e7:eb:8b:46:dc:13:7e:37:96:f1:f8:7a:78:66: 1f:87:f4:aa:ad:46:cc:cc:e6:4d:92:c7:32:10:0d: 46:bf:3a:74:6d:cb:a7:d1:00:cc:5c:66:c8:07:5b: f3:d4:6c:b7:c1:d4:a7:5a:5d:d1:24:05:7e:52:b7: f2:8e:4b:38:3b:14:f0:1f:78:1d:cd:5a:fb:d7:97: a0:eb:56:86:93:03:fd:44:5e:cf:28:99:eb:97:3b: 51:af:b1:bc:92:5e:c3:c3:f5:ed:9e:d9:ca:2e:ba: b4:58:20:ef:21:3c:39:f2:e7:61:77:5f:a4:d4:b5: 2a:72:ea:e0:5e:c5:01:26:eb:68:76:fa:fb:5c:28: 53:ef:de:54:fa:46:62:cd:5c:ee:4a:48:99:5d:8b: 58:b8:e2:cc:65:08:f8:99:9a:65:f7:38:00:29:c0: a3:43:9d:cc:f4:24:47:44:3e:ab:8f:81:e1:0b:31: 12:02:a8:b4:e5:76:ff:ef:0e:91:89:53:b6:53:ed: e0:bd:2e:57:ae:53:be:e0:ef:e5:4d:8e:b7:d2:af: c3:b0:8c:33:2f:5e:68:77:28:3a:e7:7e:18:45:0e: a7:e3:bc:5b:e7:2c:85:3f:68:ef:87:56:74:76:0a: 6e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F2:21:65:62:62:12:95:F8:87:F3:14:2A:35:35:E0:FD:E7:B2:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/6284af02-d42e-3b40-8748-6bee172ebf9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.crl X509v3 Authority Key Identifier: keyid:70:5F:04:3F:F0:07:01:E7:30:D4:3C:E7:1B:F9:84:EB:62:53:4A:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer sbgp-ipAddrBlock: critical IPv4: 141.193.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:9d:09:27:21:10:4b:d9:43:8d:38:04:a1:ab:45:c8:30:72: b9:13:99:a5:27:2d:ea:0f:50:22:82:41:59:54:21:2b:26:6e: 28:90:b0:c4:71:1e:9f:41:cb:9c:a7:81:4d:ef:b1:bd:e2:2e: 20:7a:f1:07:db:28:27:d5:dc:80:48:5d:af:62:84:8d:1e:96: 20:be:e9:81:bb:9d:59:3f:dc:4a:49:a5:a4:f0:3b:83:35:a9: 24:a9:60:0d:2a:cd:86:5b:43:30:51:62:b3:80:c2:82:f7:0e: 29:fb:53:90:69:75:7a:b9:a7:fa:9a:34:35:44:a7:5b:d4:b9: b9:36:19:4d:64:5b:80:11:90:dd:76:66:f0:82:1f:6e:a6:02: 7a:d3:ff:ea:a4:52:dc:17:54:f1:2b:a8:90:7f:67:ea:89:06: d2:1a:12:8b:b9:09:72:d2:32:f2:bc:d8:0c:e3:47:90:55:53: 02:07:1b:b8:16:7d:1f:e0:38:c5:77:c7:d2:89:4a:95:2c:90: 6b:43:7d:61:a6:5d:58:92:c1:92:e0:76:2d:9e:89:a9:2a:7a: 5a:53:ae:93:03:35:59:04:9b:2f:9d:ec:58:5b:4a:37:68:c5: e6:9d:bc:46:52:d8:b0:da:c7:80:de:40:ee:5c:ca:6d:1b:ea: 98:28:bb:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswSNlIJeVG6nJ/2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTgxYThiNDktYTA2ZS00NDk3LTk3MmYtZmQ4NzkyYmZl OWRkMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ODRjMDBmNmMtNDFkZC00Y2JmLWJhOTctMDgzNTRjN2E0ZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4x7uV6Xp3ewOBfaVg875+uLRtwTfjeW8fh6 eGYfh/SqrUbMzOZNkscyEA1Gvzp0bcun0QDMXGbIB1vz1Gy3wdSnWl3RJAV+Urfy jks4OxTwH3gdzVr715eg61aGkwP9RF7PKJnrlztRr7G8kl7Dw/XtntnKLrq0WCDv ITw58udhd1+k1LUqcurgXsUBJutodvr7XChT795U+kZizVzuSkiZXYtYuOLMZQj4 mZpl9zgAKcCjQ53M9CRHRD6rj4HhCzESAqi05Xb/7w6RiVO2U+3gvS5XrlO+4O/l TY630q/DsIwzL15odyg6534YRQ6n47xb5yyFP2jvh1Z0dgpuWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3yIWViYhKV+IfzFCo1NeD957KXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ODFh OGI0OS1hMDZlLTQ0OTctOTcyZi1mZDg3OTJiZmU5ZGQvNjI4NGFmMDItZDQyZS0z YjQwLTg3NDgtNmJlZTE3MmViZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTgxYThiNDktYTA2ZS00NDk3LTk3 MmYtZmQ4NzkyYmZlOWRkLzU4MWE4YjQ5LWEwNmUtNDQ5Ny05NzJmLWZkODc5MmJm ZTlkZC5jcmwwHwYDVR0jBBgwFoAUcF8EP/AHAecw1DznG/mE62JTSkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ODFhOGI0OS1hMDZlLTQ0OTctOTcyZi1mZDg3 OTJiZmU5ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjcHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFidCSchEEvZQ404BKGrRcgwcrkTmaUnLeoPUCKCQVlUISsmbiiQsMRx Hp9By5yngU3vsb3iLiB68QfbKCfV3IBIXa9ihI0eliC+6YG7nVk/3EpJpaTwO4M1 qSSpYA0qzYZbQzBRYrOAwoL3Din7U5BpdXq5p/qaNDVEp1vUubk2GU1kW4ARkN12 ZvCCH26mAnrT/+qkUtwXVPErqJB/Z+qJBtIaEou5CXLSMvK82AzjR5BVUwIHG7gW fR/gOMV3x9KJSpUskGtDfWGmXViSwZLgdi2eiakqelpTrpMDNVkEmy+d7FhbSjdo xeadvEZS2LDax4DeQO5cym0b6pgou9E= -----END CERTIFICATE-----Generated at Sat Aug 23 17:57:43 2025 by rpki-client