$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a463cdbc-f02a-3f9c-a824-9c3e57ef99cb.roa File: a463cdbc-f02a-3f9c-a824-9c3e57ef99cb.roa (raw, json) Hash identifier: VCNXlN3pFoYvHEpLPCvUEllc38F9LjNNLbXwtL2Kxko= Subject key identifier: 43:31:FD:B1:0D:70:EA:26:EB:6E:2D:EF:B1:F0:9E:1B:13:31:18:BB Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584AD23BB2A5FF3E8AF753247260 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a463cdbc-f02a-3f9c-a824-9c3e57ef99cb.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 394111 IP address blocks: 206.72.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b2:a5:ff:3e:8a:f7:53:24:72:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=541fba2b-ce8f-41ef-9dc0-27f5e773b8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8c:bd:8e:4b:f6:7d:ac:5f:60:43:f5:33:8c: 55:96:a8:77:bf:80:2e:b6:5d:68:05:5a:e6:6a:f2: a3:a1:a2:a0:db:66:bc:c1:59:6e:ba:69:69:31:fa: ba:81:73:12:07:80:f1:c2:3d:86:37:08:30:b0:29: e4:29:d5:b8:c6:90:cb:a5:d0:d7:2a:67:70:d5:8f: 1c:29:fa:bd:e4:5d:3b:8b:8a:53:9a:47:94:74:36: e4:89:ee:da:61:2d:64:25:26:c4:8c:c1:a2:25:7e: eb:03:04:70:59:37:83:24:77:38:d7:a7:4b:0e:8b: 30:bb:67:a5:be:bf:0a:18:e4:bb:e1:45:b1:aa:b7: e8:3f:ac:e9:5c:ae:e9:1e:d6:1e:9a:31:5e:51:d8: 72:0b:6d:11:1b:5c:40:be:5c:82:fb:dd:83:0e:40: 10:86:57:59:97:a2:dc:cb:60:92:33:41:ac:a6:fc: 39:bb:3a:b7:1a:8b:e9:ef:6d:1d:c9:89:89:33:1f: 9d:bf:01:b7:5f:08:d7:36:8a:5d:2a:58:8e:54:ea: f4:10:70:cc:cf:88:24:1d:73:b0:8c:8e:ee:bd:78: 96:bf:78:92:9c:ab:fc:1d:a9:ef:7f:50:e3:d6:35: 72:dc:70:e0:df:6d:2c:0e:52:52:05:32:52:83:5a: 52:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:31:FD:B1:0D:70:EA:26:EB:6E:2D:EF:B1:F0:9E:1B:13:31:18:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a463cdbc-f02a-3f9c-a824-9c3e57ef99cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 206.72.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:98:b5:8a:ba:1f:78:72:d6:68:49:05:be:d7:da:10:28:70: fd:50:c5:de:a7:74:d5:4a:29:5e:44:17:3f:dd:16:ef:4e:6b: c2:94:83:65:02:77:b3:52:18:44:ed:08:e8:57:da:0c:51:95: e8:d5:6a:f2:74:b8:03:63:64:96:48:e4:73:0e:03:93:16:2f: d0:6e:48:b7:c9:bc:3c:11:0b:77:c8:38:ad:f6:1f:d9:74:13: a6:61:e2:09:bc:a8:4e:4e:7f:5d:ab:4f:c9:86:25:31:2a:69: d8:46:f0:4f:3e:5f:d4:c6:b2:e6:ef:26:ca:fd:b5:96:76:3c: aa:45:ea:b6:26:22:ad:fc:2b:c6:b9:11:74:52:e4:cb:5d:ba: 7e:c2:c9:7d:1c:e9:b4:bb:2f:ed:6a:2d:b8:ce:e5:b0:b1:5b: ab:00:ad:5d:5b:1d:41:22:d0:f2:81:25:c8:72:cf:c7:5f:19: 4b:c2:ba:68:8c:a9:81:43:d5:60:ef:f3:b6:7b:a2:c3:3a:0e: ab:7b:3c:b9:25:85:69:ef:ec:61:77:1f:f6:fd:a9:f5:df:34: aa:a4:76:e0:0f:be:77:e3:90:7f:9c:a0:74:8f:dd:bb:75:00: e6:b4:f6:9f:21:b8:b4:d7:79:ff:62:ca:01:c5:3a:72:b4:e9: c0:94:46:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7Kl/z6K91MkcmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NTQxZmJhMmItY2U4Zi00MWVmLTlkYzAtMjdmNWU3NzNiOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4y9jkv2faxfYEP1M4xVlqh3v4Autl1oBVrm avKjoaKg22a8wVluumlpMfq6gXMSB4Dxwj2GNwgwsCnkKdW4xpDLpdDXKmdw1Y8c Kfq95F07i4pTmkeUdDbkie7aYS1kJSbEjMGiJX7rAwRwWTeDJHc416dLDoswu2el vr8KGOS74UWxqrfoP6zpXK7pHtYemjFeUdhyC20RG1xAvlyC+92DDkAQhldZl6Lc y2CSM0Gspvw5uzq3Govp720dyYmJMx+dvwG3XwjXNopdKliOVOr0EHDMz4gkHXOw jI7uvXiWv3iSnKv8Hanvf1Dj1jVy3HDg320sDlJSBTJSg1pS2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMx/bENcOom624t77HwnhsTMRi7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYTQ2M2NkYmMtZjAyYS0z ZjljLWE4MjQtOWMzZTU3ZWY5OWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzkjUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2YtYq6H3hy1mhJBb7X2hAocP1Qxd6ndNVKKV5EFz/dFu9Oa8KUg2UC d7NSGETtCOhX2gxRlejVavJ0uANjZJZI5HMOA5MWL9BuSLfJvDwRC3fIOK32H9l0 E6Zh4gm8qE5Of12rT8mGJTEqadhG8E8+X9TGsubvJsr9tZZ2PKpF6rYmIq38K8a5 EXRS5Mtdun7CyX0c6bS7L+1qLbjO5bCxW6sArV1bHUEi0PKBJchyz8dfGUvCumiM qYFD1WDv87Z7osM6Dqt7PLklhWnv7GF3H/b9qfXfNKqkduAPvnfjkH+coHSP3bt1 AOa09p8huLTXef9iygHFOnK06cCURsk= -----END CERTIFICATE-----Generated at Sun Aug 24 00:06:02 2025 by rpki-client