$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa File: 3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa (raw, json) Hash identifier: 7pFAb7Rgz2EPy2A6y0bci4TfTl3wFcAuIZV6sVou32o= Subject key identifier: 44:A1:8A:97:35:71:5F:FA:AC:1A:8F:38:B4:39:31:12:BA:7A:94:9B Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584AC9DBA38C27AC3AABA050AB00 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 0 IP address blocks: 206.108.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:a3:8c:27:ac:3a:ab:a0:50:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=5408b738-aa7d-4279-9096-b26cc231fd53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:86:ed:f4:c1:18:ef:f1:b7:84:01:e6:54:04: 24:14:58:ac:3f:ee:d2:08:a1:0f:bc:5d:3c:0a:7c: a7:23:ce:90:34:4a:8e:9b:73:4c:d2:c5:52:07:e8: 76:6f:3a:3a:f5:21:0a:da:79:cb:33:5b:33:7c:57: 6f:84:cc:16:8a:7b:8b:1e:a9:c8:48:85:71:18:0e: ea:1f:a6:d8:65:99:1e:45:e7:76:0b:96:c6:24:ff: a1:da:c2:68:09:d8:b9:78:50:30:83:ad:fb:53:41: 62:51:6e:12:f0:6d:ba:e8:94:bb:bc:5b:55:78:c9: 77:51:22:eb:ba:c3:13:bf:d7:b8:dc:e0:29:3a:1e: b4:4b:07:b3:ee:11:f2:35:6d:81:15:b2:16:df:2b: b7:63:3e:b6:69:14:a3:08:d0:f6:de:3a:62:70:f9: e8:76:bb:35:85:9b:95:72:92:8b:56:b3:6b:2c:5a: 02:b7:b2:d0:4e:39:c0:f9:be:2b:a7:19:11:40:04: 68:5c:27:13:d6:4f:e9:53:8b:94:8b:f2:59:b4:d2: 89:ba:7b:11:aa:c8:b8:d2:8d:2f:e7:4d:f4:ae:2a: 44:7c:e1:15:ff:d3:28:da:83:70:27:24:f2:fb:f9: 21:e6:08:47:ac:b8:36:fe:fd:84:9c:61:6b:96:30: 50:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A1:8A:97:35:71:5F:FA:AC:1A:8F:38:B4:39:31:12:BA:7A:94:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: 206.108.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:af:6b:4d:a2:5e:80:f8:04:63:ff:ef:8d:4a:a5:c4:71:34: d6:2e:c5:d1:d0:79:4c:0f:ae:62:14:ba:bc:ab:84:12:5b:00: d1:7e:ff:f0:c5:b1:1d:f1:3c:59:13:b4:ee:22:5b:fa:9f:35: 7c:3d:a5:c5:07:4f:6b:98:48:10:2e:66:b8:93:53:bf:be:65: 1a:df:bd:c2:89:83:c6:08:39:82:f9:03:60:c9:a5:9e:5c:cf: 95:04:8e:c0:eb:66:c8:8b:2d:0e:f9:57:c8:26:85:34:04:af: 41:c9:e3:e3:22:69:2d:fa:61:27:28:08:ba:d6:50:1a:db:e3: c8:aa:7b:3d:87:0d:9b:c1:3e:08:66:ca:6b:53:1e:45:af:e8: 98:ff:e2:cb:08:b5:9c:af:f6:aa:45:d1:19:8e:76:7d:37:d2: 40:7a:36:29:9c:43:ce:4d:16:83:55:8b:ed:e1:cd:b6:69:ee: e1:36:61:5a:11:0b:4c:6c:ff:40:7f:82:5b:84:fd:19:44:01: 9d:e4:2d:90:ba:1b:f0:74:f5:3e:11:c8:8f:ec:e2:77:2b:c8: 93:8e:81:97:7b:21:51:5e:91:0d:2a:8f:41:b9:8e:cc:11:d7: d3:1c:d4:73:fc:81:47:4c:eb:c9:64:6b:d8:b7:fd:fa:1a:b7: d3:b9:b2:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ26OMJ6w6q6BQqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk NTQwOGI3MzgtYWE3ZC00Mjc5LTkwOTYtYjI2Y2MyMzFmZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIbt9MEY7/G3hAHmVAQkFFisP+7SCKEPvF08 CnynI86QNEqOm3NM0sVSB+h2bzo69SEK2nnLM1szfFdvhMwWinuLHqnISIVxGA7q H6bYZZkeRed2C5bGJP+h2sJoCdi5eFAwg637U0FiUW4S8G266JS7vFtVeMl3USLr usMTv9e43OApOh60Swez7hHyNW2BFbIW3yu3Yz62aRSjCND23jpicPnodrs1hZuV cpKLVrNrLFoCt7LQTjnA+b4rpxkRQARoXCcT1k/pU4uUi/JZtNKJunsRqsi40o0v 5030ripEfOEV/9Mo2oNwJyTy+/kh5ghHrLg2/v2EnGFrljBQSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEShipc1cV/6rBqPOLQ5MRK6epSbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvM2Y5YTdlMmUtMmQzMS0z NTM1LWI2MjEtNjM2NmU3MGY1NGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzmxzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWva02iXoD4BGP/741KpcRxNNYuxdHQeUwPrmIUuryrhBJbANF+//DF sR3xPFkTtO4iW/qfNXw9pcUHT2uYSBAuZriTU7++ZRrfvcKJg8YIOYL5A2DJpZ5c z5UEjsDrZsiLLQ75V8gmhTQEr0HJ4+MiaS36YScoCLrWUBrb48iqez2HDZvBPghm ymtTHkWv6Jj/4ssItZyv9qpF0RmOdn030kB6NimcQ85NFoNVi+3hzbZp7uE2YVoR C0xs/0B/gluE/RlEAZ3kLZC6G/B09T4RyI/s4ncryJOOgZd7IVFekQ0qj0G5jswR 19Mc1HP8gUdM68lka9i3/foat9O5sjo= -----END CERTIFICATE-----Generated at Sat Aug 23 08:24:48 2025 by rpki-client