$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/15011994-9da5-3fcf-b23a-7c336ddae2b1.roa File: 15011994-9da5-3fcf-b23a-7c336ddae2b1.roa (raw, json) Hash identifier: IcrjsM/TRrMgs9BNIjT8Tt/SdkP6xtwtzNv5mZEgspQ= Subject key identifier: 38:FF:DE:D5:D4:50:E3:D4:78:02:D5:30:B0:F3:FC:6B:10:56:F1:D3 Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584AE8912D62AD7310E07F5F6570 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/15011994-9da5-3fcf-b23a-7c336ddae2b1.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 16276 IP address blocks: 206.168.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:2d:62:ad:73:10:e0:7f:5f:65:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=ba94d7b1-93e0-432d-b55f-11cfbf8d03b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:67:f3:40:2a:6f:b3:63:d7:16:03:9f:ee:19: 5e:f8:2e:db:32:fa:9c:32:a3:b5:c4:42:52:73:ba: df:62:11:70:ba:73:21:45:7e:8a:d2:b3:2f:5c:06: 93:fd:96:b1:bf:79:a2:f5:1e:b0:e0:64:8a:70:8e: f7:d0:3a:33:cf:e1:1f:ab:70:1b:74:d6:15:52:04: 21:0c:f4:66:13:13:ac:60:de:9d:75:2d:4e:02:ee: 13:d6:05:dd:d7:0c:74:cd:12:c5:d1:fe:08:c3:0d: 42:10:eb:9d:da:52:04:a7:e0:cd:4b:3c:53:1a:ab: 32:56:ce:84:07:a4:58:78:37:00:66:82:da:cc:48: 87:45:7b:ae:64:74:93:d6:e9:b3:57:4c:8f:ab:78: 0e:89:1e:a8:2b:28:d9:8f:8c:58:3b:9a:5e:bd:68: 08:a2:59:43:fb:0f:a0:35:95:55:2f:c5:35:e7:16: 57:27:d5:ac:ce:b1:e9:2d:12:7c:e1:55:21:91:f4: 0f:36:22:99:42:ca:26:90:71:b1:a9:23:a2:fb:45: 6d:c3:9b:93:1f:f4:8c:f1:a2:3d:f1:88:39:42:ff: e2:41:8b:d0:cd:de:a6:ff:95:6f:f4:e1:63:21:d3: 8a:3f:50:c0:cb:ef:73:7c:3f:af:17:1a:50:94:d7: f8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FF:DE:D5:D4:50:E3:D4:78:02:D5:30:B0:F3:FC:6B:10:56:F1:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/15011994-9da5-3fcf-b23a-7c336ddae2b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 206.168.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:27:48:d3:8c:4d:c6:e6:f6:9e:32:0e:ee:2a:03:42:d7:88: f2:d7:c0:a8:64:ed:4b:91:81:a2:df:1b:ea:c6:93:18:40:ea: dd:42:90:6c:1b:d7:3d:66:ea:f3:b9:8f:01:88:27:2e:cc:53: b7:8d:f8:e7:a6:b4:03:63:9b:a7:d0:75:a7:71:18:9c:62:7e: 45:cd:0e:31:c1:46:60:18:74:55:d0:39:09:b2:53:1a:a0:d8: 68:d0:e4:ba:dc:49:8b:c1:79:61:b9:95:31:dc:0a:aa:a8:9d: 4a:13:9c:a1:b2:3c:62:b0:e7:d9:60:b9:c0:e0:7d:80:92:02: fe:1c:2c:ce:cf:c8:e6:e1:46:aa:d0:e7:2a:00:6d:65:b2:a2: df:1a:9d:24:27:2c:32:dc:4e:5d:1d:fe:cf:1d:f4:b7:b5:ec: 90:f4:3c:c2:d2:17:30:ba:93:ce:f1:8c:18:18:f0:9e:ee:63: b8:f9:ff:a2:f1:35:9a:ee:f2:40:d4:29:ec:d9:6a:31:7e:9f: d0:5d:92:bf:6a:af:58:d4:90:bf:d6:71:7f:2b:22:a9:3e:e6: 14:a9:a6:60:5e:34:d9:8f:27:3c:89:ee:16:9b:ba:61:78:fe: 7b:fc:de:40:0a:06:8c:b9:f6:18:72:e3:c4:73:eb:9c:26:f6: e7:db:cc:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokS1irXMQ4H9fZXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk YmE5NGQ3YjEtOTNlMC00MzJkLWI1NWYtMTFjZmJmOGQwM2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWfzQCpvs2PXFgOf7hle+C7bMvqcMqO1xEJS c7rfYhFwunMhRX6K0rMvXAaT/Zaxv3mi9R6w4GSKcI730Dozz+Efq3AbdNYVUgQh DPRmExOsYN6ddS1OAu4T1gXd1wx0zRLF0f4Iww1CEOud2lIEp+DNSzxTGqsyVs6E B6RYeDcAZoLazEiHRXuuZHST1umzV0yPq3gOiR6oKyjZj4xYO5pevWgIollD+w+g NZVVL8U15xZXJ9WszrHpLRJ84VUhkfQPNiKZQsomkHGxqSOi+0Vtw5uTH/SM8aI9 8Yg5Qv/iQYvQzd6m/5Vv9OFjIdOKP1DAy+9zfD+vFxpQlNf4eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDj/3tXUUOPUeALVMLDz/GsQVvHTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvMTUwMTE5OTQtOWRhNS0z ZmNmLWIyM2EtN2MzMzZkZGFlMmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqiuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEknSNOMTcbm9p4yDu4qA0LXiPLXwKhk7UuRgaLfG+rGkxhA6t1CkGwb 1z1m6vO5jwGIJy7MU7eN+OemtANjm6fQdadxGJxifkXNDjHBRmAYdFXQOQmyUxqg 2GjQ5LrcSYvBeWG5lTHcCqqonUoTnKGyPGKw59lgucDgfYCSAv4cLM7PyObhRqrQ 5yoAbWWyot8anSQnLDLcTl0d/s8d9Le17JD0PMLSFzC6k87xjBgY8J7uY7j5/6Lx NZru8kDUKezZajF+n9Bdkr9qr1jUkL/WcX8rIqk+5hSppmBeNNmPJzyJ7habumF4 /nv83kAKBoy59hhy48Rz65wm9ufbzJc= -----END CERTIFICATE-----Generated at Sat Aug 23 21:15:03 2025 by rpki-client