$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/e389b2bd-b87e-3e7a-8537-72af1d063d52.roa File: e389b2bd-b87e-3e7a-8537-72af1d063d52.roa (raw, json) Hash identifier: /XDIhIEsoTcuNRCqHwx4DO4hpVYrFj9nslddOMEJQas= Subject key identifier: 87:12:BD:DC:1F:21:D2:4B:2C:E4:5F:96:A9:4C:91:7C:24:94:66:1F Certificate issuer: /CN=447fba4c-60a0-499e-8d5b-087545c981b7 Certificate serial: 010D0C9F4328584AF25681C638FCA2E4461D0B10 Authority key identifier: EE:19:B8:5F:E1:49:1F:BB:27:E1:4B:09:95:0F:35:36:91:30:16:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/e389b2bd-b87e-3e7a-8537-72af1d063d52.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 394510 IP address blocks: 206.168.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/447fba4c-60a0-499e-8d5b-087545c981b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/447fba4c-60a0-499e-8d5b-087545c981b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:81:c6:38:fc:a2:e4:46:1d:0b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=447fba4c-60a0-499e-8d5b-087545c981b7 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=1396fa9c-6e5c-4094-8fed-a1c1383c05e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c6:e6:88:cf:54:a9:3a:0e:12:e0:12:ff:39: f9:d9:fc:4c:dd:48:ad:74:78:c3:b9:4a:e7:24:9d: 40:94:34:ff:39:3b:7a:5f:38:86:1d:a3:5f:55:15: 55:22:08:c1:87:32:0e:54:3c:03:12:9e:ed:7f:d4: 6a:4e:34:24:e5:ca:f9:79:1f:01:31:39:36:d0:76: 89:77:94:3f:9b:7a:45:24:c4:93:05:38:4d:6c:ff: 63:b1:b4:7e:bc:3c:68:7d:1c:87:f6:35:36:68:ae: 79:18:39:2c:96:ce:31:7a:bd:e9:fe:9e:04:5c:ff: 6a:a7:7f:59:83:64:4d:9c:e3:b2:21:0c:3f:89:fd: 28:bb:2d:1c:85:f1:dc:a9:cf:2f:ac:07:3b:2b:b0: f9:25:12:fc:32:e7:d5:dd:66:4f:f4:db:d5:14:70: 3c:f7:35:42:b3:a8:61:92:bd:30:9a:e4:aa:af:5c: 6e:a5:63:67:b7:50:de:3e:a2:45:85:4a:7c:c0:10: 36:ec:36:33:c4:35:db:df:e9:71:54:1c:c7:20:4e: 77:56:b9:ea:02:e1:df:95:6b:22:d6:db:a5:e2:e3: 46:d0:a6:06:c8:43:85:ec:cc:09:09:66:08:68:90: fb:02:92:9a:25:f0:b3:d2:30:ff:51:67:2e:08:5f: ec:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:12:BD:DC:1F:21:D2:4B:2C:E4:5F:96:A9:4C:91:7C:24:94:66:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/e389b2bd-b87e-3e7a-8537-72af1d063d52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/447fba4c-60a0-499e-8d5b-087545c981b7.crl X509v3 Authority Key Identifier: keyid:EE:19:B8:5F:E1:49:1F:BB:27:E1:4B:09:95:0F:35:36:91:30:16:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:20:9d:ce:ef:bc:60:82:cf:8c:4e:1a:2b:7c:d8:2a:37:3d: f8:04:97:c5:3f:b9:74:e9:98:d5:d1:4a:08:1b:09:0d:8b:19: e9:e4:ea:66:00:40:da:4f:b0:66:1c:ce:07:02:76:ed:ce:10: ff:31:7c:21:f3:a2:5c:b7:de:2f:aa:a1:2f:47:34:27:7a:0d: 93:e5:bb:b1:e6:18:4e:9a:44:1e:6c:21:f4:b8:41:41:ee:4b: 2e:90:85:3e:41:22:3b:54:ef:6a:53:63:c9:2c:3d:e2:16:63: 9e:dc:ca:88:8c:a6:12:21:14:7f:02:70:b3:83:ef:45:ac:ff: 62:2f:7d:74:1e:21:f0:bc:ac:73:15:7d:8e:44:c8:1f:ad:02: e7:f8:de:12:5a:9e:9e:cf:1e:fa:22:e6:1e:42:35:04:b1:76: 32:68:e2:44:bb:ce:77:00:9b:cd:09:3b:3e:49:00:2c:2f:68: d4:58:b5:46:e8:7c:01:4f:c8:83:47:24:6c:3f:2c:bd:c7:f2: 86:f9:db:f5:05:bc:b0:99:f8:7f:31:8d:e3:53:e7:90:3d:d3: b4:91:6c:d4:a4:ed:90:38:d5:a0:eb:21:82:47:be:61:40:ec: 24:37:6a:06:8d:5b:e6:fa:51:8e:65:af:3b:49:05:5c:68:dc: 6e:e4:83:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVoHGOPyi5EYdCxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQ3ZmJhNGMtNjBhMC00OTllLThkNWItMDg3NTQ1Yzk4 MWI3MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MTM5NmZhOWMtNmU1Yy00MDk0LThmZWQtYTFjMTM4M2MwNWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosbmiM9UqToOEuAS/zn52fxM3UitdHjDuUrn JJ1AlDT/OTt6XziGHaNfVRVVIgjBhzIOVDwDEp7tf9RqTjQk5cr5eR8BMTk20HaJ d5Q/m3pFJMSTBThNbP9jsbR+vDxofRyH9jU2aK55GDksls4xer3p/p4EXP9qp39Z g2RNnOOyIQw/if0ouy0chfHcqc8vrAc7K7D5JRL8MufV3WZP9NvVFHA89zVCs6hh kr0wmuSqr1xupWNnt1DePqJFhUp8wBA27DYzxDXb3+lxVBzHIE53VrnqAuHflWsi 1tul4uNG0KYGyEOF7MwJCWYIaJD7ApKaJfCz0jD/UWcuCF/sVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcSvdwfIdJLLORflqlMkXwklGYfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NDdm YmE0Yy02MGEwLTQ5OWUtOGQ1Yi0wODc1NDVjOTgxYjcvZTM4OWIyYmQtYjg3ZS0z ZTdhLTg1MzctNzJhZjFkMDYzZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDQ3ZmJhNGMtNjBhMC00OTllLThk NWItMDg3NTQ1Yzk4MWI3LzQ0N2ZiYTRjLTYwYTAtNDk5ZS04ZDViLTA4NzU0NWM5 ODFiNy5jcmwwHwYDVR0jBBgwFoAU7hm4X+FJH7sn4UsJlQ81NpEwFo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80NDdmYmE0Yy02MGEwLTQ5OWUtOGQ1Yi0wODc1 NDVjOTgxYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqgCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0gnc7vvGCCz4xOGit82Co3PfgEl8U/uXTpmNXRSggbCQ2LGenk6mYA QNpPsGYczgcCdu3OEP8xfCHzoly33i+qoS9HNCd6DZPlu7HmGE6aRB5sIfS4QUHu Sy6QhT5BIjtU72pTY8ksPeIWY57cyoiMphIhFH8CcLOD70Ws/2IvfXQeIfC8rHMV fY5EyB+tAuf43hJanp7PHvoi5h5CNQSxdjJo4kS7zncAm80JOz5JACwvaNRYtUbo fAFPyINHJGw/LL3H8ob52/UFvLCZ+H8xjeNT55A907SRbNSk7ZA41aDrIYJHvmFA 7CQ3agaNW+b6UY5lrztJBVxo3G7kg3k= -----END CERTIFICATE-----Generated at Sun Aug 24 06:58:25 2025 by rpki-client