$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/033f4d74-040b-38f6-8fdb-ba5b80f75c68.roa File: 033f4d74-040b-38f6-8fdb-ba5b80f75c68.roa (raw, json) Hash identifier: n/q+2cEx+iyY5QLeiCTnmgZFBFWNy2ZmGZCodDoSYgw= Subject key identifier: DA:B7:AA:5B:46:37:13:48:EF:4D:43:FA:CB:D3:3B:53:22:ED:B3:76 Certificate issuer: /CN=cb49febe-7885-4a3a-8290-3710b3f34905 Certificate serial: 010D0C9F4328584AD5065E76BD23B6958C90E400 Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/033f4d74-040b-38f6-8fdb-ba5b80f75c68.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 376 IP address blocks: 206.167.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:5e:76:bd:23:b6:95:8c:90:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=c3d8a9b5-0047-4422-9f2f-17e6f2ad6462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:03:34:26:9d:12:ae:4b:33:f1:c5:fc:4b:fa: 49:98:69:c7:3b:22:e6:f6:03:6f:27:fd:d1:0e:0d: 82:d8:e8:7f:24:b2:69:9d:2b:1b:5c:6c:38:c2:e4: 79:6b:59:c5:32:a0:6b:b4:4f:61:4a:42:3b:2a:1c: e8:7a:41:ce:5e:24:c2:49:e0:cd:80:97:ce:d7:a0: af:4b:fd:4f:32:f8:9a:db:2a:02:05:d1:4f:ca:fa: ee:fa:54:bc:b5:ea:7c:0b:82:87:22:e0:bc:30:29: 02:91:b3:41:e8:ef:c5:38:93:f5:17:0f:3f:06:0f: 2b:43:4d:58:de:49:ce:31:67:df:83:5f:3f:dd:76: d1:16:cb:59:4c:98:78:a3:42:0e:74:8c:92:b3:3c: b7:04:53:b5:8d:32:01:a0:d6:78:50:44:30:b0:f2: cd:0c:8f:63:a4:1d:e7:ec:0a:db:67:a3:e6:8c:8f: 2c:75:0f:19:08:9a:b5:3b:60:2b:e8:5a:e0:64:70: 5e:28:de:a9:d6:87:27:64:d3:0a:56:8d:fb:87:28: 3b:d2:42:39:62:d0:cc:7e:f3:01:a3:b0:fe:31:7d: 93:33:45:8f:fc:2e:cc:a5:a8:95:4b:a5:ca:eb:a2: 8e:9f:26:3a:10:27:c5:ce:53:40:cd:51:8a:03:d2: b7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B7:AA:5B:46:37:13:48:EF:4D:43:FA:CB:D3:3B:53:22:ED:B3:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/033f4d74-040b-38f6-8fdb-ba5b80f75c68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl X509v3 Authority Key Identifier: keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer sbgp-ipAddrBlock: critical IPv4: 206.167.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:90:18:e9:50:18:a2:f6:59:6f:17:11:36:b5:47:f3:df:e8: ab:7e:4f:08:dd:d8:9d:bc:c0:e0:f6:fc:81:df:85:8b:27:30: fd:c0:5a:2b:bb:a4:18:eb:f2:3b:6b:1a:00:23:0d:4c:36:5c: 85:7e:7a:f6:47:db:2a:63:ed:89:9f:6b:c1:bd:d9:f0:cf:9f: dc:c1:b8:64:a7:db:97:04:1e:0d:f6:ef:7b:df:77:d8:64:2a: 05:a0:63:e3:e6:67:6d:a4:17:e6:9b:ef:d0:e0:db:8f:fc:0d: bb:4d:cb:c9:28:b3:ac:c4:46:a0:56:18:09:ba:ee:bf:38:ea: a2:f1:4c:bf:88:0c:31:28:b3:c9:08:b6:0a:2b:eb:28:65:d6: ab:b8:56:eb:66:fb:84:67:47:a9:c2:db:43:d2:25:6c:2c:05: 93:3f:d8:cd:62:95:2a:15:64:2e:cb:91:25:77:e1:de:47:31: 6d:48:80:53:3b:42:bb:29:59:13:f7:ae:bc:8d:3d:fe:03:08: 63:e5:3a:33:6e:3d:8e:1d:f6:58:72:eb:4b:e0:9c:cc:d7:39: 0c:cb:1b:a1:fa:22:cf:33:4d:5b:c7:8a:c7:4f:ba:d4:86:b8: a4:a4:92:c9:8e:16:f1:07:24:45:bd:5e:9d:5f:92:8a:f2:7c: 40:7b:4e:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBl52vSO2lYyQ5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OWZlYmUtNzg4NS00YTNhLTgyOTAtMzcxMGIzZjM0 OTA1MB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk YzNkOGE5YjUtMDA0Ny00NDIyLTlmMmYtMTdlNmYyYWQ2NDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngM0Jp0Srksz8cX8S/pJmGnHOyLm9gNvJ/3R Dg2C2Oh/JLJpnSsbXGw4wuR5a1nFMqBrtE9hSkI7KhzoekHOXiTCSeDNgJfO16Cv S/1PMvia2yoCBdFPyvru+lS8tep8C4KHIuC8MCkCkbNB6O/FOJP1Fw8/Bg8rQ01Y 3knOMWffg18/3XbRFstZTJh4o0IOdIySszy3BFO1jTIBoNZ4UEQwsPLNDI9jpB3n 7ArbZ6PmjI8sdQ8ZCJq1O2Ar6FrgZHBeKN6p1ocnZNMKVo37hyg70kI5YtDMfvMB o7D+MX2TM0WP/C7MpaiVS6XK66KOnyY6ECfFzlNAzVGKA9K3cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNq3qltGNxNI701D+svTO1Mi7bN2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYjQ5 ZmViZS03ODg1LTRhM2EtODI5MC0zNzEwYjNmMzQ5MDUvMDMzZjRkNzQtMDQwYi0z OGY2LThmZGItYmE1YjgwZjc1YzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2I0OWZlYmUtNzg4NS00YTNhLTgy OTAtMzcxMGIzZjM0OTA1L2NiNDlmZWJlLTc4ODUtNGEzYS04MjkwLTM3MTBiM2Yz NDkwNS5jcmwwHwYDVR0jBBgwFoAUvOGzZkw5m0aMDRmG67KX3JfQGd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYjQ5ZmViZS03ODg1LTRhM2EtODI5MC0zNzEw YjNmMzQ5MDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyQGOlQGKL2WW8XETa1R/Pf6Kt+Twjd2J28wOD2/IHfhYsnMP3AWiu7 pBjr8jtrGgAjDUw2XIV+evZH2ypj7Ymfa8G92fDPn9zBuGSn25cEHg3273vfd9hk KgWgY+PmZ22kF+ab79Dg24/8DbtNy8kos6zERqBWGAm67r846qLxTL+IDDEos8kI tgor6yhl1qu4Vutm+4RnR6nC20PSJWwsBZM/2M1ilSoVZC7LkSV34d5HMW1IgFM7 QrspWRP3rryNPf4DCGPlOjNuPY4d9lhy60vgnMzXOQzLG6H6Is8zTVvHisdPutSG uKSkksmOFvEHJEW9Xp1fkoryfEB7TjA= -----END CERTIFICATE-----Generated at Sun Aug 24 03:51:57 2025 by rpki-client