$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa File: 06c9f9a0-fe01-38c9-bbdf-309da400287e.roa (raw, json) Hash identifier: UI+e+goahIXsn5GRo+wMyWsTohT8MZa0I3+95mV89JQ= Subject key identifier: 1E:84:B5:D1:40:F3:95:E6:00:C9:73:D1:70:04:14:80:82:C1:7E:0A Certificate issuer: /CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828 Certificate serial: 010D0C9F4328584AC2E106CAC7A61193D04D7FC0 Authority key identifier: B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 209 IP address blocks: 199.191.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:06:ca:c7:a6:11:93:d0:4d:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=d0f527a1-c317-4c80-9751-e049f7deaf0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a1:95:82:99:09:6c:70:87:ff:76:77:63:33: 9c:ef:c4:fb:57:97:cb:9c:4c:3f:d9:22:06:11:cf: 38:b4:39:2c:7d:37:f6:2b:ec:ea:97:44:72:b6:29: e4:a1:24:2e:02:04:77:13:10:46:ce:bc:4b:69:e2: 18:97:f9:86:4a:51:58:30:8d:76:8c:f6:39:16:dd: 56:ee:ca:eb:dd:a6:f9:f7:44:52:ae:e0:98:3b:ae: 7e:16:f0:2b:50:92:3e:b8:07:be:8b:3a:be:37:95: 0d:c9:35:e8:ea:18:90:6b:70:d3:f3:94:5c:8a:bf: 84:8a:47:2d:f2:56:58:56:78:88:1a:ab:16:e6:20: b9:f5:df:a7:bb:42:14:37:3e:ef:64:35:5a:9d:79: 26:96:82:8e:a6:b5:18:c0:1e:4c:02:a4:d5:36:82: 14:66:0e:76:2a:77:b6:f2:8e:6f:c4:4d:78:53:5b: 2a:60:09:eb:52:5b:f6:71:93:8b:9d:52:a2:c1:95: f0:62:f8:ee:e6:1d:12:1a:b5:46:a0:1e:61:83:04: 7e:e2:37:24:4b:75:5e:b1:47:3b:91:af:01:9d:a4: b9:8e:94:83:ce:8f:58:25:92:4f:56:7b:a4:2d:d4: 1d:6f:75:38:cf:d4:77:18:cd:00:cd:24:c7:ee:43: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:84:B5:D1:40:F3:95:E6:00:C9:73:D1:70:04:14:80:82:C1:7E:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl X509v3 Authority Key Identifier: keyid:B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer sbgp-ipAddrBlock: critical IPv4: 199.191.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:00:41:27:b1:b9:b7:20:90:7e:a7:1c:b3:1f:e4:bd:f1:b0: 33:00:bb:a4:4b:95:aa:75:7b:4a:4c:f1:35:00:40:51:92:5b: b6:3e:c0:30:30:e7:27:3f:8f:8f:df:e9:0d:08:6f:f2:8e:03: 14:3f:7e:00:91:e6:41:17:e8:93:9e:4c:9a:1d:b2:8f:94:4e: f2:62:57:e4:54:ae:f9:84:0a:ed:64:80:30:98:58:23:4f:81: c2:ae:cc:5f:6c:25:0a:ce:96:b7:2b:93:33:31:cb:ea:0b:20: 2d:17:be:1a:37:5d:f7:5e:f8:d6:dc:3f:32:e7:da:70:57:af: b4:a6:93:44:e0:31:37:07:34:3c:c0:8f:97:93:d6:df:ee:5a: a1:56:41:c1:5d:e1:2a:8d:10:1a:0b:6e:b8:a3:96:d9:a1:7b: a9:4a:cb:8f:0e:2f:b6:f4:43:d8:c8:ea:58:7c:68:f5:30:20: 5d:78:82:b8:1c:ae:7e:bd:32:1a:08:08:66:62:36:fc:33:cb: 3d:5c:a3:07:3d:ad:c6:0f:57:0c:98:d0:73:ff:6a:86:4d:fd: 9b:35:1b:b6:28:e1:ee:8e:30:9f:f4:f5:d7:b1:f7:c4:25:07: e2:7d:9a:90:0c:27:24:94:c1:7a:c4:d4:82:da:d0:df:c0:6c: 0e:f8:12:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4QbKx6YRk9BNf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RiNzQ3YjItYjQ2ZS00YWMxLWI2YTEtOTRjMjczZDBj ODI4MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDBmNTI3YTEtYzMxNy00YzgwLTk3NTEtZTA0OWY3ZGVhZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaGVgpkJbHCH/3Z3YzOc78T7V5fLnEw/2SIG Ec84tDksfTf2K+zql0RytinkoSQuAgR3ExBGzrxLaeIYl/mGSlFYMI12jPY5Ft1W 7srr3ab590RSruCYO65+FvArUJI+uAe+izq+N5UNyTXo6hiQa3DT85Rcir+Eikct 8lZYVniIGqsW5iC59d+nu0IUNz7vZDVanXkmloKOprUYwB5MAqTVNoIUZg52Kne2 8o5vxE14U1sqYAnrUlv2cZOLnVKiwZXwYvju5h0SGrVGoB5hgwR+4jckS3VesUc7 ka8BnaS5jpSDzo9YJZJPVnukLdQdb3U4z9R3GM0AzSTH7kNrEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6EtdFA85XmAMlz0XAEFICCwX4KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZGI3 NDdiMi1iNDZlLTRhYzEtYjZhMS05NGMyNzNkMGM4MjgvMDZjOWY5YTAtZmUwMS0z OGM5LWJiZGYtMzA5ZGE0MDAyODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2RiNzQ3YjItYjQ2ZS00YWMxLWI2 YTEtOTRjMjczZDBjODI4L2NkYjc0N2IyLWI0NmUtNGFjMS1iNmExLTk0YzI3M2Qw YzgyOC5jcmwwHwYDVR0jBBgwFoAUt4HA3Yy+hO4OdZPQjMbPhjvxVDQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZGI3NDdiMi1iNDZlLTRhYzEtYjZhMS05NGMy NzNkMGM4MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx79BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMAQSexubcgkH6nHLMf5L3xsDMAu6RLlap1e0pM8TUAQFGSW7Y+wDAw 5yc/j4/f6Q0Ib/KOAxQ/fgCR5kEX6JOeTJodso+UTvJiV+RUrvmECu1kgDCYWCNP gcKuzF9sJQrOlrcrkzMxy+oLIC0Xvho3Xfde+NbcPzLn2nBXr7Smk0TgMTcHNDzA j5eT1t/uWqFWQcFd4SqNEBoLbrijltmhe6lKy48OL7b0Q9jI6lh8aPUwIF14grgc rn69MhoICGZiNvwzyz1cowc9rcYPVwyY0HP/aoZN/Zs1G7Yo4e6OMJ/09dex98Ql B+J9mpAMJySUwXrE1ILa0N/AbA74EoI= -----END CERTIFICATE-----Generated at Sun Aug 24 01:06:43 2025 by rpki-client