$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/96694673-67c0-3a28-be12-a89684be83cb.roa File: 96694673-67c0-3a28-be12-a89684be83cb.roa (raw, json) Hash identifier: Et2p9SoiuWn/s2dPCEad9TM+5iL+SS2zuLdnLOCyD7A= Subject key identifier: 45:5C:12:DF:A3:DE:AE:B8:91:6F:C3:F1:A7:0C:9A:2D:F2:67:05:55 Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Certificate serial: 010D0C9F4328584AF0F14444C9D2E2C2588DA680 Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/96694673-67c0-3a28-be12-a89684be83cb.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 399575 IP address blocks: 206.204.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:44:44:c9:d2:e2:c2:58:8d:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=d8ec6e31-01d2-4b70-9df8-eff6a6ff33ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bb:0b:56:f1:d0:42:4f:7a:c3:c9:3d:44:d5: 34:df:d7:c5:07:19:db:69:22:75:eb:d7:a9:2d:75: 63:ec:8a:1f:03:6f:20:8c:ff:51:6e:d7:71:05:c2: cb:0b:2e:b6:4a:35:c7:67:8b:04:d2:31:4b:98:c7: d8:6c:9a:94:ba:09:1a:50:3d:ea:5e:6d:a9:3c:11: e4:55:3a:4f:9a:8a:9c:41:73:a5:08:92:ff:e8:a1: 81:b9:89:36:10:f5:8e:f4:cc:a5:bd:cd:43:13:b3: 26:d3:d0:0a:35:35:58:4c:5a:9f:38:17:47:a7:a7: b6:cc:73:b3:87:c2:85:32:ad:40:cc:b4:aa:6b:1a: 9d:2b:3f:1d:a2:39:e5:8a:a6:9c:ba:94:c7:4c:c8: 41:f4:5c:cd:2b:a2:d4:8f:0a:fb:1d:b5:93:2f:d0: bd:f9:c0:7c:61:68:f0:9d:44:3a:11:12:b3:04:7f: 8d:96:d9:49:e9:0b:ac:6e:93:44:fc:25:b2:54:3a: 41:8a:1d:60:29:df:dc:01:96:09:5f:69:b9:1e:3b: b8:30:b3:1a:03:58:a8:04:8f:7c:fb:d2:df:49:00: f6:cc:20:75:20:27:8b:52:be:f9:e5:7c:17:dc:5c: cb:d5:f2:b3:05:e9:a4:7b:c3:9e:4d:f1:ea:7c:08: ee:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5C:12:DF:A3:DE:AE:B8:91:6F:C3:F1:A7:0C:9A:2D:F2:67:05:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/96694673-67c0-3a28-be12-a89684be83cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl X509v3 Authority Key Identifier: keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer sbgp-ipAddrBlock: critical IPv4: 206.204.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:bd:46:39:6a:8b:ef:29:9e:56:32:d6:53:2a:65:aa:32:a9: f8:fe:1b:a6:90:43:9b:58:46:a8:2f:da:f6:b8:99:b3:8c:24: a9:99:38:82:3e:67:9f:1e:8e:38:ae:d6:54:b2:c1:47:2d:62: 53:23:63:f5:af:03:43:f9:9f:a4:8f:ca:5b:e7:fd:57:25:3c: 04:f3:35:df:b1:41:02:5a:d6:79:c2:96:10:c8:7c:7d:82:29: ab:c4:94:dd:3d:b6:7f:7c:bd:82:ed:95:8d:d0:58:66:8c:3a: da:86:11:a0:e6:01:46:de:33:1f:94:72:fd:bb:54:8e:e6:bc: 9b:d8:e5:b3:05:fb:6d:3e:1b:0b:8f:9c:06:81:94:aa:5e:f0: f7:2c:63:7c:2d:8c:4e:08:46:8a:6a:50:82:5b:3d:37:51:1f: fb:a7:a5:7e:fc:8b:4d:24:30:3a:a1:b5:3f:0c:ff:fb:d5:bf: 4f:26:05:42:6d:5b:1d:5b:a8:5d:09:8b:b7:8e:8f:7e:3f:08: f3:53:ed:03:f7:48:fe:0b:63:32:b4:7a:ab:33:41:49:b7:57: 5a:22:20:d8:3a:ad:b6:40:28:25:81:9b:60:a0:c9:1c:3b:58: cc:42:3a:a5:11:87:5c:ca:f8:01:ab:5e:9d:ec:0f:f4:59:fb: 46:46:3b:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UREydLiwliNpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm OGNhMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZDhlYzZlMzEtMDFkMi00YjcwLTlkZjgtZWZmNmE2ZmYzM2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbsLVvHQQk96w8k9RNU039fFBxnbaSJ169ep LXVj7IofA28gjP9RbtdxBcLLCy62SjXHZ4sE0jFLmMfYbJqUugkaUD3qXm2pPBHk VTpPmoqcQXOlCJL/6KGBuYk2EPWO9Mylvc1DE7Mm09AKNTVYTFqfOBdHp6e2zHOz h8KFMq1AzLSqaxqdKz8dojnliqacupTHTMhB9FzNK6LUjwr7HbWTL9C9+cB8YWjw nUQ6ERKzBH+NltlJ6QusbpNE/CWyVDpBih1gKd/cAZYJX2m5Hju4MLMaA1ioBI98 +9LfSQD2zCB1ICeLUr755XwX3FzL1fKzBemke8OeTfHqfAjuMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVcEt+j3q64kW/D8acMmi3yZwVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4 N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvOTY2OTQ2NzMtNjdjMC0z YTI4LWJlMTItYTg5Njg0YmU4M2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1 YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4 NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzszgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC69Rjlqi+8pnlYy1lMqZaoyqfj+G6aQQ5tYRqgv2va4mbOMJKmZOII+ Z58ejjiu1lSywUctYlMjY/WvA0P5n6SPylvn/VclPATzNd+xQQJa1nnClhDIfH2C KavElN09tn98vYLtlY3QWGaMOtqGEaDmAUbeMx+Ucv27VI7mvJvY5bMF+20+GwuP nAaBlKpe8PcsY3wtjE4IRopqUIJbPTdRH/unpX78i00kMDqhtT8M//vVv08mBUJt Wx1bqF0Ji7eOj34/CPNT7QP3SP4LYzK0eqszQUm3V1oiINg6rbZAKCWBm2CgyRw7 WMxCOqURh1zK+AGrXp3sD/RZ+0ZGOwo= -----END CERTIFICATE-----Generated at Sun Aug 24 00:29:06 2025 by rpki-client