$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8231f5b4-8ea4-34c9-bbe7-76fa1a528dcc.roa File: 8231f5b4-8ea4-34c9-bbe7-76fa1a528dcc.roa (raw, json) Hash identifier: 7AsAOB9GwAX/1ASTCxSlaDa1/J1dogNkbTVci52BtuM= Subject key identifier: C3:82:E2:08:5A:0C:19:8B:7A:18:6B:07:55:45:DB:BD:CD:33:DE:35 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584AE72BB9D874678D3B30E8D900 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8231f5b4-8ea4-34c9-bbe7-76fa1a528dcc.roa Signing time: Tue 19 Aug 2025 01:00:32 +0000 ROA not before: Tue 19 Aug 2025 01:00:32 +0000 ROA not after: Mon 17 Nov 2025 02:00:32 +0000 asID: 7029 IP address blocks: 206.245.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e7:2b:b9:d8:74:67:8d:3b:30:e8:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Aug 19 01:00:32 2025 GMT Not After : Nov 17 02:00:32 2025 GMT Subject: CN=d89aa08d-8b8c-4d1b-a7d5-c9d141e8398d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1f:13:4f:e2:ab:4c:44:17:08:49:6c:46:8e: 16:76:00:e6:e2:ba:10:aa:8a:5b:ee:b3:b1:6c:d0: 49:8a:38:48:e1:b6:1d:e9:ee:27:c6:11:fe:50:37: 71:9a:6c:bf:67:d8:4c:b5:e4:2a:ca:41:8e:b1:bc: 5b:0d:34:1c:af:bf:ce:d0:92:41:10:21:a2:6c:cf: fe:59:d1:38:2a:3f:b8:3c:51:41:d6:ca:50:50:b9: 72:52:4b:99:bf:75:4e:22:93:cb:49:6b:b8:c6:af: c5:6f:a4:df:73:de:71:e2:f8:7c:67:3e:64:c6:98: 9b:13:2a:82:8c:8f:ff:73:db:57:91:61:b6:7e:51: 55:2d:0f:0b:08:cd:42:04:eb:1a:bb:32:a2:2b:36: 0e:0c:34:54:50:42:19:05:a6:ca:90:c0:45:d1:ef: b5:3a:ad:b4:6d:9f:44:c2:69:56:cc:c7:cc:fe:d8: db:1a:d2:91:15:e7:b9:ff:d5:ff:6a:4b:e2:17:74: d1:4c:55:1a:35:e5:a2:30:9b:27:d1:85:e1:44:d7: b6:1b:e1:24:ea:22:df:21:bc:9e:ba:0a:d2:12:cc: 89:a3:1c:27:e8:b6:4f:f8:fd:e5:4e:1a:2c:75:dc: f6:67:32:73:68:29:4c:29:0f:4d:cf:63:11:8d:6b: 13:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:82:E2:08:5A:0C:19:8B:7A:18:6B:07:55:45:DB:BD:CD:33:DE:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8231f5b4-8ea4-34c9-bbe7-76fa1a528dcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 206.245.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ba:07:5d:d0:38:73:ce:72:71:71:79:a5:0d:ec:d1:2b:db: af:22:c6:3f:87:41:08:16:2c:15:f5:7a:55:b9:ac:89:fe:21: 37:51:bf:d6:61:c3:13:2c:68:4b:cd:6b:e3:62:c3:3d:58:c7: e1:36:2b:be:5f:55:65:d5:8c:32:a0:7b:9e:3f:d1:f7:57:3f: aa:0a:5c:10:58:15:c2:fb:8b:9e:fa:be:9f:ec:3a:1c:33:9d: 78:04:3c:2d:f8:98:c5:54:4c:f0:f3:97:a1:c9:13:b0:c8:7c: ca:c8:92:de:e4:c2:12:e4:cc:86:26:eb:89:91:92:ad:91:19: b7:bc:23:55:1f:5c:28:7e:7f:7d:46:1f:b9:13:81:ca:23:05: dc:fc:94:98:fe:13:23:26:a6:45:76:22:fd:fb:52:19:7b:7d: 6d:7a:66:e6:a8:b8:70:36:43:b5:42:e1:a0:5f:62:f1:b8:8e: 54:0c:a3:da:06:15:d1:51:0c:c6:7e:9d:7a:f6:67:31:d4:da: ff:68:9b:9b:d0:e5:0c:ea:04:ba:dc:94:78:d2:23:c0:ff:84: f3:7a:b2:cc:80:ab:fb:39:7e:5b:71:44:25:1a:5d:4a:f7:d8: bc:31:ff:0c:f8:80:77:24:f5:17:a5:8d:19:a5:bb:3d:ad:29: a5:38:f4:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErnK7nYdGeNOzDo2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDgxOTAxMDAzMloXDTI1MTExNzAyMDAzMlowLzEtMCsGA1UEAxMk ZDg5YWEwOGQtOGI4Yy00ZDFiLWE3ZDUtYzlkMTQxZTgzOThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B8TT+KrTEQXCElsRo4WdgDm4roQqopb7rOx bNBJijhI4bYd6e4nxhH+UDdxmmy/Z9hMteQqykGOsbxbDTQcr7/O0JJBECGibM/+ WdE4Kj+4PFFB1spQULlyUkuZv3VOIpPLSWu4xq/Fb6Tfc95x4vh8Zz5kxpibEyqC jI//c9tXkWG2flFVLQ8LCM1CBOsauzKiKzYODDRUUEIZBabKkMBF0e+1Oq20bZ9E wmlWzMfM/tjbGtKRFee5/9X/akviF3TRTFUaNeWiMJsn0YXhRNe2G+Ek6iLfIbye ugrSEsyJoxwn6LZP+P3lThosddz2ZzJzaClMKQ9Nz2MRjWsTIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOC4ghaDBmLehhrB1VF273NM941MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvODIzMWY1YjQtOGVhNC0z NGM5LWJiZTctNzZmYTFhNTI4ZGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm6B13QOHPOcnFxeaUN7NEr268ixj+HQQgWLBX1elW5rIn+ITdRv9Zh wxMsaEvNa+Niwz1Yx+E2K75fVWXVjDKge54/0fdXP6oKXBBYFcL7i576vp/sOhwz nXgEPC34mMVUTPDzl6HJE7DIfMrIkt7kwhLkzIYm64mRkq2RGbe8I1UfXCh+f31G H7kTgcojBdz8lJj+EyMmpkV2Iv37Uhl7fW16ZuaouHA2Q7VC4aBfYvG4jlQMo9oG FdFRDMZ+nXr2ZzHU2v9om5vQ5QzqBLrclHjSI8D/hPN6ssyAq/s5fltxRCUaXUr3 2Lwx/wz4gHck9ReljRmluz2tKaU49GU= -----END CERTIFICATE-----Generated at Sat Aug 23 15:50:41 2025 by rpki-client