$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/722709c8-c58c-3565-83be-22e5840d133c.roa File: 722709c8-c58c-3565-83be-22e5840d133c.roa (raw, json) Hash identifier: sbCtAhB7NY+ikbeKGaOdukld+8j4uPaWmPHr6Y/6pZ0= Subject key identifier: B5:1E:3B:C4:31:AF:01:5A:EB:7D:5A:83:BB:EA:E7:15:AA:0C:B2:BD Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584AC9DBA604C2541BA329FA11E0 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/722709c8-c58c-3565-83be-22e5840d133c.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 394437 IP address blocks: 205.196.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:a6:04:c2:54:1b:a3:29:fa:11:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=bca77d6d-eef4-4870-a7ca-cce357abffa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:88:09:05:4c:6e:ab:9b:21:7a:07:44:01:74: 6a:20:f6:17:31:d1:8b:88:4c:01:d4:74:59:fe:a9: 0d:09:36:1f:60:fc:e2:ba:bb:8c:d9:42:41:a4:7d: b7:29:94:d1:8f:db:01:a0:a6:30:2c:24:5e:5c:a0: 7d:c3:23:7c:f6:cb:ae:2a:70:ea:6a:16:38:3e:2d: d1:a2:21:92:f4:c8:43:7b:81:2e:f9:d7:25:19:c0: 61:71:3d:f4:7b:83:1e:d7:4a:a3:cf:7a:51:94:e0: 94:ad:a9:6a:01:15:7e:64:2c:29:7e:c1:b1:34:b5: ba:98:43:38:26:20:5f:51:8c:43:41:4a:fe:da:33: cc:a6:5b:9c:0a:86:a5:15:ae:3d:f4:62:c4:6c:d9: 03:72:61:76:ff:23:3a:97:0e:33:d2:27:8d:f1:bd: 2e:85:db:18:7d:4e:18:c6:a8:6d:9d:92:21:db:4f: 4c:ef:bb:e5:e8:51:2b:60:d6:bb:77:ac:95:16:ab: 53:c1:59:60:a5:e1:84:0d:37:70:63:47:7c:42:c9: fd:87:7d:34:4b:b0:17:1f:d0:f7:6c:65:96:f5:b8: 24:de:0c:e2:a9:fe:57:65:77:b3:d8:9a:77:de:4b: 1c:11:d1:38:8e:f9:65:d2:41:91:82:5b:a3:ea:d3: fa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1E:3B:C4:31:AF:01:5A:EB:7D:5A:83:BB:EA:E7:15:AA:0C:B2:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/722709c8-c58c-3565-83be-22e5840d133c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 205.196.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:20:7c:34:f1:3e:6d:66:84:c2:a7:5c:a1:86:6b:52:1f:e1: be:84:4c:68:57:58:18:65:7c:3b:ab:33:b0:ca:b6:42:ef:48: 45:7d:bd:44:e3:75:86:54:9e:0e:fa:1a:a2:da:e5:eb:5d:11: 0e:94:42:4e:69:76:8b:41:05:ff:af:d3:79:2d:05:11:9c:1b: ee:36:fd:95:68:37:35:7e:bb:45:b2:e9:09:d5:b2:39:9c:4e: 61:75:19:5a:cb:9b:e7:2d:7e:8d:36:82:da:80:ed:fc:04:6b: 24:e9:54:d2:6d:43:8a:e3:20:4f:af:0b:94:14:a9:27:ef:ba: f6:f9:dc:ac:15:1c:76:e0:5b:e9:92:87:05:be:f7:06:8f:8a: d8:2e:64:38:00:51:ff:7e:08:53:88:54:41:a3:11:10:86:87: c0:61:7d:8f:7b:aa:3c:be:8b:96:88:67:2b:0b:9c:63:ed:3b: 6c:a9:42:b5:3d:8f:b6:a4:40:7a:7d:e7:44:aa:4f:41:24:1c: b8:3d:5b:7f:f6:da:c7:8f:bc:03:88:4d:1b:11:a0:48:a6:09: 84:79:ed:f0:c5:1e:60:65:81:89:ef:3a:dd:cd:ed:79:88:18: e0:4c:a0:d9:d6:31:8d:6a:8c:89:ab:fe:1f:c9:85:9d:31:81: 43:c3:04:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ26YEwlQboyn6EeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk YmNhNzdkNmQtZWVmNC00ODcwLWE3Y2EtY2NlMzU3YWJmZmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIgJBUxuq5shegdEAXRqIPYXMdGLiEwB1HRZ /qkNCTYfYPziuruM2UJBpH23KZTRj9sBoKYwLCReXKB9wyN89suuKnDqahY4Pi3R oiGS9MhDe4Eu+dclGcBhcT30e4Me10qjz3pRlOCUralqARV+ZCwpfsGxNLW6mEM4 JiBfUYxDQUr+2jPMplucCoalFa499GLEbNkDcmF2/yM6lw4z0ieN8b0uhdsYfU4Y xqhtnZIh209M77vl6FErYNa7d6yVFqtTwVlgpeGEDTdwY0d8Qsn9h300S7AXH9D3 bGWW9bgk3gziqf5XZXez2Jp33kscEdE4jvll0kGRgluj6tP6kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUeO8QxrwFa631ag7vq5xWqDLK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNzIyNzA5YzgtYzU4Yy0z NTY1LTgzYmUtMjJlNTg0MGQxMzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzcS/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0gfDTxPm1mhMKnXKGGa1If4b6ETGhXWBhlfDurM7DKtkLvSEV9vUTj dYZUng76GqLa5etdEQ6UQk5pdotBBf+v03ktBRGcG+42/ZVoNzV+u0Wy6QnVsjmc TmF1GVrLm+ctfo02gtqA7fwEayTpVNJtQ4rjIE+vC5QUqSfvuvb53KwVHHbgW+mS hwW+9waPitguZDgAUf9+CFOIVEGjERCGh8BhfY97qjy+i5aIZysLnGPtO2ypQrU9 j7akQHp950SqT0EkHLg9W3/22sePvAOITRsRoEimCYR57fDFHmBlgYnvOt3N7XmI GOBMoNnWMY1qjImr/h/JhZ0xgUPDBMI= -----END CERTIFICATE-----Generated at Sun Aug 24 05:43:06 2025 by rpki-client