$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e6596be-a739-48b9-bc79-15a6015e7193/bdb1f1f5-1d02-3992-bf14-a16977bbc1f1.roa File: bdb1f1f5-1d02-3992-bf14-a16977bbc1f1.roa (raw, json) Hash identifier: AVgaj1BGnux1XwWYnaJAGJtqKA2clFeSjB+ql8mVQ7Q= Subject key identifier: ED:9A:63:3B:A2:09:6B:8B:30:D3:D8:17:F1:06:08:AB:BE:9F:FA:31 Certificate issuer: /CN=6e6596be-a739-48b9-bc79-15a6015e7193 Certificate serial: 010D0C9F4328584AD23BA50252DC1ECF08302060 Authority key identifier: 0E:05:D7:81:67:C8:70:3C:DA:03:16:71:B9:F3:AA:8C:F1:F0:50:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e6596be-a739-48b9-bc79-15a6015e7193.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e6596be-a739-48b9-bc79-15a6015e7193/bdb1f1f5-1d02-3992-bf14-a16977bbc1f1.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 54523 IP address blocks: 199.16.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e6596be-a739-48b9-bc79-15a6015e7193/6e6596be-a739-48b9-bc79-15a6015e7193.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e6596be-a739-48b9-bc79-15a6015e7193/6e6596be-a739-48b9-bc79-15a6015e7193.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e6596be-a739-48b9-bc79-15a6015e7193.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:a5:02:52:dc:1e:cf:08:30:20:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e6596be-a739-48b9-bc79-15a6015e7193 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=2140b5c4-e985-4f3e-a1da-70d205eb5160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5b:f6:63:fc:92:b1:60:3a:21:f0:a4:18:b9: 70:30:ed:74:4b:a1:d6:b9:5f:26:ad:0b:8f:76:f0: 52:e7:1d:a3:35:24:af:b1:b8:a7:fa:d4:30:6f:5f: a3:73:05:42:7a:e8:e1:c8:e9:d6:42:7f:f1:0f:7a: cf:80:1b:7c:75:55:3a:1b:10:19:94:88:60:4b:a5: b4:89:de:55:9c:3b:8d:ab:2a:12:0b:86:96:5d:b2: 53:b5:f0:f0:59:dd:25:d9:08:96:d8:ca:cf:0f:65: dd:8f:5b:d6:ca:a0:58:4d:34:ee:a1:8d:ca:91:86: 55:0d:00:20:aa:38:01:8b:6d:3b:11:03:60:a2:0d: ef:56:93:c0:64:be:93:c9:53:ad:76:75:15:9a:b1: e3:7e:c7:08:5e:2b:3b:fd:0a:32:bf:03:7c:9e:28: 6d:7e:1f:76:1f:ad:85:1f:af:07:02:f4:91:6c:a6: e3:fd:fa:f9:e6:2a:58:96:2b:14:9f:18:d8:14:76: db:9f:38:7a:50:08:85:b3:c4:db:23:42:5d:f4:db: 03:2f:6a:87:b7:00:91:8c:e6:0f:ba:e0:98:a7:f2: 89:2a:d1:92:04:89:19:12:b0:08:88:f5:12:19:4f: 61:5d:0d:69:d0:da:17:db:18:bf:9c:4d:28:9a:88: 32:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9A:63:3B:A2:09:6B:8B:30:D3:D8:17:F1:06:08:AB:BE:9F:FA:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e6596be-a739-48b9-bc79-15a6015e7193/bdb1f1f5-1d02-3992-bf14-a16977bbc1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e6596be-a739-48b9-bc79-15a6015e7193/6e6596be-a739-48b9-bc79-15a6015e7193.crl X509v3 Authority Key Identifier: keyid:0E:05:D7:81:67:C8:70:3C:DA:03:16:71:B9:F3:AA:8C:F1:F0:50:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e6596be-a739-48b9-bc79-15a6015e7193.cer sbgp-ipAddrBlock: critical IPv4: 199.16.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:59:22:04:0c:34:d1:55:c4:ef:83:4d:f2:55:64:7c:ce:fb: 9e:e4:f4:47:28:ab:f4:db:85:f6:dc:82:8b:06:4b:08:37:e4: 8a:b5:15:0e:4a:fd:02:23:03:13:d2:b7:21:40:8a:e4:5d:05: 96:b4:ea:d4:c8:26:79:06:d2:db:5a:1f:74:15:a2:2a:2d:b9: 03:60:0b:34:2e:16:89:c2:fa:da:00:6f:2b:78:45:5f:dd:b2: 53:d1:fb:95:58:3f:1a:65:54:0e:0d:f0:e8:4c:2b:1c:ab:fe: 74:96:fe:ed:29:02:2c:53:dc:d0:9f:24:0b:ad:90:c8:b9:9a: bc:2e:32:95:13:44:67:af:8c:0c:7b:ca:42:93:bc:ce:d5:0c: 0d:3b:72:50:7a:7e:1a:be:e1:f9:d6:6f:a3:63:2e:07:d3:e9: 39:dc:07:87:f5:a1:ff:cd:36:e6:09:06:ce:8c:3f:a0:af:70: da:85:76:de:5e:9e:8d:04:16:db:51:f8:7d:a6:df:e4:cc:c7: 3f:17:fb:52:97:1d:07:99:04:05:75:b8:07:99:01:33:53:c2: 83:70:3d:cc:36:05:33:5c:37:81:65:67:19:3b:33:9c:ad:12: e6:5e:0d:e0:ec:e3:57:64:d1:b2:77:3a:46:e7:bc:2f:e3:30: 33:02:98:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO6UCUtwezwgwIGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU2NTk2YmUtYTczOS00OGI5LWJjNzktMTVhNjAxNWU3 MTkzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MjE0MGI1YzQtZTk4NS00ZjNlLWExZGEtNzBkMjA1ZWI1MTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVv2Y/ySsWA6IfCkGLlwMO10S6HWuV8mrQuP dvBS5x2jNSSvsbin+tQwb1+jcwVCeujhyOnWQn/xD3rPgBt8dVU6GxAZlIhgS6W0 id5VnDuNqyoSC4aWXbJTtfDwWd0l2QiW2MrPD2Xdj1vWyqBYTTTuoY3KkYZVDQAg qjgBi207EQNgog3vVpPAZL6TyVOtdnUVmrHjfscIXis7/QoyvwN8nihtfh92H62F H68HAvSRbKbj/fr55ipYlisUnxjYFHbbnzh6UAiFs8TbI0Jd9NsDL2qHtwCRjOYP uuCYp/KJKtGSBIkZErAIiPUSGU9hXQ1p0NoX2xi/nE0omogyhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2aYzuiCWuLMNPYF/EGCKu+n/oxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZTY1 OTZiZS1hNzM5LTQ4YjktYmM3OS0xNWE2MDE1ZTcxOTMvYmRiMWYxZjUtMWQwMi0z OTkyLWJmMTQtYTE2OTc3YmJjMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmU2NTk2YmUtYTczOS00OGI5LWJj NzktMTVhNjAxNWU3MTkzLzZlNjU5NmJlLWE3MzktNDhiOS1iYzc5LTE1YTYwMTVl NzE5My5jcmwwHwYDVR0jBBgwFoAUDgXXgWfIcDzaAxZxufOqjPHwUEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZTY1OTZiZS1hNzM5LTQ4YjktYmM3OS0xNWE2 MDE1ZTcxOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdZIgQMNNFVxO+DTfJVZHzO+57k9Ecoq/TbhfbcgosGSwg35Iq1FQ5K /QIjAxPStyFAiuRdBZa06tTIJnkG0ttaH3QVoiotuQNgCzQuFonC+toAbyt4RV/d slPR+5VYPxplVA4N8OhMKxyr/nSW/u0pAixT3NCfJAutkMi5mrwuMpUTRGevjAx7 ykKTvM7VDA07clB6fhq+4fnWb6NjLgfT6TncB4f1of/NNuYJBs6MP6CvcNqFdt5e no0EFttR+H2m3+TMxz8X+1KXHQeZBAV1uAeZATNTwoNwPcw2BTNcN4FlZxk7M5yt EuZeDeDs41dk0bJ3OkbnvC/jMDMCmBY= -----END CERTIFICATE-----Generated at Sat Aug 23 21:59:53 2025 by rpki-client