$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/407b4528-0b5f-3711-889f-62a6ac6815da.roa File: 407b4528-0b5f-3711-889f-62a6ac6815da.roa (raw, json) Hash identifier: w7ic+k6pT7QkS/XhKfrXoy4YcxIY2PVsmnxytvA9Kbw= Subject key identifier: 09:6C:80:63:54:63:87:4A:03:6C:8D:B7:3A:CF:8B:D5:27:18:EE:FE Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584AF0F1356D3598AD560EE60100 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/407b4528-0b5f-3711-889f-62a6ac6815da.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 262287 IP address blocks: 206.127.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:35:6d:35:98:ad:56:0e:e6:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=18699caf-2bb8-45a0-9177-a121b5754b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ed:7f:64:73:e0:be:9c:0e:95:18:b9:7a:5f: ac:18:d3:f5:29:44:0e:4c:33:ff:59:fa:e0:23:ec: dc:c9:45:53:8c:75:40:9b:9d:38:38:12:f7:54:61: da:0f:8d:bc:83:44:47:0b:47:72:f4:68:7d:bd:42: 61:d7:63:6e:2c:07:03:da:cb:de:72:dc:69:90:33: 4b:a6:4c:5b:a0:49:99:2e:bf:bd:17:12:9f:06:4a: 73:33:90:db:53:06:01:5b:06:36:53:b9:a6:3c:c5: 66:29:ff:f6:c4:eb:a4:2a:ea:38:a2:9c:5b:22:85: e0:a8:eb:df:8f:ac:9d:14:d8:1f:62:cf:7f:3e:70: 0a:c7:37:c5:c4:ab:6b:ce:0e:55:5c:8d:75:30:ed: 04:cc:78:af:4d:a7:cd:bd:f9:ae:3f:f9:97:6d:86: 3f:7f:12:5f:ef:fa:19:4b:ca:28:38:5a:46:1f:e0: 83:0b:b6:3d:08:24:48:ff:96:bf:5c:72:18:77:fc: c6:c5:e0:6b:75:dc:60:1c:f8:ff:84:7d:8c:ef:89: ad:9f:17:51:65:84:38:b1:6e:38:1d:57:0f:78:16: 65:c2:a0:49:71:45:fd:b4:b0:8d:1a:07:3e:17:c7: e1:59:f5:13:33:5b:82:4b:ab:a4:cf:bb:14:04:bf: fe:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6C:80:63:54:63:87:4A:03:6C:8D:B7:3A:CF:8B:D5:27:18:EE:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/407b4528-0b5f-3711-889f-62a6ac6815da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 206.127.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:27:c9:20:fa:e2:ec:af:bb:eb:91:11:ef:1a:29:aa:b3:40: bd:2b:0c:d8:ff:01:cc:4e:0b:89:45:99:cd:8b:e4:3e:39:d7: 69:e9:8a:8b:4d:16:82:e4:91:46:35:9b:56:9a:39:63:f5:11: c3:81:bf:24:39:41:c0:06:fa:4d:83:a0:69:9c:f7:2a:25:1f: 58:de:0f:2c:9b:8d:ad:33:3c:15:7b:3d:9f:55:1a:e0:24:56: 2e:dc:28:96:b0:d5:4f:c1:c7:06:4f:48:4a:51:ae:ec:18:89: 57:c3:40:a4:5e:d2:c3:bc:bd:7c:d4:a6:45:4b:fa:3a:94:d5: c6:55:a6:3f:03:89:24:f9:f1:fb:c9:dc:5a:d9:bd:42:0f:f0: 56:9c:41:d6:cf:22:6d:9f:60:fe:01:9e:80:78:ab:07:00:65: 4b:fe:1c:23:6e:be:4f:6a:7f:4d:bc:ff:ff:29:87:e4:0d:cb: c8:b9:14:9b:f2:be:0f:4d:d7:8f:47:0f:c5:a8:b0:6f:0c:a5: d7:0e:f0:db:4a:e2:65:1f:18:56:7d:28:61:bb:1f:e3:17:c0: 50:9c:83:55:9d:98:34:4e:e0:3e:43:1c:26:0b:1e:4d:f2:43: be:90:7d:e8:5a:88:91:68:2a:39:e9:60:3a:3d:62:0d:ba:01: 3e:d8:41:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TVtNZitVg7mAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MTg2OTljYWYtMmJiOC00NWEwLTkxNzctYTEyMWI1NzU0YjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+1/ZHPgvpwOlRi5el+sGNP1KUQOTDP/Wfrg I+zcyUVTjHVAm504OBL3VGHaD428g0RHC0dy9Gh9vUJh12NuLAcD2svectxpkDNL pkxboEmZLr+9FxKfBkpzM5DbUwYBWwY2U7mmPMVmKf/2xOukKuo4opxbIoXgqOvf j6ydFNgfYs9/PnAKxzfFxKtrzg5VXI11MO0EzHivTafNvfmuP/mXbYY/fxJf7/oZ S8ooOFpGH+CDC7Y9CCRI/5a/XHIYd/zGxeBrddxgHPj/hH2M74mtnxdRZYQ4sW44 HVcPeBZlwqBJcUX9tLCNGgc+F8fhWfUTM1uCS6ukz7sUBL/+6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlsgGNUY4dKA2yNtzrPi9UnGO7+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNDA3YjQ1MjgtMGI1Zi0z NzExLTg4OWYtNjJhNmFjNjgxNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzn/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4nySD64uyvu+uREe8aKaqzQL0rDNj/AcxOC4lFmc2L5D4512npiotN FoLkkUY1m1aaOWP1EcOBvyQ5QcAG+k2DoGmc9yolH1jeDyybja0zPBV7PZ9VGuAk Vi7cKJaw1U/BxwZPSEpRruwYiVfDQKRe0sO8vXzUpkVL+jqU1cZVpj8DiST58fvJ 3FrZvUIP8FacQdbPIm2fYP4BnoB4qwcAZUv+HCNuvk9qf028//8ph+QNy8i5FJvy vg9N149HD8WosG8MpdcO8NtK4mUfGFZ9KGG7H+MXwFCcg1WdmDRO4D5DHCYLHk3y Q76QfehaiJFoKjnpYDo9Yg26AT7YQaM= -----END CERTIFICATE-----Generated at Sat Aug 23 20:53:41 2025 by rpki-client