$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f5bc50c1-b692-35fc-824c-7d516df01991.roa File: f5bc50c1-b692-35fc-824c-7d516df01991.roa (raw, json) Hash identifier: AZGQfXrJKXg+7FXu2Stc/nOqIvHIsjSTY+LXn5wAmwM= Subject key identifier: 8B:A0:BE:77:50:1E:57:17:E2:07:6B:27:B4:75:08:88:7A:53:52:91 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584AF0F13B1417B8B46138C8B900 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f5bc50c1-b692-35fc-824c-7d516df01991.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 9009 IP address blocks: 141.193.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:3b:14:17:b8:b4:61:38:c8:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=49cfc86e-0119-433f-9fc4-f4ca041facf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:82:0c:9b:69:2c:fa:03:5f:b5:ec:f4:43:b6: a6:e0:71:6d:77:d4:ce:86:53:ac:30:ac:bc:bc:cd: 04:b7:a1:a8:f1:a1:9d:7f:ca:b5:d9:89:25:58:7a: 15:45:42:f0:a9:21:b8:03:31:1f:b0:67:2d:4b:76: b2:74:a4:c6:0c:0c:1c:62:d2:96:32:15:ec:31:bf: 0c:f1:23:25:18:ca:74:cf:6c:0d:c1:01:a9:b0:ef: db:30:72:a1:6f:f8:4a:f8:8f:58:d6:63:ed:20:a3: 57:0d:dc:fc:6f:9c:74:69:a2:69:e4:4f:e1:02:dd: fd:32:6d:69:6b:89:50:20:a5:a1:47:8e:9c:e6:fb: 4b:20:56:16:62:9b:9e:c0:b1:f6:73:8a:87:ef:db: 11:d7:ab:79:dc:d6:8d:b9:e7:b9:76:90:ee:28:11: 81:0f:90:e4:d7:b7:7c:db:84:48:4f:64:4b:a8:ac: 62:44:b9:3e:55:d1:a7:a2:69:ea:29:fc:0c:05:87: 04:3d:e1:99:c4:59:dc:06:fd:69:07:d4:7e:60:f5: 77:ca:15:26:f1:ea:b6:84:d1:13:73:23:37:28:0d: 0d:41:6f:c1:e8:41:a2:bf:0d:50:83:ad:3e:8c:5b: d3:82:cc:49:ca:58:a4:1e:69:6f:c5:db:4f:3c:b2: 01:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A0:BE:77:50:1E:57:17:E2:07:6B:27:B4:75:08:88:7A:53:52:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f5bc50c1-b692-35fc-824c-7d516df01991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 141.193.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f8:03:ff:59:a4:31:0b:89:e8:7c:02:1e:31:e9:c0:e7:d9: a9:7c:90:34:47:15:44:39:c6:fe:b8:9f:96:25:dd:ce:55:30: 79:fb:26:a7:5c:55:85:42:fb:61:01:eb:89:72:32:77:d1:fe: c8:5b:99:07:a4:1e:1b:43:47:d3:7b:9a:73:38:f5:c8:35:4f: a3:2c:79:f3:ff:c4:43:a3:30:d0:76:27:76:c4:c2:5f:ec:42: f3:d4:d3:06:50:e1:cc:cd:77:d3:de:c5:33:17:3a:92:2b:fd: 77:ec:ff:8d:89:46:b9:a2:85:b7:6b:05:76:41:59:b6:b1:94: c8:9e:98:e6:e6:c5:43:9b:db:0d:7d:07:4f:d4:ba:fc:2b:ff: 62:a6:86:78:1a:f4:bb:df:20:19:2f:b1:92:52:24:1b:d0:05: 78:1a:31:2e:5e:0c:8f:78:5d:e4:db:7f:da:b1:a1:f1:39:a3: 5d:fe:0d:51:d5:6e:8f:01:21:c0:fc:7c:91:95:3f:26:bd:93: f4:ce:0d:e3:b0:ae:f7:fe:85:2d:2b:6f:3e:9e:a5:f1:b9:4a: bf:1f:d3:df:12:df:71:70:34:4c:a4:2f:d6:35:ca:33:77:0e: 7e:10:cf:61:cf:16:0c:fe:a1:83:a6:72:d4:4b:9d:31:10:ea: 0d:60:56:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TsUF7i0YTjIuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NDljZmM4NmUtMDExOS00MzNmLTlmYzQtZjRjYTA0MWZhY2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIIMm2ks+gNftez0Q7am4HFtd9TOhlOsMKy8 vM0Et6Go8aGdf8q12YklWHoVRULwqSG4AzEfsGctS3aydKTGDAwcYtKWMhXsMb8M 8SMlGMp0z2wNwQGpsO/bMHKhb/hK+I9Y1mPtIKNXDdz8b5x0aaJp5E/hAt39Mm1p a4lQIKWhR46c5vtLIFYWYpuewLH2c4qH79sR16t53NaNuee5dpDuKBGBD5Dk17d8 24RIT2RLqKxiRLk+VdGnomnqKfwMBYcEPeGZxFncBv1pB9R+YPV3yhUm8eq2hNET cyM3KA0NQW/B6EGivw1Qg60+jFvTgsxJylikHmlvxdtPPLIBVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIugvndQHlcX4gdrJ7R1CIh6U1KRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZjViYzUwYzEtYjY5Mi0z NWZjLTgyNGMtN2Q1MTZkZjAxOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcHLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEP4A/9ZpDELieh8Ah4x6cDn2al8kDRHFUQ5xv64n5Yl3c5VMHn7Jqdc VYVC+2EB64lyMnfR/shbmQekHhtDR9N7mnM49cg1T6MsefP/xEOjMNB2J3bEwl/s QvPU0wZQ4czNd9PexTMXOpIr/Xfs/42JRrmihbdrBXZBWbaxlMiemObmxUOb2w19 B0/Uuvwr/2Kmhnga9LvfIBkvsZJSJBvQBXgaMS5eDI94XeTbf9qxofE5o13+DVHV bo8BIcD8fJGVPya9k/TODeOwrvf+hS0rbz6epfG5Sr8f098S33FwNEykL9Y1yjN3 Dn4Qz2HPFgz+oYOmctRLnTEQ6g1gVq4= -----END CERTIFICATE-----Generated at Sat Aug 23 10:13:59 2025 by rpki-client