$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/b86a6c18-5711-3657-9135-226408a922bc.roa File: b86a6c18-5711-3657-9135-226408a922bc.roa (raw, json) Hash identifier: zOmPNiI5FgCftee7aF0XtFLfmlf+d1FgPn3shv2fgz4= Subject key identifier: 32:D8:B5:6E:A1:99:18:F5:B6:46:83:F3:42:9D:86:38:15:16:C1:1B Certificate issuer: /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Certificate serial: 010D0C9F4328584AC2E0EB43FADD4B3957D39420 Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/b86a6c18-5711-3657-9135-226408a922bc.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 1273 IP address blocks: 206.97.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:eb:43:fa:dd:4b:39:57:d3:94:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=19bfae42-a653-4ee2-b3c6-21f937154268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:36:27:27:6e:05:aa:b6:76:f1:6a:9b:11:96: 44:7d:a0:6c:19:5b:23:12:9f:62:89:00:00:fe:35: 8f:54:46:ce:ad:db:00:19:6b:33:39:0c:50:05:da: 7b:87:f9:a9:c7:f7:1b:54:79:4a:ec:38:85:b4:95: 8d:2a:16:b8:03:1b:64:54:ae:c2:c1:b2:69:7c:1b: 44:5c:5b:68:4d:38:f8:b9:4f:4b:6a:a2:1a:52:0b: d6:51:3e:ff:6c:bd:5e:1c:0d:a6:23:6a:c2:fb:c7: fd:ab:77:bf:70:29:cd:38:57:0e:ea:78:d6:95:6d: 2f:33:7d:9c:79:f1:1d:1b:bf:ae:90:dd:e4:69:57: 1e:9f:bc:01:5b:60:b1:64:8b:ba:bf:03:b7:a1:15: 37:85:5a:f8:35:75:fe:6a:5f:61:8c:48:0b:db:2d: b0:37:cb:75:4b:56:52:1f:f8:10:09:ba:a3:64:fc: 91:90:da:2e:75:77:8b:61:14:79:00:2e:ca:ba:1c: 24:4f:7b:78:44:b7:bf:d2:9b:e2:18:89:5a:61:ce: c4:c2:e3:cd:57:71:fb:e4:8b:05:23:af:72:08:6e: 8b:c3:09:6d:a6:ab:c0:4d:24:f7:31:7a:68:a1:8b: 87:8d:3e:35:9c:5a:ae:b8:d6:f6:a2:1e:44:17:ad: 14:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D8:B5:6E:A1:99:18:F5:B6:46:83:F3:42:9D:86:38:15:16:C1:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/b86a6c18-5711-3657-9135-226408a922bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl X509v3 Authority Key Identifier: keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer sbgp-ipAddrBlock: critical IPv4: 206.97.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:96:25:99:7b:0a:3a:4f:89:c9:f7:6c:b8:4e:2d:1c:ad:cb: 5c:6a:6c:8f:b3:4a:58:12:25:73:fd:02:df:b0:66:bf:f5:ea: 5e:0c:18:42:44:6f:84:15:7c:f3:cd:ae:af:6a:4d:73:21:c3: c5:71:4a:35:1c:73:d1:9e:52:c2:6e:1d:a1:1d:11:30:55:8f: 91:31:c1:4a:fb:da:10:eb:13:34:23:05:fb:8d:5c:69:37:19: d4:42:4f:67:fb:10:d3:75:30:72:7f:c0:71:ad:d7:66:65:bb: c3:43:65:84:91:bf:0c:f2:0e:88:f0:5a:7b:cd:7f:b5:f3:f9: 3d:3e:0c:98:5c:e6:32:b7:84:d8:a7:17:d2:94:3c:64:c0:ac: e9:23:ed:ff:a2:24:ea:2a:bc:f4:23:7e:a0:17:6b:6e:41:06: f2:a7:01:0c:92:17:39:d7:25:c4:bf:c5:4f:ef:84:35:d2:85: c9:3f:c4:01:0a:2a:c6:a5:4b:ae:8f:84:61:18:b3:cd:c9:d5: 14:a0:e8:8e:1d:62:3b:1a:20:2d:ae:97:99:7a:e3:4d:7f:97: 25:bb:a6:25:44:58:f7:d3:20:96:19:d1:13:95:46:a5:0a:3a: 44:17:6c:17:28:b6:6b:ea:63:da:51:90:7a:3f:a7:f6:04:54: 22:b6:32:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4OtD+t1LOVfTlCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4 NTgyMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MTliZmFlNDItYTY1My00ZWUyLWIzYzYtMjFmOTM3MTU0MjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizYnJ24FqrZ28WqbEZZEfaBsGVsjEp9iiQAA /jWPVEbOrdsAGWszOQxQBdp7h/mpx/cbVHlK7DiFtJWNKha4AxtkVK7CwbJpfBtE XFtoTTj4uU9LaqIaUgvWUT7/bL1eHA2mI2rC+8f9q3e/cCnNOFcO6njWlW0vM32c efEdG7+ukN3kaVcen7wBW2CxZIu6vwO3oRU3hVr4NXX+al9hjEgL2y2wN8t1S1ZS H/gQCbqjZPyRkNoudXeLYRR5AC7KuhwkT3t4RLe/0pviGIlaYc7EwuPNV3H75IsF I69yCG6LwwltpqvATST3MXpooYuHjT41nFquuNb2oh5EF60U0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLYtW6hmRj1tkaD80KdhjgVFsEbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvYjg2YTZjMTgtNTcxMS0z NjU3LTkxMzUtMjI2NDA4YTkyMmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3 NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzmEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuWJZl7CjpPicn3bLhOLRyty1xqbI+zSlgSJXP9At+wZr/16l4MGEJE b4QVfPPNrq9qTXMhw8VxSjUcc9GeUsJuHaEdETBVj5ExwUr72hDrEzQjBfuNXGk3 GdRCT2f7ENN1MHJ/wHGt12Zlu8NDZYSRvwzyDojwWnvNf7Xz+T0+DJhc5jK3hNin F9KUPGTArOkj7f+iJOoqvPQjfqAXa25BBvKnAQySFznXJcS/xU/vhDXShck/xAEK KsalS66PhGEYs83J1RSg6I4dYjsaIC2ul5l6401/lyW7piVEWPfTIJYZ0ROVRqUK OkQXbBcotmvqY9pRkHo/p/YEVCK2MmA= -----END CERTIFICATE-----Generated at Sat Aug 23 22:03:36 2025 by rpki-client