$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ab60957e-425d-31b6-a8d5-119901be3c90.roa File: ab60957e-425d-31b6-a8d5-119901be3c90.roa (raw, json) Hash identifier: tBoxAHDFmEkXhhzpD2P9B90B7IeeOCXPpErTE/CCj3g= Subject key identifier: 2D:4D:A5:DF:41:53:F7:E5:CF:D2:CC:19:C2:BB:05:8E:3C:41:91:78 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584AD936585EA25B3D96CDBE0040 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ab60957e-425d-31b6-a8d5-119901be3c90.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 271 IP address blocks: 206.12.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:58:5e:a2:5b:3d:96:cd:be:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=a31aa817-5f8b-422d-b33a-2f1efaf36983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:85:b9:35:e6:be:b6:94:41:e1:df:cb:ed:c7: ec:a9:04:cf:c2:d2:a5:b0:ec:bf:41:75:80:dc:0c: e4:12:57:34:19:1a:7b:81:c9:4b:0c:26:9b:9b:2f: 2a:1e:cc:e4:03:a8:46:28:39:c0:82:e7:c5:16:84: 21:4e:07:5a:e9:03:ed:91:14:1b:c4:4a:7c:15:c1: bd:4e:57:1f:cb:a4:17:81:87:d3:9c:91:25:cb:d3: ec:b2:57:58:17:00:2c:16:2b:2f:74:f3:47:10:ae: b3:de:fc:2c:63:23:33:a3:1b:67:4f:bd:1b:5f:56: 2a:da:39:e2:18:c2:68:c2:01:39:72:14:e3:62:a1: ab:3f:c0:79:11:e3:a4:73:fd:20:3f:11:83:af:2a: 25:d0:97:69:b5:8d:1d:56:52:7c:33:54:5e:71:4c: 84:6b:c5:73:0b:57:76:33:43:e4:eb:ee:14:2d:4b: 9e:5a:b3:53:f7:c7:8b:96:76:21:16:74:ca:f0:82: 95:9c:60:bb:c8:ba:5a:cf:5b:5e:67:9a:1e:a8:b6: 99:c3:f9:d6:c5:b6:e3:2c:c4:e9:d6:ae:8c:ea:32: 0a:bc:3d:db:c3:81:bc:2a:24:bc:29:c0:20:8e:db: ab:53:70:35:42:17:b7:1e:a6:da:30:54:52:1c:09: 91:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4D:A5:DF:41:53:F7:E5:CF:D2:CC:19:C2:BB:05:8E:3C:41:91:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ab60957e-425d-31b6-a8d5-119901be3c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 206.12.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:99:1b:1e:d6:9c:40:43:a3:cf:2c:d6:1b:7c:80:98:0e:bd: 49:cd:73:c2:0a:81:27:27:ec:6b:db:84:6b:a3:9a:27:35:c8: 29:c3:97:46:5b:6f:42:e0:e9:53:6c:56:8d:26:0b:c5:cc:c2: e5:a5:05:d9:77:f7:51:c5:be:f4:a5:f2:82:3d:1f:68:9b:df: 96:93:3b:58:42:06:16:d2:87:70:e3:48:65:4a:79:2d:05:3f: 7d:e6:f9:3e:d6:90:f4:69:75:51:8b:8c:38:12:d3:08:64:11: 4f:05:0a:2b:cf:77:2b:6f:39:e6:d0:87:0c:e4:d0:f0:fb:15: 9c:0a:ed:09:60:43:e3:72:ca:dc:f3:aa:02:2e:73:59:08:4d: 4b:63:1a:60:e6:f1:03:12:eb:16:96:3e:cf:02:68:d1:7f:25: a5:91:fb:83:c6:67:c9:e8:b4:11:4e:a8:05:74:1e:df:3d:cc: ff:be:75:94:69:10:34:cf:31:4e:5d:6f:97:d4:1d:45:03:23: fd:28:96:77:ca:9b:0a:60:31:2d:ce:9c:9e:68:7c:52:cc:6e: 09:de:4b:54:31:f1:3a:be:42:f6:99:37:cf:03:cf:a1:2d:2d: bd:8b:b3:be:a3:89:1c:68:d5:ca:2f:e4:3b:77:31:41:22:f5: 36:2f:0b:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNlheols9ls2+AEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk YTMxYWE4MTctNWY4Yi00MjJkLWIzM2EtMmYxZWZhZjM2OTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoW5Nea+tpRB4d/L7cfsqQTPwtKlsOy/QXWA 3AzkElc0GRp7gclLDCabmy8qHszkA6hGKDnAgufFFoQhTgda6QPtkRQbxEp8FcG9 Tlcfy6QXgYfTnJEly9PssldYFwAsFisvdPNHEK6z3vwsYyMzoxtnT70bX1Yq2jni GMJowgE5chTjYqGrP8B5EeOkc/0gPxGDryol0JdptY0dVlJ8M1RecUyEa8VzC1d2 M0Pk6+4ULUueWrNT98eLlnYhFnTK8IKVnGC7yLpaz1teZ5oeqLaZw/nWxbbjLMTp 1q6M6jIKvD3bw4G8KiS8KcAgjturU3A1Qhe3HqbaMFRSHAmRtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1Npd9BU/flz9LMGcK7BY48QZF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYWI2MDk1N2UtNDI1ZC0z MWI2LWE4ZDUtMTE5OTAxYmUzYzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzgyVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGZGx7WnEBDo88s1ht8gJgOvUnNc8IKgScn7GvbhGujmic1yCnDl0Zb b0Lg6VNsVo0mC8XMwuWlBdl391HFvvSl8oI9H2ib35aTO1hCBhbSh3DjSGVKeS0F P33m+T7WkPRpdVGLjDgS0whkEU8FCivPdytvOebQhwzk0PD7FZwK7QlgQ+Nyytzz qgIuc1kITUtjGmDm8QMS6xaWPs8CaNF/JaWR+4PGZ8notBFOqAV0Ht89zP++dZRp EDTPMU5db5fUHUUDI/0olnfKmwpgMS3OnJ5ofFLMbgneS1Qx8Tq+QvaZN88Dz6Et Lb2Ls76jiRxo1cov5Dt3MUEi9TYvC2I= -----END CERTIFICATE-----Generated at Sun Aug 24 04:42:36 2025 by rpki-client