$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c1bab32e-ba6f-30e4-bb04-585c662c039e.roa File: c1bab32e-ba6f-30e4-bb04-585c662c039e.roa (raw, json) Hash identifier: S+zRUyn2A8PZ1ZZs23gJMGXrli9GCldA4b8b5QHDhdo= Subject key identifier: AC:2A:A2:8F:3B:34:12:1C:0E:F3:2F:8F:67:B9:5E:72:86:38:4A:C1 Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Certificate serial: 010D0C9F4328584AE0311546BFE25994F06DAD00 Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c1bab32e-ba6f-30e4-bb04-585c662c039e.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 400238 IP address blocks: 204.8.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:15:46:bf:e2:59:94:f0:6d:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=f955946e-163d-4f21-b8c4-40c68e93d5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:1b:64:f7:d7:48:89:7f:3e:77:87:5e:80: da:a2:bc:1f:94:7c:00:4a:8a:23:ff:a9:9e:83:c1: a7:73:97:83:1b:56:99:47:e9:2c:89:a0:e8:ac:34: 1f:06:cd:6a:18:69:b4:9e:79:bf:12:e5:08:61:31: 1d:7a:46:8a:e4:11:3c:a7:68:25:10:69:74:94:85: fc:e2:90:53:22:a4:6b:e6:8e:b4:4d:e3:01:5d:6b: 90:cd:27:b8:72:50:e5:8a:0d:22:6a:5c:ec:c7:23: 5f:8f:a1:de:43:3c:1d:20:2e:24:70:a5:e9:18:ee: 4e:91:a5:69:ea:c4:7f:9e:12:02:e9:46:06:8d:bd: 4a:11:46:a3:5f:a2:5b:d8:18:d7:25:ef:c2:a7:cb: ff:2a:cd:22:2e:16:b3:08:6c:32:12:81:c5:1b:98: 07:66:26:24:63:9b:1f:76:eb:71:00:57:c4:ee:29: 16:3d:5a:9c:ce:42:7b:71:a5:b1:97:ee:0e:78:1e: 86:50:83:69:5d:b4:b7:57:c2:87:5d:4f:11:e1:d0: 63:91:87:74:a6:24:b0:8f:77:a3:7d:43:b9:8c:ed: 07:df:d7:2f:70:01:92:14:92:eb:36:2f:f2:0c:9b: 39:a5:13:93:87:b7:1a:a2:e7:3b:fe:97:bb:c7:70: 55:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2A:A2:8F:3B:34:12:1C:0E:F3:2F:8F:67:B9:5E:72:86:38:4A:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c1bab32e-ba6f-30e4-bb04-585c662c039e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl X509v3 Authority Key Identifier: keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer sbgp-ipAddrBlock: critical IPv4: 204.8.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:4c:8a:f9:10:e5:c5:9e:af:30:b4:ce:5d:7e:10:18:c7:1b: cc:30:d9:91:27:7b:17:49:fc:2f:64:4c:59:2d:63:c1:85:b9: 9b:04:a5:74:2f:bb:6a:79:f5:30:71:e9:64:a0:46:6c:b8:d2: fe:67:db:fb:a0:9a:44:a7:94:3e:5c:bf:56:d2:20:2b:25:be: de:8d:e7:c8:52:6c:17:4f:90:52:fb:5c:bb:0f:03:15:8f:ab: dc:35:97:82:b0:23:c2:d7:26:bf:28:2d:69:f9:f8:66:36:86: c2:b4:39:9c:bd:09:83:8a:3c:79:58:fb:92:aa:d2:f5:bc:54: 75:5e:2e:5c:66:ea:8e:38:27:c5:db:61:1f:2e:69:ce:c5:b1: d8:23:f0:4b:3c:f6:cc:50:c9:b5:44:0b:bf:40:32:d1:b4:12: ae:f9:99:16:36:55:a4:6b:69:ee:52:84:09:08:a1:5d:36:8f: f5:b8:cd:9e:e0:3c:17:bf:53:0d:f4:be:b9:6f:e2:88:a5:5c: f0:5b:42:62:19:88:00:26:14:0a:76:68:fa:f6:0e:d8:9b:83: 15:97:b6:4b:fb:e4:46:e1:e9:f1:71:79:e9:01:79:2b:47:0e: 51:11:5b:df:66:9a:7c:79:e1:3a:eb:6a:e9:e5:a9:84:9a:83: a2:ee:f8:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMRVGv+JZlPBtrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy YWVjMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk Zjk1NTk0NmUtMTYzZC00ZjIxLWI4YzQtNDBjNjhlOTNkNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvskbZPfXSIl/PneHXoDaorwflHwASooj/6me g8Gnc5eDG1aZR+ksiaDorDQfBs1qGGm0nnm/EuUIYTEdekaK5BE8p2glEGl0lIX8 4pBTIqRr5o60TeMBXWuQzSe4clDlig0ialzsxyNfj6HeQzwdIC4kcKXpGO5OkaVp 6sR/nhIC6UYGjb1KEUajX6Jb2BjXJe/Cp8v/Ks0iLhazCGwyEoHFG5gHZiYkY5sf dutxAFfE7ikWPVqczkJ7caWxl+4OeB6GUINpXbS3V8KHXU8R4dBjkYd0piSwj3ej fUO5jO0H39cvcAGSFJLrNi/yDJs5pROTh7caouc7/pe7x3BVnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwqoo87NBIcDvMvj2e5XnKGOErBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvYzFiYWIzMmUtYmE2Zi0z MGU0LWJiMDQtNTg1YzY2MmMwMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5 ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAh0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBMivkQ5cWerzC0zl1+EBjHG8ww2ZEnexdJ/C9kTFktY8GFuZsEpXQv u2p59TBx6WSgRmy40v5n2/ugmkSnlD5cv1bSICslvt6N58hSbBdPkFL7XLsPAxWP q9w1l4KwI8LXJr8oLWn5+GY2hsK0OZy9CYOKPHlY+5Kq0vW8VHVeLlxm6o44J8Xb YR8uac7Fsdgj8Es89sxQybVEC79AMtG0Eq75mRY2VaRrae5ShAkIoV02j/W4zZ7g PBe/Uw30vrlv4oilXPBbQmIZiAAmFAp2aPr2DtibgxWXtkv75Ebh6fFxeekBeStH DlERW99mmnx54TrraunlqYSag6Lu+FU= -----END CERTIFICATE-----Generated at Sat Aug 23 22:58:18 2025 by rpki-client