$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/18ab42b3-a69e-3f0c-a071-7923bd39e60d.roa File: 18ab42b3-a69e-3f0c-a071-7923bd39e60d.roa (raw, json) Hash identifier: 9duyoaqVN81vFUUUvR3ZJffxAWZJnF+6n/GbNY40458= Subject key identifier: 61:A5:1D:3C:CF:EA:05:47:96:B6:BC:97:30:E5:FD:8C:A2:A2:C8:4A Certificate issuer: /CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Certificate serial: 010D0C9F4328584ACE0B9D0685B46EF5B91F940C Authority key identifier: 2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/18ab42b3-a69e-3f0c-a071-7923bd39e60d.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 20398 IP address blocks: 167.206.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:9d:06:85:b4:6e:f5:b9:1f:94:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=2708ba82-1c25-4aea-93eb-651e9fdd7494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dd:28:40:84:d9:0f:f9:e3:e1:4f:3a:4a:82: 9e:54:2d:73:ea:2b:c8:96:e1:36:ca:eb:b7:98:71: f1:97:2b:8f:51:37:da:58:36:28:87:6d:c4:05:b7: 35:7e:3c:dc:87:d6:8a:28:9f:a4:aa:0f:c6:ef:06: 65:48:68:51:f6:c8:8d:59:60:e3:8e:6d:dd:5b:b1: c0:71:d4:5b:c1:12:22:c5:47:36:54:e3:c6:54:77: 39:85:db:c5:9a:c9:3f:b5:c7:71:3f:18:ab:4b:28: ae:77:b4:fd:18:96:74:67:52:a1:67:9c:59:df:a1: 27:82:03:b4:b6:60:1e:0e:d2:bd:e8:db:42:77:fd: 7d:bd:d4:83:e0:de:66:bd:d1:89:89:8f:3d:75:99: 26:12:9c:10:7b:c1:be:ca:52:e0:4d:58:fc:46:0d: ce:13:6c:77:0e:48:a1:3a:3e:b5:ba:c2:ff:77:f2: 21:fe:3b:15:1d:58:a0:73:b2:4d:95:4d:53:1c:b8: b8:ba:e2:45:17:47:7d:4e:52:e7:48:36:75:c5:1f: b8:fc:f2:09:95:dd:10:f7:ed:b5:b1:9b:c1:dc:48: 80:bb:9d:00:f6:d1:60:3f:00:dc:1f:66:09:63:1c: 78:24:8d:c2:c2:bc:80:0e:8b:8b:3a:de:f3:26:03: 84:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A5:1D:3C:CF:EA:05:47:96:B6:BC:97:30:E5:FD:8C:A2:A2:C8:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/18ab42b3-a69e-3f0c-a071-7923bd39e60d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl X509v3 Authority Key Identifier: keyid:2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer sbgp-ipAddrBlock: critical IPv4: 167.206.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:17:4e:8d:c6:83:ac:b2:66:a1:bb:ca:a2:82:13:06:f2:63: 55:6d:5b:a9:33:37:1e:06:e5:46:11:27:d8:25:06:55:88:3c: b7:73:42:81:5b:1a:ca:41:06:6d:9c:88:f8:24:7a:d5:79:c9: 3e:19:14:e0:49:31:f2:6b:86:9b:e8:8e:8a:bd:94:23:d2:46: a2:65:3b:9f:60:46:0c:28:6d:5e:8a:b6:05:5d:51:e3:06:42: 86:95:49:c4:24:82:6d:ef:13:9c:d3:70:f5:5b:1f:09:67:ae: 04:a1:11:6d:9a:cc:39:c6:d4:f1:b0:92:08:e4:fe:73:e1:40: 4f:00:85:de:87:8e:a4:b5:b5:c8:1a:a1:96:01:d1:e1:cc:5e: 75:a5:79:8b:42:b9:11:8c:18:f6:86:b4:07:e2:c3:5b:2d:b7: 4a:dc:b2:2a:7b:ee:70:63:ea:b8:06:15:f9:f5:e5:ec:12:ab: 5f:26:12:07:e0:29:13:4a:a8:16:0e:9a:f7:36:f3:67:8e:70: 63:d0:85:0d:34:28:2c:57:1f:09:e9:df:53:75:29:5c:b1:88: a2:00:2f:21:f7:d1:e9:fd:fe:6c:1b:e1:ad:ee:df:fe:5e:30: a0:cd:08:f8:45:f6:e5:72:1b:a2:8c:6e:7e:44:9b:57:08:59: 84:96:36:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC50GhbRu9bkflAwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmMWM4YzItMTlmOS00ZjYyLWJmZTMtZDE0MjhkMWEw MDVlMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk MjcwOGJhODItMWMyNS00YWVhLTkzZWItNjUxZTlmZGQ3NDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk90oQITZD/nj4U86SoKeVC1z6ivIluE2yuu3 mHHxlyuPUTfaWDYoh23EBbc1fjzch9aKKJ+kqg/G7wZlSGhR9siNWWDjjm3dW7HA cdRbwRIixUc2VOPGVHc5hdvFmsk/tcdxPxirSyiud7T9GJZ0Z1KhZ5xZ36EnggO0 tmAeDtK96NtCd/19vdSD4N5mvdGJiY89dZkmEpwQe8G+ylLgTVj8Rg3OE2x3Dkih Oj61usL/d/Ih/jsVHVigc7JNlU1THLi4uuJFF0d9TlLnSDZ1xR+4/PIJld0Q9+21 sZvB3EiAu50A9tFgPwDcH2YJYxx4JI3CwryADouLOt7zJgOEYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGlHTzP6gVHlra8lzDl/YyioshKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMWYx YzhjMi0xOWY5LTRmNjItYmZlMy1kMTQyOGQxYTAwNWUvMThhYjQyYjMtYTY5ZS0z ZjBjLWEwNzEtNzkyM2JkMzllNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDFmMWM4YzItMTlmOS00ZjYyLWJm ZTMtZDE0MjhkMWEwMDVlL2QxZjFjOGMyLTE5ZjktNGY2Mi1iZmUzLWQxNDI4ZDFh MDA1ZS5jcmwwHwYDVR0jBBgwFoAULSJwcepBQBbOhUU6hlK+/ghcybAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMWYxYzhjMi0xOWY5LTRmNjItYmZlMy1kMTQy OGQxYTAwNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp85WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0XTo3Gg6yyZqG7yqKCEwbyY1VtW6kzNx4G5UYRJ9glBlWIPLdzQoFb GspBBm2ciPgketV5yT4ZFOBJMfJrhpvojoq9lCPSRqJlO59gRgwobV6KtgVdUeMG QoaVScQkgm3vE5zTcPVbHwlnrgShEW2azDnG1PGwkgjk/nPhQE8Ahd6HjqS1tcga oZYB0eHMXnWleYtCuRGMGPaGtAfiw1stt0rcsip77nBj6rgGFfn15ewSq18mEgfg KRNKqBYOmvc282eOcGPQhQ00KCxXHwnp31N1KVyxiKIALyH30en9/mwb4a3u3/5e MKDNCPhF9uVyG6KMbn5Em1cIWYSWNiM= -----END CERTIFICATE-----Generated at Sun Aug 24 01:30:14 2025 by rpki-client