$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/1f1fd3fd-cb00-32ad-8e11-5782495f5e1e.roa File: 1f1fd3fd-cb00-32ad-8e11-5782495f5e1e.roa (raw, json) Hash identifier: VAmJJUsmOLyApIM5hJ5gZB/1T0WaW59H27c/yRBDthw= Subject key identifier: 4C:D8:9F:84:C3:05:BA:27:14:67:80:03:F4:35:9F:B5:E1:62:D7:1E Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Certificate serial: 010D0C9F4328584AC710E7E95E61FFFC183C3538 Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/1f1fd3fd-cb00-32ad-8e11-5782495f5e1e.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 5650 IP address blocks: 206.174.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:10:e7:e9:5e:61:ff:fc:18:3c:35:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=96acd33f-3b9b-4eb4-91bd-22a549f3c995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f3:84:40:f1:92:3f:60:27:ad:89:22:44:f6: cb:9f:f3:a6:e9:b5:5c:33:5f:fe:c8:10:68:1a:a4: 4d:20:3c:63:2c:0f:16:7c:97:2e:7b:5d:3e:a5:fa: c9:96:f5:35:37:82:fd:7e:8e:e3:dd:33:b4:56:1a: c0:28:39:e3:16:1e:07:90:06:d4:8b:e7:10:80:0f: bd:a9:fa:d9:59:19:06:02:d5:a3:20:8e:43:af:47: ff:58:0d:ce:65:c7:c4:da:69:ae:bc:62:d1:74:10: cc:53:1d:71:cf:a6:6c:3b:8c:2c:77:b8:1c:44:45: bc:1a:52:0a:25:62:12:84:3e:43:00:31:61:69:67: c8:c9:67:e5:fb:bf:07:d3:e5:99:9e:81:3f:c4:cc: 1d:80:aa:38:c5:c6:13:50:f3:0c:29:f0:53:50:52: 74:63:e9:ae:b8:05:e6:ec:e2:3a:18:d3:53:fb:28: d6:bb:0c:01:77:3d:cf:f7:fe:12:e2:9c:5b:ec:cc: 24:1e:da:7b:e4:d0:85:cf:8e:ab:7f:a2:e4:cd:bb: b4:b5:33:ed:62:f3:0a:1b:3c:17:2e:47:31:cd:39: 29:4a:f2:3b:b7:66:7e:26:75:42:6d:44:72:04:ae: ce:da:2e:57:26:0a:2b:55:7e:30:64:f0:d4:89:bf: de:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D8:9F:84:C3:05:BA:27:14:67:80:03:F4:35:9F:B5:E1:62:D7:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/1f1fd3fd-cb00-32ad-8e11-5782495f5e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl X509v3 Authority Key Identifier: keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer sbgp-ipAddrBlock: critical IPv4: 206.174.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:42:7c:e6:d5:6c:21:ab:63:3b:eb:1d:ed:2a:26:c5:e8:45: c5:d8:00:f1:9e:95:8c:f8:3e:72:13:cd:b5:6c:d6:ad:2f:be: 2a:80:7d:ae:33:67:aa:3a:f8:0e:d6:0e:7e:3b:c4:88:a8:79: ea:f1:ec:40:93:84:f9:87:ad:ed:d9:33:ba:cb:66:b7:66:21: 11:27:71:5b:49:d9:6a:cf:02:67:54:c6:8b:d7:67:1a:9f:f1: c5:74:88:96:c3:51:42:d8:a7:0f:31:11:9d:2b:14:94:e4:a9: 02:6a:ca:11:12:ed:76:18:3e:31:b9:12:19:2d:c6:af:20:3e: 20:8f:77:85:89:f4:64:c9:1b:17:83:bc:ef:64:51:0f:8e:e9: 07:c8:e6:e9:d1:09:bc:89:e7:41:47:08:b8:0d:33:fa:af:b6: df:34:c5:35:02:8b:e6:cf:52:10:8b:f9:8f:1e:a7:22:f5:c3: 4c:9f:bc:a9:69:d1:36:d2:3d:ed:86:90:69:12:ba:90:10:5a: 3d:58:c7:32:d7:5e:f8:95:05:32:e2:d6:f0:09:ab:18:14:bc: 94:a0:59:ff:73:5e:92:ec:47:a9:dc:52:63:b2:dd:02:9d:b4: ae:d1:da:fb:3b:f6:ad:cf:6f:ef:1f:85:d2:9a:9d:f0:50:39: ec:4b:18:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEOfpXmH//Bg8NTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVl MjY1MB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk OTZhY2QzM2YtM2I5Yi00ZWI0LTkxYmQtMjJhNTQ5ZjNjOTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPOEQPGSP2AnrYkiRPbLn/Om6bVcM1/+yBBo GqRNIDxjLA8WfJcue10+pfrJlvU1N4L9fo7j3TO0VhrAKDnjFh4HkAbUi+cQgA+9 qfrZWRkGAtWjII5Dr0f/WA3OZcfE2mmuvGLRdBDMUx1xz6ZsO4wsd7gcREW8GlIK JWIShD5DADFhaWfIyWfl+78H0+WZnoE/xMwdgKo4xcYTUPMMKfBTUFJ0Y+muuAXm 7OI6GNNT+yjWuwwBdz3P9/4S4pxb7MwkHtp75NCFz46rf6Lkzbu0tTPtYvMKGzwX LkcxzTkpSvI7t2Z+JnVCbURyBK7O2i5XJgorVX4wZPDUib/ejQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzYn4TDBbonFGeAA/Q1n7XhYtceMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5 ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvMWYxZmQzZmQtY2IwMC0z MmFkLThlMTEtNTc4MjQ5NWY1ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmZlOWVkMWMtZGQ0Zi00ZTFlLThl MjYtMjAxNDMzNGVlMjY1LzJmZTllZDFjLWRkNGYtNGUxZS04ZTI2LTIwMTQzMzRl ZTI2NS5jcmwwHwYDVR0jBBgwFoAUbcTQif/6sNYsCWoRLEBwddRje9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0 MzM0ZWUyNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzq6UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZCfObVbCGrYzvrHe0qJsXoRcXYAPGelYz4PnITzbVs1q0vviqAfa4z Z6o6+A7WDn47xIioeerx7ECThPmHre3ZM7rLZrdmIREncVtJ2WrPAmdUxovXZxqf 8cV0iJbDUULYpw8xEZ0rFJTkqQJqyhES7XYYPjG5Ehktxq8gPiCPd4WJ9GTJGxeD vO9kUQ+O6QfI5unRCbyJ50FHCLgNM/qvtt80xTUCi+bPUhCL+Y8epyL1w0yfvKlp 0TbSPe2GkGkSupAQWj1YxzLXXviVBTLi1vAJqxgUvJSgWf9zXpLsR6ncUmOy3QKd tK7R2vs79q3Pb+8fhdKanfBQOexLGJQ= -----END CERTIFICATE-----Generated at Sat Aug 23 16:08:34 2025 by rpki-client