$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/1016c453-3950-3157-8238-b1385cd19da0.roa File: 1016c453-3950-3157-8238-b1385cd19da0.roa (raw, json) Hash identifier: 1WbJi9B39yLLPH6xsE4N2oY+KKeuNaSGhiLwTz7cfog= Subject key identifier: 58:FF:5C:FF:F4:CD:BA:93:E3:60:02:F0:16:DC:47:40:68:09:17:0E Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584AD23BC035A83B698C0DD65600 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/1016c453-3950-3157-8238-b1385cd19da0.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 32128 IP address blocks: 158.106.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:c0:35:a8:3b:69:8c:0d:d6:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=6d739db2-4598-4f24-b0b7-208259ea7c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:f2:3d:1e:e9:d8:37:bb:0e:8a:d2:d6:38: 1a:d6:fc:03:d1:49:1b:85:95:0f:2e:3a:70:69:84: 1d:d0:df:15:8e:93:31:47:a2:8c:d9:4f:b5:2f:9a: 99:0f:c5:86:2e:f4:c2:05:87:6c:54:81:8d:d6:5b: 40:f3:9b:15:ca:79:1a:d3:66:a8:e1:22:46:b2:d8: 76:3f:25:1c:c3:bc:ac:3a:03:92:d1:6f:4e:24:e9: 2c:43:c5:64:d6:6b:24:c4:71:25:02:67:d9:8e:f0: 65:4c:ad:dc:03:73:09:44:65:84:8d:9d:2f:93:55: 1b:91:8d:3a:51:3a:b7:87:0b:ed:af:24:5d:ad:35: d9:6c:93:c8:d0:80:d5:92:d9:ee:43:ac:5e:92:ad: c8:d0:86:25:5b:0e:25:55:a0:52:43:1e:a6:88:18: bf:1e:ae:2f:e8:81:05:f4:fd:b6:a6:b5:07:64:4d: 1f:4e:ee:b6:d8:a5:7c:06:be:2d:75:f6:8e:e3:55: 25:ab:26:aa:3e:76:8b:9c:6d:3d:0d:fa:70:e0:f8: 7a:48:4e:2e:c0:61:2a:63:6e:62:d0:b1:64:24:c0: 79:7b:1e:2a:f7:db:29:1e:45:b7:c0:b5:11:0d:bf: 88:90:b1:d1:fa:c2:b9:21:f4:57:55:aa:3d:40:b1: 6f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FF:5C:FF:F4:CD:BA:93:E3:60:02:F0:16:DC:47:40:68:09:17:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/1016c453-3950-3157-8238-b1385cd19da0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 158.106.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:12:fb:a7:90:8d:21:dd:6d:d6:3a:0f:8d:77:aa:68:ed:f2: 4a:c5:e1:31:cf:c7:8b:83:69:8c:c4:53:da:f7:09:a2:74:58: 0b:b5:80:5f:e9:b6:5f:81:de:00:eb:69:20:99:97:75:87:db: b2:85:3c:3c:da:f4:ad:9f:e6:1c:b6:39:ce:95:1c:96:43:2b: 4c:12:bb:d8:e2:e9:16:ee:11:4e:f7:74:c8:9e:d0:bf:e2:ee: b6:3f:92:00:20:16:5f:32:eb:99:98:53:be:70:74:81:f8:d7: a4:ee:98:c6:b2:99:02:b2:15:df:98:75:3e:b0:e9:30:57:f5: aa:0d:23:c2:a6:cb:37:ea:cc:d4:0b:c4:a0:bf:63:f1:9e:e6: 4b:2f:4c:de:55:fa:fc:31:51:b8:ef:5b:e9:4f:f4:d6:cb:45: ad:96:c1:37:f7:b6:c1:a3:de:42:96:60:e5:ec:ee:47:90:b2: 88:ce:75:7a:fe:45:34:03:dd:54:0f:20:c6:0f:d0:6e:14:59: a0:fd:30:52:d2:6a:db:25:35:22:2a:30:ff:1f:5d:9c:4a:e0: c3:68:1d:bf:66:c2:1b:05:c8:f9:71:35:02:5f:0f:bd:db:8d: 72:ab:b2:17:57:a1:36:b8:8e:4f:75:36:fe:33:6b:75:b8:a3: 1a:9f:6b:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO8A1qDtpjA3WVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NmQ3MzlkYjItNDU5OC00ZjI0LWIwYjctMjA4MjU5ZWE3YzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7XyPR7p2De7DorS1jga1vwD0UkbhZUPLjpw aYQd0N8VjpMxR6KM2U+1L5qZD8WGLvTCBYdsVIGN1ltA85sVynka02ao4SJGsth2 PyUcw7ysOgOS0W9OJOksQ8Vk1mskxHElAmfZjvBlTK3cA3MJRGWEjZ0vk1UbkY06 UTq3hwvtryRdrTXZbJPI0IDVktnuQ6xekq3I0IYlWw4lVaBSQx6miBi/Hq4v6IEF 9P22prUHZE0fTu622KV8Br4tdfaO41UlqyaqPnaLnG09Dfpw4Ph6SE4uwGEqY25i 0LFkJMB5ex4q99spHkW3wLURDb+IkLHR+sK5IfRXVao9QLFvdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFj/XP/0zbqT42AC8BbcR0BoCRcOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMTAxNmM0NTMtMzk1MC0z MTU3LTgyMzgtYjEzODVjZDE5ZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnmrOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMwS+6eQjSHdbdY6D413qmjt8krF4THPx4uDaYzEU9r3CaJ0WAu1gF/p tl+B3gDraSCZl3WH27KFPDza9K2f5hy2Oc6VHJZDK0wSu9ji6RbuEU73dMie0L/i 7rY/kgAgFl8y65mYU75wdIH416TumMaymQKyFd+YdT6w6TBX9aoNI8KmyzfqzNQL xKC/Y/Ge5ksvTN5V+vwxUbjvW+lP9NbLRa2WwTf3tsGj3kKWYOXs7keQsojOdXr+ RTQD3VQPIMYP0G4UWaD9MFLSatslNSIqMP8fXZxK4MNoHb9mwhsFyPlxNQJfD73b jXKrshdXoTa4jk91Nv4za3W4oxqfa6k= -----END CERTIFICATE-----Generated at Sun Aug 24 04:23:33 2025 by rpki-client