$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/86e2c39d-d166-3f9f-b4b9-e70794a93110.roa File: 86e2c39d-d166-3f9f-b4b9-e70794a93110.roa (raw, json) Hash identifier: 8sxccy8yauLdHCohA/MsjY0UM6Yoc4825QWovn5KqWE= Subject key identifier: AF:C7:10:7E:02:A5:C5:18:5C:E9:A9:34:B7:65:55:18:91:6B:F4:F7 Certificate issuer: /CN=e6dcaaff-4250-4357-98e7-c0c322cd2ad4 Certificate serial: 010D0C9F4328584A73509FAEFD6A1955DEB2B4A0 Authority key identifier: A2:DC:FB:F7:3D:84:5F:DA:7C:C1:DF:FA:5D:4B:69:AE:FD:AD:3C:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/86e2c39d-d166-3f9f-b4b9-e70794a93110.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 204.154.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:9f:ae:fd:6a:19:55:de:b2:b4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6dcaaff-4250-4357-98e7-c0c322cd2ad4 Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=c0bec746-d1c9-4341-be2f-2873d38e6abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ae:86:16:b3:51:0c:db:a8:e9:25:0b:25:22: c9:6e:d0:72:37:92:ec:49:f1:1e:03:53:18:78:19: ad:96:53:66:5a:17:23:44:1c:c8:49:d1:5b:e2:f4: 3a:3c:98:4b:21:bf:27:9b:db:eb:5e:1a:a0:9e:0d: ad:3d:55:6e:7f:c0:e5:28:23:74:62:a6:79:0f:e9: 59:eb:99:5f:93:11:6d:b7:28:cd:ad:68:6d:50:e7: af:18:4f:f8:a7:ac:f2:49:6f:91:19:4e:21:6b:99: ca:96:4f:99:b1:9f:88:32:fd:ac:0f:18:64:50:0a: 3e:f8:cb:bd:b8:a0:f4:43:7e:05:e6:5e:35:ba:92: f0:09:ff:98:1e:98:0a:c2:ac:e6:ee:58:9e:5a:f1: 55:c2:14:de:e8:56:60:a0:85:e8:c1:a4:d0:96:bb: 9e:3b:3a:3f:01:a0:8c:f0:b0:d2:78:c6:2f:13:4d: cc:a5:56:4d:a4:27:6f:e4:1c:74:ef:20:73:5a:65: c8:63:4c:9b:fa:47:86:47:f4:0e:10:83:78:5c:ce: 1c:b7:e0:92:0b:a5:16:ff:96:a7:28:66:b9:98:41: 48:4e:76:64:58:44:47:56:a2:32:dd:0d:40:bd:c7: 6b:e4:88:66:b2:73:ef:b1:0c:fc:2f:d8:54:fa:09: 9b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C7:10:7E:02:A5:C5:18:5C:E9:A9:34:B7:65:55:18:91:6B:F4:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/86e2c39d-d166-3f9f-b4b9-e70794a93110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.crl X509v3 Authority Key Identifier: keyid:A2:DC:FB:F7:3D:84:5F:DA:7C:C1:DF:FA:5D:4B:69:AE:FD:AD:3C:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.cer sbgp-ipAddrBlock: critical IPv4: 204.154.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c3:9d:e5:0e:f6:c9:2b:bc:89:a5:f1:ac:51:2f:b2:c3:8c: 8e:c7:85:eb:57:e9:6f:fc:cb:a7:66:cf:02:6e:c6:3e:56:0f: 39:0c:67:11:0e:f6:9d:32:81:6f:23:54:d9:8b:dc:9f:0b:f2: e8:96:cc:63:98:b8:ef:ce:ac:23:c0:87:bc:3d:5f:df:fc:04: 75:99:70:f6:e3:0f:27:a0:e9:e4:88:8a:1d:09:b6:89:a1:5c: 99:a2:ff:28:26:22:38:da:2a:38:25:d2:12:26:1a:bf:e7:00: 40:a8:71:23:8e:eb:62:df:73:ee:3c:f3:52:2a:7f:02:0e:77: 3c:a9:86:01:80:b3:14:33:77:ba:68:44:ce:f6:96:e6:4b:5e: f8:e5:99:b4:78:31:3e:fd:77:7f:7c:0d:fc:0c:a7:9c:cc:37: 05:ef:52:b6:db:a6:1a:83:a1:41:30:00:46:c0:9d:07:18:bd: a2:9c:20:48:7b:eb:8b:07:4f:12:39:75:c6:45:f1:16:a9:1a: 78:58:3f:b4:33:d2:73:c4:18:f5:a6:25:e1:39:a7:09:26:19: a9:7e:3c:92:fa:04:67:7a:b3:6b:51:c8:78:4a:a9:01:09:50: 63:e4:bd:d1:f5:b7:06:b6:7a:c2:69:91:e3:29:5c:51:52:e6: 77:11:13:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUJ+u/WoZVd6ytKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZkY2FhZmYtNDI1MC00MzU3LTk4ZTctYzBjMzIyY2Qy YWQ0MB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk YzBiZWM3NDYtZDFjOS00MzQxLWJlMmYtMjg3M2QzOGU2YWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq6GFrNRDNuo6SULJSLJbtByN5LsSfEeA1MY eBmtllNmWhcjRBzISdFb4vQ6PJhLIb8nm9vrXhqgng2tPVVuf8DlKCN0YqZ5D+lZ 65lfkxFttyjNrWhtUOevGE/4p6zySW+RGU4ha5nKlk+ZsZ+IMv2sDxhkUAo++Mu9 uKD0Q34F5l41upLwCf+YHpgKwqzm7lieWvFVwhTe6FZgoIXowaTQlrueOzo/AaCM 8LDSeMYvE03MpVZNpCdv5Bx07yBzWmXIY0yb+keGR/QOEIN4XM4ct+CSC6UW/5an KGa5mEFITnZkWERHVqIy3Q1Avcdr5IhmsnPvsQz8L9hU+gmbcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/HEH4CpcUYXOmpNLdlVRiRa/T3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lNmRj YWFmZi00MjUwLTQzNTctOThlNy1jMGMzMjJjZDJhZDQvODZlMmMzOWQtZDE2Ni0z ZjlmLWI0YjktZTcwNzk0YTkzMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTZkY2FhZmYtNDI1MC00MzU3LTk4 ZTctYzBjMzIyY2QyYWQ0L2U2ZGNhYWZmLTQyNTAtNDM1Ny05OGU3LWMwYzMyMmNk MmFkNC5jcmwwHwYDVR0jBBgwFoAUotz79z2EX9p8wd/6XUtprv2tPMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lNmRjYWFmZi00MjUwLTQzNTctOThlNy1jMGMz MjJjZDJhZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJrnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3DneUO9skrvIml8axRL7LDjI7HhetX6W/8y6dmzwJuxj5WDzkMZxEO 9p0ygW8jVNmL3J8L8uiWzGOYuO/OrCPAh7w9X9/8BHWZcPbjDyeg6eSIih0Jtomh XJmi/ygmIjjaKjgl0hImGr/nAECocSOO62Lfc+4881IqfwIOdzyphgGAsxQzd7po RM72luZLXvjlmbR4MT79d398DfwMp5zMNwXvUrbbphqDoUEwAEbAnQcYvaKcIEh7 64sHTxI5dcZF8RapGnhYP7Qz0nPEGPWmJeE5pwkmGal+PJL6BGd6s2tRyHhKqQEJ UGPkvdH1twa2esJpkeMpXFFS5ncRE+Y= -----END CERTIFICATE-----Generated at Thu Jul 10 06:45:47 2025 by rpki-client