$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/00b80ae7-7f91-3873-9d7b-8caa3775d067.roa File: 00b80ae7-7f91-3873-9d7b-8caa3775d067.roa (raw, json) Hash identifier: 3kC/cg0rK23kHPA33CcZmzQ93iUp73UXfx1D/N4Ypj8= Subject key identifier: CA:65:51:7A:CB:5A:CC:0F:5C:1B:45:AD:22:20:C0:61:81:93:D9:52 Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e Certificate serial: 010D0C9F4328584AD93666576FE6FB9806DF2B80 Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/00b80ae7-7f91-3873-9d7b-8caa3775d067.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 33211 IP address blocks: 206.41.112.0/22 maxlen: 22 206.41.124.0/23 maxlen: 23 206.41.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:66:57:6f:e6:fb:98:06:df:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=bb522a61-0020-4dee-b5a5-c9fa96a7abad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9f:cd:74:4b:93:7f:ee:84:87:8a:18:72:dd: c2:1c:d7:c6:cd:6f:1b:8c:65:a9:ba:5d:00:e0:77: 30:cc:7d:05:0a:cf:c6:eb:4e:aa:d9:f2:42:97:d9: a8:89:25:4d:3a:87:01:ba:c8:2d:5d:db:53:f9:7f: d8:41:61:34:96:80:9c:71:cd:67:5e:fe:a8:57:e2: 51:4d:d2:7e:ee:62:0b:83:36:f3:fd:cc:13:05:cf: 4e:cd:b7:80:3f:cf:aa:94:cd:e4:d7:aa:93:f0:79: c7:9c:7c:2d:33:fc:4e:55:02:af:d9:60:41:ef:c7: b3:31:a7:04:f3:2f:34:01:77:79:d3:06:4d:22:60: 65:96:2e:78:f8:02:ec:dc:c8:d8:e3:22:2b:a9:9e: 59:d8:5a:e0:c2:af:bc:27:53:f3:a6:8d:1a:34:73: 9f:1a:77:7e:68:e9:1f:55:90:22:df:4c:02:78:01: be:3f:bf:d7:89:05:f5:85:04:90:a2:27:dd:a6:09: 0b:bd:03:61:48:0e:9d:e4:e4:5f:13:54:9a:96:80: 54:01:6d:7d:aa:c4:04:bb:69:79:e3:2f:1b:23:5d: 8e:f8:38:e6:bd:7e:87:10:24:3f:91:b2:3a:d3:6f: 19:1b:18:c5:c3:a9:f9:f8:39:a6:e3:1f:d6:0e:1d: 34:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:65:51:7A:CB:5A:CC:0F:5C:1B:45:AD:22:20:C0:61:81:93:D9:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/00b80ae7-7f91-3873-9d7b-8caa3775d067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl X509v3 Authority Key Identifier: keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer sbgp-ipAddrBlock: critical IPv4: 206.41.112.0/22 206.41.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:d0:cc:ea:39:1c:f0:12:9f:4a:b2:fb:c8:a2:cc:7c:46:e3: a6:f5:8a:be:7c:97:f9:89:fb:63:7e:2a:c3:3a:26:13:62:0c: ea:a2:23:14:a9:ff:45:5d:b6:9b:dc:02:41:7a:e9:41:43:09: 2c:19:88:c6:4e:5e:45:33:cd:04:8f:65:c0:d0:33:86:1b:f5: cd:5a:e7:f7:2b:d1:66:32:ea:a7:2e:4b:56:c2:b6:a3:04:15: f0:18:4d:af:71:dc:90:da:23:91:48:3b:f9:bc:c7:38:9c:1e: 76:61:1b:eb:1e:93:7e:a7:33:d7:77:d7:7e:88:27:06:06:b5: 1e:3a:66:60:43:a8:c9:8c:4d:42:0e:f0:1f:b9:8c:82:fa:d6: bc:23:d3:7d:9a:7e:4f:33:f5:18:de:0b:74:14:e9:e2:fb:57: 27:1c:42:f2:89:f5:04:9f:01:65:a0:9d:ec:c2:6a:9f:8a:dd: 9f:c4:49:e6:a2:21:a0:ac:22:80:f9:29:03:4f:35:d6:ff:be: 66:ae:f6:8e:4d:82:53:8c:55:e4:b7:54:5f:97:78:ad:70:4e: ac:58:88:c0:15:43:be:80:c2:46:11:98:13:40:ba:de:aa:21: 16:94:b6:be:f2:8d:31:19:2f:c0:9f:91:ff:60:0f:51:02:d3: 0a:d8:bc:23 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErZNmZXb+b7mAbfK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMzE0NjMtOTc0Yi00Njc2LTkzMjgtMjAwMjAyYWU0 ZDZlMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk YmI1MjJhNjEtMDAyMC00ZGVlLWI1YTUtYzlmYTk2YTdhYmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ/NdEuTf+6Eh4oYct3CHNfGzW8bjGWpul0A 4HcwzH0FCs/G606q2fJCl9moiSVNOocBusgtXdtT+X/YQWE0loCccc1nXv6oV+JR TdJ+7mILgzbz/cwTBc9OzbeAP8+qlM3k16qT8HnHnHwtM/xOVQKv2WBB78ezMacE 8y80AXd50wZNImBlli54+ALs3MjY4yIrqZ5Z2Frgwq+8J1Pzpo0aNHOfGnd+aOkf VZAi30wCeAG+P7/XiQX1hQSQoifdpgkLvQNhSA6d5ORfE1SaloBUAW19qsQEu2l5 4y8bI12O+DjmvX6HECQ/kbI6028ZGxjFw6n5+Dmm4x/WDh00AQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMplUXrLWswPXBtFrSIgwGGBk9lSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWMz MTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAyMDJhZTRkNmUvMDBiODBhZTctN2Y5MS0z ODczLTlkN2ItOGNhYTM3NzVkMDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFjMzE0NjMtOTc0Yi00Njc2LTkz MjgtMjAwMjAyYWU0ZDZlLzhhYzMxNDYzLTk3NGItNDY3Ni05MzI4LTIwMDIwMmFl NGQ2ZS5jcmwwHwYDVR0jBBgwFoAUZkrPeoeALtWWaZNuDr1s6kFXZvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84YWMzMTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAy MDJhZTRkNmUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCzilwAwQC zil8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHLQzOo5HPASn0qy+8iizHxG46b1ir58l/mJ+2N+KsM6JhNi DOqiIxSp/0VdtpvcAkF66UFDCSwZiMZOXkUzzQSPZcDQM4Yb9c1a5/cr0WYy6qcu S1bCtqMEFfAYTa9x3JDaI5FIO/m8xzicHnZhG+sek36nM9d3136IJwYGtR46ZmBD qMmMTUIO8B+5jIL61rwj032afk8z9RjeC3QU6eL7VyccQvKJ9QSfAWWgnezCap+K 3Z/ESeaiIaCsIoD5KQNPNdb/vmau9o5NglOMVeS3VF+XeK1wTqxYiMAVQ76AwkYR mBNAut6qIRaUtr7yjTEZL8Cfkf9gD1EC0wrYvCM= -----END CERTIFICATE-----Generated at Wed Aug 20 21:31:00 2025 by rpki-client