$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/1de8ce08-3710-361b-8c99-fd785aea8a0c.roa File: 1de8ce08-3710-361b-8c99-fd785aea8a0c.roa (raw, json) Hash identifier: Aeol2FWSYaq10NqgHh5HBbemkylaytcAbJyqXLUmqZo= Subject key identifier: 75:21:A6:CB:7F:D2:0E:1F:76:60:DB:21:A3:37:BB:70:BD:B8:0A:7C Certificate issuer: /CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Certificate serial: 010D0C9F4328584AF5212B0789D6F7800B5BA640 Authority key identifier: CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/1de8ce08-3710-361b-8c99-fd785aea8a0c.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 11736 IP address blocks: 206.176.0.0/20 maxlen: 24 206.176.57.0/24 maxlen: 24 206.176.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:2b:07:89:d6:f7:80:0b:5b:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=7bfb20aa-ae90-4b99-9c04-f95d2c04cda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:67:c7:11:06:96:74:e9:1f:2d:ac:ac:72:b2: ad:b8:ee:22:1f:3f:a7:ac:2a:05:5d:e5:eb:43:2c: 95:31:48:29:e9:f0:8e:67:02:d4:bb:83:61:0c:b1: 43:81:34:20:49:8e:25:9b:e7:f0:07:1d:5d:0b:09: bb:3d:fd:ec:3c:8d:c4:53:27:92:29:d7:ab:b9:74: c9:5e:b9:2c:51:52:ef:ff:62:e1:e5:92:14:f9:1b: e4:3f:46:1d:13:24:46:b0:7d:03:3c:d5:e8:18:d4: 09:a2:f3:f4:8d:86:d9:8d:d7:87:d9:25:03:fc:b3: a8:17:7e:b3:5f:c3:5f:a4:87:ab:5e:34:93:be:8f: 47:b4:07:f7:39:6d:79:97:89:47:0d:86:0e:0a:a8: 5c:32:eb:f1:b9:cf:2d:14:9f:76:d6:50:cb:02:b3: 02:17:6c:3b:9f:02:e0:4f:9d:64:3d:be:99:17:4b: 11:be:a5:d8:a6:e1:7c:44:81:28:e5:91:f7:b8:d1: c0:3e:c9:69:3f:6c:c8:c7:00:a1:5e:38:a1:f6:8a: f9:dc:b1:6f:f0:38:4a:76:a0:d8:1d:2d:c8:0b:9a: 8d:bf:0e:f7:20:77:ec:3e:24:a1:b7:45:71:d6:95: 15:49:74:3b:0f:59:a7:3d:fa:50:c8:64:fa:b9:d3: 10:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:21:A6:CB:7F:D2:0E:1F:76:60:DB:21:A3:37:BB:70:BD:B8:0A:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/1de8ce08-3710-361b-8c99-fd785aea8a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl X509v3 Authority Key Identifier: keyid:CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer sbgp-ipAddrBlock: critical IPv4: 206.176.0.0/20 206.176.57.0-206.176.58.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:3b:88:85:98:eb:ba:e3:d8:ce:80:37:a2:bc:be:39:0e:5a: ae:57:38:ef:98:0e:5a:6d:cb:11:27:c1:6c:7b:63:0f:30:65: 55:e8:47:39:7a:19:52:5a:54:53:bf:f2:ef:cb:70:05:43:cb: f8:5a:cf:8d:1c:76:2a:a3:5d:96:6e:98:74:c7:ef:ad:8e:ab: 31:59:c3:db:a8:0d:76:70:5b:62:a3:f7:b2:1c:c7:e0:2b:32: 52:b4:33:94:00:5f:82:69:78:74:e0:9c:48:06:b2:f1:3a:50: 09:df:f2:41:48:79:ba:07:b9:2f:cd:71:e3:ed:a1:ef:8c:ab: ee:51:fc:80:c1:91:ee:86:79:b7:93:0b:82:7e:af:0c:74:23: 45:f1:9e:06:da:71:e7:e7:6c:5e:6b:00:5d:55:83:20:7c:fc: 9f:96:bd:a3:94:38:4f:0e:73:c9:2f:f3:a6:a4:4b:6c:72:a6: 00:d5:83:fc:48:97:75:e4:a7:6f:b2:f3:ea:8b:63:38:7b:25: a2:05:31:44:1d:a1:31:9e:55:f2:d9:b7:13:a7:83:25:5a:12: 63:e4:3f:da:72:30:c6:28:d1:22:bf:f8:21:c2:86:8f:45:ff: 4d:36:74:2e:b6:12:ea:0e:22:52:ff:9d:b4:3d:b5:e5:8c:d9: 3c:3d:08:8a -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEr1ISsHidb3gAtbpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDc5MzdiNzYtMTQwMS00YTE5LTg2ZWYtMjM1MWZkMDE5 OGE2MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk N2JmYjIwYWEtYWU5MC00Yjk5LTljMDQtZjk1ZDJjMDRjZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2fHEQaWdOkfLayscrKtuO4iHz+nrCoFXeXr QyyVMUgp6fCOZwLUu4NhDLFDgTQgSY4lm+fwBx1dCwm7Pf3sPI3EUyeSKderuXTJ XrksUVLv/2Lh5ZIU+RvkP0YdEyRGsH0DPNXoGNQJovP0jYbZjdeH2SUD/LOoF36z X8NfpIerXjSTvo9HtAf3OW15l4lHDYYOCqhcMuvxuc8tFJ921lDLArMCF2w7nwLg T51kPb6ZF0sRvqXYpuF8RIEo5ZH3uNHAPslpP2zIxwChXjih9or53LFv8DhKdqDY HS3IC5qNvw73IHfsPiSht0Vx1pUVSXQ7D1mnPfpQyGT6udMQoQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFHUhpst/0g4fdmDbIaM3u3C9uAp8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkz N2I3Ni0xNDAxLTRhMTktODZlZi0yMzUxZmQwMTk4YTYvMWRlOGNlMDgtMzcxMC0z NjFiLThjOTktZmQ3ODVhZWE4YTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDc5MzdiNzYtMTQwMS00YTE5LTg2 ZWYtMjM1MWZkMDE5OGE2L2Q3OTM3Yjc2LTE0MDEtNGExOS04NmVmLTIzNTFmZDAx OThhNi5jcmwwHwYDVR0jBBgwFoAUzCmYA5nGRcTgpU9GWUkMpY/nz8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkzN2I3Ni0xNDAxLTRhMTktODZlZi0yMzUx ZmQwMTk4YTYuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQEzrAAMAwD BADOsDkDBADOsDowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAGDuIhZjruuPYzoA3ory+OQ5arlc475gOWm3L ESfBbHtjDzBlVehHOXoZUlpUU7/y78twBUPL+FrPjRx2KqNdlm6YdMfvrY6rMVnD 26gNdnBbYqP3shzH4CsyUrQzlABfgml4dOCcSAay8TpQCd/yQUh5uge5L81x4+2h 74yr7lH8gMGR7oZ5t5MLgn6vDHQjRfGeBtpx5+dsXmsAXVWDIHz8n5a9o5Q4Tw5z yS/zpqRLbHKmANWD/EiXdeSnb7Lz6otjOHslogUxRB2hMZ5V8tm3E6eDJVoSY+Q/ 2nIwxijRIr/4IcKGj0X/TTZ0LrYS6g4iUv+dtD215YzZPD0Iig== -----END CERTIFICATE-----Generated at Fri Oct 17 15:57:53 2025 by rpki-client