$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa File: 2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa (raw, json) Hash identifier: EmGI8IJEJEQwi0TnaUukQ9y12t9nlVLhs3a/8EEEp3M= Subject key identifier: D6:81:12:B3:E6:2B:DC:73:E1:2E:DA:F7:E3:8A:95:A2:22:D9:5A:56 Certificate issuer: /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Certificate serial: 010D0C9F4328584B1D9C22E091ED34FBAA1BA300 Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 396026 IP address blocks: 199.230.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:22:e0:91:ed:34:fb:aa:1b:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=5367cd73-cb71-4f3f-8b0a-92fce44cdd88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b9:50:45:73:97:6e:22:dc:b1:62:18:1d:9c: 0f:ce:15:06:7d:0a:6e:9f:c7:c8:24:46:15:5a:39: cb:e6:3c:f9:97:c5:b1:ac:b9:49:cb:f0:10:f7:4e: 13:f0:d0:8b:1b:f1:01:e6:f6:f7:7b:67:21:35:2b: c5:c9:1d:c6:a9:03:5d:ff:e8:25:e7:6a:d6:c1:98: 67:81:e8:a0:5b:81:61:47:a0:4f:bd:d6:5d:b7:b5: b3:1f:54:d0:47:f8:cb:a1:50:9c:ff:88:8b:3e:ec: 6f:66:ab:30:f7:62:85:61:e4:11:04:fd:f2:c4:07: 6c:68:f6:fc:a7:24:2f:52:a1:fc:89:71:52:7b:f0: 4e:17:a1:32:7e:31:8c:1c:fa:08:e9:b8:5c:44:12: 5a:8d:ad:77:46:12:db:7a:46:bb:7e:e6:ec:5b:77: 70:fc:28:b9:39:ea:32:fe:10:c3:23:39:ed:0b:e0: 43:c8:3c:09:90:e1:f5:d1:7d:06:96:53:dc:0c:a1: 8a:e8:4e:8c:e6:ee:99:79:44:b3:b1:23:c0:d3:68: 1b:2b:f6:64:54:56:cb:5b:bb:39:0a:8d:f6:4a:59: ae:96:1a:69:7c:aa:ab:03:53:53:a3:0c:ae:08:99: 8f:d3:ce:1c:5e:f1:ac:2d:f9:b0:b6:64:96:55:2f: 2f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:81:12:B3:E6:2B:DC:73:E1:2E:DA:F7:E3:8A:95:A2:22:D9:5A:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl X509v3 Authority Key Identifier: keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer sbgp-ipAddrBlock: critical IPv4: 199.230.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:9a:b2:14:82:b6:5c:2a:75:27:c6:b3:b6:a4:92:65:61:a1: 1b:0a:eb:e5:d5:f4:a1:83:96:d1:09:f4:48:66:c7:bc:82:71: ed:05:ff:d7:b3:89:66:32:b4:05:94:4e:04:e3:f1:0a:89:75: fc:a8:06:72:d9:45:fe:ea:27:b5:18:a5:2c:37:36:74:46:70: c3:13:51:b2:6f:91:85:0c:9f:44:90:49:70:75:99:9a:02:6f: 68:97:09:80:95:97:32:32:49:c3:ef:0b:bf:70:b7:c8:fb:91: 8b:07:33:4b:51:16:d6:61:76:78:ab:58:cc:55:27:4e:e7:59: e5:ff:53:14:75:6c:0c:ec:88:c7:dc:20:da:f4:47:6c:8f:37: 76:41:05:59:b0:50:0c:09:9a:b7:84:75:87:3e:e8:74:d4:84: 93:0c:83:df:94:b0:14:07:ac:fc:c6:6a:ba:d2:e0:68:98:eb: f8:d8:b9:c8:02:38:d9:e8:b8:fa:60:4a:3d:c5:91:9f:86:f6: 99:9f:49:45:a8:3f:83:34:e1:bb:96:17:fd:f8:71:f8:f8:0f: ed:b4:ce:d0:ea:c2:1e:be:7d:26:01:01:80:e8:2c:e5:ed:ea: 18:2f:c8:a1:c8:59:39:c9:4b:c6:47:8e:49:0b:59:f3:c8:a1: 89:8a:36:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCLgke00+6obowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ2YzZlYTEtNGYxYy00NTc5LWI0YjEtNzg4OTFhMzQ2 NDdhMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NTM2N2NkNzMtY2I3MS00ZjNmLThiMGEtOTJmY2U0NGNkZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLlQRXOXbiLcsWIYHZwPzhUGfQpun8fIJEYV WjnL5jz5l8WxrLlJy/AQ904T8NCLG/EB5vb3e2chNSvFyR3GqQNd/+gl52rWwZhn geigW4FhR6BPvdZdt7WzH1TQR/jLoVCc/4iLPuxvZqsw92KFYeQRBP3yxAdsaPb8 pyQvUqH8iXFSe/BOF6EyfjGMHPoI6bhcRBJaja13RhLbeka7fubsW3dw/Ci5Oeoy /hDDIzntC+BDyDwJkOH10X0GllPcDKGK6E6M5u6ZeUSzsSPA02gbK/ZkVFbLW7s5 Co32SlmulhppfKqrA1NTowyuCJmP084cXvGsLfmwtmSWVS8vtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNaBErPmK9xz4S7a9+OKlaIi2VpWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZj NmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5MWEzNDY0N2EvMmQ4ZTE0YmYtMTIzYS0z NTNmLWJjMWQtN2YwZjcwODcyMWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzQ2YzZlYTEtNGYxYy00NTc5LWI0 YjEtNzg4OTFhMzQ2NDdhLzM0NmM2ZWExLTRmMWMtNDU3OS1iNGIxLTc4ODkxYTM0 NjQ3YS5jcmwwHwYDVR0jBBgwFoAUco1y15nyFUEivuvxCazPlr+/hnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZjNmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5 MWEzNDY0N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+ZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWashSCtlwqdSfGs7akkmVhoRsK6+XV9KGDltEJ9Ehmx7yCce0F/9ez iWYytAWUTgTj8QqJdfyoBnLZRf7qJ7UYpSw3NnRGcMMTUbJvkYUMn0SQSXB1mZoC b2iXCYCVlzIyScPvC79wt8j7kYsHM0tRFtZhdnirWMxVJ07nWeX/UxR1bAzsiMfc INr0R2yPN3ZBBVmwUAwJmreEdYc+6HTUhJMMg9+UsBQHrPzGarrS4GiY6/jYucgC ONnouPpgSj3FkZ+G9pmfSUWoP4M04buWF/34cfj4D+20ztDqwh6+fSYBAYDoLOXt 6hgvyKHIWTnJS8ZHjkkLWfPIoYmKNjk= -----END CERTIFICATE-----Generated at Fri Sep 19 00:03:02 2025 by rpki-client