$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/208a5d2f-5933-32e5-aaaa-898bcac06735.roa File: 208a5d2f-5933-32e5-aaaa-898bcac06735.roa (raw, json) Hash identifier: bIhTRM+0snWJkzNZkeQ0yrZq5NHw5xnAMhRaGqynSBw= Subject key identifier: 9B:BE:97:DA:16:56:73:80:EF:D1:4B:52:5D:CC:65:73:79:22:91:85 Certificate issuer: /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b Certificate serial: 010D0C9F4328584AF7EBDB32DCF2384397752780 Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/208a5d2f-5933-32e5-aaaa-898bcac06735.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 30045 IP address blocks: 199.212.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:db:32:dc:f2:38:43:97:75:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=18ca6e90-5094-4f45-95a8-6cbf6bb8d6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e1:e2:8f:e7:de:e3:cd:fe:e2:52:89:19:76: 8d:c5:c6:e6:d0:c3:67:00:1a:11:9b:12:4a:ca:21: ae:d9:36:d0:5b:2c:75:87:61:41:93:00:95:89:9f: 6a:ff:ac:7b:9a:1a:5a:dd:68:ff:e3:3c:cf:d9:fc: 52:3a:3e:e3:d6:27:d0:32:98:03:5a:ce:9b:3c:89: 8b:79:61:6a:57:25:61:0b:08:9f:8c:6b:9a:29:5a: 19:24:8f:b0:3f:8d:d4:dd:c9:9a:8e:98:9b:99:74: 4b:f2:8a:e6:c1:95:62:a1:00:5a:a2:95:a4:9f:65: 34:24:d1:21:53:a7:c2:83:5e:7e:14:33:52:cc:05: 79:82:53:7b:b5:8b:e7:05:73:6e:66:3c:ee:36:d4: 2d:01:d0:5c:53:f3:ab:de:56:2d:52:f0:ca:fb:4e: ea:e7:59:cb:d4:14:15:95:96:1d:61:a7:2e:43:21: bc:96:e8:44:c6:f4:9b:23:1a:9a:22:9e:7a:2a:36: 80:83:9b:24:31:7a:fb:ab:af:09:5c:8b:a6:0c:5d: 6a:a7:9f:0b:2e:69:55:52:49:a5:86:eb:aa:b3:88: b8:c3:ee:35:17:d5:a8:98:35:5b:55:14:85:70:f2: 32:78:ec:5a:dc:6f:d0:46:02:84:f0:2b:80:bb:81: d2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BE:97:DA:16:56:73:80:EF:D1:4B:52:5D:CC:65:73:79:22:91:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/208a5d2f-5933-32e5-aaaa-898bcac06735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl X509v3 Authority Key Identifier: keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer sbgp-ipAddrBlock: critical IPv4: 199.212.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:46:ab:69:3c:80:60:e0:0a:09:33:36:65:ef:92:ce:cb:14: 92:7e:4b:43:09:00:f3:43:7e:57:e6:63:df:22:2d:38:d5:97: be:0d:6e:1f:de:c5:80:90:bc:30:46:e3:5e:a7:bc:82:d6:b7: 87:f4:c9:82:42:a3:1b:75:d7:93:49:15:87:e1:03:b8:a7:de: 68:d5:b5:0a:e1:07:37:42:d3:50:16:80:22:2c:95:13:7e:4b: fa:1c:14:f5:67:11:55:ad:02:4d:23:9e:a9:1a:30:b1:04:cd: 33:c7:c8:b7:f4:28:0a:4a:ec:1f:e9:46:92:ac:6b:9e:99:f3: 68:7b:95:fe:21:2f:85:cb:aa:07:80:29:bb:7a:86:b7:fb:fe: 7b:e5:ff:e7:16:b6:d9:7d:e8:53:0e:89:b3:b3:7c:e7:55:17: 33:df:29:fc:5e:59:92:41:7c:65:37:30:e5:ff:b8:a8:1a:cb: ca:e3:ea:49:dc:05:3b:62:9b:ea:f9:ca:3f:4b:72:ee:da:4b: 6b:87:8b:f0:b0:19:4d:ae:1c:65:2f:1d:78:a2:5c:b5:97:1e: e0:b5:36:dc:f2:a5:10:e6:a3:a2:30:90:ad:bc:9a:3a:d8:d6: 8f:e1:e7:88:b2:65:c1:ea:e8:68:88:33:77:8a:c2:7a:e7:07: 8f:53:0c:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369sy3PI4Q5d1J4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMWE1NmItZWEzMy00YmQ2LTlkM2UtMDA4OTZhOTFk YjZiMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk MThjYTZlOTAtNTA5NC00ZjQ1LTk1YTgtNmNiZjZiYjhkNmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeHij+fe483+4lKJGXaNxcbm0MNnABoRmxJK yiGu2TbQWyx1h2FBkwCViZ9q/6x7mhpa3Wj/4zzP2fxSOj7j1ifQMpgDWs6bPImL eWFqVyVhCwifjGuaKVoZJI+wP43U3cmajpibmXRL8ormwZVioQBaopWkn2U0JNEh U6fCg15+FDNSzAV5glN7tYvnBXNuZjzuNtQtAdBcU/Or3lYtUvDK+07q51nL1BQV lZYdYacuQyG8luhExvSbIxqaIp56KjaAg5skMXr7q68JXIumDF1qp58LLmlVUkml huuqs4i4w+41F9WomDVbVRSFcPIyeOxa3G/QRgKE8CuAu4HSCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJu+l9oWVnOA79FLUl3MZXN5IpGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YWMx YTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5NmE5MWRiNmIvMjA4YTVkMmYtNTkzMy0z MmU1LWFhYWEtODk4YmNhYzA2NzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGFjMWE1NmItZWEzMy00YmQ2LTlk M2UtMDA4OTZhOTFkYjZiLzhhYzFhNTZiLWVhMzMtNGJkNi05ZDNlLTAwODk2YTkx ZGI2Yi5jcmwwHwYDVR0jBBgwFoAUg3U6Yyir4o99wKc7TDozymMHEyUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YWMxYTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5 NmE5MWRiNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx9QEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBGq2k8gGDgCgkzNmXvks7LFJJ+S0MJAPNDflfmY98iLTjVl74Nbh/e xYCQvDBG416nvILWt4f0yYJCoxt115NJFYfhA7in3mjVtQrhBzdC01AWgCIslRN+ S/ocFPVnEVWtAk0jnqkaMLEEzTPHyLf0KApK7B/pRpKsa56Z82h7lf4hL4XLqgeA Kbt6hrf7/nvl/+cWttl96FMOibOzfOdVFzPfKfxeWZJBfGU3MOX/uKgay8rj6knc BTtim+r5yj9Lcu7aS2uHi/CwGU2uHGUvHXiiXLWXHuC1NtzypRDmo6IwkK28mjrY 1o/h54iyZcHq6GiIM3eKwnrnB49TDK4= -----END CERTIFICATE-----Generated at Mon Aug 25 16:26:44 2025 by rpki-client