$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/befbfdbc-cdf3-3eea-900a-2e6aaedd5d87.roa File: befbfdbc-cdf3-3eea-900a-2e6aaedd5d87.roa (raw, json) Hash identifier: hA7SU51P1LRYJu8Z9KDeoRdK0eEhS4zu00HQ8EYiyJk= Subject key identifier: EB:CA:89:BF:EF:F4:51:0F:63:91:EA:FD:2D:81:2C:5B:BC:38:7C:76 Certificate issuer: /CN=d862b5c6-40a1-4249-a26e-11938a702985 Certificate serial: 010D0C9F4328584B0B76B1D6C60DD393E8D4E000 Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/befbfdbc-cdf3-3eea-900a-2e6aaedd5d87.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 15257 IP address blocks: 173.195.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:b1:d6:c6:0d:d3:93:e8:d4:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=6e7e6f9b-09bb-44d1-a783-310fad77568f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d1:6b:3e:0b:1d:b3:da:5b:fc:11:f9:57:d2: 0c:d8:75:bb:cb:c7:58:56:21:c1:cf:29:53:11:01: df:6d:cb:dd:95:46:47:e4:92:12:2b:aa:cd:7e:53: 1a:30:ee:60:c0:6d:86:3f:59:df:42:b3:bf:15:55: 3e:0e:01:c5:72:60:da:32:45:c9:31:cc:07:9a:67: 5a:a4:96:0c:73:52:ee:d0:61:5d:d4:61:ed:7c:5b: ed:c5:2b:48:5a:4d:45:cb:70:6e:4f:a5:86:2c:2c: 26:c2:65:59:d3:e9:66:c7:89:f3:a7:14:41:98:24: 3a:33:c6:5f:59:a6:4e:50:a4:ae:75:85:bb:a8:58: 9e:2f:cc:73:e7:2f:d1:d6:1a:d3:ab:2d:ff:18:f4: 5c:e2:9d:65:d6:b1:7c:02:ec:e1:e1:07:47:6d:c6: d6:5f:d4:76:a0:c7:01:62:e4:e0:a2:14:d0:6f:15: 27:2a:f4:b5:1a:7f:50:08:3b:9c:ea:71:10:d7:a7: a1:ae:36:a1:37:59:2f:d8:35:b1:25:45:fc:9c:8c: d8:aa:2d:60:fa:6e:db:94:11:ac:0a:f6:c3:7b:c3: 7a:8f:82:fa:a5:81:17:5f:34:46:64:5a:59:84:34: 57:cc:98:5d:c5:5b:3e:1b:79:ec:b0:b1:91:15:f2: ac:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CA:89:BF:EF:F4:51:0F:63:91:EA:FD:2D:81:2C:5B:BC:38:7C:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/befbfdbc-cdf3-3eea-900a-2e6aaedd5d87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl X509v3 Authority Key Identifier: keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer sbgp-ipAddrBlock: critical IPv4: 173.195.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:0b:af:75:ba:a3:8e:6e:14:ff:31:c2:79:5c:d7:42:e6:aa: 27:37:06:49:79:13:7c:23:56:a1:21:e1:66:20:c3:28:ce:86: d1:93:3a:3b:f7:48:6e:eb:cc:1a:f5:bb:b3:79:af:2a:4b:bd: 9a:9c:a6:db:5d:04:45:4e:00:6f:26:cc:34:65:50:e5:57:19: 6c:6b:d9:db:1e:b4:e4:08:54:e2:b9:2a:40:ec:78:25:84:f2: 3b:e2:68:5d:01:6a:7e:f7:55:3e:96:47:06:ff:2b:75:cd:68: 61:52:7f:4a:ae:27:e6:8a:21:4c:d5:0c:eb:89:7e:d7:0f:68: da:b4:10:62:2d:df:b3:26:f6:be:3c:90:53:95:76:82:f0:3d: 1e:ab:9a:c4:62:0c:66:be:aa:2a:fd:ae:56:58:24:88:da:4e: c0:b9:cb:29:86:9b:31:f7:97:0d:b9:c9:44:cd:80:ec:90:67: cf:13:67:ea:84:14:91:30:b4:bc:a5:73:96:43:6e:09:f1:fc: f5:f8:90:59:64:19:38:44:77:b4:a0:88:72:03:42:b2:77:aa: ba:06:19:1b:49:ce:ca:20:d2:23:a9:74:5d:46:7e:7c:3f:a8: 27:c7:1d:dd:ad:cf:51:5c:c4:cb:c0:7f:fe:de:ab:19:c6:5f: 12:9e:2a:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdrHWxg3Tk+jU4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg2MmI1YzYtNDBhMS00MjQ5LWEyNmUtMTE5MzhhNzAy OTg1MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NmU3ZTZmOWItMDliYi00NGQxLWE3ODMtMzEwZmFkNzc1NjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitFrPgsds9pb/BH5V9IM2HW7y8dYViHBzylT EQHfbcvdlUZH5JISK6rNflMaMO5gwG2GP1nfQrO/FVU+DgHFcmDaMkXJMcwHmmda pJYMc1Lu0GFd1GHtfFvtxStIWk1Fy3BuT6WGLCwmwmVZ0+lmx4nzpxRBmCQ6M8Zf WaZOUKSudYW7qFieL8xz5y/R1hrTqy3/GPRc4p1l1rF8Auzh4QdHbcbWX9R2oMcB YuTgohTQbxUnKvS1Gn9QCDuc6nEQ16ehrjahN1kv2DWxJUX8nIzYqi1g+m7blBGs CvbDe8N6j4L6pYEXXzRGZFpZhDRXzJhdxVs+G3nssLGRFfKsUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvKib/v9FEPY5Hq/S2BLFu8OHx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kODYy YjVjNi00MGExLTQyNDktYTI2ZS0xMTkzOGE3MDI5ODUvYmVmYmZkYmMtY2RmMy0z ZWVhLTkwMGEtMmU2YWFlZGQ1ZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDg2MmI1YzYtNDBhMS00MjQ5LWEy NmUtMTE5MzhhNzAyOTg1L2Q4NjJiNWM2LTQwYTEtNDI0OS1hMjZlLTExOTM4YTcw Mjk4NS5jcmwwHwYDVR0jBBgwFoAUgfwOi4Mvut7//KOFwjE85iiqGdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kODYyYjVjNi00MGExLTQyNDktYTI2ZS0xMTkz OGE3MDI5ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcPnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8Lr3W6o45uFP8xwnlc10Lmqic3Bkl5E3wjVqEh4WYgwyjOhtGTOjv3 SG7rzBr1u7N5rypLvZqcpttdBEVOAG8mzDRlUOVXGWxr2dsetOQIVOK5KkDseCWE 8jviaF0Ban73VT6WRwb/K3XNaGFSf0quJ+aKIUzVDOuJftcPaNq0EGIt37Mm9r48 kFOVdoLwPR6rmsRiDGa+qir9rlZYJIjaTsC5yymGmzH3lw25yUTNgOyQZ88TZ+qE FJEwtLylc5ZDbgnx/PX4kFlkGThEd7SgiHIDQrJ3qroGGRtJzsog0iOpdF1Gfnw/ qCfHHd2tz1FcxMvAf/7eqxnGXxKeKl0= -----END CERTIFICATE-----Generated at Mon Sep 8 01:53:39 2025 by rpki-client