$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa File: cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa (raw, json) Hash identifier: 2+KCel5crgu9rvRubjsjk5EPmZV8bynEsJ5mKvZuauY= Subject key identifier: 6B:05:CF:26:08:29:47:D8:D7:A5:65:73:D4:22:59:1E:94:AE:D4:BB Certificate issuer: /CN=85b2de73-1d42-4595-8cb1-9e82d873ee1c Certificate serial: 010D0C9F4328584AEF8BC8B255EDC7C3ACA70A80 Authority key identifier: 0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 40346 IP address blocks: 199.48.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:c8:b2:55:ed:c7:c3:ac:a7:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85b2de73-1d42-4595-8cb1-9e82d873ee1c Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=f67355ca-f293-4d20-bfce-a91f70b48c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:1e:0c:91:25:e2:cc:47:7b:90:d5:4c:15: 7c:20:4c:66:69:23:85:9b:0e:0e:1b:22:21:e7:6e: bf:b9:15:05:40:f5:bd:60:da:9f:65:a8:cb:7b:a0: aa:15:d0:85:7c:5e:09:14:e1:8b:a5:5b:69:49:ce: f3:0b:ed:0e:09:7d:8e:77:ee:1e:5d:64:ef:07:2d: ba:ef:3d:08:d4:48:42:f3:3b:97:c1:5e:a3:26:55: 3a:c6:23:51:2b:06:6e:9a:b5:a3:60:c6:9e:38:90: 55:47:96:47:aa:57:6c:eb:f5:f8:15:5d:52:0f:bc: 3e:2a:a5:53:f3:8c:68:a5:52:42:c9:1f:7c:b0:2f: 26:3e:10:8d:92:68:a0:37:8b:a3:d8:fa:76:87:b9: 94:2d:25:8f:d8:59:06:16:a1:32:f5:49:26:84:ea: bd:ff:05:76:a2:90:d9:f9:be:6c:17:3e:4b:1d:d7: 19:43:47:ac:fc:1a:fb:f1:28:45:64:f3:0a:8a:0e: ad:e1:72:a7:f4:1d:36:34:56:89:92:86:5f:cb:8c: 9e:4c:4c:a8:57:48:01:cf:bd:77:d7:88:57:73:e0: e2:42:6e:ce:79:0b:56:2b:b5:65:79:ba:cc:43:2d: 0f:41:4e:68:3f:5b:21:87:04:02:bf:ff:f2:17:fb: 9c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:05:CF:26:08:29:47:D8:D7:A5:65:73:D4:22:59:1E:94:AE:D4:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.crl X509v3 Authority Key Identifier: keyid:0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer sbgp-ipAddrBlock: critical IPv4: 199.48.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:0a:28:2d:ab:ea:8d:a6:c8:3f:28:95:7f:0c:60:60:6b:21: b7:2d:bf:e6:30:bd:21:8f:28:1a:b6:7a:9d:de:70:a1:a5:7b: 2c:61:a1:f3:12:d1:40:8e:a9:46:41:a6:ee:a7:6d:47:22:9c: 1e:88:b8:e0:5e:e4:38:ee:39:a2:03:a4:62:ae:12:96:0f:b0: 08:d9:e0:53:08:c1:08:8d:cd:5a:0c:3b:e8:e9:58:80:4c:53: 29:b8:52:cc:5e:90:80:48:ca:15:51:24:44:ae:60:a3:39:24: e9:0a:6d:df:da:91:ab:13:7a:44:3a:98:1f:5c:b5:46:2b:68: 4d:c6:cd:b4:14:5b:1b:3b:4c:24:fd:14:ea:c6:63:48:84:48: 1b:ef:61:71:36:37:73:13:58:f1:29:9d:65:91:13:98:90:85: fd:26:2b:90:f0:48:73:ae:9b:d2:4b:54:08:77:88:a6:d6:8a: a6:86:33:f2:f1:cd:96:99:da:a1:16:25:7a:d7:9f:71:16:a9: 80:3b:86:a0:ac:1d:c9:85:d8:48:a6:b9:d9:86:7d:ea:ce:a4: 8b:66:21:62:57:df:42:75:eb:27:c4:b7:2e:c6:ba:98:d0:c6: a0:01:5f:80:1f:8a:0c:19:85:07:c3:ac:42:58:12:b6:19:b3: a5:cc:82:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvi8iyVe3Hw6ynCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViMmRlNzMtMWQ0Mi00NTk1LThjYjEtOWU4MmQ4NzNl ZTFjMB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk ZjY3MzU1Y2EtZjI5My00ZDIwLWJmY2UtYTkxZjcwYjQ4YzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvboeDJEl4sxHe5DVTBV8IExmaSOFmw4OGyIh 526/uRUFQPW9YNqfZajLe6CqFdCFfF4JFOGLpVtpSc7zC+0OCX2Od+4eXWTvBy26 7z0I1EhC8zuXwV6jJlU6xiNRKwZumrWjYMaeOJBVR5ZHqlds6/X4FV1SD7w+KqVT 84xopVJCyR98sC8mPhCNkmigN4uj2Pp2h7mULSWP2FkGFqEy9UkmhOq9/wV2opDZ +b5sFz5LHdcZQ0es/Br78ShFZPMKig6t4XKn9B02NFaJkoZfy4yeTEyoV0gBz713 14hXc+DiQm7OeQtWK7VlebrMQy0PQU5oP1shhwQCv//yF/uc0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsFzyYIKUfY16Vlc9QiWR6UrtS7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NWIy ZGU3My0xZDQyLTQ1OTUtOGNiMS05ZTgyZDg3M2VlMWMvY2RkYmJkMWEtNmExNC0z YzQyLThmMWEtYzYzYzE3ZTI3OTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODViMmRlNzMtMWQ0Mi00NTk1LThj YjEtOWU4MmQ4NzNlZTFjLzg1YjJkZTczLTFkNDItNDU5NS04Y2IxLTllODJkODcz ZWUxYy5jcmwwHwYDVR0jBBgwFoAUDZZu5jXUDNAQcPj1eFHCR/T2DC8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84NWIyZGU3My0xZDQyLTQ1OTUtOGNiMS05ZTgy ZDg3M2VlMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzD7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcKKC2r6o2myD8olX8MYGBrIbctv+YwvSGPKBq2ep3ecKGleyxhofMS 0UCOqUZBpu6nbUcinB6IuOBe5DjuOaIDpGKuEpYPsAjZ4FMIwQiNzVoMO+jpWIBM Uym4UsxekIBIyhVRJESuYKM5JOkKbd/akasTekQ6mB9ctUYraE3GzbQUWxs7TCT9 FOrGY0iESBvvYXE2N3MTWPEpnWWRE5iQhf0mK5DwSHOum9JLVAh3iKbWiqaGM/Lx zZaZ2qEWJXrXn3EWqYA7hqCsHcmF2EimudmGferOpItmIWJX30J16yfEty7GupjQ xqABX4AfigwZhQfDrEJYErYZs6XMgmk= -----END CERTIFICATE-----Generated at Fri Aug 22 05:14:24 2025 by rpki-client