$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/906f0c7e-1aed-3407-9006-6459ec7f1b20.roa File: 906f0c7e-1aed-3407-9006-6459ec7f1b20.roa (raw, json) Hash identifier: pkksrc3iiFfZe09/SeKs0GxqvkMaqTR+TgpQBViwGHI= Subject key identifier: F3:34:C5:C0:D7:F8:6F:6E:38:66:95:A4:53:0B:53:5C:D2:4D:2F:F7 Certificate issuer: /CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a Certificate serial: 010D0C9F4328584AF9515375F73C097CC399CE80 Authority key identifier: AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/906f0c7e-1aed-3407-9006-6459ec7f1b20.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 394772 IP address blocks: 199.241.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:53:75:f7:3c:09:7c:c3:99:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=296394c1-ff67-4b3f-ae6f-ccaca27636a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d8:fe:b0:84:13:76:65:4d:bc:67:e0:cf:ce: bb:f4:12:cc:4f:34:c8:0e:ce:c0:65:98:34:f9:56: f4:5a:39:c0:07:99:d5:15:03:61:c0:75:12:33:1e: f9:50:5a:d5:08:08:37:9d:02:3b:b5:d4:b4:19:d4: fc:81:22:9c:4d:e4:41:fd:17:70:e4:78:eb:ba:77: 3c:a2:ce:20:1e:9c:8a:26:d9:50:88:13:82:44:92: e7:5d:12:c4:a5:b7:cf:c4:4a:7d:59:36:3c:cf:d2: 60:73:d8:2e:f4:23:1b:ae:c1:9a:89:2e:a4:07:3f: 3e:ca:8e:f8:35:62:f5:44:95:ec:36:35:a0:32:82: 11:74:56:51:5a:39:ed:ac:61:52:e5:f8:1a:6c:29: 27:03:75:09:7a:0b:b2:bf:c1:52:db:0d:b3:ca:41: c5:49:f8:41:c8:91:2d:33:2a:ed:01:d5:df:c2:dd: f2:a4:18:a8:6f:f7:6d:e2:95:0f:9f:42:00:34:4d: 5d:b9:f0:aa:bc:91:4a:39:90:40:38:a1:70:9c:35: e9:04:54:cf:3b:fa:b6:4d:2a:d6:94:fd:01:b0:99: 41:74:6b:82:04:bf:9e:eb:df:3d:cf:53:18:4f:ca: 87:97:bf:8f:be:96:c9:11:17:38:3d:8c:4d:0c:4f: 9b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:34:C5:C0:D7:F8:6F:6E:38:66:95:A4:53:0B:53:5C:D2:4D:2F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/906f0c7e-1aed-3407-9006-6459ec7f1b20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl X509v3 Authority Key Identifier: keyid:AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer sbgp-ipAddrBlock: critical IPv4: 199.241.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:1e:70:c7:80:47:f0:cb:ae:de:8f:57:7b:5a:78:c7:fe:a3: c3:20:b2:67:12:f0:5d:99:69:80:d1:06:b4:88:df:50:f1:e5: 1c:ba:35:9f:57:8c:ab:99:4a:1e:20:e4:04:bd:52:3c:40:00: 53:e8:32:a0:45:94:e1:ca:02:c3:6a:ac:87:45:81:fe:90:53: da:af:95:f7:f7:11:d7:ee:8f:92:c7:6b:04:e6:c9:8f:92:60: 8d:9f:07:92:1e:a0:4b:08:fb:5e:d9:5a:ef:0e:4d:9b:78:26: 20:c9:a1:4c:e1:fe:8d:ba:69:e6:21:c0:cd:69:25:d1:de:a2: 25:53:d5:08:4f:76:d6:9d:c8:ec:ce:7f:31:ad:0c:84:0a:36: ce:8c:48:65:84:cb:47:dc:05:c1:c1:0e:31:d2:d3:b4:95:51: 31:fd:54:67:f3:c1:64:e6:c8:87:b1:1b:4c:11:ac:02:4d:bd: 59:6c:d9:48:3f:64:61:99:5e:f9:1c:1f:2a:94:f5:0a:76:ea: 5b:9e:c4:7b:c2:7e:36:53:88:5d:b1:86:8c:dd:d3:17:a8:ed: a4:7b:fc:ba:d7:65:b4:fa:1f:9a:95:41:06:53:73:c7:07:b2: ae:b4:37:01:37:dd:4b:2b:d0:cb:57:e1:3e:bb:a9:c3:af:cf: 5e:ed:b6:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVN19zwJfMOZzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVhZjAxNGQtMGIzZS00NDk0LWIwN2YtYjMyNTRmZGRl ZjZhMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk Mjk2Mzk0YzEtZmY2Ny00YjNmLWFlNmYtY2NhY2EyNzYzNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tj+sIQTdmVNvGfgz8679BLMTzTIDs7AZZg0 +Vb0WjnAB5nVFQNhwHUSMx75UFrVCAg3nQI7tdS0GdT8gSKcTeRB/Rdw5Hjrunc8 os4gHpyKJtlQiBOCRJLnXRLEpbfPxEp9WTY8z9Jgc9gu9CMbrsGaiS6kBz8+yo74 NWL1RJXsNjWgMoIRdFZRWjntrGFS5fgabCknA3UJeguyv8FS2w2zykHFSfhByJEt MyrtAdXfwt3ypBiob/dt4pUPn0IANE1dufCqvJFKOZBAOKFwnDXpBFTPO/q2TSrW lP0BsJlBdGuCBL+e6989z1MYT8qHl7+PvpbJERc4PYxNDE+bHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPM0xcDX+G9uOGaVpFMLU1zSTS/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZWFm MDE0ZC0wYjNlLTQ0OTQtYjA3Zi1iMzI1NGZkZGVmNmEvOTA2ZjBjN2UtMWFlZC0z NDA3LTkwMDYtNjQ1OWVjN2YxYjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGVhZjAxNGQtMGIzZS00NDk0LWIw N2YtYjMyNTRmZGRlZjZhLzhlYWYwMTRkLTBiM2UtNDQ5NC1iMDdmLWIzMjU0ZmRk ZWY2YS5jcmwwHwYDVR0jBBgwFoAUqnfs1+3zzOxxSxl6mIl/fo+QdugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZWFmMDE0ZC0wYjNlLTQ0OTQtYjA3Zi1iMzI1 NGZkZGVmNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/GNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYecMeAR/DLrt6PV3taeMf+o8MgsmcS8F2ZaYDRBrSI31Dx5Ry6NZ9X jKuZSh4g5AS9UjxAAFPoMqBFlOHKAsNqrIdFgf6QU9qvlff3Edfuj5LHawTmyY+S YI2fB5IeoEsI+17ZWu8OTZt4JiDJoUzh/o26aeYhwM1pJdHeoiVT1QhPdtadyOzO fzGtDIQKNs6MSGWEy0fcBcHBDjHS07SVUTH9VGfzwWTmyIexG0wRrAJNvVls2Ug/ ZGGZXvkcHyqU9Qp26luexHvCfjZTiF2xhozd0xeo7aR7/LrXZbT6H5qVQQZTc8cH sq60NwE33Usr0MtX4T67qcOvz17ttmw= -----END CERTIFICATE-----Generated at Tue Aug 26 09:52:10 2025 by rpki-client