$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/890db329-2478-3442-b6b3-ec84331a6a0a.roa File: 890db329-2478-3442-b6b3-ec84331a6a0a.roa (raw, json) Hash identifier: xwlHyGM+js7eWPlnTEtnzxkf6dlxzBM/Y8D9k2A4bWE= Subject key identifier: E1:A9:9C:FD:EB:C7:00:87:49:6A:FC:A2:8C:6D:94:38:53:16:C3:67 Certificate issuer: /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333 Certificate serial: 010D0C9F4328584ACB40EC6263EE05F4E721AC80 Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/890db329-2478-3442-b6b3-ec84331a6a0a.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 198949 IP address blocks: 205.208.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:ec:62:63:ee:05:f4:e7:21:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=de529bfe-fdce-4443-8e02-968be8392b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7f:63:ae:1d:fa:d1:4f:5f:60:89:5e:fa:e5: 20:83:7f:c8:30:b4:5e:29:6c:67:c2:91:de:7c:a0: 3a:b3:93:9f:22:59:40:83:e4:e4:db:b4:bb:07:df: 92:5a:1a:02:86:02:76:8c:74:1f:a2:99:44:9f:31: 6c:71:f2:a2:af:c5:ae:6f:17:9d:1a:5e:b8:29:02: fe:2c:c8:62:3f:e8:4f:11:5c:bc:2c:ae:8b:8f:84: c2:d2:d8:be:7c:9b:da:26:40:6d:6d:3d:8e:5f:db: 8a:36:66:a4:86:89:43:03:21:e7:15:1e:4d:b3:e4: 23:b5:23:87:8c:9d:30:01:01:ae:30:cb:9b:5b:1c: 04:0b:43:6b:d2:46:87:43:79:12:8a:8d:0b:e0:01: 74:34:00:34:88:65:c4:57:38:4a:16:89:74:57:63: 6c:7e:5f:2a:d6:95:a8:e4:45:71:14:3d:49:16:a1: 42:44:ca:b9:af:63:0e:5e:1c:f2:a6:68:3e:54:55: 17:8a:a0:ad:1f:94:99:5c:6c:d3:6b:96:58:37:27: 12:db:66:8e:48:75:b9:78:63:b3:07:89:52:65:a0: f6:62:7c:fe:bc:53:80:c7:9e:5a:77:89:f2:78:88: af:fc:1a:88:59:f4:81:35:13:74:b8:27:b7:de:3d: 8f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A9:9C:FD:EB:C7:00:87:49:6A:FC:A2:8C:6D:94:38:53:16:C3:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/890db329-2478-3442-b6b3-ec84331a6a0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl X509v3 Authority Key Identifier: keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer sbgp-ipAddrBlock: critical IPv4: 205.208.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:1f:cd:f1:ac:4c:91:6a:17:b7:17:01:35:d8:8a:da:1b:87: b4:5d:71:19:f0:c5:8a:cf:f1:1f:8e:cc:58:c1:21:f0:6c:3e: 35:84:86:28:4e:47:2d:fe:13:2e:16:6f:70:e4:0c:ea:07:7d: 12:fc:98:f9:44:ee:8e:c2:10:45:b6:92:3e:c2:14:90:13:30: a9:58:1a:31:64:fb:c5:69:cc:3d:00:98:55:61:21:2d:4d:71: e6:87:aa:a8:4e:90:7c:2a:36:b3:2a:41:21:02:3d:95:58:0a: b9:85:3a:8d:f3:92:4c:b3:98:fe:a9:a2:67:ec:af:0b:c2:e6: cd:35:97:9e:85:f6:9b:87:71:61:f2:fa:7f:22:4f:02:dc:bf: 4d:3c:ad:70:91:d2:fd:fa:89:ce:69:b7:16:c3:01:54:39:a0: 04:11:0a:1e:1f:3c:c9:8f:f1:a5:7d:e4:ba:e9:3c:b3:65:a4: 01:fa:73:96:b6:8c:50:41:96:ba:c6:bf:de:ca:7b:11:eb:d7: 96:3f:b9:af:ba:7b:d9:72:67:0e:ab:74:cf:26:72:be:08:2a: cf:00:c2:b6:d2:5f:30:11:1a:94:6f:a5:ba:54:4a:e8:b0:17: bd:25:40:05:ea:58:d3:87:56:6c:3f:c6:b5:08:f8:3a:b4:31: 9f:7d:94:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQOxiY+4F9OchrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyMjE1MGYtMmU2Zi00ZmM5LWIwZDMtNWE4ZTA5MDNi MzMzMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZGU1MjliZmUtZmRjZS00NDQzLThlMDItOTY4YmU4MzkyYjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4n9jrh360U9fYIle+uUgg3/IMLReKWxnwpHe fKA6s5OfIllAg+Tk27S7B9+SWhoChgJ2jHQfoplEnzFscfKir8WubxedGl64KQL+ LMhiP+hPEVy8LK6Lj4TC0ti+fJvaJkBtbT2OX9uKNmakholDAyHnFR5Ns+QjtSOH jJ0wAQGuMMubWxwEC0Nr0kaHQ3kSio0L4AF0NAA0iGXEVzhKFol0V2Nsfl8q1pWo 5EVxFD1JFqFCRMq5r2MOXhzypmg+VFUXiqCtH5SZXGzTa5ZYNycS22aOSHW5eGOz B4lSZaD2Ynz+vFOAx55ad4nyeIiv/BqIWfSBNRN0uCe33j2PJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGpnP3rxwCHSWr8ooxtlDhTFsNnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ODIy MTUwZi0yZTZmLTRmYzktYjBkMy01YThlMDkwM2IzMzMvODkwZGIzMjktMjQ3OC0z NDQyLWI2YjMtZWM4NDMzMWE2YTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTgyMjE1MGYtMmU2Zi00ZmM5LWIw ZDMtNWE4ZTA5MDNiMzMzLzk4MjIxNTBmLTJlNmYtNGZjOS1iMGQzLTVhOGUwOTAz YjMzMy5jcmwwHwYDVR0jBBgwFoAU6PtTQ2MJkFBb6KTESgm8RptQc+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ODIyMTUwZi0yZTZmLTRmYzktYjBkMy01YThl MDkwM2IzMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzdAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUfzfGsTJFqF7cXATXYitobh7RdcRnwxYrP8R+OzFjBIfBsPjWEhihO Ry3+Ey4Wb3DkDOoHfRL8mPlE7o7CEEW2kj7CFJATMKlYGjFk+8VpzD0AmFVhIS1N ceaHqqhOkHwqNrMqQSECPZVYCrmFOo3zkkyzmP6pomfsrwvC5s01l56F9puHcWHy +n8iTwLcv008rXCR0v36ic5ptxbDAVQ5oAQRCh4fPMmP8aV95LrpPLNlpAH6c5a2 jFBBlrrGv97KexHr15Y/ua+6e9lyZw6rdM8mcr4IKs8AwrbSXzARGpRvpbpUSuiw F70lQAXqWNOHVmw/xrUI+Dq0MZ99lPs= -----END CERTIFICATE-----Generated at Thu Aug 21 13:46:17 2025 by rpki-client