$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0e0dec1d-d89b-31c5-b498-de5f61388ff0.roa File: 0e0dec1d-d89b-31c5-b498-de5f61388ff0.roa (raw, json) Hash identifier: 3Xi6pBHRHKf2zx9841F/h3B62Wyhu6PZKJj6F7wEOvc= Subject key identifier: 91:1C:96:7A:89:19:17:2C:F4:9D:52:04:D8:B2:90:5B:8B:74:B2:C4 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584AC2E10B5B8ECD4C60878FCB00 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0e0dec1d-d89b-31c5-b498-de5f61388ff0.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 16696 IP address blocks: 168.245.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:0b:5b:8e:cd:4c:60:87:8f:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=4fc0146b-a163-4685-a024-1768f9d553a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:dd:eb:2f:87:ad:d5:93:ce:b9:d2:c9:8e:e6: 86:e5:4c:da:cf:54:b3:b0:46:be:49:fc:b0:12:dc: 9a:cc:2a:ce:bb:fc:7f:92:95:62:c6:47:f4:92:de: c3:b5:63:8b:51:5f:ff:fa:bc:3b:0c:f0:16:59:ab: 27:89:5b:e6:f5:7c:be:32:d1:19:4c:5b:50:f3:bb: 42:09:f0:1b:61:17:3c:7a:02:42:9c:f6:ea:99:6f: 1b:37:47:d7:62:88:bf:77:05:12:56:0b:ad:78:be: aa:d5:af:a8:bd:59:73:1d:ba:41:08:c5:c5:93:d6: c8:05:4e:36:3e:b9:93:56:9d:81:4c:93:a8:68:a9: a0:7e:43:7f:7d:88:9c:4f:fe:ae:13:e5:6e:82:f6: 32:b9:f8:2a:bb:15:99:c9:ad:7f:a0:89:8d:c2:ad: 72:de:4b:9b:c2:34:2b:9c:42:3c:b9:42:b9:d8:2b: 3d:21:a7:5a:22:0d:50:40:73:dc:c9:a6:bc:5c:a7: 24:24:e2:07:82:01:78:68:85:76:74:d4:6f:57:ca: 28:85:8b:47:24:05:ee:32:a9:28:8c:f1:bb:22:bb: c2:6a:b7:09:c5:10:55:da:35:56:00:53:73:49:11: 82:3b:dd:88:f9:9e:00:04:45:59:13:bd:00:0b:70: d5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1C:96:7A:89:19:17:2C:F4:9D:52:04:D8:B2:90:5B:8B:74:B2:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0e0dec1d-d89b-31c5-b498-de5f61388ff0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 168.245.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:8f:bd:68:e2:1c:13:d8:81:2d:13:d7:a7:fe:68:b3:53:bd: 13:2e:3c:0f:64:af:dc:8b:dd:44:fa:90:ca:90:b7:8c:21:98: ae:38:47:2e:9d:87:d5:25:85:90:65:51:52:14:a6:6c:d5:e9: 36:e2:4a:5f:77:e7:93:4f:e4:f7:62:38:4c:52:69:97:cf:77: 97:e9:7d:1c:76:7d:ec:40:92:5c:19:9c:ba:ba:59:08:0a:2d: 5d:2b:ff:21:13:3f:14:43:df:d8:a9:32:c9:9b:0f:ab:a7:5b: 80:14:bf:01:c1:3e:77:87:77:06:18:83:62:fa:51:84:28:05: 54:a3:ca:13:29:49:68:51:1a:9b:35:c5:6e:a5:90:10:23:7d: 0c:79:64:93:2c:c4:d8:ad:d3:a3:8d:3f:ab:41:b3:18:e5:e0: 34:75:06:2a:87:53:d5:26:db:42:ec:31:16:18:d3:de:5c:fa: 1c:31:12:f8:f6:84:ef:57:26:de:0f:1c:0e:b8:71:52:50:74: 9d:05:8d:88:3b:aa:3c:08:dd:0f:fc:47:9e:5d:99:55:a4:fe: 0b:22:6c:98:b9:ff:ff:f5:45:81:90:49:03:8e:46:8a:02:6f: f9:91:0c:f7:7c:9d:aa:3b:57:98:6c:f5:aa:54:db:ea:a9:37: aa:48:18:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Qtbjs1MYIePywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NGZjMDE0NmItYTE2My00Njg1LWEwMjQtMTc2OGY5ZDU1M2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN3rL4et1ZPOudLJjuaG5Uzaz1SzsEa+Sfyw EtyazCrOu/x/kpVixkf0kt7DtWOLUV//+rw7DPAWWasniVvm9Xy+MtEZTFtQ87tC CfAbYRc8egJCnPbqmW8bN0fXYoi/dwUSVguteL6q1a+ovVlzHbpBCMXFk9bIBU42 PrmTVp2BTJOoaKmgfkN/fYicT/6uE+VugvYyufgquxWZya1/oImNwq1y3kubwjQr nEI8uUK52Cs9IadaIg1QQHPcyaa8XKckJOIHggF4aIV2dNRvV8oohYtHJAXuMqko jPG7IrvCarcJxRBV2jVWAFNzSRGCO92I+Z4ABEVZE70AC3DVgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEclnqJGRcs9J1SBNiykFuLdLLEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMGUwZGVjMWQtZDg5Yi0z MWM1LWI0OTgtZGU1ZjYxMzg4ZmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPXHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaPvWjiHBPYgS0T16f+aLNTvRMuPA9kr9yL3UT6kMqQt4whmK44Ry6d h9UlhZBlUVIUpmzV6TbiSl9355NP5PdiOExSaZfPd5fpfRx2fexAklwZnLq6WQgK LV0r/yETPxRD39ipMsmbD6unW4AUvwHBPneHdwYYg2L6UYQoBVSjyhMpSWhRGps1 xW6lkBAjfQx5ZJMsxNit06ONP6tBsxjl4DR1BiqHU9Um20LsMRYY095c+hwxEvj2 hO9XJt4PHA64cVJQdJ0FjYg7qjwI3Q/8R55dmVWk/gsibJi5///1RYGQSQOORooC b/mRDPd8nao7V5hs9apU2+qpN6pIGCM= -----END CERTIFICATE-----Generated at Sun Aug 24 07:22:19 2025 by rpki-client