$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/962a24c5-1ca9-38e4-bc73-aa2cd3fdcf8a.roa File: 962a24c5-1ca9-38e4-bc73-aa2cd3fdcf8a.roa (raw, json) Hash identifier: X94P+fnxup5PZDVvTekoEQPsVOBZLz6Z8obiYMakToM= Subject key identifier: 18:23:9F:08:B2:18:41:4D:FE:DF:FF:68:A2:07:C5:E5:F3:D4:12:24 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584AC2E10B6B44B684696DB5BDC0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/962a24c5-1ca9-38e4-bc73-aa2cd3fdcf8a.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 16696 IP address blocks: 170.199.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:0b:6b:44:b6:84:69:6d:b5:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=0bcef0b8-1b8d-4dc2-8d0e-b317ea06216e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:61:b2:2a:24:0c:0b:fa:37:ec:8c:1a:87:73: 6b:08:38:42:9f:cb:2b:a7:9f:01:43:d4:cf:d9:9d: da:ee:f7:a9:72:a1:9b:ce:00:82:e6:bd:6e:d2:d2: 96:34:73:d4:4d:95:6c:88:c3:a5:cc:2f:2f:47:6f: af:04:6b:a6:48:63:78:40:61:3e:47:4d:8d:31:e2: ca:e4:36:d2:c1:a1:5e:ea:62:50:d1:ae:98:d4:9e: eb:fa:35:2b:a2:e9:ef:c1:2d:14:fa:a1:2b:06:56: df:ca:31:3c:78:15:f1:36:e9:24:58:67:14:e3:e7: 9e:2b:ce:6a:2e:cf:af:43:7a:72:7d:44:0e:5b:c1: 19:e0:1e:12:eb:56:74:30:b7:26:df:78:2e:ca:61: ee:c2:54:64:bc:34:9a:be:f8:45:30:d1:71:18:34: d4:96:23:e8:5a:a9:70:7c:44:58:a8:2a:a0:a5:46: 68:33:f7:01:dd:57:01:b2:5c:ea:e0:6d:fe:91:f0: 9a:d1:55:68:57:28:a6:58:46:9b:de:28:33:e9:3a: ff:53:05:bf:71:df:7f:8c:90:0d:3d:54:95:85:9b: a0:74:ba:ff:93:aa:8e:41:fc:00:51:ab:18:47:c8: 82:c1:12:5f:ad:2c:eb:e3:7c:f9:a4:7b:18:bd:e7: 35:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:23:9F:08:B2:18:41:4D:FE:DF:FF:68:A2:07:C5:E5:F3:D4:12:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/962a24c5-1ca9-38e4-bc73-aa2cd3fdcf8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 170.199.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:1f:e7:f1:27:59:51:1b:14:a3:5e:79:1d:e4:12:63:70:da: af:ed:07:a0:33:db:cf:ae:1f:e1:98:0d:70:9e:31:39:c5:25: 48:26:f7:15:2d:13:fc:94:11:02:e2:09:cc:f3:92:1b:b5:fb: 7c:dd:64:dc:64:1b:bf:ca:df:b8:2d:52:d3:88:11:83:c1:07: 8b:c1:c3:90:1c:42:d7:57:fe:ae:d1:7e:73:6d:44:97:7c:1e: 25:47:a6:a9:85:4c:2c:e3:55:62:f3:d6:87:06:cd:78:d9:fd: fb:0b:9d:6e:d8:29:8d:f0:4d:d7:1f:be:21:0b:47:82:a8:ff: 7a:bf:7e:92:a9:e4:38:c8:b6:60:c4:c5:15:dd:28:07:e7:a4: ed:8e:2e:dc:af:20:22:bc:af:40:6a:f2:f9:6f:8e:a2:d3:dc: 80:16:79:2c:06:f5:e3:50:eb:84:80:7f:98:b7:1d:1f:e4:82: cd:69:6d:4f:eb:5e:d2:47:52:97:e6:ea:35:23:4d:b8:33:88: d8:9d:ba:d2:19:2e:79:28:39:26:32:2d:66:f3:82:ae:e6:5c: 9b:f6:cc:6a:d2:bd:db:d0:ad:4f:40:c3:57:f8:95:34:28:aa: 0a:fb:e3:59:50:f1:7d:5c:b2:50:1f:66:bf:2b:05:38:80:0b: 05:50:38:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4QtrRLaEaW21vcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MGJjZWYwYjgtMWI4ZC00ZGMyLThkMGUtYjMxN2VhMDYyMTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWGyKiQMC/o37Iwah3NrCDhCn8srp58BQ9TP 2Z3a7vepcqGbzgCC5r1u0tKWNHPUTZVsiMOlzC8vR2+vBGumSGN4QGE+R02NMeLK 5DbSwaFe6mJQ0a6Y1J7r+jUrounvwS0U+qErBlbfyjE8eBXxNukkWGcU4+eeK85q Ls+vQ3pyfUQOW8EZ4B4S61Z0MLcm33guymHuwlRkvDSavvhFMNFxGDTUliPoWqlw fERYqCqgpUZoM/cB3VcBslzq4G3+kfCa0VVoVyimWEab3igz6Tr/UwW/cd9/jJAN PVSVhZugdLr/k6qOQfwAUasYR8iCwRJfrSzr43z5pHsYvec1UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgjnwiyGEFN/t//aKIHxeXz1BIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvOTYyYTI0YzUtMWNhOS0z OGU0LWJjNzMtYWEyY2QzZmRjZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABof5/EnWVEbFKNeeR3kEmNw2q/tB6Az28+uH+GYDXCeMTnFJUgm9xUt E/yUEQLiCczzkhu1+3zdZNxkG7/K37gtUtOIEYPBB4vBw5AcQtdX/q7RfnNtRJd8 HiVHpqmFTCzjVWLz1ocGzXjZ/fsLnW7YKY3wTdcfviELR4Ko/3q/fpKp5DjItmDE xRXdKAfnpO2OLtyvICK8r0Bq8vlvjqLT3IAWeSwG9eNQ64SAf5i3HR/kgs1pbU/r XtJHUpfm6jUjTbgziNidutIZLnkoOSYyLWbzgq7mXJv2zGrSvdvQrU9Aw1f4lTQo qgr741lQ8X1cslAfZr8rBTiACwVQOO4= -----END CERTIFICATE-----Generated at Sun Aug 24 01:07:26 2025 by rpki-client