$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/9bd82531-e23a-32e9-a00b-bac423c66412.roa File: 9bd82531-e23a-32e9-a00b-bac423c66412.roa (raw, json) Hash identifier: dsMDPhxBP6iO11bd2TU3+MRNGlbdbGZxATr8IyxLQnE= Subject key identifier: 6A:D5:6A:33:6B:6F:D2:12:8F:47:DB:71:75:3D:FF:84:BA:04:20:32 Certificate issuer: /CN=23c7fd31-20a5-4b68-a62a-88cba184f1be Certificate serial: 010D0C9F4328584AD7D11C3BEF9F72E8E5BB7400 Authority key identifier: EC:D4:DA:74:03:90:9F:29:73:CD:8F:80:02:71:19:0B:03:C7:9B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/9bd82531-e23a-32e9-a00b-bac423c66412.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 29696 IP address blocks: 162.249.48.0/21 maxlen: 24 199.34.14.0/23 maxlen: 24 199.200.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/23c7fd31-20a5-4b68-a62a-88cba184f1be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/23c7fd31-20a5-4b68-a62a-88cba184f1be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:1c:3b:ef:9f:72:e8:e5:bb:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23c7fd31-20a5-4b68-a62a-88cba184f1be Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=5b370f6b-a573-42b3-8188-bf7bd9c2dc40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:42:6b:3a:c9:bf:bd:85:35:86:20:e6:92:35: 2c:d1:68:c6:08:cd:63:25:92:69:3e:44:98:17:ed: 04:79:ea:3a:88:48:19:5c:c1:13:17:b8:37:38:fb: 15:ed:0f:e3:15:8d:1a:33:56:a1:3f:7f:52:b6:7c: ac:ec:c2:6b:af:d8:a8:22:e9:de:fc:b9:37:ea:86: 3c:60:b6:f0:d7:e6:db:9c:e7:13:c0:18:19:96:b5: 45:a0:2c:fa:bc:31:82:30:fc:2c:ee:ab:b9:fa:56: 29:f9:21:34:ef:97:23:bf:64:e3:9e:dc:5f:b9:98: 3a:af:b2:41:a8:22:26:3e:0a:ea:28:5a:b2:09:6d: a6:c1:5d:5b:d8:b6:d1:2f:33:f0:ca:f9:cb:68:71: 5d:36:e8:da:2c:4c:c8:d6:7e:31:8d:47:e3:d1:99: db:c0:70:13:2c:ed:d2:b6:d5:22:4f:9c:2a:3f:b8: 52:73:85:91:39:f0:40:88:74:0c:26:e8:61:01:69: f9:7f:dd:b5:63:24:2b:0c:55:94:f7:89:45:98:20: f8:3f:d6:84:3c:2e:e5:77:dd:4f:fa:9f:4a:c2:ba: e4:5e:bf:9d:cc:ad:32:25:a6:a8:4d:66:a9:d4:4d: 8f:0b:94:fb:44:b9:0b:86:59:65:bf:22:3e:a5:48: a2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D5:6A:33:6B:6F:D2:12:8F:47:DB:71:75:3D:FF:84:BA:04:20:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/9bd82531-e23a-32e9-a00b-bac423c66412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/23c7fd31-20a5-4b68-a62a-88cba184f1be.crl X509v3 Authority Key Identifier: keyid:EC:D4:DA:74:03:90:9F:29:73:CD:8F:80:02:71:19:0B:03:C7:9B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be.cer sbgp-ipAddrBlock: critical IPv4: 162.249.48.0/21 199.34.14.0/23 199.200.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:8e:ba:43:10:5e:8e:b0:96:a4:b9:e0:9f:b0:7d:5e:98:51: 19:91:51:f7:fe:96:f6:34:3c:b0:76:1a:fa:3d:e0:f0:41:d6: 2d:f4:33:7a:dc:ce:8a:c4:09:13:52:13:35:61:13:55:07:fb: 21:c6:7e:6b:02:78:7d:be:ca:23:a1:77:b3:1b:6c:91:fd:f2: c7:81:bb:96:85:fb:a7:9f:54:b8:54:50:09:b2:0f:d8:6e:1e: bf:2f:42:83:70:c9:88:d9:d2:3e:93:f3:6b:b5:03:ed:bd:a6: d5:9d:4c:b5:28:db:3a:cd:46:f1:a3:3b:e5:a4:50:9f:ae:8f: 9c:b2:61:71:ac:be:bc:c0:13:15:2a:da:9d:de:59:c6:ae:64: d7:e4:77:48:37:dd:f9:be:5a:32:24:dc:f0:3c:e4:6c:95:42: 41:96:b6:e6:36:2c:01:02:b4:56:72:5b:ae:f4:94:be:58:5f: fa:92:8a:fb:31:18:08:33:80:7d:79:b1:53:88:82:fb:0e:7c: 32:2a:a8:32:c5:9d:a4:54:12:09:b7:50:6d:cc:ae:72:77:34: 49:94:a6:8c:17:c0:63:75:c9:f7:4e:01:a8:18:b3:7e:87:2a: d2:cb:08:1f:5b:9b:51:66:de:d0:69:f4:7e:7f:ff:47:85:05: 84:35:6d:fd -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWErX0Rw7759y6OW7dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNjN2ZkMzEtMjBhNS00YjY4LWE2MmEtODhjYmExODRm MWJlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NWIzNzBmNmItYTU3My00MmIzLTgxODgtYmY3YmQ5YzJkYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEJrOsm/vYU1hiDmkjUs0WjGCM1jJZJpPkSY F+0Eeeo6iEgZXMETF7g3OPsV7Q/jFY0aM1ahP39Stnys7MJrr9ioIune/Lk36oY8 YLbw1+bbnOcTwBgZlrVFoCz6vDGCMPws7qu5+lYp+SE075cjv2TjntxfuZg6r7JB qCImPgrqKFqyCW2mwV1b2LbRLzPwyvnLaHFdNujaLEzI1n4xjUfj0ZnbwHATLO3S ttUiT5wqP7hSc4WROfBAiHQMJuhhAWn5f921YyQrDFWU94lFmCD4P9aEPC7ld91P +p9KwrrkXr+dzK0yJaaoTWap1E2PC5T7RLkLhlllvyI+pUiiCQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGrVajNrb9ISj0fbcXU9/4S6BCAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yM2M3 ZmQzMS0yMGE1LTRiNjgtYTYyYS04OGNiYTE4NGYxYmUvOWJkODI1MzEtZTIzYS0z MmU5LWEwMGItYmFjNDIzYzY2NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjNjN2ZkMzEtMjBhNS00YjY4LWE2 MmEtODhjYmExODRmMWJlLzIzYzdmZDMxLTIwYTUtNGI2OC1hNjJhLTg4Y2JhMTg0 ZjFiZS5jcmwwHwYDVR0jBBgwFoAU7NTadAOQnylzzY+AAnEZCwPHmxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yM2M3ZmQzMS0yMGE1LTRiNjgtYTYyYS04OGNi YTE4NGYxYmUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDovkwAwQB xyIOAwQDx8g4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADmOukMQXo6wlqS54J+wfV6YURmRUff+lvY0PLB2 Gvo94PBB1i30M3rczorECRNSEzVhE1UH+yHGfmsCeH2+yiOhd7MbbJH98seBu5aF +6efVLhUUAmyD9huHr8vQoNwyYjZ0j6T82u1A+29ptWdTLUo2zrNRvGjO+WkUJ+u j5yyYXGsvrzAExUq2p3eWcauZNfkd0g33fm+WjIk3PA85GyVQkGWtuY2LAECtFZy W670lL5YX/qSivsxGAgzgH15sVOIgvsOfDIqqDLFnaRUEgm3UG3MrnJ3NEmUpowX wGN1yfdOAagYs36HKtLLCB9bm1Fm3tBp9H5//0eFBYQ1bf0= -----END CERTIFICATE-----Generated at Sun Aug 24 01:15:14 2025 by rpki-client