$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/f5749d2d-8c9d-3a17-bbf7-16de66ba5184.roa File: f5749d2d-8c9d-3a17-bbf7-16de66ba5184.roa (raw, json) Hash identifier: 4Tw7sOq/dGOwFDE9TZOBvBFIYonIMEpVHWS1PFkcmsQ= Subject key identifier: 03:7C:72:52:47:63:EC:24:E5:CB:47:97:1E:FE:3F:02:65:1D:A5:E0 Certificate issuer: /CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be Certificate serial: 010D0C9F4328584AD26032A18DA9296CB3CBF300 Authority key identifier: 88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/f5749d2d-8c9d-3a17-bbf7-16de66ba5184.roa Signing time: Mon 11 Aug 2025 14:14:21 +0000 ROA not before: Mon 11 Aug 2025 14:14:21 +0000 ROA not after: Sun 09 Nov 2025 15:14:21 +0000 asID: 14618 IP address blocks: 199.165.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:60:32:a1:8d:a9:29:6c:b3:cb:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be Validity Not Before: Aug 11 14:14:21 2025 GMT Not After : Nov 9 15:14:21 2025 GMT Subject: CN=f14f72e8-afc0-47da-b6d6-ba005532b02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:23:80:c3:0e:6d:67:f8:aa:e7:67:a4:e4:a7: d1:b1:b0:b6:17:da:0a:37:55:05:70:07:c6:a2:d6: f5:c1:38:92:b8:17:90:b6:02:ad:cb:45:06:3d:0e: ac:31:60:6d:6f:51:ab:23:4e:4e:91:f4:65:4c:77: f3:72:f1:cc:be:66:5f:8c:81:92:6d:3e:7c:c6:93: 81:99:a2:be:19:77:9a:ef:84:96:55:6b:90:cb:21: 12:bd:3b:87:66:19:78:8d:52:0e:e3:f2:0a:9a:3b: 63:2b:91:f0:26:c1:cf:02:fa:a3:43:01:ab:ab:53: 23:04:00:f1:70:45:47:c5:61:ed:7a:42:f1:f1:44: 1a:30:b9:97:0e:c5:e3:10:4f:0b:36:74:58:68:f4: 5d:53:16:df:1e:e6:18:65:14:8c:25:55:c8:cd:b3: bb:e7:14:0f:1e:81:fe:6e:bc:fc:78:c7:8d:c9:ec: e8:1d:95:91:5d:d7:c2:16:32:21:3d:f3:65:34:f3: 5c:2e:c8:8e:db:3e:bd:63:39:97:0f:75:72:31:a4: 72:cb:db:f7:ef:49:36:46:09:a2:00:99:ab:f5:3b: 09:74:2c:53:be:74:7b:b4:c3:af:2f:07:67:58:70: 85:7b:1e:64:3f:71:a9:bc:aa:b3:03:ff:02:21:f1: 3f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7C:72:52:47:63:EC:24:E5:CB:47:97:1E:FE:3F:02:65:1D:A5:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/f5749d2d-8c9d-3a17-bbf7-16de66ba5184.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl X509v3 Authority Key Identifier: keyid:88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer sbgp-ipAddrBlock: critical IPv4: 199.165.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:3f:db:6d:7b:ae:15:7e:5b:f2:a6:67:1a:2e:f5:44:25:50: 90:aa:cc:63:bd:80:e4:09:2a:c8:b3:f9:96:20:07:9e:82:8f: 67:08:2f:8c:ce:d1:00:5c:ec:b5:b6:c2:12:10:6e:41:90:89: 1b:20:4e:1c:d7:11:79:95:36:c4:0e:fa:52:6f:cb:99:04:a0: 22:32:ff:91:0b:64:9a:c1:34:b8:c4:d7:3e:1e:bd:24:4c:fe: ff:6d:ce:68:4f:76:f3:43:4c:06:52:57:13:58:b0:ce:e8:9f: f2:31:b8:1e:9f:49:35:5b:a5:a8:bb:8a:a6:d8:87:df:2c:61: 92:c2:8f:05:c7:cc:21:d0:b5:b6:84:30:17:13:69:43:4f:11: e1:94:6c:28:e0:75:72:6c:63:68:17:9d:30:ed:38:78:62:09: 6a:5a:e6:8c:6e:66:ee:d7:59:cc:f2:30:3f:d7:9d:22:67:8f: 08:a2:48:5f:48:8f:ed:83:b3:f3:01:13:e9:ca:a5:56:96:53: 1b:2a:0f:2c:ea:c8:1d:05:f6:6d:35:39:08:1a:bb:c5:64:57: 28:bb:76:b9:44:d0:fa:ee:9b:83:3d:06:0b:62:43:82:01:59: 84:44:7b:b2:aa:1a:cf:60:8a:77:b4:06:e0:36:a5:c3:b6:b3: 36:15:8c:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSYDKhjakpbLPL8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM0NDBlZWItM2Q3YS00M2UzLWEwYTQtZmE5YTk5Mzc5 OGJlMB4XDTI1MDgxMTE0MTQyMVoXDTI1MTEwOTE1MTQyMVowLzEtMCsGA1UEAxMk ZjE0ZjcyZTgtYWZjMC00N2RhLWI2ZDYtYmEwMDU1MzJiMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCOAww5tZ/iq52ek5KfRsbC2F9oKN1UFcAfG otb1wTiSuBeQtgKty0UGPQ6sMWBtb1GrI05OkfRlTHfzcvHMvmZfjIGSbT58xpOB maK+GXea74SWVWuQyyESvTuHZhl4jVIO4/IKmjtjK5HwJsHPAvqjQwGrq1MjBADx cEVHxWHtekLx8UQaMLmXDsXjEE8LNnRYaPRdUxbfHuYYZRSMJVXIzbO75xQPHoH+ brz8eMeNyezoHZWRXdfCFjIhPfNlNPNcLsiO2z69YzmXD3VyMaRyy9v370k2Rgmi AJmr9TsJdCxTvnR7tMOvLwdnWHCFex5kP3GpvKqzA/8CIfE/wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAN8clJHY+wk5ctHlx7+PwJlHaXgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jMzQ0 MGVlYi0zZDdhLTQzZTMtYTBhNC1mYTlhOTkzNzk4YmUvZjU3NDlkMmQtOGM5ZC0z YTE3LWJiZjctMTZkZTY2YmE1MTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzM0NDBlZWItM2Q3YS00M2UzLWEw YTQtZmE5YTk5Mzc5OGJlL2MzNDQwZWViLTNkN2EtNDNlMy1hMGE0LWZhOWE5OTM3 OThiZS5jcmwwHwYDVR0jBBgwFoAUiDcfaou/A6y4ImpcKZnxDN+IvRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jMzQ0MGVlYi0zZDdhLTQzZTMtYTBhNC1mYTlh OTkzNzk4YmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6WIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACc/2217rhV+W/KmZxou9UQlUJCqzGO9gOQJKsiz+ZYgB56Cj2cIL4zO 0QBc7LW2whIQbkGQiRsgThzXEXmVNsQO+lJvy5kEoCIy/5ELZJrBNLjE1z4evSRM /v9tzmhPdvNDTAZSVxNYsM7on/IxuB6fSTVbpai7iqbYh98sYZLCjwXHzCHQtbaE MBcTaUNPEeGUbCjgdXJsY2gXnTDtOHhiCWpa5oxuZu7XWczyMD/XnSJnjwiiSF9I j+2Ds/MBE+nKpVaWUxsqDyzqyB0F9m01OQgau8VkVyi7drlE0Prum4M9BgtiQ4IB WYREe7KqGs9gine0BuA2pcO2szYVjHE= -----END CERTIFICATE-----Generated at Sat Aug 23 08:14:30 2025 by rpki-client