$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/1a082d99-dd96-34e7-891e-59aab4062033.roa File: 1a082d99-dd96-34e7-891e-59aab4062033.roa (raw, json) Hash identifier: cKlk+WwgbqJhauO7xq0tXtIopz3f+NM8qEXKJ5tl+OY= Subject key identifier: 1E:01:70:B9:0F:54:E3:34:35:ED:33:A7:23:62:B3:EB:72:A7:A3:77 Certificate issuer: /CN=4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e Certificate serial: 010D0C9F4328584AE5C6793A1DB7CCF203208E00 Authority key identifier: D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/1a082d99-dd96-34e7-891e-59aab4062033.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 14749 IP address blocks: 162.212.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:79:3a:1d:b7:cc:f2:03:20:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=2f72ba6b-54a7-448f-a328-f6fdd21f93b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:06:89:b4:98:b4:ea:6e:12:ea:7d:71:58:10: fb:00:40:2b:d3:4f:2e:54:ce:d7:40:e5:30:6f:f0: 25:58:46:1b:b8:3d:6c:43:99:c4:2b:3a:9f:2d:45: d4:9d:8c:a9:78:c8:a6:36:87:84:8c:9a:9e:24:2d: d3:50:33:dd:73:9a:f7:45:b8:cf:ff:d5:5f:da:21: 54:6f:a0:18:96:04:8c:43:50:4f:bc:e4:ed:9e:d2: 0d:65:b2:25:82:f1:3f:a3:6d:85:f3:2b:c3:eb:47: 08:4c:65:03:80:cf:30:56:66:a8:a0:bb:a3:3c:d8: 6a:bd:b6:a7:31:2a:69:74:d6:0e:14:62:57:92:8c: 43:5f:27:6f:e2:51:5c:14:37:32:f2:ee:39:65:6b: a5:f9:37:39:24:b1:cd:5e:b6:c8:5f:8b:e1:0a:94: e5:98:3e:21:cf:0b:22:96:8e:2c:50:5e:bd:a7:b8: 51:29:d1:3e:fa:f9:94:87:7c:71:bc:1c:8d:1d:a8: 16:da:40:55:c2:54:ae:ac:64:ec:4c:c4:20:aa:e6: 4a:a8:cc:6e:26:7a:29:f7:41:9c:a3:59:47:78:43: ca:8c:09:2b:ce:11:ea:d3:4d:4d:94:42:9c:30:e1: f7:74:1d:38:98:c8:0b:9f:27:9f:a9:8a:6f:2d:d8: 00:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:01:70:B9:0F:54:E3:34:35:ED:33:A7:23:62:B3:EB:72:A7:A3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/1a082d99-dd96-34e7-891e-59aab4062033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.crl X509v3 Authority Key Identifier: keyid:D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer sbgp-ipAddrBlock: critical IPv4: 162.212.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:39:d0:08:09:96:5e:40:fe:6f:62:93:f3:b0:1c:d6:50:f9: 08:98:f0:78:c2:c5:5b:58:ac:ec:66:27:3c:3d:c2:71:5d:7c: c5:a7:a9:f2:57:46:10:2d:d9:b1:ee:77:c5:35:5d:82:0e:bb: 04:b5:9d:7c:55:95:2a:eb:51:33:ee:f0:e2:67:d5:35:23:1e: 7d:cb:96:07:76:d0:80:7e:6d:c7:bc:12:6b:51:e2:7e:56:f5: ac:c1:5a:51:66:19:d2:ed:2b:0b:c4:72:c7:c5:29:6c:8a:23: 39:26:57:97:f0:84:da:95:04:f9:45:ad:c6:96:aa:a1:45:ff: 8c:70:7d:e1:52:d1:d6:27:b8:74:a6:41:e7:41:11:d8:97:e1: 4f:51:94:fe:d0:55:5f:b8:c4:6e:e0:18:e3:fa:15:8c:ab:cf: cf:d6:f0:4b:18:df:8a:f5:d2:cc:2d:ea:52:a3:60:4b:e9:75: 8b:13:d0:58:d3:c5:e0:bc:c5:0c:37:8a:60:06:9a:a3:83:ab: ee:b5:b4:0b:e7:d9:67:d3:dd:29:ca:89:92:ca:f1:0d:c4:11: 77:27:bc:12:38:e7:49:fa:5d:c4:35:f9:30:57:84:8b:6d:18: f7:e2:a8:20:ec:e9:09:a9:aa:5f:d5:8f:dd:32:68:d9:59:0e: bc:ff:8e:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnk6HbfM8gMgjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQ1OTQxMmMtNmJmNS00ZTJkLTkwZDktNGQ4ZWM1Y2Qz ZDBlMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk MmY3MmJhNmItNTRhNy00NDhmLWEzMjgtZjZmZGQyMWY5M2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwaJtJi06m4S6n1xWBD7AEAr008uVM7XQOUw b/AlWEYbuD1sQ5nEKzqfLUXUnYypeMimNoeEjJqeJC3TUDPdc5r3RbjP/9Vf2iFU b6AYlgSMQ1BPvOTtntINZbIlgvE/o22F8yvD60cITGUDgM8wVmaooLujPNhqvban MSppdNYOFGJXkoxDXydv4lFcFDcy8u45ZWul+Tc5JLHNXrbIX4vhCpTlmD4hzwsi lo4sUF69p7hRKdE++vmUh3xxvByNHagW2kBVwlSurGTsTMQgquZKqMxuJnop90Gc o1lHeEPKjAkrzhHq001NlEKcMOH3dB04mMgLnyefqYpvLdgADQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4BcLkPVOM0Ne0zpyNis+typ6N3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NDU5 NDEyYy02YmY1LTRlMmQtOTBkOS00ZDhlYzVjZDNkMGUvMWEwODJkOTktZGQ5Ni0z NGU3LTg5MWUtNTlhYWI0MDYyMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDQ1OTQxMmMtNmJmNS00ZTJkLTkw ZDktNGQ4ZWM1Y2QzZDBlLzQ0NTk0MTJjLTZiZjUtNGUyZC05MGQ5LTRkOGVjNWNk M2QwZS5jcmwwHwYDVR0jBBgwFoAU1SoN3FX3gFYYcW6aEyrpS+0lkzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NDU5NDEyYy02YmY1LTRlMmQtOTBkOS00ZDhl YzVjZDNkMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotSIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKY50AgJll5A/m9ik/OwHNZQ+QiY8HjCxVtYrOxmJzw9wnFdfMWnqfJX RhAt2bHud8U1XYIOuwS1nXxVlSrrUTPu8OJn1TUjHn3Llgd20IB+bce8EmtR4n5W 9azBWlFmGdLtKwvEcsfFKWyKIzkmV5fwhNqVBPlFrcaWqqFF/4xwfeFS0dYnuHSm QedBEdiX4U9RlP7QVV+4xG7gGOP6FYyrz8/W8EsY34r10swt6lKjYEvpdYsT0FjT xeC8xQw3imAGmqODq+61tAvn2WfT3SnKiZLK8Q3EEXcnvBI450n6XcQ1+TBXhItt GPfiqCDs6Qmpql/Vj90yaNlZDrz/jvQ= -----END CERTIFICATE-----Generated at Sun Aug 24 04:51:48 2025 by rpki-client