$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/3b7be4db-845a-366c-83ad-948a2fb50b9e.roa File: 3b7be4db-845a-366c-83ad-948a2fb50b9e.roa (raw, json) Hash identifier: jRC6Ih2PyV1exEMKdwXPpM0NlpMkHSQBXTX0/zB0UNw= Subject key identifier: F4:66:2A:50:E2:75:86:17:0A:48:59:91:0B:F7:86:89:70:F4:3C:D9 Certificate issuer: /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Certificate serial: 010D0C9F4328584AD23BA9CB84E2412D315A1C80 Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/3b7be4db-845a-366c-83ad-948a2fb50b9e.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 20454 IP address blocks: 69.160.46.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:a9:cb:84:e2:41:2d:31:5a:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=8c182468-9bf0-4271-b98d-8d5053685e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4c:ad:8d:48:76:38:7e:9b:6e:12:28:8d:ce: 66:cc:32:12:9f:21:03:49:67:9f:2e:ba:e6:91:c2: 0e:ff:c2:ed:cd:22:e8:eb:b5:20:67:3e:c1:36:06: 41:ca:6c:73:71:0f:32:8c:6b:e2:7e:a3:96:f4:7c: 21:7f:d6:61:d1:16:d5:e3:23:ae:79:6b:2f:f0:4a: 16:b3:21:58:76:b4:a7:24:92:5f:51:f9:f3:7c:b6: 64:19:b7:86:27:a3:66:f4:95:1c:69:c2:1e:4f:d5: a9:96:08:12:6b:73:de:98:16:8f:b0:9f:d8:d9:7f: 10:de:53:ba:d5:8e:a5:38:c3:f9:06:9f:41:d6:7e: 3a:86:f2:56:5f:70:97:4e:6b:d1:12:83:72:2f:2e: 96:fc:ad:fe:83:03:27:49:5f:71:de:0c:0f:22:5c: 5a:16:05:b2:4b:eb:cc:72:f9:e3:38:b3:73:3e:3b: e9:fa:81:31:3d:12:41:fc:46:93:2b:c7:f6:4f:78: 88:8a:15:55:50:51:e8:b1:1a:69:e1:b7:6f:c5:12: 86:60:3d:b7:eb:91:82:4f:64:b3:9f:68:8f:5d:cf: 88:3d:6e:45:8c:d3:fa:80:bb:9c:52:17:34:bc:9c: 96:09:23:aa:79:83:bd:aa:89:c1:4f:e4:6c:45:2f: 88:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:66:2A:50:E2:75:86:17:0A:48:59:91:0B:F7:86:89:70:F4:3C:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/3b7be4db-845a-366c-83ad-948a2fb50b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl X509v3 Authority Key Identifier: keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer sbgp-ipAddrBlock: critical IPv4: 69.160.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:4c:3d:4a:cc:53:8a:a8:98:0a:92:a3:cb:b6:cc:d9:37:77: 51:f7:b8:59:b9:35:b2:75:0b:de:e2:7b:d5:77:f3:d4:50:89: 95:ae:fc:26:83:95:31:54:2a:2e:6a:74:94:3a:27:ce:44:24: 6f:4b:ec:78:02:f0:69:93:9c:01:c1:47:bb:51:73:fb:91:8e: 1f:8f:4d:77:64:ff:cc:bf:be:d7:cf:64:f9:4a:26:63:55:62: f1:8a:bc:97:18:89:8b:06:cd:d4:29:46:47:f7:1d:5b:74:76: f7:a9:c7:08:41:5c:02:09:91:ce:f2:05:46:4a:eb:b8:98:ce: 97:ee:eb:94:73:03:57:71:5b:f4:85:b1:7a:b8:a6:6c:83:01: 3f:d7:d9:66:32:6c:7e:3a:53:82:2e:9b:af:6c:96:75:ad:6b: 24:d9:12:ac:c0:84:74:9e:17:19:5f:65:b6:2e:69:7e:46:18: a1:4b:73:7f:61:10:98:21:fb:0c:be:64:3e:91:d5:a2:cd:f1: 85:ed:a7:2f:6d:e7:6f:74:39:6f:5d:f7:e5:b9:bd:51:85:a2: 76:b1:55:bd:0e:f6:c4:94:63:11:ad:f7:41:51:0c:0b:e8:80: 33:84:37:eb:0a:a3:3b:81:4b:35:28:d8:c0:66:d4:1c:bd:54: 60:eb:15:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO6nLhOJBLTFaHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAxN2NlZDUtNmUwMy00YzIwLTllYjItY2FhNTdhMmY3 ODI5MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk OGMxODI0NjgtOWJmMC00MjcxLWI5OGQtOGQ1MDUzNjg1ZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEytjUh2OH6bbhIojc5mzDISnyEDSWefLrrm kcIO/8LtzSLo67UgZz7BNgZBymxzcQ8yjGvifqOW9Hwhf9Zh0RbV4yOueWsv8EoW syFYdrSnJJJfUfnzfLZkGbeGJ6Nm9JUcacIeT9WplggSa3PemBaPsJ/Y2X8Q3lO6 1Y6lOMP5Bp9B1n46hvJWX3CXTmvREoNyLy6W/K3+gwMnSV9x3gwPIlxaFgWyS+vM cvnjOLNzPjvp+oExPRJB/EaTK8f2T3iIihVVUFHosRpp4bdvxRKGYD2365GCT2Sz n2iPXc+IPW5FjNP6gLucUhc0vJyWCSOqeYO9qonBT+RsRS+IWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRmKlDidYYXCkhZkQv3holw9DzZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3 Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1N2EyZjc4MjkvM2I3YmU0ZGItODQ1YS0z NjZjLTgzYWQtOTQ4YTJmYjUwYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxN2NlZDUtNmUwMy00YzIwLTll YjItY2FhNTdhMmY3ODI5LzUwMTdjZWQ1LTZlMDMtNGMyMC05ZWIyLWNhYTU3YTJm NzgyOS5jcmwwHwYDVR0jBBgwFoAUIr6PGmFUenj3XYro0kCXNLfsebEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1 N2EyZjc4MjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRaAuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtMPUrMU4qomAqSo8u2zNk3d1H3uFm5NbJ1C97ie9V389RQiZWu/CaD lTFUKi5qdJQ6J85EJG9L7HgC8GmTnAHBR7tRc/uRjh+PTXdk/8y/vtfPZPlKJmNV YvGKvJcYiYsGzdQpRkf3HVt0dvepxwhBXAIJkc7yBUZK67iYzpfu65RzA1dxW/SF sXq4pmyDAT/X2WYybH46U4Ium69slnWtayTZEqzAhHSeFxlfZbYuaX5GGKFLc39h EJgh+wy+ZD6R1aLN8YXtpy9t5290OW9d9+W5vVGFonaxVb0O9sSUYxGt90FRDAvo gDOEN+sKozuBSzUo2MBm1By9VGDrFWg= -----END CERTIFICATE-----Generated at Sat Aug 23 17:43:18 2025 by rpki-client