$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa File: f84f7d22-eb77-3b0c-9804-527be438dbd6.roa (raw, json) Hash identifier: kchus+l/d7iurf0QM2YYsyK6DmrveTcttLg0BheIJrY= Subject key identifier: B1:4D:4A:BC:E8:17:62:E0:9C:7D:E2:B8:0A:AE:89:05:70:79:EC:E6 Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F4328584AECC14B7DD37D51B1D912FA80 Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 32746 IP address blocks: 192.122.149.0/24 maxlen: 24 209.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:4b:7d:d3:7d:51:b1:d9:12:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=33ce2e94-1dc1-4196-9796-4738ad49d24a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:08:0b:7a:79:95:36:95:22:ca:8b:34:c7:0a: e6:0b:41:32:a7:21:96:53:a5:48:4d:f2:fc:aa:69: 64:04:d8:63:ee:10:14:6e:96:d0:79:31:61:83:c4: 54:85:14:c3:77:11:36:43:3a:68:bf:f1:fb:4e:27: 19:28:4e:e6:30:22:0e:dd:0c:6d:52:71:61:32:6c: 96:3c:c9:e5:21:bd:0d:6a:a5:7c:d5:4a:fd:25:9d: 0d:74:4c:ca:55:58:63:3f:7e:bb:f1:04:e2:bd:8c: 8a:ae:0d:e2:1d:f7:39:39:8f:39:45:9c:9c:5b:20: 00:25:86:79:c5:2f:91:8f:45:20:7c:84:e4:b2:24: 67:b9:df:4e:18:a5:41:b5:61:8d:d7:a9:3a:f1:5a: 9b:dc:a4:e3:1d:66:44:14:62:3c:1c:58:aa:97:9a: 4b:55:42:1b:36:d1:0e:32:48:7b:48:3d:94:8d:dd: 69:0e:39:d8:12:74:e0:d5:f5:b3:89:95:f6:46:8f: 0e:4c:25:b6:2f:6f:c1:2e:4b:5a:4a:ca:29:68:b3: ef:75:20:0d:f5:bc:ed:3b:4d:74:cb:84:8c:03:47: 6c:b8:bd:b6:ff:06:03:70:0c:62:fa:75:89:df:85: 18:a3:d0:c5:ca:bf:cd:fc:e1:92:e5:3a:2d:ff:9e: 21:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4D:4A:BC:E8:17:62:E0:9C:7D:E2:B8:0A:AE:89:05:70:79:EC:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:9d:bc:46:98:07:d2:56:35:41:92:d3:0c:57:16:9b:60:20: f0:aa:cc:2d:fb:ec:92:df:a8:e8:48:08:f2:cd:da:98:99:af: 3f:1c:4b:91:51:77:73:0c:83:74:89:d1:d6:76:58:8c:fe:5f: 6b:e2:3a:60:03:f6:b4:37:2e:a3:40:15:f4:11:a5:78:cc:eb: 44:4d:da:e2:61:98:a5:4c:84:b9:49:16:64:72:4d:a6:50:70: 24:b5:86:1e:d8:93:a0:ef:53:67:8d:f4:c9:7f:8f:0b:ff:1f: 45:a2:ec:91:1a:6b:0f:d4:45:e6:e9:81:2f:29:25:17:95:8b: 5b:5f:8a:5f:12:64:cd:63:cc:a8:be:27:4a:5e:12:dc:5c:29: 86:7e:b6:ab:37:59:4a:ca:33:48:96:34:39:c5:49:19:13:f8: e0:8b:0d:d6:9f:b9:9e:e6:bc:46:65:a0:e8:de:41:3d:62:d1: 29:e9:16:14:f2:49:75:02:85:8c:fb:9e:b9:e4:36:12:30:c9: fd:23:94:07:e0:31:42:b1:c8:70:da:49:4c:c6:42:f6:21:ad: 9e:9a:22:9f:32:25:1a:e3:f9:e3:42:d3:22:48:16:f5:e6:24: c9:2b:2f:11:03:0a:98:55:fe:7c:c5:6b:04:8d:94:88:b6:ce: 0a:53:b6:98 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErswUt9031RsdkS+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MzNjZTJlOTQtMWRjMS00MTk2LTk3OTYtNDczOGFkNDlkMjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwgLenmVNpUiyos0xwrmC0EypyGWU6VITfL8 qmlkBNhj7hAUbpbQeTFhg8RUhRTDdxE2Qzpov/H7TicZKE7mMCIO3QxtUnFhMmyW PMnlIb0NaqV81Ur9JZ0NdEzKVVhjP3678QTivYyKrg3iHfc5OY85RZycWyAAJYZ5 xS+Rj0UgfITksiRnud9OGKVBtWGN16k68Vqb3KTjHWZEFGI8HFiql5pLVUIbNtEO Mkh7SD2Ujd1pDjnYEnTg1fWziZX2Ro8OTCW2L2/BLktaSsopaLPvdSAN9bztO010 y4SMA0dsuL22/wYDcAxi+nWJ34UYo9DFyr/N/OGS5Tot/54hswIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLFNSrzoF2LgnH3iuAquiQVweezmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvZjg0ZjdkMjItZWI3Ny0z YjBjLTk4MDQtNTI3YmU0MzhkYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABadvEaYB9JWNUGS0wxXFptgIPCqzC377JLfqOhICPLN2piZ rz8cS5FRd3MMg3SJ0dZ2WIz+X2viOmAD9rQ3LqNAFfQRpXjM60RN2uJhmKVMhLlJ FmRyTaZQcCS1hh7Yk6DvU2eN9Ml/jwv/H0Wi7JEaaw/URebpgS8pJReVi1tfil8S ZM1jzKi+J0peEtxcKYZ+tqs3WUrKM0iWNDnFSRkT+OCLDdafuZ7mvEZloOjeQT1i 0SnpFhTySXUChYz7nrnkNhIwyf0jlAfgMUKxyHDaSUzGQvYhrZ6aIp8yJRrj+eNC 0yJIFvXmJMkrLxEDCphV/nzFawSNlIi2zgpTtpg= -----END CERTIFICATE-----Generated at Sat Aug 23 23:46:24 2025 by rpki-client