$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/4f00197c-82ad-39dc-96d1-b0d2703738e7.roa File: 4f00197c-82ad-39dc-96d1-b0d2703738e7.roa (raw, json) Hash identifier: bMWNb9SGzxRx5G3yyGTZy+/kQX9YDdoY+H4Tz4bbobI= Subject key identifier: 5C:EE:65:91:89:7A:E3:DF:CF:AB:C1:76:B3:5D:BA:7F:14:DB:4C:D8 Certificate issuer: /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Certificate serial: 010D0C9F4328584AE8912EAAB07008F23902F380 Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/4f00197c-82ad-39dc-96d1-b0d2703738e7.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 173.247.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:2e:aa:b0:70:08:f2:39:02:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=dc70bc50-3159-47ec-942b-882d15c15b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1a:fe:3e:33:e4:b0:ae:ec:16:a1:e3:ce:c5: ab:07:af:fc:07:a1:2d:eb:2d:99:7a:38:2a:17:e7: b0:a2:30:a0:11:bc:f5:9e:26:08:97:5f:22:b4:fa: 3b:89:35:8f:cc:3b:5f:ce:33:eb:35:46:7e:f8:fa: b4:21:c4:71:4b:19:d3:29:a3:0a:2c:94:e0:01:ad: 87:2f:a9:f8:49:f6:55:bd:68:7d:dc:56:ec:82:42: 2f:bf:07:5d:85:4c:5f:01:f1:78:e5:2d:f5:de:21: 55:b7:e7:be:e6:6d:ab:91:6f:bc:af:3f:82:27:65: cb:fb:ad:92:f6:8f:f2:a5:00:88:88:af:1e:36:f1: e4:cc:ae:ac:41:75:96:25:e8:02:55:53:cf:8b:8b: a6:25:17:70:22:aa:f5:ca:bb:89:42:ed:3c:20:2c: 7d:2f:27:8d:3e:76:e9:fa:a9:07:9f:13:13:ba:4d: 15:29:c0:3d:16:15:55:e5:07:00:56:40:e8:94:c4: f8:5b:37:ef:2b:fc:9b:53:11:4e:12:d2:7a:68:d1: 03:31:03:1d:3e:f9:d9:e1:48:c6:c8:1b:43:38:f7: de:ea:48:27:e6:f1:bf:d0:c2:09:da:e8:06:76:9c: 65:4f:fb:4a:c9:35:85:20:a0:43:19:81:ad:42:cc: 9a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EE:65:91:89:7A:E3:DF:CF:AB:C1:76:B3:5D:BA:7F:14:DB:4C:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/4f00197c-82ad-39dc-96d1-b0d2703738e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl X509v3 Authority Key Identifier: keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer sbgp-ipAddrBlock: critical IPv4: 173.247.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:6a:57:77:20:9c:0b:f2:ef:7e:f7:65:3e:a6:48:c8:a4:86: df:ab:27:ff:5a:28:bb:19:0b:f7:01:7d:78:56:4c:d5:20:23: 3d:1a:7c:14:73:14:b8:fb:ab:66:38:37:c5:74:3f:b2:74:a4: 01:dc:3e:37:e8:86:47:f9:1b:44:77:d0:39:3e:98:27:40:ec: 30:b1:6a:b6:83:84:5f:ea:19:f8:bd:84:3a:79:77:26:96:ca: a5:70:67:50:f6:3e:dd:77:df:d4:ec:5c:fc:51:63:c0:23:66: 95:e8:be:c6:64:65:58:c1:2b:23:70:a0:9f:56:d4:a6:ee:4b: 64:cc:7d:14:7f:8c:44:a4:34:c6:78:56:75:b8:14:f9:87:4e: 3a:e8:fa:9e:86:95:5b:0b:ec:fb:92:f9:0f:61:3a:91:9f:ea: 8b:c3:84:d0:dc:30:6d:56:cd:33:7f:f9:0b:30:d9:bb:74:bf: 69:1a:8c:36:6c:44:9e:b0:d4:b9:df:42:bc:2b:83:d2:70:2d: 93:ff:9b:f7:12:c1:57:5d:74:91:f7:9f:99:ad:26:0a:28:4d: e0:8d:5d:f8:74:50:98:24:e4:d4:e1:8c:66:07:aa:cb:8f:f1: e9:56:40:b2:6c:f2:21:bd:2c:f9:18:49:52:88:52:1c:9d:c5: 26:6e:ce:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokS6qsHAI8jkC84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiZDlkNDMtYzEyNy00YTllLWIwMzgtMGM0MzZjNWQ5 MDVkMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk ZGM3MGJjNTAtMzE1OS00N2VjLTk0MmItODgyZDE1YzE1YjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBr+PjPksK7sFqHjzsWrB6/8B6Et6y2Zejgq F+ewojCgEbz1niYIl18itPo7iTWPzDtfzjPrNUZ++Pq0IcRxSxnTKaMKLJTgAa2H L6n4SfZVvWh93FbsgkIvvwddhUxfAfF45S313iFVt+e+5m2rkW+8rz+CJ2XL+62S 9o/ypQCIiK8eNvHkzK6sQXWWJegCVVPPi4umJRdwIqr1yruJQu08ICx9LyeNPnbp +qkHnxMTuk0VKcA9FhVV5QcAVkDolMT4WzfvK/ybUxFOEtJ6aNEDMQMdPvnZ4UjG yBtDOPfe6kgn5vG/0MIJ2ugGdpxlT/tKyTWFIKBDGYGtQsyacQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzuZZGJeuPfz6vBdrNdun8U20zYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJk OWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQzNmM1ZDkwNWQvNGYwMDE5N2MtODJhZC0z OWRjLTk2ZDEtYjBkMjcwMzczOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFiZDlkNDMtYzEyNy00YTllLWIw MzgtMGM0MzZjNWQ5MDVkL2ExYmQ5ZDQzLWMxMjctNGE5ZS1iMDM4LTBjNDM2YzVk OTA1ZC5jcmwwHwYDVR0jBBgwFoAURFawDMNvboLVigocKndFeOYzoPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJkOWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQz NmM1ZDkwNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrfcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1qV3cgnAvy7373ZT6mSMikht+rJ/9aKLsZC/cBfXhWTNUgIz0afBRz FLj7q2Y4N8V0P7J0pAHcPjfohkf5G0R30Dk+mCdA7DCxaraDhF/qGfi9hDp5dyaW yqVwZ1D2Pt1339TsXPxRY8AjZpXovsZkZVjBKyNwoJ9W1KbuS2TMfRR/jESkNMZ4 VnW4FPmHTjro+p6GlVsL7PuS+Q9hOpGf6ovDhNDcMG1WzTN/+Qsw2bt0v2kajDZs RJ6w1LnfQrwrg9JwLZP/m/cSwVdddJH3n5mtJgooTeCNXfh0UJgk5NThjGYHqsuP 8elWQLJs8iG9LPkYSVKIUhydxSZuzpE= -----END CERTIFICATE-----Generated at Sat Aug 23 06:42:08 2025 by rpki-client