$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/249b839a-5fe7-399c-81a4-78e9e5f4ffe1.roa File: 249b839a-5fe7-399c-81a4-78e9e5f4ffe1.roa (raw, json) Hash identifier: myg7SKaqqYulbV3ZI55Eg2tQ3L4+DbKYDqmrhA0FfNc= Subject key identifier: DC:F9:63:B0:5F:61:AF:58:16:85:E1:B6:51:BE:41:B3:27:40:7C:35 Certificate issuer: /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Certificate serial: 010D0C9F4328584AC4515A99F1FEB27C01E23620 Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/249b839a-5fe7-399c-81a4-78e9e5f4ffe1.roa Signing time: Wed 06 Aug 2025 13:19:53 +0000 ROA not before: Wed 06 Aug 2025 13:19:53 +0000 ROA not after: Tue 04 Nov 2025 14:19:53 +0000 asID: 152868 IP address blocks: 173.0.99.0/24 maxlen: 24 173.0.111.0/24 maxlen: 24 199.115.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:51:5a:99:f1:fe:b2:7c:01:e2:36:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Validity Not Before: Aug 6 13:19:53 2025 GMT Not After : Nov 4 14:19:53 2025 GMT Subject: CN=744b5d39-7ddb-467a-8460-b8b22ee54c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b4:64:2c:9e:43:6f:62:a0:f1:30:8c:0b:34: e2:c3:31:b3:14:8b:7d:60:0b:38:40:b8:95:ac:c6: 5b:e4:81:35:29:16:8f:c9:e8:7a:13:be:7a:cb:87: b3:67:03:5f:b7:f0:ce:71:3a:3c:56:6d:7d:6c:85: b8:1d:16:42:36:03:8e:a1:ca:4c:61:29:9a:6f:ee: 3c:f4:d6:6c:8c:60:87:3d:40:98:a0:6c:7a:ca:db: cf:e7:6c:66:56:46:53:07:09:dd:ba:b5:1c:a4:a3: d6:64:d8:40:3a:f8:de:a9:77:4b:48:c9:14:6b:12: 5e:9b:69:1d:14:39:f5:9c:7f:75:02:09:5f:6c:42: 1d:63:21:0b:bb:20:20:e1:14:7b:84:9a:ca:75:59: ad:d2:46:1a:5a:fa:5c:73:70:78:17:67:67:20:20: 3d:65:89:02:9d:4a:74:83:46:8d:10:32:d3:3c:0c: 31:c7:00:46:6a:90:35:21:e8:24:eb:6d:b5:06:11: a5:18:6e:87:7a:b1:1b:f9:35:bb:5d:0e:24:28:d9: 9d:03:d6:8d:6f:5b:ef:eb:54:d6:cb:a8:3e:59:66: 0a:4c:a6:0c:4f:1f:c1:72:b4:0d:70:00:e0:b9:4f: 58:17:ad:67:ff:13:7d:f6:30:01:23:4d:06:83:94: 0e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F9:63:B0:5F:61:AF:58:16:85:E1:B6:51:BE:41:B3:27:40:7C:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/249b839a-5fe7-399c-81a4-78e9e5f4ffe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl X509v3 Authority Key Identifier: keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer sbgp-ipAddrBlock: critical IPv4: 173.0.99.0/24 173.0.111.0/24 199.115.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b1:95:b2:cc:fa:e7:99:61:fe:db:6b:28:e9:e8:68:62:e9: ad:52:06:55:b7:13:fe:52:a1:01:62:39:fb:6c:d3:98:18:d8: ac:c4:46:a2:ea:0f:53:c5:37:fc:0c:b6:5a:7f:81:42:68:b5: 7f:55:67:1c:eb:f6:b0:bc:42:35:6f:32:c9:b9:ea:63:58:17: 94:74:0b:6a:f8:de:7e:f2:1d:ce:f6:57:00:8e:8c:97:cb:9c: 16:46:88:84:da:4b:8c:4b:6c:b2:e9:0e:6c:fa:89:bc:ff:77: 3f:9b:9f:7a:08:bc:9d:9b:19:2b:d6:f5:b5:22:f7:03:3e:7c: 55:75:50:21:d5:7a:cb:d6:e0:ea:20:81:4a:91:18:91:e1:41: f2:d2:7f:b9:2d:cb:7c:76:b8:bf:1c:02:c1:50:a5:8a:fc:bb: b5:2f:06:ac:a7:ba:d3:f4:94:68:79:7e:6e:79:b3:34:64:07: 06:f0:0f:4a:69:38:a1:af:24:3a:de:38:42:c3:73:ba:f0:67: 43:30:00:df:05:e1:59:4b:98:cf:5c:bf:6e:b9:d4:f3:ab:11: 97:51:ae:ee:92:59:38:9a:57:41:f0:e7:f2:5b:4d:99:0d:8b: 34:d4:f9:1c:7b:8b:38:01:3d:12:fa:d5:57:1f:c2:91:88:03: 12:06:a7:cc -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWErEUVqZ8f6yfAHiNiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkOTdlN2EtYzMxZC00MTdhLWJjMDctMWVjZGI5NmJl MDlmMB4XDTI1MDgwNjEzMTk1M1oXDTI1MTEwNDE0MTk1M1owLzEtMCsGA1UEAxMk NzQ0YjVkMzktN2RkYi00NjdhLTg0NjAtYjhiMjJlZTU0YzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbRkLJ5Db2Kg8TCMCzTiwzGzFIt9YAs4QLiV rMZb5IE1KRaPyeh6E756y4ezZwNft/DOcTo8Vm19bIW4HRZCNgOOocpMYSmab+48 9NZsjGCHPUCYoGx6ytvP52xmVkZTBwndurUcpKPWZNhAOvjeqXdLSMkUaxJem2kd FDn1nH91AglfbEIdYyELuyAg4RR7hJrKdVmt0kYaWvpcc3B4F2dnICA9ZYkCnUp0 g0aNEDLTPAwxxwBGapA1Iegk6221BhGlGG6HerEb+TW7XQ4kKNmdA9aNb1vv61TW y6g+WWYKTKYMTx/BcrQNcADguU9YF61n/xN99jABI00Gg5QOkwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFNz5Y7BfYa9YFoXhtlG+QbMnQHw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5 N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNkYjk2YmUwOWYvMjQ5YjgzOWEtNWZlNy0z OTljLTgxYTQtNzhlOWU1ZjRmZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWJkOTdlN2EtYzMxZC00MTdhLWJj MDctMWVjZGI5NmJlMDlmLzFiZDk3ZTdhLWMzMWQtNDE3YS1iYzA3LTFlY2RiOTZi ZTA5Zi5jcmwwHwYDVR0jBBgwFoAU4LxGbY9f3COEYkIcIshswe7ry44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNk Yjk2YmUwOWYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQArQBjAwQA rQBvAwQAx3NQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFixlbLM+ueZYf7bayjp6Ghi6a1SBlW3E/5SoQFi Ofts05gY2KzERqLqD1PFN/wMtlp/gUJotX9VZxzr9rC8QjVvMsm56mNYF5R0C2r4 3n7yHc72VwCOjJfLnBZGiITaS4xLbLLpDmz6ibz/dz+bn3oIvJ2bGSvW9bUi9wM+ fFV1UCHVesvW4OoggUqRGJHhQfLSf7kty3x2uL8cAsFQpYr8u7UvBqynutP0lGh5 fm55szRkBwbwD0ppOKGvJDreOELDc7rwZ0MwAN8F4VlLmM9cv2651POrEZdRru6S WTiaV0Hw5/JbTZkNizTU+Rx7izgBPRL61VcfwpGIAxIGp8w= -----END CERTIFICATE-----Generated at Sat Aug 23 19:30:02 2025 by rpki-client