$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/dc665ef5-7866-3242-a76c-103dcc34ac7c.roa File: dc665ef5-7866-3242-a76c-103dcc34ac7c.roa (raw, json) Hash identifier: 8lA9tfO61zDmYTOUJ0bOf0WP7oj+sU/FqkgRqJONggk= Subject key identifier: 70:C3:D4:D5:57:62:66:DF:E9:AC:97:9D:7D:71:26:D8:52:1D:AC:90 Certificate issuer: /CN=55a4d94f-b4d5-447a-9417-908a0f5a404e Certificate serial: 010D0C9F4328584ACF70FF468B59BDFEF4158C80 Authority key identifier: B5:F8:B7:36:93:7F:76:9E:25:D8:97:09:C9:60:7A:A6:D9:0E:3C:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/dc665ef5-7866-3242-a76c-103dcc34ac7c.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 394542 IP address blocks: 170.117.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/55a4d94f-b4d5-447a-9417-908a0f5a404e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/55a4d94f-b4d5-447a-9417-908a0f5a404e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:70:ff:46:8b:59:bd:fe:f4:15:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55a4d94f-b4d5-447a-9417-908a0f5a404e Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=3d0d495e-fcec-4d0c-bf75-1fa1c567cd04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:a2:77:f4:c3:39:76:4c:a8:1b:09:21:b8: 8f:a1:86:40:bb:ab:72:c2:19:ad:be:40:3d:88:15: 87:3d:be:37:e3:15:ac:0b:83:e2:8e:1f:0b:20:8a: 2a:3b:11:d1:b1:98:ba:6d:dc:9f:7f:3c:7e:5f:ae: 24:94:2c:b2:1d:e7:b1:d0:66:c3:51:3d:5d:e2:9d: e0:2c:7a:32:e2:63:08:99:30:80:65:26:21:67:3b: 1f:94:cc:bc:7c:1e:9a:ec:6f:6f:4b:ce:c9:74:07: 78:3d:9e:31:91:af:9e:fa:be:71:25:a5:7f:ca:53: 2d:af:dc:ef:c3:77:db:01:13:11:f2:6f:55:c7:a6: 81:6f:6c:91:94:ae:c9:8e:da:ea:c9:ec:e1:a0:b4: a4:4d:d9:1a:59:ed:9a:58:72:d1:8c:86:be:58:0a: b2:e2:80:b4:c2:f9:39:29:ce:78:63:d3:da:90:b5: 64:1f:55:31:70:0a:56:45:1d:39:d4:22:c3:75:a5: 0b:4b:64:8e:7a:02:ff:3f:68:30:ba:d6:07:77:7b: 31:d7:9d:d1:a1:11:72:c1:07:30:c4:a4:d3:02:3b: ba:eb:03:6b:e7:fb:fb:dc:44:da:fe:67:9c:c0:ef: 97:b4:0b:e6:db:29:fd:36:4b:e6:93:30:40:cb:1a: 5a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C3:D4:D5:57:62:66:DF:E9:AC:97:9D:7D:71:26:D8:52:1D:AC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/dc665ef5-7866-3242-a76c-103dcc34ac7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/55a4d94f-b4d5-447a-9417-908a0f5a404e.crl X509v3 Authority Key Identifier: keyid:B5:F8:B7:36:93:7F:76:9E:25:D8:97:09:C9:60:7A:A6:D9:0E:3C:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e.cer sbgp-ipAddrBlock: critical IPv4: 170.117.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e5:82:65:ea:f1:41:20:aa:3d:3d:0e:e5:36:df:be:13:01: fb:f8:e8:fa:bb:ec:4d:51:52:99:f5:b7:79:96:c2:6f:5a:35: 10:29:23:d3:ee:e9:4d:4c:a6:ad:29:ac:78:75:38:74:b1:68: d3:65:1d:e0:8e:5e:80:5f:bf:7f:09:a9:19:89:94:77:3e:23: 2e:22:ec:60:be:f1:61:8f:50:c2:21:f5:a8:c7:df:c6:40:76: b9:05:57:f6:d7:9b:71:a2:0d:22:44:47:59:29:fe:45:78:73: 38:e5:66:6d:3b:55:0a:fd:ac:5a:b8:ad:cc:ca:79:dc:7d:a0: 44:ea:5a:52:f7:44:c5:c2:0a:e3:89:84:9c:75:58:08:c0:8e: f4:46:db:4a:89:fb:a0:b9:b6:e1:40:68:5e:54:a4:fe:5f:e9: c4:b4:9a:c9:8f:a7:37:81:44:c6:e1:19:c5:a2:6b:b2:2b:f7: 7a:a0:b8:91:25:a4:c1:98:bb:ce:52:9e:6e:31:6b:80:7a:cb: 34:6e:b7:5c:ee:c5:f6:dc:19:ab:4a:ad:30:ac:0c:3d:b3:bd: 8d:98:03:90:a0:30:a9:12:cd:5f:b2:3b:c3:ef:f2:ee:5d:cd: e0:54:50:bb:35:0f:4a:c8:ec:85:51:7b:36:2e:1c:17:0a:4a: 78:cb:12:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcP9Gi1m9/vQVjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTVhNGQ5NGYtYjRkNS00NDdhLTk0MTctOTA4YTBmNWE0 MDRlMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk M2QwZDQ5NWUtZmNlYy00ZDBjLWJmNzUtMWZhMWM1NjdjZDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaOid/TDOXZMqBsJIbiPoYZAu6tywhmtvkA9 iBWHPb434xWsC4Pijh8LIIoqOxHRsZi6bdyffzx+X64klCyyHeex0GbDUT1d4p3g LHoy4mMImTCAZSYhZzsflMy8fB6a7G9vS87JdAd4PZ4xka+e+r5xJaV/ylMtr9zv w3fbARMR8m9Vx6aBb2yRlK7JjtrqyezhoLSkTdkaWe2aWHLRjIa+WAqy4oC0wvk5 Kc54Y9PakLVkH1UxcApWRR051CLDdaULS2SOegL/P2gwutYHd3sx153RoRFywQcw xKTTAju66wNr5/v73ETa/mecwO+XtAvm2yn9NkvmkzBAyxpaYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDD1NVXYmbf6ayXnX1xJthSHayQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81NWE0 ZDk0Zi1iNGQ1LTQ0N2EtOTQxNy05MDhhMGY1YTQwNGUvZGM2NjVlZjUtNzg2Ni0z MjQyLWE3NmMtMTAzZGNjMzRhYzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTVhNGQ5NGYtYjRkNS00NDdhLTk0 MTctOTA4YTBmNWE0MDRlLzU1YTRkOTRmLWI0ZDUtNDQ3YS05NDE3LTkwOGEwZjVh NDA0ZS5jcmwwHwYDVR0jBBgwFoAUtfi3NpN/dp4l2JcJyWB6ptkOPE0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81NWE0ZDk0Zi1iNGQ1LTQ0N2EtOTQxNy05MDhh MGY1YTQwNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqnXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzlgmXq8UEgqj09DuU2374TAfv46Pq77E1RUpn1t3mWwm9aNRApI9Pu 6U1Mpq0prHh1OHSxaNNlHeCOXoBfv38JqRmJlHc+Iy4i7GC+8WGPUMIh9ajH38ZA drkFV/bXm3GiDSJER1kp/kV4czjlZm07VQr9rFq4rczKedx9oETqWlL3RMXCCuOJ hJx1WAjAjvRG20qJ+6C5tuFAaF5UpP5f6cS0msmPpzeBRMbhGcWia7Ir93qguJEl pMGYu85Snm4xa4B6yzRut1zuxfbcGatKrTCsDD2zvY2YA5CgMKkSzV+yO8Pv8u5d zeBUULs1D0rI7IVRezYuHBcKSnjLEro= -----END CERTIFICATE-----Generated at Sat Aug 23 20:56:54 2025 by rpki-client