$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/23d95a46-a535-30ef-8cc4-386ad17abeb9.roa File: 23d95a46-a535-30ef-8cc4-386ad17abeb9.roa (raw, json) Hash identifier: VcOlQ/ymIQlHcAacArE4NAXqtTI7zKoNLPpPx0+voJM= Subject key identifier: 54:2E:67:70:14:F4:8F:66:B0:7C:B2:9E:03:55:77:56:34:4B:8B:D5 Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584AE5C688EF6D2DFF092E246480 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/23d95a46-a535-30ef-8cc4-386ad17abeb9.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 21782 IP address blocks: 199.45.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:88:ef:6d:2d:ff:09:2e:24:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=8e11741d-3cfa-4a5b-87f9-d28af8ef7d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:be:b0:bb:35:7a:71:87:e6:fc:32:34:02: 69:55:5c:5e:a5:5f:0e:74:37:f3:69:21:85:43:4d: e0:b5:fa:c1:be:17:7a:db:c1:a2:64:a0:34:31:e7: c2:d5:28:55:eb:1e:d4:9f:78:84:bc:ca:96:8e:12: 40:cf:77:6f:50:92:2f:0a:3e:a4:bb:35:7f:e5:14: 05:bd:94:d7:c5:22:53:1c:59:61:28:9b:c7:8d:96: bb:66:a4:08:eb:7f:90:7a:12:d1:ca:ce:ba:53:ca: 33:e9:85:48:e9:b6:a0:d8:6b:71:9a:f7:8b:e9:e7: 28:03:48:cf:c6:03:50:18:e7:79:76:3e:49:47:7f: 04:75:2e:99:04:a0:0a:83:4b:8f:5f:f8:fd:e4:c5: c8:b8:0b:6d:33:c1:49:4e:f2:7f:41:25:b5:72:bc: fc:2a:e2:f5:1e:f6:14:f9:29:f2:88:61:17:d9:76: 98:70:17:26:ce:58:3e:eb:b9:65:bd:14:ff:40:bf: e6:27:d8:58:c5:8c:d8:5e:eb:63:6c:96:e6:f0:2b: ee:a2:b5:af:35:57:a5:d2:c6:12:a2:c4:1f:c7:3c: 1e:32:55:5b:84:38:8d:0e:e4:fb:24:8c:f3:e8:e4: ff:8e:e8:6d:ba:49:6a:81:10:de:00:3e:31:1b:74: 61:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2E:67:70:14:F4:8F:66:B0:7C:B2:9E:03:55:77:56:34:4B:8B:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/23d95a46-a535-30ef-8cc4-386ad17abeb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 199.45.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:92:47:63:ac:f7:32:b5:ca:ab:c5:51:ea:b5:83:bb:ac:c4: 70:76:e8:f7:20:70:4f:64:dd:91:12:46:0e:1c:c0:b4:f5:f2: 1f:cb:3f:89:0b:ba:73:a6:37:5e:ba:94:c4:cb:fb:ce:f8:7e: 45:f3:db:42:c4:ac:21:da:e0:bf:87:78:c2:3f:cd:dc:ed:5f: f0:d8:d5:f6:6b:2f:26:07:62:fb:d5:b8:a3:b4:0c:28:4a:c7: 51:4b:69:3a:75:7b:41:09:80:7a:ed:30:91:83:2a:f9:1f:69: 77:c2:84:87:bd:5c:49:8b:3c:e6:9b:78:47:a9:08:91:fc:f6: c8:81:4d:af:44:c7:c1:d8:4b:77:1d:42:a9:08:c8:d1:ad:2b: be:ad:45:d9:7e:8c:0d:d7:79:cb:20:83:88:3a:b5:43:77:ad: 78:33:2f:f7:82:9b:f0:ac:a2:ec:32:15:fc:21:36:a4:fe:c7: f2:aa:63:03:15:4e:da:ef:17:b4:27:ff:71:11:c1:ab:60:e2: 59:21:f0:d3:e3:ce:a3:3e:ec:af:1e:ba:d7:cb:da:7f:75:fd: f4:ef:e5:e5:d0:da:2b:2e:33:ff:64:9c:44:c4:e4:33:cb:e0: b0:58:a3:b0:25:4d:51:ad:26:74:ad:21:e2:07:5e:e2:cc:f6: 94:af:07:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxojvbS3/CS4kZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk OGUxMTc0MWQtM2NmYS00YTViLTg3ZjktZDI4YWY4ZWY3ZDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXS+sLs1enGH5vwyNAJpVVxepV8OdDfzaSGF Q03gtfrBvhd628GiZKA0MefC1ShV6x7Un3iEvMqWjhJAz3dvUJIvCj6kuzV/5RQF vZTXxSJTHFlhKJvHjZa7ZqQI63+QehLRys66U8oz6YVI6bag2GtxmveL6ecoA0jP xgNQGOd5dj5JR38EdS6ZBKAKg0uPX/j95MXIuAttM8FJTvJ/QSW1crz8KuL1HvYU +SnyiGEX2XaYcBcmzlg+67llvRT/QL/mJ9hYxYzYXutjbJbm8CvuorWvNVel0sYS osQfxzweMlVbhDiNDuT7JIzz6OT/juhtuklqgRDeAD4xG3RhRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQuZ3AU9I9msHyyngNVd1Y0S4vVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvMjNkOTVhNDYtYTUzNS0z MGVmLThjYzQtMzg2YWQxN2FiZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExy2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2SR2Os9zK1yqvFUeq1g7usxHB26PcgcE9k3ZESRg4cwLT18h/LP4kL unOmN166lMTL+874fkXz20LErCHa4L+HeMI/zdztX/DY1fZrLyYHYvvVuKO0DChK x1FLaTp1e0EJgHrtMJGDKvkfaXfChIe9XEmLPOabeEepCJH89siBTa9Ex8HYS3cd QqkIyNGtK76tRdl+jA3Xecsgg4g6tUN3rXgzL/eCm/CsouwyFfwhNqT+x/KqYwMV TtrvF7Qn/3ERwatg4lkh8NPjzqM+7K8eutfL2n91/fTv5eXQ2isuM/9knETE5DPL 4LBYo7AlTVGtJnStIeIHXuLM9pSvB3I= -----END CERTIFICATE-----Generated at Sat Aug 23 20:58:24 2025 by rpki-client