$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa File: 25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa (raw, json) Hash identifier: g0Ty9TQ872GU0SGHTmk4G5vQVK8ZUo+MDLRy+LDGlHY= Subject key identifier: 9C:A6:41:A1:8B:C6:C5:72:B6:8E:08:9E:65:27:5E:A9:3F:57:D0:DC Certificate issuer: /CN=f9d82c71-366a-467f-9b6c-3667d1ae7605 Certificate serial: 010D0C9F4328584AE9F67EEBE10CC975AABDDB00 Authority key identifier: 8A:F9:AB:9E:B6:76:28:B8:31:1E:EA:07:D3:3C:77:D9:A5:01:F7:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 32083 IP address blocks: 66.158.192.0/18 maxlen: 24 173.46.160.0/19 maxlen: 24 208.111.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:7e:eb:e1:0c:c9:75:aa:bd:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9d82c71-366a-467f-9b6c-3667d1ae7605 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=0a17589c-929c-4f73-9e23-468f40d0723d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:56:0e:8f:2f:03:ed:50:a0:84:7a:53:3f:bd: fe:d2:80:64:65:41:b0:d4:82:9f:11:3c:a1:42:0a: 98:d3:dc:f2:5a:4e:38:0f:9d:de:e4:a6:0b:05:ef: dd:ba:07:d6:98:b9:5d:12:c5:8d:46:56:ed:60:18: 40:57:b4:8f:a9:a2:ab:8d:eb:3f:3c:c3:49:1f:7d: 85:cf:5a:0d:16:9e:b8:74:7d:72:b7:a8:38:9a:a0: 2b:35:b0:7b:22:eb:5e:18:5e:5f:e5:d0:c3:70:1e: cd:af:a5:ca:11:27:ef:b3:ce:6f:dd:a5:7c:25:3b: 57:41:11:03:9a:93:75:fc:08:67:e0:ad:8a:79:5d: 65:87:3b:28:25:c9:a7:8e:ed:9a:0b:25:cc:d2:07: 55:f3:cc:47:f6:06:15:54:02:3a:bb:52:e4:bb:37: 49:db:ea:f8:36:1b:e7:9b:cd:69:20:b4:89:84:eb: 0e:0b:45:7b:19:48:c2:d5:4c:ac:c4:3e:69:fc:f1: cb:b2:16:8d:23:48:7d:91:97:3f:ba:90:8d:ba:78: 71:a4:a5:21:c6:03:ac:97:d4:2e:e0:d0:e6:61:80: c6:90:3c:0a:31:dd:65:1c:62:be:50:00:a0:ba:b6: de:24:cc:74:81:48:7f:c7:b5:e0:ec:65:e5:06:12: a5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A6:41:A1:8B:C6:C5:72:B6:8E:08:9E:65:27:5E:A9:3F:57:D0:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.crl X509v3 Authority Key Identifier: keyid:8A:F9:AB:9E:B6:76:28:B8:31:1E:EA:07:D3:3C:77:D9:A5:01:F7:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer sbgp-ipAddrBlock: critical IPv4: 66.158.192.0/18 173.46.160.0/19 208.111.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:21:aa:fd:ee:3c:f4:c7:85:ee:6c:02:48:5f:c8:71:8b:33: 5f:73:a0:bb:4f:64:79:2e:4a:5f:c5:b5:4c:5f:80:a0:6d:42: c9:5c:72:35:da:67:bd:43:75:ca:ea:33:e2:78:5d:01:57:97: 6e:82:82:cb:32:04:87:27:42:46:b3:12:ff:f4:96:18:95:9b: ac:b7:59:04:06:87:73:68:e0:30:d9:1f:a3:2a:a2:19:7d:82: 59:14:b4:b9:67:fd:97:d3:44:38:da:39:8c:b6:91:7b:27:60: 8c:a1:8d:74:6b:f0:97:ad:f5:27:7f:ae:5f:49:96:82:f6:c2: 54:b9:a9:cd:92:a0:58:e1:f9:dd:11:e1:c8:1d:be:d9:35:1d: 17:cf:95:52:4d:ad:72:45:98:0e:eb:ef:0a:9a:df:dc:7c:46: 3d:60:ef:0f:3f:20:dc:84:c1:d8:ca:c1:c7:a7:ce:a4:0d:3b: df:78:f3:ea:61:4a:39:a3:a5:a4:cf:5a:bb:95:03:ef:cc:80: 45:fc:20:b1:ec:f8:65:6e:7b:99:da:97:3c:c1:39:8e:6f:8b: 28:06:26:b7:a1:68:a2:4a:79:1a:bd:1d:90:c4:2e:a2:aa:a3: a2:61:f2:a9:b4:81:eb:33:75:d8:3e:bd:c3:bb:2e:96:c8:15: 57:cf:37:a6 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWErp9n7r4QzJdaq92wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjlkODJjNzEtMzY2YS00NjdmLTliNmMtMzY2N2QxYWU3 NjA1MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk MGExNzU4OWMtOTI5Yy00ZjczLTllMjMtNDY4ZjQwZDA3MjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1YOjy8D7VCghHpTP73+0oBkZUGw1IKfETyh QgqY09zyWk44D53e5KYLBe/dugfWmLldEsWNRlbtYBhAV7SPqaKrjes/PMNJH32F z1oNFp64dH1yt6g4mqArNbB7IuteGF5f5dDDcB7Nr6XKESfvs85v3aV8JTtXQRED mpN1/Ahn4K2KeV1lhzsoJcmnju2aCyXM0gdV88xH9gYVVAI6u1LkuzdJ2+r4Nhvn m81pILSJhOsOC0V7GUjC1UysxD5p/PHLshaNI0h9kZc/upCNunhxpKUhxgOsl9Qu 4NDmYYDGkDwKMd1lHGK+UACgurbeJMx0gUh/x7Xg7GXlBhKlFwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFJymQaGLxsVyto4InmUnXqk/V9DcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOWQ4 MmM3MS0zNjZhLTQ2N2YtOWI2Yy0zNjY3ZDFhZTc2MDUvMjUwNTlkOTktMmZhNS0z YzI5LWFhZTctMDM2NTZkMmFiOWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjlkODJjNzEtMzY2YS00NjdmLTli NmMtMzY2N2QxYWU3NjA1L2Y5ZDgyYzcxLTM2NmEtNDY3Zi05YjZjLTM2NjdkMWFl NzYwNS5jcmwwHwYDVR0jBBgwFoAUivmrnrZ2KLgxHuoH0zx32aUB93owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOWQ4MmM3MS0zNjZhLTQ2N2YtOWI2Yy0zNjY3 ZDFhZTc2MDUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQGQp7AAwQF rS6gAwQF0G8AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHQhqv3uPPTHhe5sAkhfyHGLM19zoLtPZHkuSl/F tUxfgKBtQslccjXaZ71DdcrqM+J4XQFXl26CgssyBIcnQkazEv/0lhiVm6y3WQQG h3No4DDZH6Mqohl9glkUtLln/ZfTRDjaOYy2kXsnYIyhjXRr8Jet9Sd/rl9JloL2 wlS5qc2SoFjh+d0R4cgdvtk1HRfPlVJNrXJFmA7r7wqa39x8Rj1g7w8/INyEwdjK wcenzqQNO9948+phSjmjpaTPWruVA+/MgEX8ILHs+GVue5nalzzBOY5viygGJreh aKJKeRq9HZDELqKqo6Jh8qm0geszddg+vcO7LpbIFVfPN6Y= -----END CERTIFICATE-----Generated at Sat Aug 23 20:56:45 2025 by rpki-client