$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ed81676c-13be-3e90-97d5-df858a13c13b.roa File: ed81676c-13be-3e90-97d5-df858a13c13b.roa (raw, json) Hash identifier: TxXT87b0pqPn+ibHwsk1yq/dxGUbOTt1b0tR8zkrAE0= Subject key identifier: 46:A9:50:C5:B2:5E:D7:EA:14:04:C4:C2:3C:80:D7:71:C7:72:57:91 Certificate issuer: /CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9 Certificate serial: 010D0C9F4328584ADECBAE04208E347A6F170A40 Authority key identifier: 87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ed81676c-13be-3e90-97d5-df858a13c13b.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 32787 IP address blocks: 192.243.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:ae:04:20:8e:34:7a:6f:17:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=99922423-5c43-4072-9254-43e69b7212fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:77:35:c4:ec:b6:73:87:91:30:e2:4b:6b:29: bf:4d:cc:7e:4a:ab:bc:8a:2e:cc:6e:96:e9:e4:e1: df:37:1e:ec:3f:90:11:b0:92:56:a0:e6:b5:88:53: ef:f0:cc:4b:53:59:45:d0:b3:e5:52:98:fe:3c:48: c1:d7:7b:8a:31:8c:02:05:3d:71:d1:14:06:eb:78: 9a:2b:38:6b:b2:ca:55:0c:68:7b:b2:52:79:88:49: bf:65:f1:e9:38:89:0f:3c:fe:5c:30:df:1f:84:e3: d8:66:1a:3d:53:19:b6:39:01:36:d9:de:17:e7:85: d6:75:35:78:1c:09:d5:4a:ce:8d:74:8d:ea:c1:99: 36:05:0a:da:6f:5f:d5:77:47:52:88:ca:23:fc:5a: 5f:bb:8c:97:bd:68:52:86:d7:4e:ff:ad:09:e0:3c: 29:20:8d:47:c2:39:fd:e4:f0:57:3b:18:bc:13:d2: 8d:75:53:d6:13:c2:80:6f:0c:80:65:ee:8e:4f:78: d7:58:5b:e5:a8:b9:d4:99:2d:60:c3:92:b9:a0:2f: 28:4f:87:3d:bc:21:0b:53:f5:2e:87:42:db:a6:b7: 56:3a:7f:37:18:19:d2:68:45:e3:5c:4f:1d:92:b0: 88:07:c8:62:ca:eb:8d:2c:35:2c:c9:78:62:1f:2d: c5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A9:50:C5:B2:5E:D7:EA:14:04:C4:C2:3C:80:D7:71:C7:72:57:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ed81676c-13be-3e90-97d5-df858a13c13b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl X509v3 Authority Key Identifier: keyid:87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer sbgp-ipAddrBlock: critical IPv4: 192.243.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:11:6d:c7:91:84:1d:b9:11:17:eb:66:74:8a:77:dd:f0:41: 01:ba:34:d3:51:78:e2:66:b7:0f:16:d0:dd:fb:09:eb:53:e3: 2c:ae:76:59:de:f5:1d:b7:2d:a7:26:10:65:f9:df:57:a7:d2: ba:64:73:b5:ac:b0:1e:b0:7d:ca:b9:93:52:fd:a2:2c:21:d5: 1f:b5:0c:d5:70:bc:64:34:4e:13:19:c4:fb:96:f0:42:cf:39: 40:f6:27:fe:42:b2:ab:a2:be:73:60:87:bd:e7:14:b7:0d:8d: a7:b4:e8:fb:4f:9e:24:a1:f7:5c:35:f0:b9:aa:d4:6e:af:85: 2d:cc:d7:c4:0b:af:7d:c7:d8:ef:83:a0:8e:be:a7:05:15:81: bb:64:4b:bf:9c:84:dd:b9:fb:7a:55:a6:03:3a:c2:3c:d3:17: 1f:d8:1e:f0:a9:96:82:15:f9:df:ed:6a:46:02:6f:2b:52:e4: 4f:c3:ad:ea:ce:b8:3a:fe:2d:10:2a:9e:34:80:bf:80:a5:59: 34:ea:23:4a:ba:9e:13:da:6c:d5:96:76:a2:3b:96:a5:e4:1c: e7:84:60:a9:24:eb:a3:ad:d9:50:5f:4e:8f:3f:01:02:9a:7d: 83:38:34:8a:31:a6:a8:da:8d:bb:4c:6e:4e:01:7b:5f:b8:b0: 72:23:00:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey64EII40em8XCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzYjVlYWItM2NkNS00NzlhLWI1YmEtYmE4ZTBiZGM5 Y2E5MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk OTk5MjI0MjMtNWM0My00MDcyLTkyNTQtNDNlNjliNzIxMmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnc1xOy2c4eRMOJLaym/Tcx+Squ8ii7Mbpbp 5OHfNx7sP5ARsJJWoOa1iFPv8MxLU1lF0LPlUpj+PEjB13uKMYwCBT1x0RQG63ia KzhrsspVDGh7slJ5iEm/ZfHpOIkPPP5cMN8fhOPYZho9Uxm2OQE22d4X54XWdTV4 HAnVSs6NdI3qwZk2BQrab1/Vd0dSiMoj/Fpfu4yXvWhShtdO/60J4DwpII1Hwjn9 5PBXOxi8E9KNdVPWE8KAbwyAZe6OT3jXWFvlqLnUmS1gw5K5oC8oT4c9vCELU/Uu h0LbprdWOn83GBnSaEXjXE8dkrCIB8hiyuuNLDUsyXhiHy3FAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEapUMWyXtfqFATEwjyA13HHcleRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NTNi NWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThlMGJkYzljYTkvZWQ4MTY3NmMtMTNiZS0z ZTkwLTk3ZDUtZGY4NThhMTNjMTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDUzYjVlYWItM2NkNS00NzlhLWI1 YmEtYmE4ZTBiZGM5Y2E5LzQ1M2I1ZWFiLTNjZDUtNDc5YS1iNWJhLWJhOGUwYmRj OWNhOS5jcmwwHwYDVR0jBBgwFoAUh4QPPiiN6/rAWHOqdzMqBhXT3AcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NTNiNWVhYi0zY2Q1LTQ3OWEtYjViYS1iYThl MGJkYzljYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwPMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoRbceRhB25ERfrZnSKd93wQQG6NNNReOJmtw8W0N37CetT4yyudlne 9R23LacmEGX531en0rpkc7WssB6wfcq5k1L9oiwh1R+1DNVwvGQ0ThMZxPuW8ELP OUD2J/5CsquivnNgh73nFLcNjae06PtPniSh91w18Lmq1G6vhS3M18QLr33H2O+D oI6+pwUVgbtkS7+chN25+3pVpgM6wjzTFx/YHvCploIV+d/takYCbytS5E/DrerO uDr+LRAqnjSAv4ClWTTqI0q6nhPabNWWdqI7lqXkHOeEYKkk66Ot2VBfTo8/AQKa fYM4NIoxpqjajbtMbk4Be1+4sHIjAG8= -----END CERTIFICATE-----Generated at Sat Aug 23 22:56:45 2025 by rpki-client