$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/a9457a3d-56de-3e38-ab7a-0babba50c0c9.roa File: a9457a3d-56de-3e38-ab7a-0babba50c0c9.roa (raw, json) Hash identifier: fIvH+OeKwDXJ/3n3iceHvRC3xESxjjEOmZfStPyvhhU= Subject key identifier: A9:EA:80:17:37:81:B2:5A:F1:85:90:40:73:FE:BE:CD:7F:93:8E:B2 Certificate issuer: /CN=2831c461-e175-4265-a0ea-565d8e6179b8 Certificate serial: 010D0C9F4328584AF10A4A98CF12AF295A108010 Authority key identifier: 3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/a9457a3d-56de-3e38-ab7a-0babba50c0c9.roa Signing time: Fri 22 Aug 2025 13:51:19 +0000 ROA not before: Fri 22 Aug 2025 13:51:19 +0000 ROA not after: Thu 20 Nov 2025 14:51:19 +0000 asID: 36610 IP address blocks: 199.68.144.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:0a:4a:98:cf:12:af:29:5a:10:80:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2831c461-e175-4265-a0ea-565d8e6179b8 Validity Not Before: Aug 22 13:51:19 2025 GMT Not After : Nov 20 14:51:19 2025 GMT Subject: CN=3ea6125e-d16c-4ad0-aa88-441363b8be14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:35:f0:48:f6:b6:a2:64:86:0a:77:d2:3f:e8: c5:4b:59:d9:79:60:0c:f4:1f:6f:d5:9b:03:c9:2e: 43:d2:39:d1:fe:24:4a:50:e8:3d:5c:3c:9f:3e:2a: 45:d0:47:93:f1:fa:f7:73:c3:ec:68:60:51:25:69: 6f:f6:b0:af:08:8d:ce:e5:d3:70:41:0d:f4:c1:7b: 05:e1:e2:7f:2b:60:d5:7c:87:84:d4:9e:c4:e3:75: e2:ae:10:23:b1:b5:1b:1c:82:87:e0:46:f0:49:7b: 6f:f5:e4:e3:f1:18:a3:28:c9:01:7d:be:81:68:a3: 16:c8:7b:01:69:91:7b:78:90:61:99:86:ae:a1:e5: c7:dd:2e:f2:c1:89:63:65:d8:db:b7:16:6d:93:3f: ef:9e:91:d6:39:d9:07:1c:3b:ea:da:e8:29:2e:a3: 63:f9:9b:c2:5c:28:49:44:52:8f:e4:b9:87:71:56: f7:01:7f:5f:0c:a6:9c:df:8e:69:e1:50:ce:d7:3b: 8b:26:5a:6b:25:57:41:d3:81:d5:18:11:be:59:d0: 51:97:72:1a:80:b8:7f:d4:64:3c:f7:59:02:bb:e6: a5:d4:6b:dc:db:a4:13:fb:78:ad:51:bd:a0:f8:df: ea:15:8e:67:ef:c9:b1:cf:cf:c8:cd:7c:a5:91:18: e3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EA:80:17:37:81:B2:5A:F1:85:90:40:73:FE:BE:CD:7F:93:8E:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/a9457a3d-56de-3e38-ab7a-0babba50c0c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl X509v3 Authority Key Identifier: keyid:3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer sbgp-ipAddrBlock: critical IPv4: 199.68.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:9f:16:27:0c:4a:d8:a6:b2:b2:d4:eb:50:62:5d:67:0b:28: ad:ac:87:bb:8c:f1:ac:5f:ff:29:79:9a:12:07:53:18:cd:8d: 2f:14:bd:83:0c:9d:cc:b6:90:14:46:9e:09:bc:a9:7a:94:65: c4:86:8e:a5:10:74:a0:40:66:dc:a3:f4:91:b0:8e:ae:12:9d: f1:bf:0e:91:94:ab:01:91:f4:4d:b2:17:c2:7f:53:56:d1:77: 4c:e7:63:b4:0a:30:cb:c1:7d:c8:67:34:ec:4d:af:f8:92:fe: ec:62:5a:a5:b4:61:19:27:a2:75:2a:fe:fc:76:34:85:9c:e8: 27:fc:65:53:c4:9e:f3:38:52:f9:36:35:57:b2:be:18:e5:36: 3a:74:a6:07:e9:24:90:b7:03:d2:16:d3:bb:a8:40:fd:ba:96: dc:ac:37:1b:88:89:21:b6:0c:86:28:f2:3c:8a:00:86:3f:92: dc:f0:34:3c:46:66:a2:f7:c5:22:5e:ca:1d:db:c1:be:d9:50: ad:22:e0:2a:27:c9:47:6f:1c:47:da:3e:95:ff:9a:89:6f:7b: 2d:6a:a0:ca:b0:e7:fe:da:21:00:17:f1:35:12:cb:2a:de:0b: d5:7e:69:ea:88:9c:e5:76:7c:e7:7f:a7:b2:10:30:d5:e0:cf: 67:ae:30:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErxCkqYzxKvKVoQgBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgzMWM0NjEtZTE3NS00MjY1LWEwZWEtNTY1ZDhlNjE3 OWI4MB4XDTI1MDgyMjEzNTExOVoXDTI1MTEyMDE0NTExOVowLzEtMCsGA1UEAxMk M2VhNjEyNWUtZDE2Yy00YWQwLWFhODgtNDQxMzYzYjhiZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DXwSPa2omSGCnfSP+jFS1nZeWAM9B9v1ZsD yS5D0jnR/iRKUOg9XDyfPipF0EeT8fr3c8PsaGBRJWlv9rCvCI3O5dNwQQ30wXsF 4eJ/K2DVfIeE1J7E43XirhAjsbUbHIKH4EbwSXtv9eTj8RijKMkBfb6BaKMWyHsB aZF7eJBhmYauoeXH3S7ywYljZdjbtxZtkz/vnpHWOdkHHDvq2ugpLqNj+ZvCXChJ RFKP5LmHcVb3AX9fDKac345p4VDO1zuLJlprJVdB04HVGBG+WdBRl3IagLh/1GQ8 91kCu+al1Gvc26QT+3itUb2g+N/qFY5n78mxz8/IzXylkRjjGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnqgBc3gbJa8YWQQHP+vs1/k46yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODMx YzQ2MS1lMTc1LTQyNjUtYTBlYS01NjVkOGU2MTc5YjgvYTk0NTdhM2QtNTZkZS0z ZTM4LWFiN2EtMGJhYmJhNTBjMGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgzMWM0NjEtZTE3NS00MjY1LWEw ZWEtNTY1ZDhlNjE3OWI4LzI4MzFjNDYxLWUxNzUtNDI2NS1hMGVhLTU2NWQ4ZTYx NzliOC5jcmwwHwYDVR0jBBgwFoAUPbTzeq2Sc3Qop+VNhCPz1J+fhe8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODMxYzQ2MS1lMTc1LTQyNjUtYTBlYS01NjVk OGU2MTc5YjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0SQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOfFicMStimsrLU61BiXWcLKK2sh7uM8axf/yl5mhIHUxjNjS8UvYMM ncy2kBRGngm8qXqUZcSGjqUQdKBAZtyj9JGwjq4SnfG/DpGUqwGR9E2yF8J/U1bR d0znY7QKMMvBfchnNOxNr/iS/uxiWqW0YRknonUq/vx2NIWc6Cf8ZVPEnvM4Uvk2 NVeyvhjlNjp0pgfpJJC3A9IW07uoQP26ltysNxuIiSG2DIYo8jyKAIY/ktzwNDxG ZqL3xSJeyh3bwb7ZUK0i4ConyUdvHEfaPpX/molvey1qoMqw5/7aIQAX8TUSyyre C9V+aeqInOV2fOd/p7IQMNXgz2euMFA= -----END CERTIFICATE-----Generated at Sun Aug 24 01:23:26 2025 by rpki-client