$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0436add1-1eac-3400-9b5e-4867f21821e1.roa File: 0436add1-1eac-3400-9b5e-4867f21821e1.roa (raw, json) Hash identifier: bosIXxt2K5IgNZD7lRpjW3KpKK4fuOF/nv87u8lm8ss= Subject key identifier: EF:C8:33:42:FF:CF:D0:A9:61:9D:2A:7D:0B:61:95:E4:AB:4C:53:6F Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584AC2E10B4B4BBECAED33085C00 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0436add1-1eac-3400-9b5e-4867f21821e1.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 16696 IP address blocks: 168.245.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:0b:4b:4b:be:ca:ed:33:08:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=5cff83aa-3de7-4885-8c28-76d747f2c6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:eb:48:ef:1b:4a:d6:64:0f:f5:9f:d1:86:32: 1e:50:18:ab:14:f9:ab:19:02:fd:96:bf:cf:32:73: 71:2f:08:6a:25:73:69:52:a5:c1:4d:d1:e4:b6:3f: ea:2d:ef:3f:01:97:24:81:83:1c:6d:d1:f6:a2:ed: b6:42:00:24:af:02:e5:21:44:86:64:6a:9c:28:d9: 8a:6f:e5:fb:50:82:9f:49:ea:07:a4:a2:00:d0:28: 94:4a:d9:45:77:26:b9:4d:3e:1c:a3:65:78:40:89: 75:83:56:2d:41:1f:51:1c:2a:3f:43:e2:d9:1f:70: 6b:bd:61:e8:ea:22:41:3b:98:fc:8c:44:35:6b:b9: 6b:f2:eb:a2:45:5e:af:66:61:c8:eb:58:c5:2d:6b: f8:a2:42:7e:52:99:fa:c4:f4:34:9a:e5:c1:9b:24: d8:98:c4:61:38:a9:28:63:8e:a0:b4:79:7c:93:2f: 09:1e:5c:fc:10:ff:02:17:7a:33:60:7a:75:4b:6b: 97:6e:bc:6d:94:b9:89:a6:a7:95:28:d8:3f:94:e6: aa:97:c9:35:a4:b5:45:05:b4:0e:b9:24:12:b2:1d: 0c:5b:af:f2:b7:bc:2b:1a:b6:9b:0d:e4:b6:4e:06: d6:b9:5d:c2:b6:e9:a0:9c:52:9c:b2:62:e8:19:27: 39:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C8:33:42:FF:CF:D0:A9:61:9D:2A:7D:0B:61:95:E4:AB:4C:53:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0436add1-1eac-3400-9b5e-4867f21821e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 168.245.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:58:d9:82:6d:7e:4b:be:8b:ea:b3:08:ad:f9:e5:2b:0d:02: 32:75:bb:d6:ad:3f:3c:26:95:b9:da:c1:4a:e3:27:56:10:2e: 70:ea:7e:ac:d8:c0:0f:6c:cb:80:a1:6f:9d:9d:7e:3c:5a:b7: 47:1f:5f:8e:13:58:8a:3d:16:4a:97:2c:db:52:8f:db:55:04: c7:55:0c:6e:56:85:1d:84:36:d6:8f:dd:6c:39:69:b3:75:26: ad:db:d4:a9:f8:66:5b:cb:f7:f2:29:27:ae:74:b8:c6:89:21: 9a:81:9b:7c:6a:cd:69:a3:28:26:88:66:9a:2a:b1:3c:a1:7b: 81:c2:ec:65:88:c5:0d:d3:a7:f4:1a:82:39:95:12:3d:bd:ae: c3:4c:09:80:05:06:ce:e6:8a:60:8d:ec:ac:d3:e9:9d:67:89: d7:5d:1d:fd:3a:7f:94:1a:37:ce:c5:ec:e7:a6:e4:89:6c:be: 78:a1:ab:c9:f3:fd:14:01:f8:c3:67:71:24:48:26:39:ee:c9: f4:1b:83:84:35:a9:d1:c9:d0:e8:95:30:ed:84:8f:ee:8d:95: d2:dc:13:25:bc:40:38:76:91:73:df:8c:15:8a:b5:c4:95:b2: 3e:8b:64:79:20:18:58:ca:84:4a:52:2b:e0:17:fe:50:e3:06: ae:5e:8a:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4QtLS77K7TMIXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NWNmZjgzYWEtM2RlNy00ODg1LThjMjgtNzZkNzQ3ZjJjNmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5utI7xtK1mQP9Z/RhjIeUBirFPmrGQL9lr/P MnNxLwhqJXNpUqXBTdHktj/qLe8/AZckgYMcbdH2ou22QgAkrwLlIUSGZGqcKNmK b+X7UIKfSeoHpKIA0CiUStlFdya5TT4co2V4QIl1g1YtQR9RHCo/Q+LZH3BrvWHo 6iJBO5j8jEQ1a7lr8uuiRV6vZmHI61jFLWv4okJ+Upn6xPQ0muXBmyTYmMRhOKko Y46gtHl8ky8JHlz8EP8CF3ozYHp1S2uXbrxtlLmJpqeVKNg/lOaql8k1pLVFBbQO uSQSsh0MW6/yt7wrGrabDeS2TgbWuV3CtumgnFKcsmLoGSc57QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/IM0L/z9CpYZ0qfQthleSrTFNvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMDQzNmFkZDEtMWVhYy0z NDAwLTliNWUtNDg2N2YyMTgyMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPXGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVY2YJtfku+i+qzCK355SsNAjJ1u9atPzwmlbnawUrjJ1YQLnDqfqzY wA9sy4Chb52dfjxat0cfX44TWIo9FkqXLNtSj9tVBMdVDG5WhR2ENtaP3Ww5abN1 Jq3b1Kn4ZlvL9/IpJ650uMaJIZqBm3xqzWmjKCaIZpoqsTyhe4HC7GWIxQ3Tp/Qa gjmVEj29rsNMCYAFBs7mimCN7KzT6Z1nidddHf06f5QaN87F7Oem5Ilsvnihq8nz /RQB+MNncSRIJjnuyfQbg4Q1qdHJ0OiVMO2Ej+6NldLcEyW8QDh2kXPfjBWKtcSV sj6LZHkgGFjKhEpSK+AX/lDjBq5eipA= -----END CERTIFICATE-----Generated at Wed Aug 6 12:39:39 2025 by rpki-client