$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/135e9a6b-d871-31bd-aedc-3aee5546ac72.roa File: 135e9a6b-d871-31bd-aedc-3aee5546ac72.roa (raw, json) Hash identifier: SK1bRFvVUvEjSqAn81HPqm4lFnjLHTODSKrYqebZsrc= Subject key identifier: B2:B2:0C:A0:E4:97:0F:66:2B:8A:A4:BE:68:1A:9D:E9:86:43:F4:8E Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584ABD4B929CB8DD27F7B7662240 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/135e9a6b-d871-31bd-aedc-3aee5546ac72.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 16696 IP address blocks: 148.59.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:92:9c:b8:dd:27:f7:b7:66:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=b775c89b-a058-4563-8be5-78699760b438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e4:d8:ac:f7:e4:70:5a:53:a7:ee:68:32:4c: 88:a0:c0:64:80:14:5f:63:30:40:30:64:98:ba:a9: 85:b5:df:a1:bc:5f:f8:9d:d0:34:61:e6:b4:07:66: dc:0a:ac:33:cb:0b:0f:63:ca:df:73:a6:5b:ef:d4: 0e:33:9c:db:f4:d1:3d:92:0c:56:d3:22:d4:b8:7e: 28:21:fa:f9:af:ed:34:d6:32:c1:64:45:55:df:93: d0:6a:7f:cf:6c:63:05:eb:63:bb:a1:14:16:bb:e7: 09:27:8a:cb:65:ad:16:1a:3b:f4:bd:9f:0b:fb:6d: 89:b1:f8:eb:bd:35:85:d8:66:49:57:a8:68:20:49: f9:4a:a4:1e:58:fa:79:9a:29:d5:9b:7c:eb:82:15: 84:71:16:6a:3b:d3:16:e6:45:45:04:8b:2d:c3:26: d6:0c:77:3f:02:31:17:a3:3c:fe:3f:5b:09:f0:30: 65:fa:bf:fe:3b:2b:49:3c:9e:24:9e:b5:92:1e:9b: a7:30:c9:ba:1b:d6:76:c5:87:a1:90:c1:7b:fb:91: 61:8f:0e:b2:92:cf:d8:17:a0:6e:2a:c6:f8:d1:93: 93:22:7e:f7:ec:e6:16:11:bf:a3:14:04:8a:65:22: 1a:96:15:8f:d0:94:4a:d5:75:f5:e3:10:11:72:4c: 26:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B2:0C:A0:E4:97:0F:66:2B:8A:A4:BE:68:1A:9D:E9:86:43:F4:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/135e9a6b-d871-31bd-aedc-3aee5546ac72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 148.59.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:71:ef:b2:ed:c9:0c:19:fc:57:be:27:ff:b1:84:fd:5d:e5: c5:66:ce:de:3a:ba:f8:59:de:24:2f:c1:c5:a3:94:18:30:7f: 1b:41:b7:2c:8c:a8:84:24:ce:23:b8:dd:06:1a:5c:2c:b6:79: 68:f3:fc:2c:9c:7a:fc:71:23:5d:a8:fc:38:3e:f6:1e:b9:0d: ac:c9:ec:40:4b:bf:b0:3e:73:a8:52:47:e3:c7:23:36:90:ad: 49:07:ae:e4:c0:8e:61:f6:00:d1:dc:5f:cb:65:46:1c:44:88: ee:22:9e:7a:20:68:33:05:b2:fc:17:49:18:3e:29:7a:ba:0b: 70:c3:a2:ff:8b:55:8a:9c:2a:cd:90:a8:33:fe:01:46:db:88: de:7b:4b:13:65:87:99:81:51:83:26:05:de:73:97:38:18:08: 12:b8:d6:08:d8:9e:85:79:80:06:c6:70:ca:30:d9:0e:39:63: d0:6a:3e:72:a7:ab:e5:b0:c1:25:92:1a:d5:4a:38:0f:9a:f9: c3:c9:a3:86:91:d3:cd:e9:0d:ac:b1:05:d1:84:b9:17:aa:0e: e4:27:ed:ea:0a:79:35:25:a1:1c:9f:cb:fb:0a:e8:7a:16:8e: 13:d9:fe:a7:e7:25:90:af:fe:9d:1d:12:da:2b:c6:61:b3:97: 30:df:13:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5KcuN0n97dmIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk Yjc3NWM4OWItYTA1OC00NTYzLThiZTUtNzg2OTk3NjBiNDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+TYrPfkcFpTp+5oMkyIoMBkgBRfYzBAMGSY uqmFtd+hvF/4ndA0Yea0B2bcCqwzywsPY8rfc6Zb79QOM5zb9NE9kgxW0yLUuH4o Ifr5r+001jLBZEVV35PQan/PbGMF62O7oRQWu+cJJ4rLZa0WGjv0vZ8L+22Jsfjr vTWF2GZJV6hoIEn5SqQeWPp5minVm3zrghWEcRZqO9MW5kVFBIstwybWDHc/AjEX ozz+P1sJ8DBl+r/+OytJPJ4knrWSHpunMMm6G9Z2xYehkMF7+5Fhjw6yks/YF6Bu Ksb40ZOTIn737OYWEb+jFASKZSIalhWP0JRK1XX14xARckwmGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKyDKDklw9mK4qkvmganemGQ/SOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMTM1ZTlhNmItZDg3MS0z MWJkLWFlZGMtM2FlZTU1NDZhYzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDu0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdx77LtyQwZ/Fe+J/+xhP1d5cVmzt46uvhZ3iQvwcWjlBgwfxtBtyyM qIQkziO43QYaXCy2eWjz/CycevxxI12o/Dg+9h65DazJ7EBLv7A+c6hSR+PHIzaQ rUkHruTAjmH2ANHcX8tlRhxEiO4innogaDMFsvwXSRg+KXq6C3DDov+LVYqcKs2Q qDP+AUbbiN57SxNlh5mBUYMmBd5zlzgYCBK41gjYnoV5gAbGcMow2Q45Y9BqPnKn q+WwwSWSGtVKOA+a+cPJo4aR083pDayxBdGEuReqDuQn7eoKeTUloRyfy/sK6HoW jhPZ/qfnJZCv/p0dEtorxmGzlzDfE6A= -----END CERTIFICATE-----Generated at Mon Aug 4 15:37:08 2025 by rpki-client