$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2229e800-e3ef-3957-8380-86d3c1d9f0c2.roa File: 2229e800-e3ef-3957-8380-86d3c1d9f0c2.roa (raw, json) Hash identifier: 2rr5YHlbjiYeHiuBKKCboNVd7PJXGqoXKhMoaZE3xG4= Subject key identifier: 2C:F8:28:8F:7F:C6:DC:AE:DC:7E:AE:50:44:4F:1D:45:00:D2:AC:CC Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584ABD4B92B15B409D0B89448880 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2229e800-e3ef-3957-8380-86d3c1d9f0c2.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 16696 IP address blocks: 148.59.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:92:b1:5b:40:9d:0b:89:44:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=fbbe64c1-b388-4619-ba55-abd172deee66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:33:65:64:be:53:27:b4:5a:18:62:b1:b1:f5: d7:3a:e0:02:8e:78:45:ed:39:8c:e4:c4:d5:d6:2f: d4:0f:91:49:73:da:ac:91:01:06:de:f5:6e:d8:d2: 5a:0b:a7:a1:35:01:91:41:56:a6:80:78:4b:7e:b8: e5:8e:5e:98:87:28:e9:34:c3:15:74:0f:b6:d2:e4: 09:27:96:8d:aa:76:3f:78:b7:62:3b:25:f6:55:eb: 97:46:3a:90:08:23:de:cb:48:40:db:c8:72:74:07: 72:c9:e9:99:ef:54:3c:3a:aa:e0:53:99:85:1a:1c: 25:ef:17:e6:ca:88:ce:9c:39:7b:aa:d7:3f:ea:5a: 17:73:04:a4:e0:f1:50:51:f5:bb:59:a1:48:a5:2e: 5e:ba:bb:5d:a0:83:eb:3f:26:cd:c0:d8:5a:6f:c9: 10:7f:77:8f:d6:63:b0:04:b2:c5:4b:fb:ad:04:ec: 9c:88:b9:1b:7f:b3:b8:4b:50:0c:5e:b7:4a:50:95: 15:f6:57:13:07:70:73:da:ec:46:b1:8f:8d:11:0e: 7a:97:8e:3d:fb:83:a1:20:60:26:9b:be:10:1f:0e: f0:88:a5:aa:41:cc:0b:5a:96:90:9c:ab:28:c4:88: ea:0a:0f:61:d2:58:ed:96:20:bb:95:f6:a7:55:9f: 53:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F8:28:8F:7F:C6:DC:AE:DC:7E:AE:50:44:4F:1D:45:00:D2:AC:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2229e800-e3ef-3957-8380-86d3c1d9f0c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 148.59.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:9c:91:f0:0c:57:00:95:8b:29:aa:4b:f2:7b:c5:a7:b0:b1: 13:83:86:6f:4f:9e:4c:a0:78:f9:78:e3:60:69:31:c9:c7:f8: 19:2f:38:84:f8:58:b2:17:6d:96:af:54:3e:00:59:13:9d:75: a8:5d:d2:f0:76:b6:91:35:42:2d:35:4d:5f:05:fb:c0:8d:53: 61:7e:b9:db:98:23:fb:81:8b:c2:97:74:38:51:ef:f5:21:57: 6c:3c:fc:db:aa:7f:82:0f:2d:6a:08:d1:ce:04:c8:7f:38:f8: a1:24:28:4e:bd:72:b2:96:ac:2f:2b:57:1f:3f:61:5b:13:25: 46:14:fd:1b:03:df:af:b9:1f:97:1e:29:96:4c:e3:62:db:d4: d5:0d:fc:0b:a6:2f:8b:7f:c4:28:4c:eb:20:76:ec:49:dd:ef: bd:86:03:02:b9:f9:64:26:33:9b:4b:da:5f:a5:02:3d:5b:15: 5c:09:70:84:9a:55:2f:1c:88:c5:50:b5:5a:74:69:5a:02:5f: 67:01:7d:0b:16:f4:d7:5c:dd:f5:89:51:7e:a7:50:af:a3:a0: 1e:08:1e:8d:8b:04:4e:87:71:70:7f:dc:7a:8a:63:c6:5f:19: 0b:c2:16:85:0c:de:56:9a:f8:07:75:c2:44:e6:42:b5:a8:0c: d3:4d:8d:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5KxW0CdC4lEiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZmJiZTY0YzEtYjM4OC00NjE5LWJhNTUtYWJkMTcyZGVlZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjNlZL5TJ7RaGGKxsfXXOuACjnhF7TmM5MTV 1i/UD5FJc9qskQEG3vVu2NJaC6ehNQGRQVamgHhLfrjljl6YhyjpNMMVdA+20uQJ J5aNqnY/eLdiOyX2VeuXRjqQCCPey0hA28hydAdyyemZ71Q8OqrgU5mFGhwl7xfm yojOnDl7qtc/6loXcwSk4PFQUfW7WaFIpS5eurtdoIPrPybNwNhab8kQf3eP1mOw BLLFS/utBOyciLkbf7O4S1AMXrdKUJUV9lcTB3Bz2uxGsY+NEQ56l449+4OhIGAm m74QHw7wiKWqQcwLWpaQnKsoxIjqCg9h0ljtliC7lfanVZ9T3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCz4KI9/xtyu3H6uUERPHUUA0qzMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMjIyOWU4MDAtZTNlZi0z OTU3LTgzODAtODZkM2MxZDlmMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDu1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2ckfAMVwCViymqS/J7xaewsRODhm9PnkygePl442BpMcnH+BkvOIT4 WLIXbZavVD4AWROddahd0vB2tpE1Qi01TV8F+8CNU2F+uduYI/uBi8KXdDhR7/Uh V2w8/Nuqf4IPLWoI0c4EyH84+KEkKE69crKWrC8rVx8/YVsTJUYU/RsD36+5H5ce KZZM42Lb1NUN/AumL4t/xChM6yB27End772GAwK5+WQmM5tL2l+lAj1bFVwJcISa VS8ciMVQtVp0aVoCX2cBfQsW9Ndc3fWJUX6nUK+joB4IHo2LBE6HcXB/3HqKY8Zf GQvCFoUM3laa+Ad1wkTmQrWoDNNNjcU= -----END CERTIFICATE-----Generated at Mon Aug 4 16:04:54 2025 by rpki-client