$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa File: 4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa (raw, json) Hash identifier: dS0G1ehv2zoLgEk19uoEF/I+E0MiHE0KeWEx1oxj9e0= Subject key identifier: DC:F5:EA:C4:0E:81:83:D6:07:40:6E:9B:9D:BB:90:D9:5E:A5:AE:6B Certificate issuer: /CN=b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871 Certificate serial: 010D0C9F4328584AB91B99CDA25B6244EC693F40 Authority key identifier: DC:6A:15:2A:0F:A2:30:54:82:98:F4:66:63:43:97:EE:63:C4:FB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 16509 IP address blocks: 199.188.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:99:cd:a2:5b:62:44:ec:69:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=8b661b28-d27e-4c52-b98f-3fe311917905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:94:78:3b:a7:35:3a:ba:39:ff:bf:9f:23: bf:95:5f:53:af:58:87:03:00:09:f5:96:6a:1c:3c: 5f:e0:5f:0b:53:de:a6:a1:75:8c:c5:64:5f:8c:5e: f4:36:19:8f:e1:75:81:27:71:d2:7b:d5:f5:57:f2: 5a:84:03:28:bb:2d:0e:e7:1c:2f:30:85:3e:14:7e: 71:8a:ce:bb:4c:d4:3d:d6:08:ec:80:4e:55:13:a2: 52:3e:2e:30:28:ea:02:d1:fb:46:23:13:91:e5:25: 30:73:e0:62:2e:ed:36:d5:be:97:73:7a:20:ff:31: 29:63:8f:20:8d:6e:4f:b5:b4:05:ae:8d:98:45:c0: f2:a1:67:9e:2c:d8:f2:57:4e:c1:32:c6:6a:bb:76: c5:6c:51:cb:f7:a6:13:d5:95:5f:23:c8:34:a4:a4: c8:1f:8d:df:2e:56:6a:13:a7:a3:4f:0d:87:e6:e6: 63:cf:05:3f:b5:ff:cb:c3:de:a2:d0:b1:67:3d:df: dd:a6:e5:ff:46:42:12:a8:21:18:08:43:e6:d2:a7: b7:66:b7:a4:ab:ae:42:e3:cf:bc:05:fc:06:1f:e2: a7:2d:c7:16:ed:38:5f:36:b7:bd:86:20:c3:5e:24: f3:27:20:b7:99:fe:fe:3a:c1:c6:53:49:23:6a:36: 8b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F5:EA:C4:0E:81:83:D6:07:40:6E:9B:9D:BB:90:D9:5E:A5:AE:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.crl X509v3 Authority Key Identifier: keyid:DC:6A:15:2A:0F:A2:30:54:82:98:F4:66:63:43:97:EE:63:C4:FB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.cer sbgp-ipAddrBlock: critical IPv4: 199.188.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:6f:b9:c9:73:a0:6b:07:4f:7b:4d:01:aa:63:ec:37:07:fe: 51:20:75:9c:ab:4a:da:95:80:8e:0a:63:c7:64:c3:49:d0:45: ee:f8:ff:38:82:75:bd:e8:f4:b8:9f:b3:a8:f9:07:9c:20:5c: 9f:90:dc:a1:cb:46:3e:36:87:4a:42:7a:b2:ed:b6:c0:c0:f6: b8:18:5d:78:7f:51:8d:0e:9d:59:0f:56:77:8e:85:cd:66:fd: 3c:c4:ce:b0:f5:73:f7:83:d9:c7:dc:bf:3d:ac:d1:f2:78:a4: 26:4b:10:02:f8:1a:ea:02:d5:83:f3:d1:0f:c3:07:ed:1e:de: 12:b0:8f:a7:94:e3:8f:db:56:5d:5e:c2:46:df:dc:52:11:38: 76:cb:5c:5b:12:53:8f:77:89:65:2d:5d:5b:ca:36:d3:bd:19: 46:19:33:ce:e8:d5:5e:54:0b:47:e8:e4:e8:ae:8d:95:8d:1f: f3:bd:df:a2:09:97:b4:97:82:b0:e2:15:64:c0:65:8a:f1:c4: 75:55:33:de:c2:d1:ab:4a:1a:e5:7d:8f:b6:01:b3:e3:40:0d: ef:2a:92:1a:5a:d1:3f:2c:99:77:63:cb:7b:2f:b7:e5:5d:bf: 30:57:e7:a2:72:b1:18:e6:2c:04:cf:25:ba:53:90:6d:a5:39: ad:8a:bc:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G5nNoltiROxpP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkMGVkOGYtZmRmNC00YjI3LThkNGUtZWI0NGYyMWY3 ODcxMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk OGI2NjFiMjgtZDI3ZS00YzUyLWI5OGYtM2ZlMzExOTE3OTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSaUeDunNTq6Of+/nyO/lV9Tr1iHAwAJ9ZZq HDxf4F8LU96moXWMxWRfjF70NhmP4XWBJ3HSe9X1V/JahAMouy0O5xwvMIU+FH5x is67TNQ91gjsgE5VE6JSPi4wKOoC0ftGIxOR5SUwc+BiLu021b6Xc3og/zEpY48g jW5PtbQFro2YRcDyoWeeLNjyV07BMsZqu3bFbFHL96YT1ZVfI8g0pKTIH43fLlZq E6ejTw2H5uZjzwU/tf/Lw96i0LFnPd/dpuX/RkISqCEYCEPm0qe3Zrekq65C48+8 BfwGH+KnLccW7ThfNre9hiDDXiTzJyC3mf7+OsHGU0kjajaLnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNz16sQOgYPWB0Bum527kNlepa5rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNWQw ZWQ4Zi1mZGY0LTRiMjctOGQ0ZS1lYjQ0ZjIxZjc4NzEvNDE5MWE4NDAtYzNkNi0z ZWE5LWFkZDMtY2QyZmY3YzlhNzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjVkMGVkOGYtZmRmNC00YjI3LThk NGUtZWI0NGYyMWY3ODcxL2I1ZDBlZDhmLWZkZjQtNGIyNy04ZDRlLWViNDRmMjFm Nzg3MS5jcmwwHwYDVR0jBBgwFoAU3GoVKg+iMFSCmPRmY0OX7mPE+28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNWQwZWQ4Zi1mZGY0LTRiMjctOGQ0ZS1lYjQ0 ZjIxZjc4NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7ydMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBvuclzoGsHT3tNAapj7DcH/lEgdZyrStqVgI4KY8dkw0nQRe74/ziC db3o9Lifs6j5B5wgXJ+Q3KHLRj42h0pCerLttsDA9rgYXXh/UY0OnVkPVneOhc1m /TzEzrD1c/eD2cfcvz2s0fJ4pCZLEAL4GuoC1YPz0Q/DB+0e3hKwj6eU44/bVl1e wkbf3FIROHbLXFsSU493iWUtXVvKNtO9GUYZM87o1V5UC0fo5OiujZWNH/O936IJ l7SXgrDiFWTAZYrxxHVVM97C0atKGuV9j7YBs+NADe8qkhpa0T8smXdjy3svt+Vd vzBX56JysRjmLATPJbpTkG2lOa2KvDg= -----END CERTIFICATE-----Generated at Mon Aug 4 14:43:37 2025 by rpki-client