$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/75c92172-6911-32c6-b7a8-a35de8403ddd.roa File: 75c92172-6911-32c6-b7a8-a35de8403ddd.roa (raw, json) Hash identifier: d1t/Qxj7C0mXuK3GwsDj28pLnMz1j/l6Hf6fhxO3cgU= Subject key identifier: B3:58:6F:AF:9B:F7:B0:F5:C7:50:03:17:47:46:1E:72:2F:31:AB:DD Certificate issuer: /CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Certificate serial: 010D0C9F4328584AB220D556D1279C316D503480 Authority key identifier: 34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/75c92172-6911-32c6-b7a8-a35de8403ddd.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 397301 IP address blocks: 172.99.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:d5:56:d1:27:9c:31:6d:50:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=4f10a9ec-02c7-44b4-91ec-a32f7ef78daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4d:aa:14:e6:b4:2c:35:a9:f1:15:42:fb:ec: 22:ef:2c:e0:bb:5b:e6:cf:f0:f0:88:67:ee:fb:2a: 66:ba:6d:87:45:5d:77:6f:fa:47:52:89:c5:3f:45: 7d:13:1c:35:31:48:0a:9c:6a:d9:13:5c:41:26:dc: 54:a8:27:3f:6f:5f:7b:ac:1b:a5:de:42:16:6c:ed: de:81:04:aa:47:43:37:94:00:c5:3d:60:1a:92:ab: 01:b3:a1:b8:15:d0:52:44:98:b0:3a:d7:35:c5:c5: c0:8e:bf:c2:8c:26:69:9c:9c:21:3d:62:5b:2d:dc: b0:c5:f9:bd:54:20:2d:8e:db:c1:b8:cc:0b:d9:bc: bc:9f:b2:dd:16:af:bc:c2:7e:9d:d9:16:49:cb:ac: 9b:d2:13:f4:9e:e6:bb:76:2d:f7:3a:55:08:26:01: 81:f7:d3:ff:8c:a5:92:54:f7:5a:48:0c:f2:7d:a7: 88:04:c0:17:62:6f:2c:f8:b0:a3:69:45:cf:cf:3a: d9:60:db:e9:34:4c:63:2f:6f:7e:fc:80:cf:7d:1e: 85:27:2f:37:ea:52:72:40:15:fb:60:fe:85:c4:7c: 49:2d:c1:5d:12:ec:07:6a:e7:8c:ed:2f:25:b8:b2: b3:4d:8c:f2:ac:74:29:a5:fd:18:ff:c6:08:62:9c: 1d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:58:6F:AF:9B:F7:B0:F5:C7:50:03:17:47:46:1E:72:2F:31:AB:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/75c92172-6911-32c6-b7a8-a35de8403ddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl X509v3 Authority Key Identifier: keyid:34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:f7:4c:15:c9:de:25:31:c0:d3:55:41:48:22:20:6c:cb:76: 00:c5:a1:35:44:15:fa:2f:55:22:e8:fc:91:06:50:9c:f3:b0: 5a:a0:a2:77:b2:db:14:d1:bd:45:a5:ff:b5:aa:d2:78:4a:a0: a5:c8:7f:2b:92:a6:d1:fd:e9:1d:a9:37:0f:de:28:ef:c1:03: 67:a3:5b:0a:52:09:fa:5d:07:f5:93:c7:69:a0:82:74:41:0c: 15:28:46:8b:f4:69:aa:c7:de:85:0c:84:f3:2f:92:e5:a6:a6: 46:c0:a9:9a:a6:30:44:6c:93:fc:2d:d0:d3:1f:e8:c7:7e:9e: 8e:0d:cc:39:28:bf:df:51:24:47:7e:96:5e:90:d2:f3:92:8c: ff:b5:f2:7a:7f:26:5a:32:8c:59:dd:31:4e:2e:eb:cb:ac:5d: b5:fe:9d:80:88:98:cb:af:1a:d5:e2:58:0b:bc:44:8b:9a:bc: 8e:7d:b1:5e:ed:47:90:5f:74:dc:8e:95:0d:2f:5a:f3:07:cc: 88:a2:f1:b3:b8:e4:2f:15:7e:ce:a4:4c:cd:07:6f:da:45:88: 10:05:c8:ce:16:43:3d:d3:7e:05:40:bd:60:a9:9c:32:ea:e6: af:f6:e9:59:84:03:da:94:96:88:4f:30:ec:9d:d4:37:b2:f9: b6:86:a0:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyINVW0SecMW1QNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFkOWMyYzEtOGZiMy00YjM4LWI2ZDYtOTc5OWI0ZTM3 NzJmMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk NGYxMGE5ZWMtMDJjNy00NGI0LTkxZWMtYTMyZjdlZjc4ZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk2qFOa0LDWp8RVC++wi7yzgu1vmz/DwiGfu +ypmum2HRV13b/pHUonFP0V9Exw1MUgKnGrZE1xBJtxUqCc/b197rBul3kIWbO3e gQSqR0M3lADFPWAakqsBs6G4FdBSRJiwOtc1xcXAjr/CjCZpnJwhPWJbLdywxfm9 VCAtjtvBuMwL2by8n7LdFq+8wn6d2RZJy6yb0hP0nua7di33OlUIJgGB99P/jKWS VPdaSAzyfaeIBMAXYm8s+LCjaUXPzzrZYNvpNExjL29+/IDPfR6FJy836lJyQBX7 YP6FxHxJLcFdEuwHaueM7S8luLKzTYzyrHQppf0Y/8YIYpwdowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNYb6+b97D1x1ADF0dGHnIvMavdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5 YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5YjRlMzc3MmYvNzVjOTIxNzItNjkxMS0z MmM2LWI3YTgtYTM1ZGU4NDAzZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzFkOWMyYzEtOGZiMy00YjM4LWI2 ZDYtOTc5OWI0ZTM3NzJmL2MxZDljMmMxLThmYjMtNGIzOC1iNmQ2LTk3OTliNGUz NzcyZi5jcmwwHwYDVR0jBBgwFoAUNNJmkHdIRAEZdNNZ14UVxtrMrM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5 YjRlMzc3MmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANL3TBXJ3iUxwNNVQUgiIGzLdgDFoTVEFfovVSLo/JEGUJzzsFqgoney 2xTRvUWl/7Wq0nhKoKXIfyuSptH96R2pNw/eKO/BA2ejWwpSCfpdB/WTx2mggnRB DBUoRov0aarH3oUMhPMvkuWmpkbAqZqmMERsk/wt0NMf6Md+no4NzDkov99RJEd+ ll6Q0vOSjP+18np/JloyjFndMU4u68usXbX+nYCImMuvGtXiWAu8RIuavI59sV7t R5BfdNyOlQ0vWvMHzIii8bO45C8Vfs6kTM0Hb9pFiBAFyM4WQz3TfgVAvWCpnDLq 5q/26VmEA9qUlohPMOyd1Dey+baGoOU= -----END CERTIFICATE-----Generated at Wed Aug 6 10:14:17 2025 by rpki-client