$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa File: 5b65963c-d23f-31a3-b848-4132887683b8.roa (raw, json) Hash identifier: gVG6GHg/krZ6dmbLe9vWsclJ73rZBWdSMjSYCcvb7U4= Subject key identifier: F7:02:F5:4A:B0:C5:7D:FB:63:6B:F1:C6:7B:C8:F0:D7:45:90:4C:5F Certificate issuer: /CN=c966e577-4964-41bf-aced-835168bef4f1 Certificate serial: 010D0C9F4328584AC5AB899194D1A1E7B612F100 Authority key identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 395400 IP address blocks: 168.123.0.0/16 maxlen: 17 192.149.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:89:91:94:d1:a1:e7:b6:12:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c966e577-4964-41bf-aced-835168bef4f1 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=1702f9a7-0d18-4da3-8837-0d1a3337e51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:83:db:eb:61:54:ff:a4:e2:aa:bb:1d:de:3c: a6:e5:d5:44:c0:ac:0e:cf:db:06:ba:9a:3c:50:7b: d7:78:38:a5:b0:ee:e9:2a:4f:90:14:f3:97:e0:1b: 41:8c:ba:bb:7e:d3:9c:64:7b:73:01:80:49:81:b6: 13:30:69:64:36:33:8d:8b:9b:ab:14:03:1f:b5:3d: 35:61:e0:2c:60:00:96:49:27:1d:01:82:35:99:ae: d3:ae:17:35:e8:56:21:ab:73:32:ab:ea:f9:86:a8: d1:0a:d0:31:91:0c:ac:a7:cf:f9:ac:c8:a3:ec:05: f2:09:4b:30:61:2c:56:eb:01:f7:b6:fd:35:4c:13: e8:38:8f:e5:a8:31:ce:7d:4c:2e:3a:1f:79:ad:31: 30:06:9f:1e:7a:d2:c5:9b:3f:6a:70:5c:4c:f8:7b: 4c:2f:62:73:86:24:39:c3:42:cb:a4:6c:8b:7c:68: 5e:5f:93:53:17:c3:3f:95:95:52:a8:e4:d4:15:89: b0:d5:43:0c:a6:a6:16:6d:cb:e9:51:bb:23:7d:de: c3:a5:6a:5a:08:92:05:8d:58:74:ef:f4:4f:51:3c: fc:0d:ee:5c:ac:09:c3:2a:45:08:ff:1a:14:25:55: 7e:c7:fa:53:4a:0b:d1:56:f5:c9:99:6b:39:f0:fa: 71:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:02:F5:4A:B0:C5:7D:FB:63:6B:F1:C6:7B:C8:F0:D7:45:90:4C:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl X509v3 Authority Key Identifier: keyid:2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer sbgp-ipAddrBlock: critical IPv4: 168.123.0.0/16 192.149.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:7a:a2:e5:5b:42:89:60:af:94:d3:24:b4:d3:cd:88:c6:db: 29:59:c4:d8:d5:96:18:3b:25:c9:ca:e8:cf:ea:35:1c:c1:df: 76:e5:7a:d7:f0:ec:57:fb:46:f5:a5:81:b9:81:de:9f:a2:cf: b7:33:52:b1:11:e3:27:e5:0a:3f:c9:22:29:40:d4:f0:07:5a: 8f:18:da:ee:8d:24:fd:a6:25:2d:81:55:bc:ce:83:c8:50:de: 24:73:90:d8:fe:9b:4b:52:3e:f3:40:b4:3b:9c:2d:d1:86:90: 35:e3:c3:53:0b:55:21:3c:f0:fb:85:78:67:ad:6a:96:2a:21: 33:f5:7d:74:fa:d5:b5:34:ef:56:95:13:bc:26:75:2c:f6:ba: ae:9f:fb:5a:46:d9:8f:ba:09:59:80:a5:96:91:6a:4b:45:e6: b2:29:5b:b4:08:91:be:55:eb:c8:f6:94:2b:80:c1:2b:50:95: 18:99:74:db:cc:95:c8:d3:fd:d7:75:4e:d7:e4:19:dd:db:27: 11:30:28:0e:61:15:49:7a:7d:9b:28:e5:0c:b1:22:62:4e:0c: 6c:6a:36:1e:41:6a:09:c4:b8:e7:a7:b9:82:7a:09:8f:51:fe: 5b:3f:cc:a1:4a:a5:f7:a2:1b:68:62:74:95:72:4a:0a:ee:5a: ad:bd:2b:99 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWErFq4mRlNGh57YS8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk2NmU1NzctNDk2NC00MWJmLWFjZWQtODM1MTY4YmVm NGYxMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MTcwMmY5YTctMGQxOC00ZGEzLTg4MzctMGQxYTMzMzdlNTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoPb62FU/6Tiqrsd3jym5dVEwKwOz9sGupo8 UHvXeDilsO7pKk+QFPOX4BtBjLq7ftOcZHtzAYBJgbYTMGlkNjONi5urFAMftT01 YeAsYACWSScdAYI1ma7Trhc16FYhq3Myq+r5hqjRCtAxkQysp8/5rMij7AXyCUsw YSxW6wH3tv01TBPoOI/lqDHOfUwuOh95rTEwBp8eetLFmz9qcFxM+HtML2JzhiQ5 w0LLpGyLfGheX5NTF8M/lZVSqOTUFYmw1UMMpqYWbcvpUbsjfd7DpWpaCJIFjVh0 7/RPUTz8De5crAnDKkUI/xoUJVV+x/pTSgvRVvXJmWs58Ppx4QIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFPcC9UqwxX37Y2vxxnvI8NdFkExfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2 ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUxNjhiZWY0ZjEvNWI2NTk2M2MtZDIzZi0z MWEzLWI4NDgtNDEzMjg4NzY4M2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzk2NmU1NzctNDk2NC00MWJmLWFj ZWQtODM1MTY4YmVmNGYxL2M5NjZlNTc3LTQ5NjQtNDFiZi1hY2VkLTgzNTE2OGJl ZjRmMS5jcmwwHwYDVR0jBBgwFoAULQ3aREnxHebf8ZdH9KV9jx6KcV0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUx NjhiZWY0ZjEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAqHsDBADA lcowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAHXqi5VtCiWCvlNMktNPNiMbbKVnE2NWWGDslycroz+o1HMHf duV61/DsV/tG9aWBuYHen6LPtzNSsRHjJ+UKP8kiKUDU8Adajxja7o0k/aYlLYFV vM6DyFDeJHOQ2P6bS1I+80C0O5wt0YaQNePDUwtVITzw+4V4Z61qliohM/V9dPrV tTTvVpUTvCZ1LPa6rp/7WkbZj7oJWYCllpFqS0XmsilbtAiRvlXryPaUK4DBK1CV GJl028yVyNP913VO1+QZ3dsnETAoDmEVSXp9myjlDLEiYk4MbGo2HkFqCcS456e5 gnoJj1H+Wz/MoUql96IbaGJ0lXJKCu5arb0rmQ== -----END CERTIFICATE-----Generated at Thu Aug 7 23:56:12 2025 by rpki-client