$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5819b85c-1290-392c-af04-a578ef8c63f4.roa File: 5819b85c-1290-392c-af04-a578ef8c63f4.roa (raw, json) Hash identifier: Td+2xxmGh4B7O9msin1bmkjt1Xm0EE4ro1DlPi8zpFI= Subject key identifier: 39:1A:5B:69:FD:C2:13:EE:40:53:B6:E1:43:38:D3:DE:D4:01:AA:9D Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584A89A614737C6B813AC06058E0 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5819b85c-1290-392c-af04-a578ef8c63f4.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 16433 IP address blocks: 162.43.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:14:73:7c:6b:81:3a:c0:60:58:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=40717b05-04c3-4370-af9e-d36205c6b3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:d2:85:9b:9b:9f:82:48:57:07:76:23:54: 79:45:ab:87:1c:f0:61:b4:fc:42:7b:cc:04:98:4a: 9e:fa:bc:dc:5e:de:e4:ea:74:8b:92:92:59:07:ae: 58:45:c9:77:58:02:86:53:01:d4:c1:d3:f5:b2:33: 35:e8:3d:21:04:cd:ac:c5:51:4a:c9:74:3d:71:02: d0:5a:73:fd:d0:ec:54:8e:4e:c1:8e:37:26:8c:eb: bb:86:66:2c:ab:05:57:28:a5:53:6f:5d:bc:3c:f6: a6:7e:e4:23:dd:59:e3:38:d9:70:75:bb:f4:3c:42: aa:fc:67:b2:41:c5:1c:f5:29:17:7b:a5:29:d1:51: b0:f4:49:e4:d0:b6:a4:d1:60:f3:10:9a:97:d1:96: 9b:07:ff:65:8b:c3:4d:38:b1:fd:0e:27:e0:c2:5d: de:a3:ea:5e:87:c9:2d:4d:f5:bc:56:1e:66:da:87: 22:27:9d:13:96:56:57:64:1f:74:59:2b:bc:dd:6e: 5e:34:3d:8c:e5:18:5a:4d:ec:f0:be:37:aa:88:35: a7:21:47:63:ad:57:81:ba:44:39:5d:04:22:84:c1: e8:7d:8e:7e:8f:1f:ca:5a:1f:92:34:d2:0a:54:77: b7:9e:fe:26:fe:c0:c4:6a:3e:99:75:a8:cf:f7:37: 07:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1A:5B:69:FD:C2:13:EE:40:53:B6:E1:43:38:D3:DE:D4:01:AA:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5819b85c-1290-392c-af04-a578ef8c63f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 162.43.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:3b:cd:4b:f3:03:aa:3f:4b:cb:82:28:e7:a2:bd:72:f5:a1: 7c:55:93:b1:ca:60:ac:d9:d0:5c:9d:47:b4:5c:17:0b:6b:4e: 24:40:8e:5b:e3:c5:87:33:27:48:b3:9b:5f:c0:b4:1f:ce:c3: e3:89:80:c5:e2:69:bf:26:93:9f:85:30:f7:d0:29:12:db:ef: b8:f1:05:02:b1:27:ab:fa:07:c5:ee:a3:ca:53:bd:b3:88:5c: b2:d0:42:bd:9f:bc:fd:56:31:17:c9:67:a5:ec:1c:43:e9:5f: 23:37:a5:54:23:74:c8:64:10:ec:58:9b:16:bc:ff:20:b5:cd: 24:94:b2:89:c9:9e:f6:46:f2:06:93:13:9c:7c:66:ab:49:7f: 78:2d:92:56:e8:c4:54:f5:cb:00:65:e2:65:f0:1e:57:9c:a6: bb:a4:d1:1c:3c:cc:53:06:73:9b:c7:96:38:c9:e5:a3:66:b6: c5:cf:fd:1d:84:6e:9f:77:76:8a:25:dd:56:0b:86:e8:d3:29: af:fb:6b:c5:06:30:50:44:3c:db:6b:b7:33:60:d2:cd:04:fc: 81:65:ff:b8:f9:6d:a1:cb:e2:7a:70:fd:74:7d:2b:47:b6:00: f4:62:9a:34:37:a6:18:46:21:7e:e4:02:fb:39:d6:42:8e:b8: 55:af:58:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJphRzfGuBOsBgWOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk NDA3MTdiMDUtMDRjMy00MzcwLWFmOWUtZDM2MjA1YzZiM2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSPShZubn4JIVwd2I1R5RauHHPBhtPxCe8wE mEqe+rzcXt7k6nSLkpJZB65YRcl3WAKGUwHUwdP1sjM16D0hBM2sxVFKyXQ9cQLQ WnP90OxUjk7BjjcmjOu7hmYsqwVXKKVTb128PPamfuQj3VnjONlwdbv0PEKq/Gey QcUc9SkXe6Up0VGw9Enk0Lak0WDzEJqX0ZabB/9li8NNOLH9Difgwl3eo+peh8kt TfW8Vh5m2ociJ50TllZXZB90WSu83W5eND2M5RhaTezwvjeqiDWnIUdjrVeBukQ5 XQQihMHofY5+jx/KWh+SNNIKVHe3nv4m/sDEaj6ZdajP9zcH1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkaW2n9whPuQFO24UM4097UAaqdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNTgxOWI4NWMtMTI5MC0z OTJjLWFmMDQtYTU3OGVmOGM2M2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoivQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAg7zUvzA6o/S8uCKOeivXL1oXxVk7HKYKzZ0FydR7RcFwtrTiRAjlvj xYczJ0izm1/AtB/Ow+OJgMXiab8mk5+FMPfQKRLb77jxBQKxJ6v6B8Xuo8pTvbOI XLLQQr2fvP1WMRfJZ6XsHEPpXyM3pVQjdMhkEOxYmxa8/yC1zSSUsonJnvZG8gaT E5x8ZqtJf3gtklboxFT1ywBl4mXwHlecpruk0Rw8zFMGc5vHljjJ5aNmtsXP/R2E bp93dool3VYLhujTKa/7a8UGMFBEPNtrtzNg0s0E/IFl/7j5baHL4npw/XR9K0e2 APRimjQ3phhGIX7kAvs51kKOuFWvWK0= -----END CERTIFICATE-----Generated at Mon Aug 4 14:06:59 2025 by rpki-client