$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a1ecb8e5-39af-3240-a6fa-7655e15e9d63.roa File: a1ecb8e5-39af-3240-a6fa-7655e15e9d63.roa (raw, json) Hash identifier: NZAas13PURpH7ANfD9Sr96+djdxVeoHOai+LYhqR7Uo= Subject key identifier: C1:82:DC:EA:FA:E5:7E:45:0D:3E:98:11:EC:74:20:B2:86:50:81:56 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584A7E7B61042B4462520B387B80 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a1ecb8e5-39af-3240-a6fa-7655e15e9d63.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 198949 IP address blocks: 162.221.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:61:04:2b:44:62:52:0b:38:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=26838204-8a37-4e0b-99fe-b0e55d9bbf1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f5:3d:c4:1a:fa:e3:f0:25:5f:b8:a5:fd:6a: d0:cc:46:d8:a2:9f:bb:3c:c1:bf:27:ae:ee:98:db: 2a:56:d9:4e:4c:a5:c8:45:70:fa:97:b2:02:d8:ab: 6b:b6:ef:62:a8:5c:50:79:d3:06:63:3a:38:e3:f1: 2e:2c:7b:90:37:c0:89:0a:ac:94:6e:c6:fd:fc:17: 8c:35:df:48:28:d6:0c:38:8d:03:a8:68:be:ce:8b: f1:4c:9e:f0:89:4a:3a:8b:fb:cb:fa:1c:f3:e7:68: c0:88:cb:3a:1a:7d:36:1e:39:a3:bc:7d:03:5e:6c: 0d:4c:79:31:56:b3:f4:1f:b4:f4:0e:6c:bd:b8:51: 40:d1:cc:34:43:1b:ef:63:c5:3a:29:50:3a:ac:a4: db:d9:d2:44:bb:6a:95:4c:19:7f:fe:a6:42:33:dd: 7b:1b:21:4d:2e:ef:a0:e2:5f:0f:20:b5:9c:9a:3e: 81:e6:19:ff:1c:37:d9:04:25:4d:0d:ce:1a:db:a4: 3b:fe:1d:e3:6e:c7:62:dc:6f:c0:57:68:84:cf:90: d8:87:a9:08:51:b1:45:f4:4f:71:8c:7f:eb:89:f0: ac:b5:66:cf:30:b0:46:2d:78:78:c0:07:8a:88:46: 95:53:5d:4d:ec:ef:1f:08:be:10:47:4c:ec:ef:20: 6e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:82:DC:EA:FA:E5:7E:45:0D:3E:98:11:EC:74:20:B2:86:50:81:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a1ecb8e5-39af-3240-a6fa-7655e15e9d63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 162.221.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:e3:08:32:6d:6c:45:85:52:83:c3:c0:f1:07:c8:37:46:2c: ae:45:fa:f0:8f:9b:e3:a4:7f:3f:10:35:73:04:15:d7:86:ed: 80:77:61:8c:a8:a5:0a:5e:24:e7:56:80:fe:4d:2d:3e:bc:d9: 1e:2a:0a:b9:a5:09:5f:3a:b2:ad:3f:86:59:f3:2c:a6:1a:b1: 50:64:79:a5:53:16:e0:cc:bf:65:d9:3b:57:e8:36:05:a7:af: b1:15:20:d4:c8:a9:9f:9c:f2:c2:40:10:6f:d1:a1:eb:6d:9e: a5:ac:6d:0d:47:fc:c9:7f:00:6b:a1:9b:d7:76:f0:4d:53:84: 72:6f:81:8f:c1:82:bb:a4:23:43:20:df:6b:cc:67:4a:cb:4b: 20:ae:9d:53:b0:71:e7:f1:52:fe:7b:32:d5:4e:a8:3b:41:c2: 09:20:b5:77:70:98:d3:7c:20:04:ec:8d:1e:33:71:ca:d9:b5: 70:19:4d:87:3f:0c:30:68:ff:22:ea:56:11:14:51:ed:4e:2d: 0e:c0:c2:e7:04:9e:48:0d:4d:8e:82:69:55:09:11:0d:54:a0: a0:64:01:15:af:7f:1f:da:03:77:fe:b3:d7:23:32:e5:43:cc: 17:de:78:c7:2b:7a:63:29:d4:44:73:67:28:e1:89:4c:48:58: a5:36:9f:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2EEK0RiUgs4e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MjY4MzgyMDQtOGEzNy00ZTBiLTk5ZmUtYjBlNTVkOWJiZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfU9xBr64/AlX7il/WrQzEbYop+7PMG/J67u mNsqVtlOTKXIRXD6l7IC2Ktrtu9iqFxQedMGYzo44/EuLHuQN8CJCqyUbsb9/BeM Nd9IKNYMOI0DqGi+zovxTJ7wiUo6i/vL+hzz52jAiMs6Gn02HjmjvH0DXmwNTHkx VrP0H7T0Dmy9uFFA0cw0QxvvY8U6KVA6rKTb2dJEu2qVTBl//qZCM917GyFNLu+g 4l8PILWcmj6B5hn/HDfZBCVNDc4a26Q7/h3jbsdi3G/AV2iEz5DYh6kIUbFF9E9x jH/rifCstWbPMLBGLXh4wAeKiEaVU11N7O8fCL4QR0zs7yBurwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGC3Or65X5FDT6YEex0ILKGUIFWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvYTFlY2I4ZTUtMzlhZi0z MjQwLWE2ZmEtNzY1NWUxNWU5ZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInjCDJtbEWFUoPDwPEHyDdGLK5F+vCPm+Okfz8QNXMEFdeG7YB3YYyo pQpeJOdWgP5NLT682R4qCrmlCV86sq0/hlnzLKYasVBkeaVTFuDMv2XZO1foNgWn r7EVINTIqZ+c8sJAEG/RoettnqWsbQ1H/Ml/AGuhm9d28E1ThHJvgY/BgrukI0Mg 32vMZ0rLSyCunVOwcefxUv57MtVOqDtBwgkgtXdwmNN8IATsjR4zccrZtXAZTYc/ DDBo/yLqVhEUUe1OLQ7AwucEnkgNTY6CaVUJEQ1UoKBkARWvfx/aA3f+s9cjMuVD zBfeeMcremMp1ERzZyjhiUxIWKU2n7Y= -----END CERTIFICATE-----Generated at Mon Aug 4 18:54:46 2025 by rpki-client