$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa File: 204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa (raw, json) Hash identifier: tvr7EC3lq8gTMv+z80xLKWRCHg/wpqnDGjGyAemj9aA= Subject key identifier: DD:F2:14:3A:57:FB:2F:6B:78:43:8C:7C:D5:A7:9D:5D:DE:37:53:A4 Certificate issuer: /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Certificate serial: 010D0C9F4328584AD7D119D9861316A8D3E86400 Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 53589 IP address blocks: 199.16.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:19:d9:86:13:16:a8:d3:e8:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=07d7ff10-6e1a-4d64-bc3b-84f2e5cc74bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c8:62:51:aa:c9:d4:df:13:44:08:8f:c3:81: 09:88:ed:18:29:4d:f3:26:e7:2f:56:06:c2:46:6d: a1:72:4e:6b:cb:1b:a7:00:f2:60:59:3c:26:8a:96: f2:7a:2c:8d:71:a4:91:e2:41:36:60:d4:cf:45:92: ed:3d:7a:c1:e3:04:97:e2:69:74:40:7d:c1:ef:fe: a3:f2:7a:c5:f0:3c:38:80:18:49:86:1c:4a:55:f1: b2:12:16:02:d0:f0:d7:3c:21:8b:4e:a9:17:08:e1: a2:7c:de:5a:cd:67:ed:25:5c:b6:c9:94:7f:76:99: dc:7e:82:01:8a:86:ef:44:4c:f1:c0:fc:a1:c9:c2: 87:97:16:f8:72:8b:d3:e3:d3:ec:02:29:98:97:53: 82:73:8d:49:df:a4:01:e7:0c:5f:2b:6a:b6:34:bb: 3d:6d:5b:75:e5:61:30:91:a5:82:b4:78:0b:0d:0d: 48:08:44:9e:b4:2d:70:8a:39:d6:69:bb:0e:6c:00: 2a:c5:db:dc:92:f3:c0:94:a4:93:31:84:10:dc:49: 36:d5:1f:58:49:ab:f3:19:32:04:ae:5b:e4:a8:63: 23:4c:10:93:30:c9:51:ed:51:34:ff:06:7d:e9:63: 01:71:c6:dc:3f:23:65:dd:40:06:d7:77:d0:4e:d4: d7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F2:14:3A:57:FB:2F:6B:78:43:8C:7C:D5:A7:9D:5D:DE:37:53:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl X509v3 Authority Key Identifier: keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer sbgp-ipAddrBlock: critical IPv4: 199.16.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:0d:ce:dd:af:a5:70:01:91:2b:63:59:cb:fd:f7:85:88:bb: c5:4b:01:37:aa:6f:e2:39:f3:88:92:76:0c:9c:ef:16:c8:df: 8b:35:71:1d:d8:f9:dd:76:68:01:3e:fe:68:a5:f2:9c:8c:b6: 94:49:2b:18:e9:07:76:d9:b4:23:b1:15:eb:8a:59:21:ca:17: 06:c7:05:22:ba:d8:17:f3:17:28:e6:e1:65:74:fb:36:9a:ed: 2b:c5:b0:49:b6:08:67:a1:f1:4e:05:a9:ae:5b:c6:ff:c9:52: 8f:93:fa:77:2a:ec:4e:90:fa:08:7f:49:04:d5:12:0d:14:54: a2:2f:4a:c2:5e:5c:7d:e0:75:5d:67:80:a6:d0:8d:51:c5:61: 9a:42:82:ca:0e:be:d1:7e:c3:06:a8:eb:3f:ff:ab:d6:e7:b1: d9:22:43:ba:3d:1b:ce:3e:19:b5:dc:b8:dc:ec:b7:8e:f0:75: a2:85:3c:29:3b:94:51:a5:23:6e:ed:fb:d0:d0:e7:56:bb:75: b9:aa:25:f0:2a:a9:51:64:0c:91:fe:a0:a5:4c:4f:f7:e2:d3: 2b:0d:2f:49:a0:44:51:45:ed:70:5b:2e:a7:f5:d6:97:91:67: 5e:97:f5:ec:7e:40:e5:80:b8:b1:1d:cb:77:ed:75:73:e0:ce: 61:2a:1e:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0RnZhhMWqNPoZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlNTFlODItN2NjNS00NTAwLWEwZmYtY2MzYTlkNWUz ZmI3MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MDdkN2ZmMTAtNmUxYS00ZDY0LWJjM2ItODRmMmU1Y2M3NGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhchiUarJ1N8TRAiPw4EJiO0YKU3zJucvVgbC Rm2hck5ryxunAPJgWTwmipbyeiyNcaSR4kE2YNTPRZLtPXrB4wSX4ml0QH3B7/6j 8nrF8Dw4gBhJhhxKVfGyEhYC0PDXPCGLTqkXCOGifN5azWftJVy2yZR/dpncfoIB iobvREzxwPyhycKHlxb4covT49PsAimYl1OCc41J36QB5wxfK2q2NLs9bVt15WEw kaWCtHgLDQ1ICESetC1wijnWabsObAAqxdvckvPAlKSTMYQQ3Ek21R9YSavzGTIE rlvkqGMjTBCTMMlR7VE0/wZ96WMBccbcPyNl3UAG13fQTtTX2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3yFDpX+y9reEOMfNWnnV3eN1OkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YmU1 MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNhOWQ1ZTNmYjcvMjA0YzFlMDMtN2VmMy0z ZjFhLWIwMWUtZDdlZTcyOWRiNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGJlNTFlODItN2NjNS00NTAwLWEw ZmYtY2MzYTlkNWUzZmI3LzRiZTUxZTgyLTdjYzUtNDUwMC1hMGZmLWNjM2E5ZDVl M2ZiNy5jcmwwHwYDVR0jBBgwFoAU98hG8db+BGjqrEDnC0HKKPgl2lkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YmU1MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNh OWQ1ZTNmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8Nzt2vpXABkStjWcv994WIu8VLATeqb+I584iSdgyc7xbI34s1cR3Y +d12aAE+/mil8pyMtpRJKxjpB3bZtCOxFeuKWSHKFwbHBSK62BfzFyjm4WV0+zaa 7SvFsEm2CGeh8U4Fqa5bxv/JUo+T+ncq7E6Q+gh/SQTVEg0UVKIvSsJeXH3gdV1n gKbQjVHFYZpCgsoOvtF+wwao6z//q9bnsdkiQ7o9G84+GbXcuNzst47wdaKFPCk7 lFGlI27t+9DQ51a7dbmqJfAqqVFkDJH+oKVMT/fi0ysNL0mgRFFF7XBbLqf11peR Z16X9ex+QOWAuLEdy3ftdXPgzmEqHpM= -----END CERTIFICATE-----Generated at Thu Aug 21 11:04:34 2025 by rpki-client