$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/2938d50c-8e48-36b6-993b-1b4431994e3b.roa File: 2938d50c-8e48-36b6-993b-1b4431994e3b.roa (raw, json) Hash identifier: rT447CaDOyl4V0R+8NgbaNI3ZAwE+tuxchUYki6/L+o= Subject key identifier: 4C:7F:82:70:EE:03:75:D2:FB:7E:86:46:1D:FF:72:E2:17:02:83:13 Certificate issuer: /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Certificate serial: 010D0C9F4328584AD936533C9968B1A2A8BAF180 Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/2938d50c-8e48-36b6-993b-1b4431994e3b.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 53589 IP address blocks: 199.188.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:53:3c:99:68:b1:a2:a8:ba:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=b5c3a3c1-fd80-4a98-9959-2a032ee74673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:c0:9c:e3:2b:69:0e:8d:87:fb:b7:e9:b6: 5c:69:38:26:0c:cc:d0:d9:8e:60:cf:8c:d2:40:1c: 6b:9f:78:02:ae:fd:eb:06:eb:04:cb:6b:e6:07:29: aa:ef:cd:e3:2c:f6:4c:62:d1:a9:c7:87:80:a2:6e: 49:4d:e0:ed:22:e7:d0:01:42:72:ff:13:36:4b:d5: cd:17:df:c0:44:d6:fc:e2:dc:04:75:9b:10:a7:76: 38:8d:df:ec:f7:9d:d8:78:ff:ce:f7:d4:e0:a6:41: 4f:28:62:88:5e:3a:16:42:8d:17:3a:d7:b8:b7:f2: 21:a6:91:5e:42:8d:ea:ec:60:1f:14:65:9f:45:b3: 9e:7d:3d:d3:05:8b:56:e0:88:7f:dc:5c:b6:a7:ef: fb:01:e7:bb:93:46:6a:42:88:0c:4e:29:d1:de:7a: bd:37:e3:3c:89:18:97:f6:b8:c7:00:f1:33:3a:a2: 59:f9:5e:a6:56:4c:3d:95:a0:07:d4:2a:59:ce:cf: 15:a6:69:ec:43:18:26:77:0b:7c:5e:ad:e5:6b:d6: 2e:69:24:75:bc:04:52:fb:63:f9:dd:3b:ce:ba:bd: aa:b1:53:81:fa:0e:04:7b:a2:62:ff:39:c2:86:9f: 6d:e4:88:50:e3:11:27:94:73:7a:02:de:ec:bd:9c: 8d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7F:82:70:EE:03:75:D2:FB:7E:86:46:1D:FF:72:E2:17:02:83:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/2938d50c-8e48-36b6-993b-1b4431994e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl X509v3 Authority Key Identifier: keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer sbgp-ipAddrBlock: critical IPv4: 199.188.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c2:a1:90:53:bb:1e:44:42:a6:a4:56:53:84:b8:c9:5a:4d: c0:e5:55:23:ff:3d:1f:7f:81:dc:75:cf:c3:c6:fb:1b:ea:72: c3:e0:c1:76:b8:7d:08:20:93:96:63:2e:c6:62:be:fa:8d:5e: 12:bf:00:68:ef:98:91:a8:61:23:c6:50:85:99:9d:be:16:47: 1b:a6:4b:ff:f7:68:30:57:c8:be:3b:2b:58:45:41:f3:e5:69: d8:50:c8:14:e9:49:43:88:ad:59:16:7f:74:a2:e1:4a:70:b3: e0:ca:a6:32:a4:0b:08:13:83:53:18:59:ce:e4:ca:45:b0:c9: 83:d4:12:6d:56:6d:4b:5b:b9:fc:b5:68:8f:b8:bd:21:aa:d3: 64:e0:25:c0:3c:28:6c:50:51:fb:44:36:c8:d1:7d:54:6f:95: 7b:cf:fa:4a:27:bd:4e:78:53:e2:4a:76:96:44:13:8a:27:2a: 64:f4:79:7f:3b:39:fc:91:6d:63:4b:22:47:b0:34:97:f1:9a: ec:0d:34:95:20:5d:a3:7f:37:76:30:7a:e0:76:49:2f:95:dd: dd:66:e9:c8:52:31:b5:d0:e0:5d:dc:5a:44:1e:2a:bf:03:5e: 38:ca:0c:19:21:44:3a:01:25:08:da:35:72:b7:d5:71:dd:e9: cc:b6:e1:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNlM8mWixoqi68YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlNTFlODItN2NjNS00NTAwLWEwZmYtY2MzYTlkNWUz ZmI3MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk YjVjM2EzYzEtZmQ4MC00YTk4LTk5NTktMmEwMzJlZTc0NjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro7AnOMraQ6Nh/u36bZcaTgmDMzQ2Y5gz4zS QBxrn3gCrv3rBusEy2vmBymq783jLPZMYtGpx4eAom5JTeDtIufQAUJy/xM2S9XN F9/ARNb84twEdZsQp3Y4jd/s953YeP/O99TgpkFPKGKIXjoWQo0XOte4t/IhppFe Qo3q7GAfFGWfRbOefT3TBYtW4Ih/3Fy2p+/7Aee7k0ZqQogMTinR3nq9N+M8iRiX 9rjHAPEzOqJZ+V6mVkw9laAH1CpZzs8VpmnsQxgmdwt8Xq3la9YuaSR1vARS+2P5 3TvOur2qsVOB+g4Ee6Ji/znChp9t5IhQ4xEnlHN6At7svZyNrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEx/gnDuA3XS+36GRh3/cuIXAoMTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YmU1 MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNhOWQ1ZTNmYjcvMjkzOGQ1MGMtOGU0OC0z NmI2LTk5M2ItMWI0NDMxOTk0ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGJlNTFlODItN2NjNS00NTAwLWEw ZmYtY2MzYTlkNWUzZmI3LzRiZTUxZTgyLTdjYzUtNDUwMC1hMGZmLWNjM2E5ZDVl M2ZiNy5jcmwwHwYDVR0jBBgwFoAU98hG8db+BGjqrEDnC0HKKPgl2lkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YmU1MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNh OWQ1ZTNmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7zcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3CoZBTux5EQqakVlOEuMlaTcDlVSP/PR9/gdx1z8PG+xvqcsPgwXa4 fQggk5ZjLsZivvqNXhK/AGjvmJGoYSPGUIWZnb4WRxumS//3aDBXyL47K1hFQfPl adhQyBTpSUOIrVkWf3Si4Upws+DKpjKkCwgTg1MYWc7kykWwyYPUEm1WbUtbufy1 aI+4vSGq02TgJcA8KGxQUftENsjRfVRvlXvP+konvU54U+JKdpZEE4onKmT0eX87 OfyRbWNLIkewNJfxmuwNNJUgXaN/N3YweuB2SS+V3d1m6chSMbXQ4F3cWkQeKr8D XjjKDBkhRDoBJQjaNXK31XHd6cy24XQ= -----END CERTIFICATE-----Generated at Thu Aug 21 11:02:44 2025 by rpki-client