$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/2656da8b-db8f-33e1-a001-aa8e24f8d6b5.roa File: 2656da8b-db8f-33e1-a001-aa8e24f8d6b5.roa (raw, json) Hash identifier: gxz2zgZKA9Wh/maTHaMHggdlSp9+qWp4kPhcpOAaHVA= Subject key identifier: 9E:90:E3:84:96:D3:CE:A2:8C:2A:25:41:CB:46:5A:40:3E:12:9E:D5 Certificate issuer: /CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be Certificate serial: 010D0C9F4328584AD260656CF242B1701D958C00 Authority key identifier: 88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/2656da8b-db8f-33e1-a001-aa8e24f8d6b5.roa Signing time: Mon 11 Aug 2025 14:14:45 +0000 ROA not before: Mon 11 Aug 2025 14:14:45 +0000 ROA not after: Sun 09 Nov 2025 15:14:45 +0000 asID: 16509 IP address blocks: 199.165.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:60:65:6c:f2:42:b1:70:1d:95:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be Validity Not Before: Aug 11 14:14:45 2025 GMT Not After : Nov 9 15:14:45 2025 GMT Subject: CN=9e87cdbe-e9b1-4f3a-b310-616eec8b4c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:00:c1:49:3f:04:4a:71:ec:ed:f6:76:77:2d: a4:b3:ef:83:e2:24:da:73:1b:66:fa:5a:59:6a:e6: 8c:97:aa:0f:c1:38:a7:d1:10:86:da:a0:4d:28:3d: df:f5:ac:9b:5a:9a:3e:fb:a9:a1:60:ab:b0:53:d8: e4:da:aa:ca:0d:ea:fe:b8:c0:4e:63:4f:5e:38:f2: 73:45:8d:c0:26:ab:b7:14:d0:41:14:74:28:94:48: 05:4a:53:11:b0:e5:68:47:d8:8f:73:56:98:e5:9a: fd:54:42:9d:71:df:4e:f8:29:8a:f9:e7:d4:0c:84: b6:27:ce:e9:f0:09:af:8a:c7:eb:d0:78:01:ba:c4: 5a:26:6c:57:21:2b:ae:2a:b8:27:3b:dd:9d:49:f0: 91:25:5e:17:c9:07:42:17:b8:b9:50:64:35:72:37: 9f:ac:4d:c3:6c:91:4f:94:b6:af:d5:38:a8:a4:46: c1:20:9c:8e:9e:7e:b4:52:00:f0:cc:55:d6:df:ce: b1:e7:d9:ea:88:8e:b7:dd:3a:6b:1c:8f:9f:d5:e2: d8:72:9d:11:a8:fb:1a:14:64:a5:b9:f2:9a:38:1d: e7:05:44:18:14:4e:46:c8:ba:1a:44:29:ab:50:d2: ca:cc:79:78:8f:36:6e:d0:13:14:90:30:b3:5e:f2: b9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:90:E3:84:96:D3:CE:A2:8C:2A:25:41:CB:46:5A:40:3E:12:9E:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/2656da8b-db8f-33e1-a001-aa8e24f8d6b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl X509v3 Authority Key Identifier: keyid:88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer sbgp-ipAddrBlock: critical IPv4: 199.165.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b7:2c:b2:b0:6a:6d:51:2f:0e:0d:88:0b:38:63:86:2f:ad: ec:60:c7:7f:73:3e:12:47:a9:29:c4:b3:ee:af:4c:56:d5:37: ec:49:de:39:c0:3f:0c:35:85:52:5b:bc:cf:46:70:81:f7:7c: 77:d2:55:27:c3:6e:a5:52:a6:76:ce:a4:0b:1d:70:6c:fb:2b: ff:33:ca:ec:30:17:64:d6:e5:01:dc:e1:58:0a:e0:31:54:f6: 21:1a:5a:7c:dd:0f:0a:d3:40:0e:f0:fc:50:d2:10:95:78:bb: 22:bb:fb:19:67:4b:db:d8:1b:25:01:a7:fa:50:db:e9:bd:98: 6d:6c:f2:d7:06:50:71:ed:ec:23:ea:85:f3:c8:73:ee:10:8a: f1:4a:9b:bb:cd:6c:7a:cf:5e:e3:5a:be:28:8e:4b:61:41:7f: 4e:22:2c:80:c2:e9:1a:17:f0:f1:a6:ed:26:a2:9e:d9:4e:46: 08:03:80:9e:d0:4f:9e:1c:e1:22:70:06:b3:e3:5c:8e:c2:ef: aa:c5:6c:0b:42:76:19:dc:6a:ac:3b:14:86:d2:8d:18:a0:4a: 89:ef:a0:06:ad:60:04:c6:61:50:ef:c4:76:64:ab:6a:9a:41: 31:c2:24:0e:03:10:6c:93:d1:25:27:df:29:46:bd:05:ae:bc: 65:46:ba:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSYGVs8kKxcB2VjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM0NDBlZWItM2Q3YS00M2UzLWEwYTQtZmE5YTk5Mzc5 OGJlMB4XDTI1MDgxMTE0MTQ0NVoXDTI1MTEwOTE1MTQ0NVowLzEtMCsGA1UEAxMk OWU4N2NkYmUtZTliMS00ZjNhLWIzMTAtNjE2ZWVjOGI0YzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgDBST8ESnHs7fZ2dy2ks++D4iTacxtm+lpZ auaMl6oPwTin0RCG2qBNKD3f9aybWpo++6mhYKuwU9jk2qrKDer+uMBOY09eOPJz RY3AJqu3FNBBFHQolEgFSlMRsOVoR9iPc1aY5Zr9VEKdcd9O+CmK+efUDIS2J87p 8Amvisfr0HgBusRaJmxXISuuKrgnO92dSfCRJV4XyQdCF7i5UGQ1cjefrE3DbJFP lLav1TiopEbBIJyOnn60UgDwzFXW386x59nqiI633TprHI+f1eLYcp0RqPsaFGSl ufKaOB3nBUQYFE5GyLoaRCmrUNLKzHl4jzZu0BMUkDCzXvK5ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6Q44SW086ijColQctGWkA+Ep7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jMzQ0 MGVlYi0zZDdhLTQzZTMtYTBhNC1mYTlhOTkzNzk4YmUvMjY1NmRhOGItZGI4Zi0z M2UxLWEwMDEtYWE4ZTI0ZjhkNmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzM0NDBlZWItM2Q3YS00M2UzLWEw YTQtZmE5YTk5Mzc5OGJlL2MzNDQwZWViLTNkN2EtNDNlMy1hMGE0LWZhOWE5OTM3 OThiZS5jcmwwHwYDVR0jBBgwFoAUiDcfaou/A6y4ImpcKZnxDN+IvRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jMzQ0MGVlYi0zZDdhLTQzZTMtYTBhNC1mYTlh OTkzNzk4YmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6WIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJC3LLKwam1RLw4NiAs4Y4Yvrexgx39zPhJHqSnEs+6vTFbVN+xJ3jnA Pww1hVJbvM9GcIH3fHfSVSfDbqVSpnbOpAsdcGz7K/8zyuwwF2TW5QHc4VgK4DFU 9iEaWnzdDwrTQA7w/FDSEJV4uyK7+xlnS9vYGyUBp/pQ2+m9mG1s8tcGUHHt7CPq hfPIc+4QivFKm7vNbHrPXuNaviiOS2FBf04iLIDC6RoX8PGm7SaintlORggDgJ7Q T54c4SJwBrPjXI7C76rFbAtCdhncaqw7FIbSjRigSonvoAatYATGYVDvxHZkq2qa QTHCJA4DEGyT0SUn3ylGvQWuvGVGuhs= -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:47 2025 by rpki-client