$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/1a8b4670-b976-3f02-829a-82952c6e8f62.roa File: 1a8b4670-b976-3f02-829a-82952c6e8f62.roa (raw, json) Hash identifier: eN7XhGE9yQ+dNz44abWuaOFE2wp4V4xyC29dfzDak1w= Subject key identifier: 42:5F:F3:58:C6:75:40:F4:65:FC:C9:CB:68:75:24:3B:18:F1:3E:AB Certificate issuer: /CN=c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569 Certificate serial: 010D0C9F4328584AD3A10FEC989A8B0C62CCCBA0 Authority key identifier: 7E:43:91:89:D1:82:7F:29:92:31:FD:11:FC:5E:A5:94:1E:96:94:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/1a8b4670-b976-3f02-829a-82952c6e8f62.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 393731 IP address blocks: 148.170.224.0/20 maxlen: 24 199.88.52.0/22 maxlen: 24 204.156.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:0f:ec:98:9a:8b:0c:62:cc:cb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=a23b6482-b517-4d61-90d6-3f2054c862a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4c:8a:ce:19:fe:14:f7:9d:f2:63:4c:03:5a: 43:fa:36:15:03:41:f3:55:15:dd:8b:af:4c:53:ef: d7:0d:40:1f:e8:a1:23:94:4c:c6:13:c4:37:00:64: b7:02:6a:eb:72:ee:2a:40:0a:94:85:36:ac:92:0c: a2:bd:ea:55:ea:3e:c7:4b:be:49:cb:d3:fd:f3:7d: c2:c7:cd:e3:ab:b7:a9:a6:f7:2c:b1:59:1a:c2:9f: 6a:62:06:94:a2:05:81:58:6f:0a:90:a6:a6:36:2a: 2e:9b:fe:1e:0b:25:61:0f:80:39:9e:7a:79:89:a9: 71:a7:0b:a8:3b:6f:b4:ba:10:ff:da:5f:27:b6:56: 11:f1:b5:8f:3a:92:f5:e7:23:6f:e9:94:db:8b:a1: e6:3e:b2:9a:cc:88:88:20:db:0f:74:34:00:1f:95: 29:e8:af:5b:40:64:31:6c:40:dd:16:b1:70:cb:83: e5:49:23:07:69:f9:0b:f4:84:fc:c3:3a:0f:f8:dc: c5:ff:c6:6d:2b:8f:db:16:ae:48:57:9d:91:86:1d: 71:d0:0a:c6:99:d0:33:f2:e0:b6:15:b8:4d:78:bb: 41:47:25:e6:99:79:9c:e2:20:60:5a:63:c1:9b:d7: b7:18:1a:e1:7b:7d:0a:18:10:c6:5f:ad:c0:e0:cd: 26:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5F:F3:58:C6:75:40:F4:65:FC:C9:CB:68:75:24:3B:18:F1:3E:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/1a8b4670-b976-3f02-829a-82952c6e8f62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.crl X509v3 Authority Key Identifier: keyid:7E:43:91:89:D1:82:7F:29:92:31:FD:11:FC:5E:A5:94:1E:96:94:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.cer sbgp-ipAddrBlock: critical IPv4: 148.170.224.0/20 199.88.52.0/22 204.156.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:a1:5d:b6:f3:5a:51:67:10:27:63:79:c9:a6:4e:14:f7:f8: 22:f4:ff:f6:45:21:61:76:c7:5e:3d:b9:f1:fb:77:8c:62:f4: 80:6b:d5:1a:22:9e:f3:0e:2b:63:43:e7:23:9d:d9:c6:ed:69: 67:43:98:98:02:64:64:ba:3c:cb:90:78:b7:fd:6b:69:67:b0: 9b:11:f5:a7:b4:93:b7:c0:f3:1a:31:90:ca:f3:e5:2b:26:cc: 99:a5:d1:78:62:44:d2:d4:c7:e6:1e:b4:03:3d:15:40:00:97: 74:f5:a3:cd:88:f1:b3:c0:cb:81:cd:ce:15:4c:75:e3:d1:db: 48:04:28:c7:e4:2a:d6:57:1e:3a:18:1b:a2:b4:f0:99:0e:44: be:c2:c3:5f:a1:2a:64:a8:55:8c:69:43:c1:cc:02:7f:e0:82: ce:bf:f7:34:54:be:2b:ad:36:ee:e4:f2:4b:8d:ee:2b:9a:8a: 4d:7d:60:10:b1:95:bc:ff:35:db:5d:e4:65:d4:66:6d:28:d9: 7a:c1:35:4a:2a:3f:82:43:48:87:2e:0f:14:82:d5:ea:66:0a: 70:af:3b:ca:60:7d:f5:9f:e7:b8:d8:16:06:ed:7e:bf:b0:2d: 75:12:c1:39:e0:6f:10:65:ca:eb:41:eb:f8:92:10:d4:49:24: 6d:85:37:7e -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWErToQ/smJqLDGLMy6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzVmZDRhNjItZDhjYy00ZTQ0LWI1Y2ItNTNhOTNjMmI3 NTY5MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk YTIzYjY0ODItYjUxNy00ZDYxLTkwZDYtM2YyMDU0Yzg2MmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUyKzhn+FPed8mNMA1pD+jYVA0HzVRXdi69M U+/XDUAf6KEjlEzGE8Q3AGS3Amrrcu4qQAqUhTaskgyivepV6j7HS75Jy9P9833C x83jq7eppvcssVkawp9qYgaUogWBWG8KkKamNioum/4eCyVhD4A5nnp5ialxpwuo O2+0uhD/2l8ntlYR8bWPOpL15yNv6ZTbi6HmPrKazIiIINsPdDQAH5Up6K9bQGQx bEDdFrFwy4PlSSMHafkL9IT8wzoP+NzF/8ZtK4/bFq5IV52Rhh1x0ArGmdAz8uC2 FbhNeLtBRyXmmXmc4iBgWmPBm9e3GBrhe30KGBDGX63A4M0m0QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFEJf81jGdUD0ZfzJy2h1JDsY8T6rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNWZk NGE2Mi1kOGNjLTRlNDQtYjVjYi01M2E5M2MyYjc1NjkvMWE4YjQ2NzAtYjk3Ni0z ZjAyLTgyOWEtODI5NTJjNmU4ZjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzVmZDRhNjItZDhjYy00ZTQ0LWI1 Y2ItNTNhOTNjMmI3NTY5L2M1ZmQ0YTYyLWQ4Y2MtNGU0NC1iNWNiLTUzYTkzYzJi NzU2OS5jcmwwHwYDVR0jBBgwFoAUfkORidGCfymSMf0R/F6llB6WlNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNWZkNGE2Mi1kOGNjLTRlNDQtYjVjYi01M2E5 M2MyYjc1NjkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQElKrgAwQC x1g0AwQDzJygMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGuhXbbzWlFnECdjecmmThT3+CL0//ZFIWF2x149 ufH7d4xi9IBr1RoinvMOK2ND5yOd2cbtaWdDmJgCZGS6PMuQeLf9a2lnsJsR9ae0 k7fA8xoxkMrz5SsmzJml0XhiRNLUx+YetAM9FUAAl3T1o82I8bPAy4HNzhVMdePR 20gEKMfkKtZXHjoYG6K08JkORL7Cw1+hKmSoVYxpQ8HMAn/ggs6/9zRUviutNu7k 8kuN7iuaik19YBCxlbz/Ndtd5GXUZm0o2XrBNUoqP4JDSIcuDxSC1epmCnCvO8pg ffWf57jYFgbtfr+wLXUSwTngbxBlyutB6/iSENRJJG2FN34= -----END CERTIFICATE-----Generated at Thu Aug 21 10:25:46 2025 by rpki-client