$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/40c48c41-55af-31ae-8149-05279d0834bf.roa File: 40c48c41-55af-31ae-8149-05279d0834bf.roa (raw, json) Hash identifier: hQILCE9UyKxBN+bssoORwhx9cYH6JXOTWlODX6PtVW8= Subject key identifier: 1C:B4:31:07:C4:EA:BB:69:44:55:FD:83:88:1A:03:6C:3F:33:6B:26 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B1806C680D5132CBFBFCE3000 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/40c48c41-55af-31ae-8149-05279d0834bf.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 22781 IP address blocks: 192.200.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:c6:80:d5:13:2c:bf:bf:ce:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=f05a11e2-9618-4eac-81a3-1a9b89b65a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3d:c8:e3:7b:a6:f9:59:bd:51:3a:8e:71:e7: ce:58:99:a8:70:2c:90:f3:e6:d7:62:df:8a:cb:93: 5d:d7:fb:05:08:fc:82:73:bb:05:ca:ab:82:02:8b: c1:5b:1a:bb:5a:6f:d8:5b:09:58:97:15:00:2d:94: 38:94:d0:1b:90:02:08:65:9f:22:ac:fe:c3:27:1e: 82:01:44:85:8d:6f:8a:c3:57:4a:80:4c:d7:e7:62: 5e:23:21:32:ed:4e:a1:db:fe:f5:40:24:e9:ed:be: 51:c7:a5:9d:c1:17:44:34:0f:0c:68:7c:85:db:02: 25:a5:f5:c7:2f:e1:40:ce:83:bb:ba:8a:b2:0e:60: 7a:ce:6f:b6:f6:ad:32:c6:fc:c2:38:2e:d5:37:77: d8:5f:4f:6c:76:85:6f:c4:fd:99:b2:14:85:28:93: 1d:0d:5c:2e:3b:3a:a3:a0:13:61:58:59:e3:31:8f: 9f:3b:59:a3:94:51:3b:c9:96:6b:cd:75:25:9c:a1: b4:45:bf:35:b4:c6:33:a2:89:bb:98:8f:23:9a:3e: 6b:6f:bf:8f:09:4c:7b:fe:89:77:49:9e:6d:4c:c5: c2:e7:01:52:1f:94:0f:51:05:9d:83:3a:db:8b:5d: 7c:5a:2a:36:a8:e0:74:ad:aa:47:2b:07:a2:a3:0c: 72:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B4:31:07:C4:EA:BB:69:44:55:FD:83:88:1A:03:6C:3F:33:6B:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/40c48c41-55af-31ae-8149-05279d0834bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 192.200.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:8a:84:3c:57:ea:98:18:58:42:2d:74:18:01:99:f1:95:b7: d9:b3:77:6c:6e:6e:a3:8d:02:9b:d4:5d:d0:22:e9:18:d3:20: ca:dd:8c:ea:6f:24:b5:4f:3f:46:fc:01:63:49:b7:13:ec:3f: 31:98:a6:8a:3f:00:93:1e:16:e4:ce:db:06:74:b3:5f:a0:e4: fe:99:f3:f7:d6:95:7d:95:15:53:3a:24:8d:90:01:ac:7d:8d: 32:a3:46:c7:93:4c:83:5c:f0:14:14:54:17:ac:e5:59:fb:05: 09:78:c7:82:7a:cd:a4:b3:88:11:52:6d:d7:00:40:cf:53:ee: c3:69:22:fe:c9:ff:f0:16:a9:16:ce:5c:c2:74:c5:4c:a2:f9: 22:02:f2:36:34:98:84:53:94:52:7e:59:ec:72:8b:2b:d3:45: 20:ce:5f:b2:8b:91:75:eb:fe:64:4c:05:8e:b0:31:1f:0b:09: 1d:c3:98:ee:49:14:b3:37:6c:20:90:eb:dc:b2:ad:f2:6b:af: 6d:8e:a3:43:14:09:07:f2:27:21:e8:d3:0d:8a:01:ce:1e:75: 79:d7:b1:30:4c:7e:cc:7c:0e:2f:82:19:10:89:28:fe:bd:a7: bc:f5:7e:f1:24:44:8a:42:de:51:f6:70:09:39:22:f9:9c:1a: 3d:d3:7b:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsaA1RMsv7/OMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZjA1YTExZTItOTYxOC00ZWFjLTgxYTMtMWE5Yjg5YjY1YTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj3I43um+Vm9UTqOcefOWJmocCyQ8+bXYt+K y5Nd1/sFCPyCc7sFyquCAovBWxq7Wm/YWwlYlxUALZQ4lNAbkAIIZZ8irP7DJx6C AUSFjW+Kw1dKgEzX52JeIyEy7U6h2/71QCTp7b5Rx6WdwRdENA8MaHyF2wIlpfXH L+FAzoO7uoqyDmB6zm+29q0yxvzCOC7VN3fYX09sdoVvxP2ZshSFKJMdDVwuOzqj oBNhWFnjMY+fO1mjlFE7yZZrzXUlnKG0Rb81tMYzoom7mI8jmj5rb7+PCUx7/ol3 SZ5tTMXC5wFSH5QPUQWdgzrbi118Wio2qOB0rapHKweiowxyaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBy0MQfE6rtpRFX9g4gaA2w/M2smMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNDBjNDhjNDEtNTVhZi0z MWFlLTgxNDktMDUyNzlkMDgzNGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwMiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2KhDxX6pgYWEItdBgBmfGVt9mzd2xubqONApvUXdAi6RjTIMrdjOpv JLVPP0b8AWNJtxPsPzGYpoo/AJMeFuTO2wZ0s1+g5P6Z8/fWlX2VFVM6JI2QAax9 jTKjRseTTINc8BQUVBes5Vn7BQl4x4J6zaSziBFSbdcAQM9T7sNpIv7J//AWqRbO XMJ0xUyi+SIC8jY0mIRTlFJ+WexyiyvTRSDOX7KLkXXr/mRMBY6wMR8LCR3DmO5J FLM3bCCQ69yyrfJrr22Oo0MUCQfyJyHo0w2KAc4edXnXsTBMfsx8Di+CGRCJKP69 p7z1fvEkRIpC3lH2cAk5IvmcGj3Teww= -----END CERTIFICATE-----Generated at Fri Sep 5 19:59:01 2025 by rpki-client