$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/cc7d18d8-833d-3191-afa1-bdc08dfa3be1.roa File: cc7d18d8-833d-3191-afa1-bdc08dfa3be1.roa (raw, json) Hash identifier: x7msGCOqkyxVCODN5fFOpR8SMBCwfql7NTnstzW7chk= Subject key identifier: A6:81:54:CF:51:84:82:06:05:52:3E:53:44:4C:AF:BD:97:44:D4:EB Certificate issuer: /CN=40e46360-7ddb-4bec-b73a-9620baea4da1 Certificate serial: 010D0C9F4328584ADECBB876D5E2A8E23CCED3C0 Authority key identifier: 46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/cc7d18d8-833d-3191-afa1-bdc08dfa3be1.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 36197 IP address blocks: 168.100.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:b8:76:d5:e2:a8:e2:3c:ce:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40e46360-7ddb-4bec-b73a-9620baea4da1 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=9862a956-b8f0-4f39-bf85-04f218c24a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bd:a2:07:66:4f:1a:e4:ca:4c:63:23:24:91: cf:49:0e:c2:26:4e:5c:37:be:1d:d1:0f:8d:03:40: aa:f6:2d:5b:3d:2f:c1:73:d5:c2:79:b4:4e:bf:b9: 8c:94:fb:b2:70:e3:d0:84:c5:e9:7e:11:66:4e:c4: b0:7a:40:95:f9:c5:44:56:bc:29:db:50:26:78:f2: fa:e4:68:b4:65:26:29:69:b6:c7:88:a6:74:f7:b4: d1:00:69:78:78:47:d9:ff:fa:09:6b:44:54:08:91: 26:41:58:21:43:1d:ca:41:81:37:fc:f6:71:99:b1: 7c:14:23:e0:ea:a9:46:3e:ba:58:74:9f:25:50:b8: 82:8d:d9:39:e7:3a:95:35:a5:6e:ce:1f:0c:1a:b4: 20:5f:5d:18:23:ec:6c:14:c6:df:04:79:35:78:cd: 66:e7:11:eb:5c:ba:19:4f:77:89:ba:21:e9:54:32: 69:1d:25:ca:43:37:56:77:9b:8b:39:0a:ac:48:ed: 7e:bb:04:0a:91:e5:59:88:3b:b0:aa:67:c9:b8:96: 76:f1:65:f6:ec:d3:52:a5:ae:07:4c:e5:99:c6:6b: 47:c3:82:54:b3:2d:5c:8a:92:32:e5:34:ea:c1:f4: e7:44:9c:15:4b:3f:6d:fc:19:e6:6f:49:14:f4:af: c4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:81:54:CF:51:84:82:06:05:52:3E:53:44:4C:AF:BD:97:44:D4:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/cc7d18d8-833d-3191-afa1-bdc08dfa3be1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.crl X509v3 Authority Key Identifier: keyid:46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer sbgp-ipAddrBlock: critical IPv4: 168.100.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:4f:a7:b4:9e:4b:cb:e9:40:7b:79:61:f6:9b:71:66:71:63: dd:90:03:08:72:68:a4:cb:43:87:fd:12:67:c3:93:bb:e9:ba: b5:20:28:ac:b8:f3:26:a4:0f:f0:0d:ca:36:f7:45:46:3e:00: 57:66:b8:62:40:70:b3:88:35:70:a4:c0:5e:4e:5a:e2:33:78: 44:37:cd:ff:90:b7:8f:1e:4b:58:59:45:dc:c4:9a:6a:05:1a: 57:82:7f:02:7c:20:c5:59:23:43:6a:81:fa:12:49:fe:ce:5d: 23:26:46:9f:d4:15:f3:a7:f4:bc:de:6a:25:ad:da:63:be:38: bb:15:2a:43:82:bc:51:8f:28:64:47:ba:34:2f:13:2a:bb:22: b3:49:54:98:59:b4:ac:f6:20:b9:f0:a8:64:3f:c7:78:66:34: 5c:b7:4c:6f:18:86:86:15:dc:e7:c2:34:3f:00:68:9a:0e:c8: 41:75:04:f8:de:e9:cb:46:ce:60:e5:c9:37:c5:1e:92:e5:99: ac:ea:a3:2e:24:b3:7a:85:9b:d7:12:f2:95:a7:8e:77:a8:86: 95:9c:ae:7b:20:e3:96:ed:32:65:15:22:06:66:c7:1f:48:df: 54:cd:1b:81:93:9d:b5:c1:03:93:79:f0:97:db:df:8f:f1:dd: 50:71:c6:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey7h21eKo4jzO08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBlNDYzNjAtN2RkYi00YmVjLWI3M2EtOTYyMGJhZWE0 ZGExMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk OTg2MmE5NTYtYjhmMC00ZjM5LWJmODUtMDRmMjE4YzI0YTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr2iB2ZPGuTKTGMjJJHPSQ7CJk5cN74d0Q+N A0Cq9i1bPS/Bc9XCebROv7mMlPuycOPQhMXpfhFmTsSwekCV+cVEVrwp21AmePL6 5Gi0ZSYpabbHiKZ097TRAGl4eEfZ//oJa0RUCJEmQVghQx3KQYE3/PZxmbF8FCPg 6qlGPrpYdJ8lULiCjdk55zqVNaVuzh8MGrQgX10YI+xsFMbfBHk1eM1m5xHrXLoZ T3eJuiHpVDJpHSXKQzdWd5uLOQqsSO1+uwQKkeVZiDuwqmfJuJZ28WX27NNSpa4H TOWZxmtHw4JUsy1cipIy5TTqwfTnRJwVSz9t/Bnmb0kU9K/EfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaBVM9RhIIGBVI+U0RMr72XRNTrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGU0 NjM2MC03ZGRiLTRiZWMtYjczYS05NjIwYmFlYTRkYTEvY2M3ZDE4ZDgtODMzZC0z MTkxLWFmYTEtYmRjMDhkZmEzYmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBlNDYzNjAtN2RkYi00YmVjLWI3 M2EtOTYyMGJhZWE0ZGExLzQwZTQ2MzYwLTdkZGItNGJlYy1iNzNhLTk2MjBiYWVh NGRhMS5jcmwwHwYDVR0jBBgwFoAURo5sR7ptMKLQojxtaC3Dd8RwGeswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGU0NjM2MC03ZGRiLTRiZWMtYjczYS05NjIw YmFlYTRkYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpPp7SeS8vpQHt5YfabcWZxY92QAwhyaKTLQ4f9EmfDk7vpurUgKKy4 8yakD/ANyjb3RUY+AFdmuGJAcLOINXCkwF5OWuIzeEQ3zf+Qt48eS1hZRdzEmmoF GleCfwJ8IMVZI0NqgfoSSf7OXSMmRp/UFfOn9LzeaiWt2mO+OLsVKkOCvFGPKGRH ujQvEyq7IrNJVJhZtKz2ILnwqGQ/x3hmNFy3TG8YhoYV3OfCND8AaJoOyEF1BPje 6ctGzmDlyTfFHpLlmazqoy4ks3qFm9cS8pWnjneohpWcrnsg45btMmUVIgZmxx9I 31TNG4GTnbXBA5N58Jfb34/x3VBxxok= -----END CERTIFICATE-----Generated at Thu Aug 21 01:13:40 2025 by rpki-client