$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a3e5e8e1-aea7-3688-8270-bc1d775cb3b1.roa File: a3e5e8e1-aea7-3688-8270-bc1d775cb3b1.roa (raw, json) Hash identifier: gwitt9rL1ksB1Tc31DLO1hVOJcyYEgEKiY2c6PTrVTw= Subject key identifier: 03:E6:3B:69:87:A7:76:CC:9B:64:34:4B:40:C2:27:C5:01:A2:F6:9D Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Certificate serial: 010D0C9F4328584AA160C4E85469B1634848E9C0 Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a3e5e8e1-aea7-3688-8270-bc1d775cb3b1.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 203 IP address blocks: 170.188.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:c4:e8:54:69:b1:63:48:48:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=8241459d-3b00-4589-8537-80e32b971fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e9:20:32:7d:ee:4e:67:ec:d9:a4:77:ed:68: 5d:10:3c:51:f2:9e:be:3f:c2:2a:bb:65:55:dd:f7: 4a:92:da:4e:12:f5:67:4f:8b:51:16:ba:7d:36:7b: 83:9c:a6:45:09:f5:dc:71:da:c9:4f:3b:66:6c:c0: c0:ee:11:d8:a0:5c:7c:dd:32:5f:4f:26:f0:ee:78: cb:8a:15:2d:87:f8:6d:c7:f5:27:43:d6:56:fb:c2: e7:78:b9:c8:31:06:35:4d:5f:20:96:8a:14:2e:27: 50:81:7c:0b:13:12:9b:41:01:82:31:2e:de:11:d1: a7:14:5c:cc:a7:e7:0c:f4:81:be:b6:b7:1d:6f:42: e6:69:7c:d5:bc:8a:da:7f:9e:04:72:53:13:99:0f: b0:01:2e:7c:16:b7:e5:2a:12:73:86:da:86:52:67: da:0d:44:6c:cf:7d:b2:a7:f6:ba:90:c3:37:8b:99: b8:ac:53:ff:78:ae:e0:ae:a1:5c:03:4a:d1:6b:63: 60:87:f0:a7:4c:16:14:8a:a8:fa:94:c4:5f:66:7c: d4:ec:0c:31:0a:8d:e6:eb:59:46:1b:4e:73:2e:d5: 43:f0:a1:e5:2f:12:27:68:1f:d0:9d:41:76:94:eb: 58:13:25:27:21:6a:ea:ce:6a:3c:b2:c7:3c:fe:96: 7b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E6:3B:69:87:A7:76:CC:9B:64:34:4B:40:C2:27:C5:01:A2:F6:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a3e5e8e1-aea7-3688-8270-bc1d775cb3b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl X509v3 Authority Key Identifier: keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer sbgp-ipAddrBlock: critical IPv4: 170.188.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:6d:af:cc:f7:51:93:9c:fd:b4:ba:3e:79:20:fe:2a:5c:eb: 4a:aa:a4:19:0f:da:3c:2f:7a:10:84:bd:ae:1a:b5:d3:e8:a4: 8c:7b:30:d0:5f:41:06:8e:4e:74:e8:d9:e7:8d:ea:fe:e3:fc: 69:0f:ef:84:00:c5:35:ef:19:fe:cc:e3:24:bc:88:98:a7:a0: bc:75:89:14:90:47:eb:1f:0b:9f:4b:0b:20:14:30:61:2c:83: 80:2f:ca:82:59:07:9d:42:ce:4c:59:db:4e:59:c6:97:b5:e2: ee:49:90:bf:68:90:49:7c:27:33:c1:ff:58:c2:ae:93:1b:bd: 84:6d:8c:a7:4c:75:96:d7:37:ae:a3:8e:8b:40:ff:95:e0:9a: 42:76:61:3b:05:97:ba:e8:fa:d8:67:01:e6:3c:70:87:0f:87: 5a:b2:aa:97:46:be:18:62:24:ee:24:b3:87:93:f7:6c:fa:bf: d7:5b:3f:ff:a5:6f:77:e9:31:8b:a5:2e:eb:fb:42:28:e5:39: c6:ff:83:eb:6b:6d:f6:f4:6d:ba:16:a6:2d:3d:6c:00:37:38: 65:2f:e5:b9:0f:f9:34:3e:a0:8f:07:37:22:5c:f8:30:31:61: a1:df:05:f5:de:d9:f2:dd:40:e7:53:92:68:d6:73:1a:00:11: b2:a8:0d:a4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqhYMToVGmxY0hI6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3 N2YxMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ODI0MTQ1OWQtM2IwMC00NTg5LTg1MzctODBlMzJiOTcxZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+kgMn3uTmfs2aR37WhdEDxR8p6+P8Iqu2VV 3fdKktpOEvVnT4tRFrp9NnuDnKZFCfXccdrJTztmbMDA7hHYoFx83TJfTybw7njL ihUth/htx/UnQ9ZW+8LneLnIMQY1TV8glooULidQgXwLExKbQQGCMS7eEdGnFFzM p+cM9IG+trcdb0LmaXzVvIraf54EclMTmQ+wAS58FrflKhJzhtqGUmfaDURsz32y p/a6kMM3i5m4rFP/eK7grqFcA0rRa2Ngh/CnTBYUiqj6lMRfZnzU7AwxCo3m61lG G05zLtVD8KHlLxInaB/QnUF2lOtYEyUnIWrqzmo8ssc8/pZ7mwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAPmO2mHp3bMm2Q0S0DCJ8UBovadMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1 MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvYTNlNWU4ZTEtYWVhNy0z Njg4LTgyNzAtYmMxZDc3NWNiM2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1 NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0 ZWUyNTc3ZjEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqrwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEW2vzPdRk5z9tLo+eSD+KlzrSqqkGQ/aPC96EIS9rhq10+ikjHsw0F9B Bo5OdOjZ543q/uP8aQ/vhADFNe8Z/szjJLyImKegvHWJFJBH6x8Ln0sLIBQwYSyD gC/KglkHnULOTFnbTlnGl7Xi7kmQv2iQSXwnM8H/WMKukxu9hG2Mp0x1ltc3rqOO i0D/leCaQnZhOwWXuuj62GcB5jxwhw+HWrKql0a+GGIk7iSzh5P3bPq/11s//6Vv d+kxi6Uu6/tCKOU5xv+D62tt9vRtuhamLT1sADc4ZS/luQ/5ND6gjwc3Ilz4MDFh od8F9d7Z8t1A51OSaNZzGgARsqgNpA== -----END CERTIFICATE-----Generated at Fri Aug 1 18:11:37 2025 by rpki-client