$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa File: ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa (raw, json) Hash identifier: 5YJh2t8bk2iWtd5WTwQkEguNkc+r0ThqEk2WhvAkAd0= Subject key identifier: CB:5F:D2:0A:CF:33:04:A1:3B:89:84:93:0A:D0:A8:03:88:76:FA:8B Certificate issuer: /CN=fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff Certificate serial: 010D0C9F4328584AC17B8FAE01E5DFA8C08B2F40 Authority key identifier: 35:65:B2:69:5E:FF:A6:97:15:1F:58:7B:B3:A5:0A:DE:04:BC:7F:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa Signing time: Tue 05 Aug 2025 13:00:41 +0000 ROA not before: Tue 05 Aug 2025 13:00:41 +0000 ROA not after: Mon 03 Nov 2025 14:00:41 +0000 asID: 54381 IP address blocks: 66.180.72.0/21 maxlen: 24 199.122.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:7b:8f:ae:01:e5:df:a8:c0:8b:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff Validity Not Before: Aug 5 13:00:41 2025 GMT Not After : Nov 3 14:00:41 2025 GMT Subject: CN=b9a5164c-2b9a-4376-918e-fec5cb643c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b8:7c:1d:e8:29:6c:89:b7:55:ed:ab:a8:b3: 9a:5b:b6:08:a1:da:f1:c4:3e:09:67:69:aa:cb:41: ca:d7:53:6f:f0:24:72:e4:68:24:49:14:f1:b9:e2: c4:20:54:19:73:87:4a:4d:1c:85:8b:c4:6e:66:d1: d9:3d:3b:61:15:90:60:e6:b7:10:ff:b6:ca:88:ae: 28:a8:3d:ac:18:b6:6d:52:84:c3:b0:37:62:f0:99: e2:38:b5:09:8c:8e:83:db:4e:72:87:8b:df:88:c3: 38:fe:58:55:86:5f:8d:70:0c:ed:fe:12:98:a6:00: 22:fc:e0:b6:2a:44:50:e5:fc:d0:87:c0:2d:1b:fb: 1b:79:b6:2c:0c:e1:c9:2c:12:64:3a:4c:a9:0f:8f: ce:da:9f:1e:72:ad:34:a7:8d:43:09:f0:36:13:8d: f7:6b:6a:17:2e:cb:45:2b:b2:a9:75:69:c4:cd:0c: a0:d3:cf:50:37:cc:40:67:93:c1:f3:d1:73:07:f9: c2:07:bb:6e:89:50:33:1e:36:1f:aa:bf:9c:1c:60: 81:4e:d2:a6:6a:e5:d8:a3:bb:1d:03:96:c3:8c:03: 2e:70:41:c5:15:0b:9f:e0:6b:fd:ac:a1:0e:10:96: 71:d5:8c:eb:54:20:8e:c4:b1:7c:38:e7:95:8e:ff: cc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5F:D2:0A:CF:33:04:A1:3B:89:84:93:0A:D0:A8:03:88:76:FA:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.crl X509v3 Authority Key Identifier: keyid:35:65:B2:69:5E:FF:A6:97:15:1F:58:7B:B3:A5:0A:DE:04:BC:7F:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.cer sbgp-ipAddrBlock: critical IPv4: 66.180.72.0/21 199.122.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:7f:25:6a:12:62:61:92:65:a0:d5:f9:c5:10:4d:24:10:93: bb:47:1a:ba:73:5e:07:1c:47:c5:3c:c6:9e:01:fb:4d:5f:74: cb:d2:61:c9:d8:d5:be:66:ec:a3:7d:b0:cf:fb:b5:a8:1b:31: 08:1b:2f:d6:9a:af:36:cd:c1:53:27:b1:0c:4a:b8:c0:77:80: d4:fa:7b:92:11:73:a1:e1:e5:d7:40:a0:8f:d9:2d:e8:5f:b0: e0:67:87:26:c0:65:d6:ee:4b:e5:a5:87:42:1c:ab:18:35:65: d4:6b:a7:f3:cd:66:b4:4c:7c:7e:5a:21:1e:23:09:18:1c:e0: 8d:b7:7f:ad:73:ab:1f:47:86:2f:1d:79:93:1b:76:9c:e4:72: 09:7e:db:9c:3a:6e:bd:67:7d:a3:ca:a6:12:2b:3a:f7:ee:f1: 5e:6d:59:36:f6:0d:d9:e8:59:e2:68:a4:19:1f:2a:22:b1:92: 21:1f:c7:cc:8d:82:77:63:20:3b:ae:b7:f9:10:cf:2f:3f:84: 0e:50:5d:93:94:3c:f3:f4:81:74:ac:4f:f3:3b:ce:f3:b5:a1: fc:f0:6a:4a:12:a0:01:9e:4e:f6:b3:05:77:5c:8e:75:c9:c4: ba:a3:6f:77:8f:db:36:7b:e9:d9:b2:85:eb:25:c1:c9:9c:9c: 51:9d:be:a7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErBe4+uAeXfqMCLL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmU0ZTRhNWEtYzhlNC00NDQ0LTk4M2QtYWJmZTZjNWU5 ZWZmMB4XDTI1MDgwNTEzMDA0MVoXDTI1MTEwMzE0MDA0MVowLzEtMCsGA1UEAxMk YjlhNTE2NGMtMmI5YS00Mzc2LTkxOGUtZmVjNWNiNjQzYzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rh8HegpbIm3Ve2rqLOaW7YIodrxxD4JZ2mq y0HK11Nv8CRy5GgkSRTxueLEIFQZc4dKTRyFi8RuZtHZPTthFZBg5rcQ/7bKiK4o qD2sGLZtUoTDsDdi8JniOLUJjI6D205yh4vfiMM4/lhVhl+NcAzt/hKYpgAi/OC2 KkRQ5fzQh8AtG/sbebYsDOHJLBJkOkypD4/O2p8ecq00p41DCfA2E433a2oXLstF K7KpdWnEzQyg089QN8xAZ5PB89FzB/nCB7tuiVAzHjYfqr+cHGCBTtKmauXYo7sd A5bDjAMucEHFFQuf4Gv9rKEOEJZx1YzrVCCOxLF8OOeVjv/MkwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMtf0grPMwShO4mEkwrQqAOIdvqLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZTRl NGE1YS1jOGU0LTQ0NDQtOTgzZC1hYmZlNmM1ZTllZmYvZmY0NWY2ZjktOGFmYS0z ZjIxLWEyNGYtMmE2OGVmZDNiZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmU0ZTRhNWEtYzhlNC00NDQ0LTk4 M2QtYWJmZTZjNWU5ZWZmL2ZlNGU0YTVhLWM4ZTQtNDQ0NC05ODNkLWFiZmU2YzVl OWVmZi5jcmwwHwYDVR0jBBgwFoAUNWWyaV7/ppcVH1h7s6UK3gS8fwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZTRlNGE1YS1jOGU0LTQ0NDQtOTgzZC1hYmZl NmM1ZTllZmYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDQrRIAwQC x3pwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEZ/JWoSYmGSZaDV+cUQTSQQk7tHGrpzXgccR8U8xp4B+01f dMvSYcnY1b5m7KN9sM/7tagbMQgbL9aarzbNwVMnsQxKuMB3gNT6e5IRc6Hh5ddA oI/ZLehfsOBnhybAZdbuS+Wlh0Icqxg1ZdRrp/PNZrRMfH5aIR4jCRgc4I23f61z qx9Hhi8deZMbdpzkcgl+25w6br1nfaPKphIrOvfu8V5tWTb2DdnoWeJopBkfKiKx kiEfx8yNgndjIDuut/kQzy8/hA5QXZOUPPP0gXSsT/M7zvO1ofzwakoSoAGeTvaz BXdcjnXJxLqjb3eP2zZ76dmyheslwcmcnFGdvqc= -----END CERTIFICATE-----Generated at Thu Aug 21 11:01:27 2025 by rpki-client