$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/fa6a5ee7-ff3e-3c9a-95df-f45fd4363e78.roa File: fa6a5ee7-ff3e-3c9a-95df-f45fd4363e78.roa (raw, json) Hash identifier: iYte0cg9YYPCjCjOLWRNjeVtp7geGsO3t2iRqVut7ZI= Subject key identifier: DD:54:E6:3C:A0:E0:7A:82:9A:20:B6:88:5A:D8:A6:83:9A:0A:B6:6A Certificate issuer: /CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83 Certificate serial: 010D0C9F4328584ABF77E670098207BC37C20540 Authority key identifier: 14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/fa6a5ee7-ff3e-3c9a-95df-f45fd4363e78.roa Signing time: Mon 04 Aug 2025 19:41:44 +0000 ROA not before: Mon 04 Aug 2025 19:41:44 +0000 ROA not after: Sun 02 Nov 2025 20:41:44 +0000 asID: 209 IP address blocks: 161.203.14.0/23 maxlen: 23 161.203.16.0/23 maxlen: 23 161.203.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:77:e6:70:09:82:07:bc:37:c2:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83 Validity Not Before: Aug 4 19:41:44 2025 GMT Not After : Nov 2 20:41:44 2025 GMT Subject: CN=373d9b5a-39ab-458d-8296-68f2fd63f2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:39:fa:e0:68:c8:3a:80:11:05:fe:45:08:71: 97:f2:ad:6b:e7:15:7f:fe:c9:ee:9e:de:58:82:7c: 4e:5f:3c:b6:a4:5f:95:e8:74:20:8c:2f:b7:f5:b1: fa:88:41:94:e9:dc:80:cc:21:99:e7:4b:00:36:52: a4:1c:a9:04:12:9a:52:56:92:7d:b7:2c:19:ef:e9: 71:e7:df:f9:f9:e9:0b:37:d9:aa:6d:9a:59:34:c7: 8f:9f:5c:95:4a:f8:e7:7b:68:13:ae:cb:12:0d:0b: 84:3c:60:40:b7:d4:d0:1a:70:c7:c2:ba:a7:7a:3d: dd:4e:6c:eb:56:71:e1:5b:d4:d2:5e:37:1e:ff:0f: 7c:57:1a:b7:e8:b4:4b:99:1d:02:79:75:d8:14:ae: 3c:b8:b9:52:43:64:5c:34:5d:6f:13:6e:90:71:94: e9:b9:38:b8:eb:5f:76:75:da:c9:6c:fc:b2:13:d1: 41:22:e2:e6:6d:78:a5:0f:cd:21:2e:35:57:52:ef: 7f:f2:6c:f2:10:28:48:5c:e6:e1:80:b2:2d:29:e0: a6:06:58:39:c2:77:e4:6f:40:54:22:e6:2a:91:bf: 5c:d0:a4:39:d3:7f:25:c4:fd:22:b0:fb:7c:20:49: 54:73:81:61:b2:38:5d:26:94:82:e5:51:f9:5a:db: bb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:54:E6:3C:A0:E0:7A:82:9A:20:B6:88:5A:D8:A6:83:9A:0A:B6:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/fa6a5ee7-ff3e-3c9a-95df-f45fd4363e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl X509v3 Authority Key Identifier: keyid:14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer sbgp-ipAddrBlock: critical IPv4: 161.203.14.0-161.203.19.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ab:94:9a:20:1b:44:d9:27:77:ae:28:8d:21:ba:7d:f3:db: dc:ad:72:e0:5a:0d:42:9d:95:d9:b9:a5:6b:36:a5:3a:58:ad: 2d:b0:b0:25:22:ba:83:30:f2:e2:00:a8:16:9a:68:a0:18:7c: f1:59:1c:63:66:a1:a8:21:94:e0:ee:29:e7:d6:6b:2b:95:10: c4:60:94:53:e3:0a:bd:f9:02:a1:12:61:bf:90:0c:e1:93:6f: 11:f6:f0:2f:82:3c:4e:30:bc:4b:fa:34:cf:4f:97:54:a2:74: 69:b6:d3:ee:1e:fe:2b:bf:07:88:50:d5:c6:d7:93:0d:ae:0d: 0f:62:32:d0:7d:72:0a:e5:9a:5a:31:e7:b6:fb:9b:de:5b:57: ba:82:01:7e:d7:6c:e0:f4:15:db:d5:46:b4:28:76:c3:d2:10: f5:d8:ed:e4:4d:f0:43:b5:a8:ff:b8:2b:08:fb:c0:82:62:2c: 60:6a:e6:d0:c1:aa:a3:fb:39:3b:24:a9:b3:a7:c6:be:dd:cc: 53:f6:56:23:00:f8:98:3d:61:d5:d4:0d:22:ca:1c:22:d1:88: 3b:85:80:7b:63:43:fa:02:6d:9b:a8:5a:e4:04:1d:96:7e:43: 23:4e:73:06:c1:f0:a1:18:4c:0e:12:b2:5a:7f:bb:f8:da:d9: 32:73:13:ad -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEq/d+ZwCYIHvDfCBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmOWJmNDEtMzljZC00ZmM1LTk2N2MtZDJhNGFiMGQ5 YzgzMB4XDTI1MDgwNDE5NDE0NFoXDTI1MTEwMjIwNDE0NFowLzEtMCsGA1UEAxMk MzczZDliNWEtMzlhYi00NThkLTgyOTYtNjhmMmZkNjNmMmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDn64GjIOoARBf5FCHGX8q1r5xV//snunt5Y gnxOXzy2pF+V6HQgjC+39bH6iEGU6dyAzCGZ50sANlKkHKkEEppSVpJ9tywZ7+lx 59/5+ekLN9mqbZpZNMePn1yVSvjne2gTrssSDQuEPGBAt9TQGnDHwrqnej3dTmzr VnHhW9TSXjce/w98Vxq36LRLmR0CeXXYFK48uLlSQ2RcNF1vE26QcZTpuTi46192 ddrJbPyyE9FBIuLmbXilD80hLjVXUu9/8mzyEChIXObhgLItKeCmBlg5wnfkb0BU IuYqkb9c0KQ5038lxP0isPt8IElUc4FhsjhdJpSC5VH5Wtu7YQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFN1U5jyg4HqCmiC2iFrYpoOaCrZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMGY5 YmY0MS0zOWNkLTRmYzUtOTY3Yy1kMmE0YWIwZDljODMvZmE2YTVlZTctZmYzZS0z YzlhLTk1ZGYtZjQ1ZmQ0MzYzZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDBmOWJmNDEtMzljZC00ZmM1LTk2 N2MtZDJhNGFiMGQ5YzgzL2QwZjliZjQxLTM5Y2QtNGZjNS05NjdjLWQyYTRhYjBk OWM4My5jcmwwHwYDVR0jBBgwFoAUFA/qJiHpv8fsdjogCg5MFHhraggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMGY5YmY0MS0zOWNkLTRmYzUtOTY3Yy1kMmE0 YWIwZDljODMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGhyw4D BAKhyxAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAaauUmiAbRNknd64ojSG6ffPb3K1y4FoNQp2V2bmlazal OlitLbCwJSK6gzDy4gCoFppooBh88VkcY2ahqCGU4O4p59ZrK5UQxGCUU+MKvfkC oRJhv5AM4ZNvEfbwL4I8TjC8S/o0z0+XVKJ0abbT7h7+K78HiFDVxteTDa4ND2Iy 0H1yCuWaWjHntvub3ltXuoIBftds4PQV29VGtCh2w9IQ9djt5E3wQ7Wo/7grCPvA gmIsYGrm0MGqo/s5OySps6fGvt3MU/ZWIwD4mD1h1dQNIsocItGIO4WAe2ND+gJt m6ha5AQdln5DI05zBsHwoRhMDhKyWn+7+NrZMnMTrQ== -----END CERTIFICATE-----Generated at Wed Aug 20 02:37:09 2025 by rpki-client