$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/18187cff-159b-3f88-aa27-6e6e06aa0b90.roa File: 18187cff-159b-3f88-aa27-6e6e06aa0b90.roa (raw, json) Hash identifier: y2HiQeOvIQwmU7polPVE5EM4UM+fo5003DOJ7nD4zoY= Subject key identifier: D9:BA:17:F3:DB:86:F3:26:95:60:F8:1F:E7:79:58:5F:AD:88:18:5C Certificate issuer: /CN=11150dfe-c654-4719-b6c3-642628555522 Certificate serial: 010D0C9F4328584A9900C927A9B3F014666F3400 Authority key identifier: 51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/18187cff-159b-3f88-aa27-6e6e06aa0b90.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 15191 IP address blocks: 198.29.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c9:27:a9:b3:f0:14:66:6f:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11150dfe-c654-4719-b6c3-642628555522 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=de6fb5fb-e467-4208-a28c-91ca5a6d6599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9a:f9:59:9e:e1:1e:e1:ff:49:b3:75:c2:f1: 40:e8:f2:b0:d3:de:bd:72:55:85:06:b2:7a:07:ce: 3f:0f:6a:f9:4f:88:d8:ea:f0:ed:bb:b8:f0:63:65: de:a7:b0:1a:74:b9:94:08:e1:ef:13:ed:88:c0:00: 0b:53:68:f3:ab:5a:41:76:6d:e9:21:5b:67:fd:be: d6:ea:98:15:e4:31:b1:d7:25:6b:9f:84:46:c6:a2: 4c:03:1b:24:06:90:66:c4:2d:4c:57:d0:48:4f:34: 5d:f0:fb:01:18:dd:ae:30:29:a9:99:b0:0f:5d:f8: cf:95:4e:7d:c0:91:07:92:3f:e8:6e:d6:80:b4:3f: 6e:f4:be:a3:f8:04:ac:cc:2b:dd:4a:d1:8a:11:54: 18:58:8d:81:5f:6f:13:67:67:85:bc:ff:cb:83:a9: a5:af:6d:e7:86:4b:47:02:75:32:97:3a:b9:8d:a0: b8:59:f5:38:91:33:77:cf:12:b2:42:78:41:e1:f0: e9:fe:74:4b:fc:a9:9d:16:97:f1:7d:73:bb:c8:11: c1:d9:61:16:a9:ad:3d:79:30:ba:e1:d8:d1:92:f7: 45:2e:f5:af:f0:bc:02:9e:f6:83:9a:cf:fe:7d:54: a3:61:57:bb:73:fc:68:ab:93:68:fa:74:5e:37:36: 22:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BA:17:F3:DB:86:F3:26:95:60:F8:1F:E7:79:58:5F:AD:88:18:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/18187cff-159b-3f88-aa27-6e6e06aa0b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl X509v3 Authority Key Identifier: keyid:51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer sbgp-ipAddrBlock: critical IPv4: 198.29.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:29:86:a9:12:15:a3:1f:33:26:ba:f6:68:6d:71:80:c8:72: 91:0b:f9:9c:c6:da:71:ab:61:54:27:5b:ff:73:40:07:2c:86: 6e:ed:a3:ac:d4:8f:87:c5:cb:14:a6:ce:21:3a:10:2b:c2:75: fa:ab:c0:b8:e4:f9:12:a5:ee:02:fb:0c:5d:9d:25:52:cf:8d: f7:c7:42:0e:22:dd:f7:1d:f6:8e:d4:18:69:ed:5c:29:4d:a3: fe:1f:4a:8c:a9:1e:b8:4b:d5:ac:db:c6:9f:59:3c:f3:73:65: d3:cb:70:62:e9:68:27:71:ea:7f:b6:96:07:c3:54:fd:99:e5: 88:b0:9f:b4:c0:c9:78:30:04:b6:bf:ba:8d:c2:fd:a2:a9:f1: 8e:58:ad:9b:c8:82:04:d9:74:26:63:35:b4:07:9f:23:61:87: 1c:b3:35:5a:cc:6d:13:fd:b3:1d:2e:e2:c9:1c:53:18:d6:de: 42:54:92:1a:b3:d5:14:25:4a:07:78:b3:4a:6c:a6:a8:90:e6: ab:7a:88:31:e0:96:ba:8c:6d:2a:7b:c4:4c:57:65:8f:0e:a9: 59:c5:18:92:34:fc:00:c2:04:92:c0:cb:95:5b:8d:78:2f:3c: f6:25:57:0d:b9:ca:7b:00:e9:49:6e:94:83:d1:8c:18:da:e5: 2a:66:81:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMknqbPwFGZvNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTExNTBkZmUtYzY1NC00NzE5LWI2YzMtNjQyNjI4NTU1 NTIyMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk ZGU2ZmI1ZmItZTQ2Ny00MjA4LWEyOGMtOTFjYTVhNmQ2NTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZr5WZ7hHuH/SbN1wvFA6PKw0969clWFBrJ6 B84/D2r5T4jY6vDtu7jwY2Xep7AadLmUCOHvE+2IwAALU2jzq1pBdm3pIVtn/b7W 6pgV5DGx1yVrn4RGxqJMAxskBpBmxC1MV9BITzRd8PsBGN2uMCmpmbAPXfjPlU59 wJEHkj/obtaAtD9u9L6j+ASszCvdStGKEVQYWI2BX28TZ2eFvP/Lg6mlr23nhktH AnUylzq5jaC4WfU4kTN3zxKyQnhB4fDp/nRL/KmdFpfxfXO7yBHB2WEWqa09eTC6 4djRkvdFLvWv8LwCnvaDms/+fVSjYVe7c/xoq5No+nReNzYiAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm6F/PbhvMmlWD4H+d5WF+tiBhcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMTE1 MGRmZS1jNjU0LTQ3MTktYjZjMy02NDI2Mjg1NTU1MjIvMTgxODdjZmYtMTU5Yi0z Zjg4LWFhMjctNmU2ZTA2YWEwYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTExNTBkZmUtYzY1NC00NzE5LWI2 YzMtNjQyNjI4NTU1NTIyLzExMTUwZGZlLWM2NTQtNDcxOS1iNmMzLTY0MjYyODU1 NTUyMi5jcmwwHwYDVR0jBBgwFoAUUXG9H0j6i8I6VqcUMA6ZC7noXlkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMTE1MGRmZS1jNjU0LTQ3MTktYjZjMy02NDI2 Mjg1NTU1MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExh0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0phqkSFaMfMya69mhtcYDIcpEL+ZzG2nGrYVQnW/9zQAcshm7to6zU j4fFyxSmziE6ECvCdfqrwLjk+RKl7gL7DF2dJVLPjffHQg4i3fcd9o7UGGntXClN o/4fSoypHrhL1azbxp9ZPPNzZdPLcGLpaCdx6n+2lgfDVP2Z5Yiwn7TAyXgwBLa/ uo3C/aKp8Y5YrZvIggTZdCZjNbQHnyNhhxyzNVrMbRP9sx0u4skcUxjW3kJUkhqz 1RQlSgd4s0pspqiQ5qt6iDHglrqMbSp7xExXZY8OqVnFGJI0/ADCBJLAy5VbjXgv PPYlVw25ynsA6UlulIPRjBja5SpmgRk= -----END CERTIFICATE-----Generated at Tue Aug 12 22:46:06 2025 by rpki-client