$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/ae548fa2-acd0-3aa2-9463-b60c668965c8.roa File: ae548fa2-acd0-3aa2-9463-b60c668965c8.roa (raw, json) Hash identifier: nAUFaLrfL0FNhvZLAPyt8u8k4hk9RQPCa7Mhot+0Qjk= Subject key identifier: 23:FF:00:30:8C:81:C2:4C:85:C2:B8:8C:F2:AC:F9:1E:F8:35:D2:DC Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Certificate serial: 010D0C9F4328584A8840A0C829B7BACB3E36A860 Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/ae548fa2-acd0-3aa2-9463-b60c668965c8.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 40495 IP address blocks: 174.137.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:a0:c8:29:b7:ba:cb:3e:36:a8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=04295c52-0633-436e-864b-eac9f7d3d0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:df:be:cc:04:3c:1c:2c:b2:f1:fc:d5:df:b0: f9:b9:2f:68:eb:8e:9c:9c:fe:16:d4:ce:07:1b:a4: a1:0b:ee:52:98:64:fb:4b:e4:7e:29:6f:19:47:26: d8:41:29:4f:fe:7d:11:74:b1:1b:64:3c:08:51:64: 1a:af:a4:c9:68:13:4b:6d:ab:d1:19:40:64:30:52: 57:11:24:20:49:fd:93:7b:e3:a3:df:d9:ea:e3:d8: 57:2b:19:7e:23:70:2c:58:bf:b6:61:26:a8:3e:07: 25:8d:10:ea:62:94:2d:b4:0b:3f:3b:a1:ac:2a:88: 4f:24:53:4d:c6:34:a0:4e:59:ae:5b:0c:07:7e:79: 1d:3e:0a:01:41:fa:2c:d2:81:b8:f9:c3:7e:ca:82: d6:5c:4e:37:a5:af:66:b3:f0:67:6b:3f:e2:93:a4: a6:ac:8b:a3:59:86:22:94:a8:5a:7e:23:17:51:53: cf:36:78:d6:65:a5:29:34:cb:12:c1:db:b7:65:3d: a3:81:e1:33:6f:f3:52:9f:3b:e5:ed:09:34:aa:a2: e8:c7:c8:bf:92:05:ca:c9:1c:17:4f:59:df:fd:d9: d9:60:b5:78:f5:6e:fd:50:0a:6b:63:53:05:9f:d1: b4:b6:03:44:40:83:d3:98:21:0e:1e:93:d7:b6:9a: 65:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FF:00:30:8C:81:C2:4C:85:C2:B8:8C:F2:AC:F9:1E:F8:35:D2:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/ae548fa2-acd0-3aa2-9463-b60c668965c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl X509v3 Authority Key Identifier: keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer sbgp-ipAddrBlock: critical IPv4: 174.137.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:f5:f1:8b:6d:e7:11:28:2f:bf:06:07:4c:88:55:15:cd:9f: c8:cc:6f:95:0c:62:46:1c:34:29:f5:a1:66:c4:0b:77:a5:2a: 1c:fd:5b:81:04:e0:15:5a:6f:62:46:ca:4a:81:27:ba:1d:d1: 6e:45:50:af:75:02:8d:0f:70:f9:8f:db:cd:b1:2a:fb:17:28: 8e:aa:89:b5:34:7a:51:66:f5:0d:3b:f2:6e:79:c3:5f:26:d3: eb:3f:1c:50:ae:6a:5a:fa:30:41:72:5d:31:f3:83:71:c4:08: d7:cd:c6:02:37:15:46:53:46:a1:51:de:68:39:0d:5c:ff:c9: 17:4d:74:66:0a:1a:ae:dd:ba:71:26:33:28:e7:9b:c7:1e:70: 9d:c3:e1:d8:eb:52:d6:9f:3c:9b:df:fb:98:b7:d8:bc:76:9e: 1d:50:72:6f:d8:90:c9:2e:58:2f:a8:db:d6:04:c9:1c:7f:1d: 1d:21:27:06:54:74:77:e5:ef:12:2a:d4:83:d2:88:f2:d8:ca: 0d:64:36:57:d6:6f:a9:2a:69:79:e4:82:6a:01:9b:85:c0:46: c1:4f:aa:65:0b:56:83:2e:93:21:da:b4:db:9d:e2:9b:47:75: 75:55:bb:2c:33:67:55:0b:c1:6b:2d:49:0d:eb:fa:88:ef:a9: cb:e2:0c:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQKDIKbe6yz42qGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx ODhmMB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk MDQyOTVjNTItMDYzMy00MzZlLTg2NGItZWFjOWY3ZDNkMGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9++zAQ8HCyy8fzV37D5uS9o646cnP4W1M4H G6ShC+5SmGT7S+R+KW8ZRybYQSlP/n0RdLEbZDwIUWQar6TJaBNLbavRGUBkMFJX ESQgSf2Te+Oj39nq49hXKxl+I3AsWL+2YSaoPgcljRDqYpQttAs/O6GsKohPJFNN xjSgTlmuWwwHfnkdPgoBQfos0oG4+cN+yoLWXE43pa9ms/Bnaz/ik6SmrIujWYYi lKhafiMXUVPPNnjWZaUpNMsSwdu3ZT2jgeEzb/NSnzvl7Qk0qqLox8i/kgXKyRwX T1nf/dnZYLV49W79UAprY1MFn9G0tgNEQIPTmCEOHpPXtppluwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCP/ADCMgcJMhcK4jPKs+R74NdLcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvYWU1NDhmYTItYWNkMC0z YWEyLTk0NjMtYjYwYzY2ODk2NWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0 NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArol5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn18Ytt5xEoL78GB0yIVRXNn8jMb5UMYkYcNCn1oWbEC3elKhz9W4EE 4BVab2JGykqBJ7od0W5FUK91Ao0PcPmP282xKvsXKI6qibU0elFm9Q078m55w18m 0+s/HFCualr6MEFyXTHzg3HECNfNxgI3FUZTRqFR3mg5DVz/yRdNdGYKGq7dunEm Myjnm8cecJ3D4djrUtafPJvf+5i32Lx2nh1Qcm/YkMkuWC+o29YEyRx/HR0hJwZU dHfl7xIq1IPSiPLYyg1kNlfWb6kqaXnkgmoBm4XARsFPqmULVoMukyHatNud4ptH dXVVuywzZ1ULwWstSQ3r+ojvqcviDFk= -----END CERTIFICATE-----Generated at Sat Aug 9 20:49:23 2025 by rpki-client