$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9948a9a5-32da-3d30-901a-b304b4c12f72.roa File: 9948a9a5-32da-3d30-901a-b304b4c12f72.roa (raw, json) Hash identifier: 3l1nBix7Fw8i2WMyJjKKNXoDLfIqPHJw9OYZhtXo+L8= Subject key identifier: DC:6A:B4:9E:C5:E2:04:B5:7F:08:C0:46:54:72:AE:D4:1E:43:94:67 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584AA1618D97CFBC402AA29EC680 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9948a9a5-32da-3d30-901a-b304b4c12f72.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 10796 IP address blocks: 65.185.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:8d:97:cf:bc:40:2a:a2:9e:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=0bc8c486-43f4-40c2-9f7a-835006962a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b0:01:28:9b:b6:fd:93:de:06:11:61:e7:00: fb:0d:9a:8b:9a:d7:46:ce:a9:28:57:a4:18:58:f1: e0:03:9c:43:3a:f0:d8:60:19:d0:33:e0:17:83:b1: 1f:50:b9:d1:aa:76:7a:4c:2c:42:2f:a2:9d:ce:01: 1f:ec:a9:bc:4a:2d:d1:4d:12:60:c3:8f:ef:0f:89: f3:97:39:7b:62:f4:5e:7a:85:26:6e:32:b7:0b:ee: c5:86:21:2f:c7:6d:8c:83:c9:b2:00:4e:05:98:b6: 3c:e4:c7:34:3b:d7:86:23:cd:af:77:48:e0:56:ee: 6f:a8:92:e6:d8:c7:00:72:f9:6d:e1:48:5e:d6:cf: 90:0f:e9:d1:85:5d:a2:cf:e2:ba:8c:4c:61:36:fd: 05:28:42:64:d3:53:2c:c6:8e:b3:bd:d0:65:07:a5: 46:dc:10:ed:58:3f:ee:e3:ca:4e:28:77:1f:74:bc: 1f:f3:63:7d:66:2d:52:4f:6d:71:c2:85:f0:8f:54: a3:d5:a2:10:da:eb:72:de:03:b6:da:c6:3f:84:94: 29:fa:b5:63:c6:37:8c:da:83:c5:f8:4f:2d:46:f4: 81:e4:4b:dc:7e:63:6e:8f:79:cc:53:3a:6a:83:94: 8b:99:dc:90:12:26:d5:56:20:a7:f5:36:c8:a7:9a: 7e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6A:B4:9E:C5:E2:04:B5:7F:08:C0:46:54:72:AE:D4:1E:43:94:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9948a9a5-32da-3d30-901a-b304b4c12f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 65.185.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:e1:2d:f5:f1:b2:17:e2:8f:9f:ec:88:e1:ad:2c:60:08:70: a5:96:ea:1c:08:a0:08:2c:ee:bb:c3:15:3c:5d:99:2f:9b:27: cb:ec:f5:a6:c2:22:c0:7f:1c:dc:6f:86:cc:95:5d:1b:fc:ca: d1:89:2b:60:b8:97:f6:6d:41:52:40:79:f6:f5:27:2d:c0:f7: 97:e8:55:d6:67:26:da:d1:e8:e4:40:08:0a:88:8c:2f:5b:19: 18:cc:48:26:06:42:ed:11:ca:bc:b9:d7:87:d9:0a:b9:21:9c: 8b:3e:a5:ec:f8:cf:8b:91:ac:a2:e1:2e:a1:9f:c2:cf:63:b3: b2:2c:80:44:fe:ab:fa:30:4d:c9:ab:6c:fe:bd:b0:d3:32:ba: e0:79:7a:36:bf:08:5c:18:e4:7b:69:ba:50:33:03:70:e9:94: e8:48:7b:9e:65:e3:ae:07:aa:df:c2:94:59:de:b7:46:97:bb: da:fc:8e:b0:89:41:66:d4:d2:b7:68:45:84:bd:f5:a5:65:83: 9b:31:e9:cf:80:b3:57:01:19:2a:f8:92:04:a6:3e:d0:b7:bb: eb:3b:ff:d3:69:88:ef:4a:18:a0:5a:bc:28:b0:e6:4e:f8:3a: 7f:67:8d:9f:5d:a6:bf:d5:d1:39:28:94:c9:ce:18:ad:c1:45: 3e:10:3e:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYY2Xz7xAKqKexoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk MGJjOGM0ODYtNDNmNC00MGMyLTlmN2EtODM1MDA2OTYyYTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrABKJu2/ZPeBhFh5wD7DZqLmtdGzqkoV6QY WPHgA5xDOvDYYBnQM+AXg7EfULnRqnZ6TCxCL6KdzgEf7Km8Si3RTRJgw4/vD4nz lzl7YvReeoUmbjK3C+7FhiEvx22Mg8myAE4FmLY85Mc0O9eGI82vd0jgVu5vqJLm 2McAcvlt4Uhe1s+QD+nRhV2iz+K6jExhNv0FKEJk01Msxo6zvdBlB6VG3BDtWD/u 48pOKHcfdLwf82N9Zi1ST21xwoXwj1Sj1aIQ2uty3gO22sY/hJQp+rVjxjeM2oPF +E8tRvSB5EvcfmNuj3nMUzpqg5SLmdyQEibVViCn9TbIp5p+mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxqtJ7F4gS1fwjARlRyrtQeQ5RnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOTk0OGE5YTUtMzJkYS0z ZDMwLTkwMWEtYjMwNGI0YzEyZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQbnyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/hLfXxshfij5/siOGtLGAIcKWW6hwIoAgs7rvDFTxdmS+bJ8vs9abC IsB/HNxvhsyVXRv8ytGJK2C4l/ZtQVJAefb1Jy3A95foVdZnJtrR6ORACAqIjC9b GRjMSCYGQu0Ryry514fZCrkhnIs+pez4z4uRrKLhLqGfws9js7IsgET+q/owTcmr bP69sNMyuuB5eja/CFwY5HtpulAzA3DplOhIe55l464Hqt/ClFnet0aXu9r8jrCJ QWbU0rdoRYS99aVlg5sx6c+As1cBGSr4kgSmPtC3u+s7/9NpiO9KGKBavCiw5k74 On9njZ9dpr/V0TkolMnOGK3BRT4QPig= -----END CERTIFICATE-----Generated at Thu Aug 7 04:00:30 2025 by rpki-client