$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3e8ae2a-5105-3295-a7ce-d248e3a22b54.roa File: a3e8ae2a-5105-3295-a7ce-d248e3a22b54.roa (raw, json) Hash identifier: HHyCVhauEElhm5mBphJzi4HfR3j3RJBqQcw8N24hVjQ= Subject key identifier: 2A:A1:8A:D5:C9:B4:07:8D:D5:9F:33:1D:63:5A:B7:F2:B6:8D:61:A9 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584AA16120D8B66420CE292F4ED0 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3e8ae2a-5105-3295-a7ce-d248e3a22b54.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 173.198.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:20:d8:b6:64:20:ce:29:2f:4e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=a7601f00-d4f7-4e5b-b62e-0d86bbac2323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:79:ac:d4:1b:49:bf:9b:d0:f7:21:6b:3b: 61:cc:6f:d2:52:3b:e2:2a:8a:3d:a0:bd:78:ae:8d: ad:e9:a7:d5:58:e6:fe:06:19:ff:d0:8d:42:eb:ea: 98:4b:a1:61:aa:52:3a:35:8a:b9:77:75:7c:61:95: 9e:87:f0:54:7f:44:f1:80:d3:96:9d:bd:25:83:d0: 4f:00:11:bb:89:88:9a:36:98:04:6d:7c:fa:85:81: 23:50:b4:b7:1c:98:4a:31:a7:8f:fd:17:1b:50:b8: fd:45:5c:3b:65:fd:44:2c:bf:e1:62:8d:70:5e:9a: d9:80:3e:4e:8e:db:5c:0f:e8:0b:8f:68:3c:28:90: 0a:07:85:35:4e:87:33:2f:aa:72:1b:27:34:bc:9e: 46:31:2b:4e:e4:68:21:81:58:db:26:11:b5:38:9e: cf:6f:c6:c3:ee:a2:d2:65:11:ea:e1:70:e4:0e:e8: 55:2b:da:f0:dc:b0:ae:f1:28:7c:50:c7:b3:14:6a: 91:51:16:5a:af:49:b0:ba:4a:4e:2f:00:d1:75:e4: da:29:92:4c:b8:2c:9e:d5:a4:3a:64:4d:ac:1b:5e: d6:6d:af:ef:83:60:c4:db:42:6d:98:48:fe:9a:24: 73:8e:84:4d:30:d4:74:dd:b0:a6:bf:d3:17:0b:54: 4d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A1:8A:D5:C9:B4:07:8D:D5:9F:33:1D:63:5A:B7:F2:B6:8D:61:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3e8ae2a-5105-3295-a7ce-d248e3a22b54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 173.198.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:09:64:cf:8f:25:29:14:1b:60:4f:11:47:93:7b:ee:06:00: ba:cc:a8:7d:c8:6b:1a:34:87:65:08:bc:f8:e1:6a:38:f3:e8: af:f5:95:da:43:37:74:8c:33:e8:53:29:5b:c2:3e:45:34:8e: 63:88:1e:0d:6d:1b:b4:0c:11:67:d3:15:57:b8:cb:93:71:76: 09:ee:0b:7a:46:48:cd:14:a6:6a:c0:be:58:6e:81:50:23:33: 39:af:e9:23:f8:2f:75:8d:09:bb:9a:9c:0f:3c:f5:58:7b:5f: 5e:23:96:ba:4c:3c:65:83:27:0d:a5:a2:76:dd:39:f1:8c:74: dd:74:aa:8e:eb:2b:39:06:69:5b:af:d7:cd:36:e0:08:cc:0e: c3:72:01:f2:42:a4:57:d6:9f:fb:bf:70:88:72:6c:ab:d0:71: 07:bd:70:71:98:ae:7d:31:f4:7d:57:da:af:ba:63:50:a1:91: a3:23:cd:c2:be:13:44:d8:ed:ac:36:8f:70:5c:74:db:b7:4f: ea:d5:75:0b:13:34:b8:03:65:fb:0e:72:24:be:6c:46:aa:b8: 5f:6e:74:05:b9:9d:ec:17:41:98:e3:02:7b:9f:88:e8:65:65: 84:05:cf:b0:17:b6:95:6a:13:0f:f2:64:77:3a:60:60:99:1f: c6:78:51:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYSDYtmQgzikvTtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk YTc2MDFmMDAtZDRmNy00ZTViLWI2MmUtMGQ4NmJiYWMyMzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteh5rNQbSb+b0PchazthzG/SUjviKoo9oL14 ro2t6afVWOb+Bhn/0I1C6+qYS6FhqlI6NYq5d3V8YZWeh/BUf0TxgNOWnb0lg9BP ABG7iYiaNpgEbXz6hYEjULS3HJhKMaeP/RcbULj9RVw7Zf1ELL/hYo1wXprZgD5O jttcD+gLj2g8KJAKB4U1ToczL6pyGyc0vJ5GMStO5GghgVjbJhG1OJ7Pb8bD7qLS ZRHq4XDkDuhVK9rw3LCu8Sh8UMezFGqRURZar0mwukpOLwDRdeTaKZJMuCye1aQ6 ZE2sG17Wba/vg2DE20JtmEj+miRzjoRNMNR03bCmv9MXC1RNRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqhitXJtAeN1Z8zHWNat/K2jWGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYTNlOGFlMmEtNTEwNS0z Mjk1LWE3Y2UtZDI0OGUzYTIyYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErcZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0JZM+PJSkUG2BPEUeTe+4GALrMqH3Iaxo0h2UIvPjhajjz6K/1ldpD N3SMM+hTKVvCPkU0jmOIHg1tG7QMEWfTFVe4y5NxdgnuC3pGSM0UpmrAvlhugVAj Mzmv6SP4L3WNCbuanA889Vh7X14jlrpMPGWDJw2lonbdOfGMdN10qo7rKzkGaVuv 18024AjMDsNyAfJCpFfWn/u/cIhybKvQcQe9cHGYrn0x9H1X2q+6Y1ChkaMjzcK+ E0TY7aw2j3BcdNu3T+rVdQsTNLgDZfsOciS+bEaquF9udAW5newXQZjjAnufiOhl ZYQFz7AXtpVqEw/yZHc6YGCZH8Z4UVM= -----END CERTIFICATE-----Generated at Thu Aug 7 04:01:56 2025 by rpki-client