$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c525b582-42a7-3759-b425-cd9471ada511.roa File: c525b582-42a7-3759-b425-cd9471ada511.roa (raw, json) Hash identifier: l8Am8TuM0IwZ127lnnUN4q/I5CjNIYqLLf4iWahR0Qc= Subject key identifier: 89:3F:DC:B9:CA:F0:66:2C:12:9D:0D:44:CC:31:C3:3B:31:8F:EA:CE Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584AA161A0CDB6D56F32FA628300 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c525b582-42a7-3759-b425-cd9471ada511.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 11427 IP address blocks: 24.173.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:a0:cd:b6:d5:6f:32:fa:62:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=5adba199-011c-4a71-9681-4075d6826db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7d:cd:89:ed:35:4c:72:0a:26:a6:41:36:fc: f2:ad:79:4a:a5:34:4e:b4:79:7e:64:b3:34:8b:a2: 73:fa:4d:05:b3:3d:14:9d:d7:bf:2a:f4:d9:26:2f: 0b:a9:f3:66:4b:2c:ba:14:09:e3:b5:64:75:5e:10: e7:70:2b:f0:ed:06:37:c8:76:35:b1:cc:b5:09:a4: 64:54:02:79:26:e7:d5:60:a1:5a:c6:f7:bb:5c:28: 73:62:36:46:a3:ed:4e:79:e4:3a:bc:4e:d7:c8:97: 9d:16:32:5c:d5:b0:e5:80:0e:65:b0:2f:cf:e2:bb: ee:e0:77:4d:18:22:b9:45:4a:d1:8f:97:00:ac:d1: a1:b1:b7:84:e3:1c:2e:fc:2e:e1:da:39:a2:bf:5a: f3:30:c0:51:19:24:e5:ae:4a:73:cb:d0:12:05:bf: ae:a4:61:ba:28:51:50:42:87:56:61:50:bf:de:04: e8:50:67:17:6c:0b:07:4a:15:b2:13:cf:98:5b:ea: 07:2d:e5:97:c1:a1:82:17:16:1a:b1:0c:be:79:78: 95:d0:e4:01:c0:55:25:93:8d:5f:be:14:47:db:fa: 56:2e:34:03:bb:94:26:1e:3e:28:48:f8:6c:ce:c9: 2d:57:6f:70:42:37:3a:11:e2:1d:51:3f:73:49:66: 8e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3F:DC:B9:CA:F0:66:2C:12:9D:0D:44:CC:31:C3:3B:31:8F:EA:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c525b582-42a7-3759-b425-cd9471ada511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 24.173.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:08:27:f1:4d:ba:2b:e2:68:8a:12:e6:c7:7d:05:8f:b1:91: e7:ee:e2:ff:8e:ee:06:19:6a:f1:52:45:20:1f:a3:7d:fb:6d: bd:f8:b9:d7:28:f2:f3:c4:16:4c:ba:23:db:50:09:2d:05:db: 93:eb:03:02:45:6f:7c:94:2e:77:cc:21:c9:d6:33:1c:6d:ba: a1:ee:00:f5:79:bd:ce:65:d2:36:42:ef:eb:18:ed:16:9d:fe: 7f:fb:46:0e:04:45:0d:e9:1b:76:52:3c:2e:58:78:a1:36:2b: 87:33:1c:cc:72:aa:2b:3b:ba:a1:f9:87:08:ee:25:e2:f5:3f: de:fa:a0:64:45:5c:3c:1a:a8:f9:30:a9:0d:c3:0f:b3:9c:eb: 15:99:ac:1d:14:0f:14:37:45:7b:f4:e0:13:51:71:fa:6c:75: 05:a0:d0:48:9d:fd:c5:4a:28:be:7b:ea:75:64:58:c5:30:0a: 7f:4c:78:91:65:57:8c:17:82:80:30:21:c2:f8:9a:02:89:3b: ae:bc:d9:2e:08:90:fb:4c:24:b6:80:5d:a7:e4:a0:56:77:94: c9:0e:b3:46:68:de:0b:4d:85:98:29:3f:11:b0:b0:74:21:b8: c9:97:0e:5c:fd:c2:06:84:72:d5:46:36:86:72:b5:05:4e:a5: f2:92:81:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYaDNttVvMvpigwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NWFkYmExOTktMDExYy00YTcxLTk2ODEtNDA3NWQ2ODI2ZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn3Nie01THIKJqZBNvzyrXlKpTROtHl+ZLM0 i6Jz+k0Fsz0Unde/KvTZJi8LqfNmSyy6FAnjtWR1XhDncCvw7QY3yHY1scy1CaRk VAJ5JufVYKFaxve7XChzYjZGo+1OeeQ6vE7XyJedFjJc1bDlgA5lsC/P4rvu4HdN GCK5RUrRj5cArNGhsbeE4xwu/C7h2jmiv1rzMMBRGSTlrkpzy9ASBb+upGG6KFFQ QodWYVC/3gToUGcXbAsHShWyE8+YW+oHLeWXwaGCFxYasQy+eXiV0OQBwFUlk41f vhRH2/pWLjQDu5QmHj4oSPhszsktV29wQjc6EeIdUT9zSWaOOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIk/3LnK8GYsEp0NRMwxwzsxj+rOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYzUyNWI1ODItNDJhNy0z NzU5LWI0MjUtY2Q5NDcxYWRhNTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGK2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwIJ/FNuiviaIoS5sd9BY+xkefu4v+O7gYZavFSRSAfo337bb34udco 8vPEFky6I9tQCS0F25PrAwJFb3yULnfMIcnWMxxtuqHuAPV5vc5l0jZC7+sY7Rad /n/7Rg4ERQ3pG3ZSPC5YeKE2K4czHMxyqis7uqH5hwjuJeL1P976oGRFXDwaqPkw qQ3DD7Oc6xWZrB0UDxQ3RXv04BNRcfpsdQWg0Eid/cVKKL576nVkWMUwCn9MeJFl V4wXgoAwIcL4mgKJO6682S4IkPtMJLaAXafkoFZ3lMkOs0Zo3gtNhZgpPxGwsHQh uMmXDlz9wgaEctVGNoZytQVOpfKSgdM= -----END CERTIFICATE-----Generated at Wed Aug 6 10:59:01 2025 by rpki-client