$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/744b6ffa-3be1-313f-b480-477a52ccfd2b.roa File: 744b6ffa-3be1-313f-b480-477a52ccfd2b.roa (raw, json) Hash identifier: 0XxjaLGz9Q7PeXMe8UjQOY6hvJ7RQVog5xvx7tc5SrQ= Subject key identifier: DD:8A:9D:16:F2:B3:23:24:4A:C3:6F:B7:51:DA:FF:D0:A8:C5:61:08 Certificate issuer: /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8 Certificate serial: 010D0C9F4328584AABD8E8D3A939C96A7710A480 Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/744b6ffa-3be1-313f-b480-477a52ccfd2b.roa Signing time: Mon 28 Jul 2025 19:01:02 +0000 ROA not before: Mon 28 Jul 2025 19:01:02 +0000 ROA not after: Sun 26 Oct 2025 19:01:02 +0000 asID: 11030 IP address blocks: 199.106.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:d8:e8:d3:a9:39:c9:6a:77:10:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8 Validity Not Before: Jul 28 19:01:02 2025 GMT Not After : Oct 26 19:01:02 2025 GMT Subject: CN=2c6749ff-7c2a-4e47-86de-34dd3c74a599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:19:b6:af:74:44:1c:0a:93:3b:df:5f:ee:de: bc:cc:34:16:ef:25:27:42:7d:1b:11:be:0b:5d:aa: 89:81:ae:5d:73:af:16:67:1c:a8:c0:84:fe:dc:fc: be:1d:b3:ea:b0:9c:75:90:68:2e:e1:2c:46:78:23: b6:9b:6e:99:19:ef:2b:0a:be:4f:ec:c5:2e:c9:6b: 99:82:4b:99:9f:a1:8c:f0:f1:f0:41:38:c4:f7:e9: 13:a9:f6:ec:63:41:8c:66:e0:d0:39:9d:ed:ac:71: 5c:30:9a:3e:c9:14:ac:b7:a2:b1:6a:d8:a2:0c:91: 1e:4b:46:ca:ca:5c:89:a0:9d:be:95:8b:7d:20:c0: d2:66:99:69:85:e2:f2:1b:b6:79:dd:42:4a:1c:0c: c8:de:1f:bd:b8:4b:28:9f:96:56:ff:0f:f5:78:50: b4:56:70:52:65:2e:41:53:4e:5f:6a:e9:99:ca:cd: fd:b4:3c:7e:8e:86:8e:09:4c:f4:4f:cf:f2:51:c4: a8:48:da:d4:d0:7d:9e:54:64:e7:4c:03:12:5e:ca: ca:48:41:2d:2a:83:35:1e:66:43:93:72:af:94:1e: 34:ed:3d:54:a2:d5:87:64:9d:a1:89:dd:f7:45:b5: dd:89:cd:4e:ce:92:e2:69:7b:72:e6:93:2b:1b:1e: 33:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8A:9D:16:F2:B3:23:24:4A:C3:6F:B7:51:DA:FF:D0:A8:C5:61:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/744b6ffa-3be1-313f-b480-477a52ccfd2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl X509v3 Authority Key Identifier: keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer sbgp-ipAddrBlock: critical IPv4: 199.106.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f8:27:8e:eb:80:96:16:28:d1:17:35:49:ce:8d:eb:9c:04: 34:e0:08:3b:58:31:be:7e:90:72:03:75:e6:97:6c:9b:98:77: 60:e0:b5:4e:5d:fb:da:30:cb:9d:bf:aa:34:81:8c:c2:61:fe: a8:c2:99:39:84:6b:aa:56:a5:eb:e6:67:72:0e:9b:c5:71:a2: 7a:cf:76:cb:2e:57:59:97:97:86:cb:d7:d8:aa:21:b4:5f:31: d9:cf:fa:3e:60:62:70:3a:e9:00:80:02:81:fb:49:27:9d:b0: 67:ed:fc:73:1e:87:b8:d8:40:d5:32:cc:da:e0:6d:d4:5e:06: 7f:a1:b0:db:ae:d0:bb:2d:50:71:a9:78:63:14:e8:6c:6a:b1: 41:34:a4:ca:75:a6:42:7f:33:6e:9c:2a:84:f9:38:00:6b:8f: cf:c3:91:76:d5:21:37:6a:d5:18:a9:31:53:fc:ea:d1:65:f1: 7d:e9:77:81:da:1a:66:5a:47:ae:ff:8d:c2:a1:8c:21:69:0c: 5c:dc:ad:4d:33:4a:3c:95:17:24:0e:d4:60:81:e3:63:e1:59: 30:78:f1:e3:40:dd:3b:f3:ac:fa:e5:68:1d:f0:c3:fe:88:78: 0e:ae:38:0c:28:1a:ce:58:d6:88:84:fa:68:18:0c:63:7e:77: 52:19:ce:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqr2OjTqTnJancQpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzE0MTg2ZGYtODdiYS00ZGQ1LWFkYmYtMWM2YzJiYmUw NGE4MB4XDTI1MDcyODE5MDEwMloXDTI1MTAyNjE5MDEwMlowLzEtMCsGA1UEAxMk MmM2NzQ5ZmYtN2MyYS00ZTQ3LTg2ZGUtMzRkZDNjNzRhNTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhm2r3REHAqTO99f7t68zDQW7yUnQn0bEb4L XaqJga5dc68WZxyowIT+3Py+HbPqsJx1kGgu4SxGeCO2m26ZGe8rCr5P7MUuyWuZ gkuZn6GM8PHwQTjE9+kTqfbsY0GMZuDQOZ3trHFcMJo+yRSst6KxatiiDJEeS0bK ylyJoJ2+lYt9IMDSZplpheLyG7Z53UJKHAzI3h+9uEson5ZW/w/1eFC0VnBSZS5B U05faumZys39tDx+joaOCUz0T8/yUcSoSNrU0H2eVGTnTAMSXsrKSEEtKoM1HmZD k3KvlB407T1UotWHZJ2hid33RbXdic1OzpLiaXty5pMrGx4zJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2KnRbysyMkSsNvt1Ha/9CoxWEIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQx ODZkZi04N2JhLTRkZDUtYWRiZi0xYzZjMmJiZTA0YTgvNzQ0YjZmZmEtM2JlMS0z MTNmLWI0ODAtNDc3YTUyY2NmZDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzE0MTg2ZGYtODdiYS00ZGQ1LWFk YmYtMWM2YzJiYmUwNGE4LzMxNDE4NmRmLTg3YmEtNGRkNS1hZGJmLTFjNmMyYmJl MDRhOC5jcmwwHwYDVR0jBBgwFoAUUhXIm1E3DpTxq8Kvfcj2u+Hy5W8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQxODZkZi04N2JhLTRkZDUtYWRiZi0xYzZj MmJiZTA0YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFx2pgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEj4J47rgJYWKNEXNUnOjeucBDTgCDtYMb5+kHIDdeaXbJuYd2DgtU5d +9owy52/qjSBjMJh/qjCmTmEa6pWpevmZ3IOm8VxonrPdssuV1mXl4bL19iqIbRf MdnP+j5gYnA66QCAAoH7SSedsGft/HMeh7jYQNUyzNrgbdReBn+hsNuu0LstUHGp eGMU6GxqsUE0pMp1pkJ/M26cKoT5OABrj8/DkXbVITdq1RipMVP86tFl8X3pd4Ha GmZaR67/jcKhjCFpDFzcrU0zSjyVFyQO1GCB42PhWTB48eNA3TvzrPrlaB3ww/6I eA6uOAwoGs5Y1oiE+mgYDGN+d1IZzlc= -----END CERTIFICATE-----Generated at Wed Aug 6 13:09:23 2025 by rpki-client