$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/365c666b-c4bc-3afb-83f1-a757b272848e.roa File: 365c666b-c4bc-3afb-83f1-a757b272848e.roa (raw, json) Hash identifier: r9WnAnYc7wP/vQjXqW2c+J61Ef0onkZkCSAf1GiisG8= Subject key identifier: 55:D0:C0:67:A7:06:94:5D:8F:76:70:89:32:A1:A5:89:62:50:CA:E3 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584AF5212DC61B9D933ED71802E0 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/365c666b-c4bc-3afb-83f1-a757b272848e.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 10747 IP address blocks: 170.133.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:2d:c6:1b:9d:93:3e:d7:18:02:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=1ca1bffd-2944-48a8-9df3-0f1adac58872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:81:1d:2d:c0:e7:18:42:40:7b:22:be:81:8a: ca:ef:6e:0e:d0:fa:7c:b9:35:0d:37:0d:bc:bc:05: 28:51:dc:b1:60:37:4f:f5:46:59:39:a8:2c:4d:2c: f0:77:b2:c9:65:15:c2:77:fc:25:02:93:09:30:87: 24:74:cf:0f:a9:63:f5:ee:ad:a1:73:e5:69:38:d0: 20:94:01:4d:86:92:91:cc:40:29:c8:2f:1c:82:49: f4:90:b7:53:76:df:b9:93:79:fe:e7:1d:e3:71:b8: 4e:23:7f:6c:af:a5:f5:b0:d5:ef:17:c9:18:1a:2a: 1c:f9:5c:d2:d2:5e:af:4a:8a:86:f6:d9:29:5b:e2: 70:c3:5a:16:54:c8:92:a6:fc:ff:34:41:b7:4f:73: f3:d6:78:45:e5:ff:ad:f2:69:8e:bb:23:ab:46:12: 63:c8:59:ae:47:0e:d2:a4:9d:7d:f0:7c:2b:07:5d: 50:2f:38:ba:e5:af:e9:bf:eb:35:f1:54:39:90:e6: 08:11:fe:45:a5:c1:03:4f:a5:de:ad:3a:82:6a:b0: ac:37:a4:d3:e9:ca:93:cc:a0:cc:8e:e9:90:b0:d0: 78:ab:7c:61:e3:63:06:bb:f4:7c:2d:ee:4f:41:c4: 81:46:34:d2:41:9f:74:50:88:43:23:3f:94:05:25: 53:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D0:C0:67:A7:06:94:5D:8F:76:70:89:32:A1:A5:89:62:50:CA:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/365c666b-c4bc-3afb-83f1-a757b272848e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 170.133.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:bc:b1:e6:40:aa:73:da:48:35:8c:82:f0:b6:de:61:10:aa: 26:49:a2:49:93:ac:68:10:53:7b:cb:5a:19:9b:b1:05:01:4d: 88:ed:71:ea:9c:c2:c6:95:5d:b4:ba:e1:49:0b:40:7e:dc:5c: 04:43:1b:e1:e7:a0:e8:50:e1:95:cd:7b:81:b8:21:76:bb:8e: e4:63:bd:94:72:d1:cf:79:16:12:b4:8b:76:7f:d4:0f:27:ba: 46:aa:1c:ab:ad:c8:d3:f0:fb:b4:81:db:eb:b0:48:e1:20:da: 56:ea:48:69:b4:50:b6:2b:f3:47:7c:d5:32:35:f1:8d:30:6e: 59:b0:07:9f:18:13:be:ff:12:ce:c4:0b:44:40:3f:f1:5b:70: 38:be:cb:e3:d1:df:af:38:e7:72:71:0d:7a:03:4e:72:c0:56: 2f:7f:b4:18:e4:66:cd:18:54:ed:18:80:a5:83:08:d1:e0:08: 42:15:72:d2:53:86:9e:d8:3c:6a:51:fb:33:e1:bf:f6:84:e9: 4a:c4:73:f8:f8:07:da:40:00:d1:22:70:c2:f9:39:ab:bf:72: 86:69:8a:0a:a9:75:7d:74:75:ac:9d:3e:72:7c:0e:3e:97:78: e6:9c:43:bb:70:21:0d:1c:0b:b1:be:cb:65:e0:0c:5f:81:e6: 56:0b:ff:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IS3GG52TPtcYAuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MWNhMWJmZmQtMjk0NC00OGE4LTlkZjMtMGYxYWRhYzU4ODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoEdLcDnGEJAeyK+gYrK724O0Pp8uTUNNw28 vAUoUdyxYDdP9UZZOagsTSzwd7LJZRXCd/wlApMJMIckdM8PqWP17q2hc+VpONAg lAFNhpKRzEApyC8cgkn0kLdTdt+5k3n+5x3jcbhOI39sr6X1sNXvF8kYGioc+VzS 0l6vSoqG9tkpW+Jww1oWVMiSpvz/NEG3T3Pz1nhF5f+t8mmOuyOrRhJjyFmuRw7S pJ198HwrB11QLzi65a/pv+s18VQ5kOYIEf5FpcEDT6XerTqCarCsN6TT6cqTzKDM jumQsNB4q3xh42MGu/R8Le5PQcSBRjTSQZ90UIhDIz+UBSVT7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXQwGenBpRdj3ZwiTKhpYliUMrjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvMzY1YzY2NmItYzRiYy0z YWZiLTgzZjEtYTc1N2IyNzI4NDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqoXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADy8seZAqnPaSDWMgvC23mEQqiZJokmTrGgQU3vLWhmbsQUBTYjtceqc wsaVXbS64UkLQH7cXARDG+HnoOhQ4ZXNe4G4IXa7juRjvZRy0c95FhK0i3Z/1A8n ukaqHKutyNPw+7SB2+uwSOEg2lbqSGm0ULYr80d81TI18Y0wblmwB58YE77/Es7E C0RAP/FbcDi+y+PR368453JxDXoDTnLAVi9/tBjkZs0YVO0YgKWDCNHgCEIVctJT hp7YPGpR+zPhv/aE6UrEc/j4B9pAANEicML5Oau/coZpigqpdX10daydPnJ8Dj6X eOacQ7twIQ0cC7G+y2XgDF+B5lYL/6c= -----END CERTIFICATE-----Generated at Wed Nov 5 12:46:22 2025 by rpki-client