$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/657752d5-7987-30fd-a6c9-761b35585226.roa File: 657752d5-7987-30fd-a6c9-761b35585226.roa (raw, json) Hash identifier: 1DenA6N46jkFBrQSEiE/7tIjAfTJ+fTO+Zhn+KbXmC0= Subject key identifier: FF:05:CB:D1:91:83:38:42:76:F0:B3:A2:D1:48:5D:33:50:73:A0:76 Certificate issuer: /CN=9cae117d-b11f-4787-b860-f4d311531af3 Certificate serial: 010D0C9F4328584AADF13B6A2BAA72C6D5C3E700 Authority key identifier: 8F:AA:F3:0C:EE:B1:82:F2:F0:D5:9F:35:B1:E4:9D:A7:90:BE:95:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/657752d5-7987-30fd-a6c9-761b35585226.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 36352 IP address blocks: 146.71.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:3b:6a:2b:aa:72:c6:d5:c3:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cae117d-b11f-4787-b860-f4d311531af3 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=f1af458e-c104-4284-b234-342f1b4e38b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:02:c2:d9:9e:2c:a9:2f:94:f2:26:33:12:4c: b9:a1:5e:5e:e7:d5:84:90:7d:58:13:30:02:07:4f: 78:9b:eb:3f:27:58:bc:04:50:bc:29:48:4e:cf:22: 30:77:60:c5:a4:54:f9:17:a8:59:1c:63:71:6b:67: 47:aa:5c:a4:26:7c:b3:41:2b:fa:d8:43:30:2d:25: b3:e9:c2:7e:f7:f3:fa:56:51:42:bf:5b:85:e6:c7: 62:63:b1:be:66:5e:04:01:c3:02:64:a6:3d:3e:5d: ac:7c:d2:e9:fe:59:09:27:a6:1b:c9:71:7f:68:2b: 2a:6d:07:2b:bd:64:1b:ff:17:ae:c5:f7:bc:f0:9c: d0:92:bb:21:2f:9f:ac:c4:65:b3:22:13:c0:f6:2d: 55:5d:2a:28:38:e9:bd:2a:5e:cf:7a:ae:42:b6:8a: b7:c4:b7:d5:6b:e4:5f:44:2d:2b:8f:64:17:12:12: 94:b0:d3:ee:35:07:1c:02:75:8a:2d:47:37:6b:1f: fb:35:b1:10:20:66:bd:40:7a:05:d0:bc:17:b5:d7: a0:8b:07:f7:b1:64:bf:cb:68:b2:ee:16:ff:34:9a: bf:c4:1b:54:de:22:9f:61:bd:69:7d:df:5b:0b:3a: 75:9c:7b:0b:d9:89:25:9c:dd:da:48:51:a2:16:4d: a9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:05:CB:D1:91:83:38:42:76:F0:B3:A2:D1:48:5D:33:50:73:A0:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/657752d5-7987-30fd-a6c9-761b35585226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.crl X509v3 Authority Key Identifier: keyid:8F:AA:F3:0C:EE:B1:82:F2:F0:D5:9F:35:B1:E4:9D:A7:90:BE:95:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer sbgp-ipAddrBlock: critical IPv4: 146.71.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:6b:e8:1f:0b:20:01:03:2e:11:25:b8:7b:58:ae:46:46:04: 1a:95:3e:9c:f1:34:88:4a:d5:d2:28:87:74:85:5d:7d:69:d3: 30:c4:e8:b1:1f:c1:2e:a7:8d:cf:99:2a:e1:f4:9c:4b:96:f3: 25:d7:de:86:d2:ba:b4:aa:63:7a:14:19:bb:43:0c:ec:07:3f: 9b:0b:94:dc:c2:b9:20:03:dc:8e:7b:9a:ce:2c:42:37:03:a2: 48:3b:9d:50:9d:bb:2c:41:ac:25:3c:e3:a7:3e:48:83:eb:f5: 9e:07:12:bf:61:6c:44:a6:be:85:a2:5f:b5:0b:60:11:6b:01: a6:24:ba:5e:c3:d5:b4:ab:38:80:d8:f4:b3:58:2e:ec:c5:03: 3b:a0:05:87:ca:47:3c:8e:dd:6d:f6:76:21:e3:81:55:64:b8: d3:69:cd:27:e3:35:2c:aa:66:24:49:2c:db:94:df:13:a8:c1: d0:04:59:de:80:1f:e4:10:3d:5c:51:9d:82:b0:9a:30:a8:da: 7e:8d:a4:83:c7:9f:ee:f1:a3:7b:fd:4e:77:71:82:35:a9:5e: ac:c6:47:1a:d0:72:b3:e0:50:9a:ab:e8:74:ad:5c:b4:ca:87: f8:7a:c9:2a:b4:9b:a0:39:d9:46:57:a0:65:6b:89:36:2a:d5: 0f:e6:f0:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8TtqK6pyxtXD5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZTExN2QtYjExZi00Nzg3LWI4NjAtZjRkMzExNTMx YWYzMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZjFhZjQ1OGUtYzEwNC00Mjg0LWIyMzQtMzQyZjFiNGUzOGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgLC2Z4sqS+U8iYzEky5oV5e59WEkH1YEzAC B094m+s/J1i8BFC8KUhOzyIwd2DFpFT5F6hZHGNxa2dHqlykJnyzQSv62EMwLSWz 6cJ+9/P6VlFCv1uF5sdiY7G+Zl4EAcMCZKY9Pl2sfNLp/lkJJ6YbyXF/aCsqbQcr vWQb/xeuxfe88JzQkrshL5+sxGWzIhPA9i1VXSooOOm9Kl7Peq5Ctoq3xLfVa+Rf RC0rj2QXEhKUsNPuNQccAnWKLUc3ax/7NbEQIGa9QHoF0LwXtdegiwf3sWS/y2iy 7hb/NJq/xBtU3iKfYb1pfd9bCzp1nHsL2YklnN3aSFGiFk2ppQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8Fy9GRgzhCdvCzotFIXTNQc6B2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85Y2Fl MTE3ZC1iMTFmLTQ3ODctYjg2MC1mNGQzMTE1MzFhZjMvNjU3NzUyZDUtNzk4Ny0z MGZkLWE2YzktNzYxYjM1NTg1MjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWNhZTExN2QtYjExZi00Nzg3LWI4 NjAtZjRkMzExNTMxYWYzLzljYWUxMTdkLWIxMWYtNDc4Ny1iODYwLWY0ZDMxMTUz MWFmMy5jcmwwHwYDVR0jBBgwFoAUj6rzDO6xgvLw1Z81seSdp5C+lbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85Y2FlMTE3ZC1iMTFmLTQ3ODctYjg2MC1mNGQz MTE1MzFhZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkkcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVr6B8LIAEDLhEluHtYrkZGBBqVPpzxNIhK1dIoh3SFXX1p0zDE6LEf wS6njc+ZKuH0nEuW8yXX3obSurSqY3oUGbtDDOwHP5sLlNzCuSAD3I57ms4sQjcD okg7nVCduyxBrCU846c+SIPr9Z4HEr9hbESmvoWiX7ULYBFrAaYkul7D1bSrOIDY 9LNYLuzFAzugBYfKRzyO3W32diHjgVVkuNNpzSfjNSyqZiRJLNuU3xOowdAEWd6A H+QQPVxRnYKwmjCo2n6NpIPHn+7xo3v9TndxgjWpXqzGRxrQcrPgUJqr6HStXLTK h/h6ySq0m6A52UZXoGVriTYq1Q/m8OU= -----END CERTIFICATE-----Generated at Fri Aug 8 13:04:29 2025 by rpki-client