$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/94dd3b0e-5cad-3fd7-b664-de94c7a38091.roa File: 94dd3b0e-5cad-3fd7-b664-de94c7a38091.roa (raw, json) Hash identifier: ltnJXmW5F6mTUXwBN51kNlRjqywGkVrTn0S3RG5HES0= Subject key identifier: 35:04:15:FD:BD:FC:0A:1E:19:68:A5:DF:0B:F3:97:E2:86:81:38:36 Certificate issuer: /CN=e9769409-4db3-443e-9837-3afd4dca595d Certificate serial: 010D0C9F4328584ABA80CAED7127624B7ED61880 Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/94dd3b0e-5cad-3fd7-b664-de94c7a38091.roa Signing time: Sun 03 Aug 2025 01:00:32 +0000 ROA not before: Sun 03 Aug 2025 01:00:32 +0000 ROA not after: Sat 01 Nov 2025 01:00:32 +0000 asID: 23316 IP address blocks: 162.211.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:80:ca:ed:71:27:62:4b:7e:d6:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d Validity Not Before: Aug 3 01:00:32 2025 GMT Not After : Nov 1 01:00:32 2025 GMT Subject: CN=ad658bfb-5c23-4078-85bd-b04b7d76af20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:50:47:eb:f7:66:6b:5a:c0:1b:ae:eb:6e:74: 07:7c:29:1e:86:22:6c:4d:6f:63:a0:77:dc:2a:c9: 45:8f:44:cc:a2:fd:cd:62:10:c9:65:76:3f:29:53: bb:33:e9:87:03:f3:82:1d:3c:51:32:ac:a6:84:05: ef:49:4f:77:06:20:c8:d6:c1:dd:6c:6f:fb:12:06: fa:63:0b:f8:76:bf:16:30:1c:21:ee:9c:c3:70:06: 65:7b:53:87:38:fd:99:64:34:6b:3d:21:a6:f2:6e: 34:a1:c3:9d:59:dc:f6:0e:ae:c1:0f:af:01:f1:44: cb:8a:07:44:db:54:56:c6:ad:52:10:b8:26:e3:b5: d3:f2:c9:6c:86:46:96:fe:f3:99:41:bd:a4:02:38: c8:6a:61:ff:9a:f8:6f:36:b0:d1:e6:81:68:3b:30: 40:d8:89:91:f3:74:d9:c0:bb:b4:f4:cb:cb:d5:d6: 21:37:48:53:5b:4d:93:90:47:eb:60:b3:6c:bd:9f: 45:91:14:e5:d2:fa:3e:94:b3:4a:18:f8:7d:ad:10: 1d:63:c8:98:8d:4a:fb:b9:d8:28:42:2f:c1:9e:bd: 12:20:0c:8b:75:1a:13:fc:0c:45:80:ca:5f:ca:0f: 41:49:d3:ec:61:0e:d0:c5:12:99:66:2a:21:55:e8: 47:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:04:15:FD:BD:FC:0A:1E:19:68:A5:DF:0B:F3:97:E2:86:81:38:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/94dd3b0e-5cad-3fd7-b664-de94c7a38091.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl X509v3 Authority Key Identifier: keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer sbgp-ipAddrBlock: critical IPv4: 162.211.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:8f:a1:e7:11:c7:df:8e:a2:a8:36:54:78:98:fe:e4:d0:0e: 6f:b2:53:4b:35:0d:cc:88:19:ff:5c:39:ae:c0:0e:96:53:be: 1c:b8:f5:62:d7:72:3f:ff:d9:cc:75:cb:f1:48:e4:76:4c:cc: 7c:c5:b5:f3:25:65:94:3e:25:56:41:4c:48:27:f1:7e:e5:ae: 66:6e:77:b3:bb:57:2e:9a:77:2b:25:c6:2d:7c:a3:5f:d9:71: 95:3a:8a:9c:79:fc:6e:3e:97:e6:e9:5c:19:d2:c8:74:17:82: e4:42:2a:d2:b4:a4:1c:8d:01:7e:89:86:7b:4b:b5:c4:6b:6f: 5b:b6:bd:e1:49:b3:63:11:bb:ab:2a:dc:8f:bd:01:59:2c:b7: ea:79:5e:75:50:e3:bc:b4:f0:0c:88:0d:5b:79:9f:e0:91:f9: 18:2c:d1:38:ef:d1:8e:aa:d1:38:cc:82:30:dd:c9:3d:69:d6: 7a:26:67:04:ff:7f:1a:fe:91:d5:28:f1:e6:34:11:33:18:a1: e8:85:42:1f:27:b4:94:a5:5f:07:b5:c6:2d:22:16:d2:81:70: 6a:4a:c3:45:73:2a:56:fb:a1:7f:19:76:b8:8d:a7:8f:90:41: bb:4b:fe:71:f0:22:f9:84:00:bf:f3:52:9a:18:20:3a:ef:13: 95:5f:8f:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6gMrtcSdiS37WGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk3Njk0MDktNGRiMy00NDNlLTk4MzctM2FmZDRkY2E1 OTVkMB4XDTI1MDgwMzAxMDAzMloXDTI1MTEwMTAxMDAzMlowLzEtMCsGA1UEAxMk YWQ2NThiZmItNWMyMy00MDc4LTg1YmQtYjA0YjdkNzZhZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01BH6/dma1rAG67rbnQHfCkehiJsTW9joHfc KslFj0TMov3NYhDJZXY/KVO7M+mHA/OCHTxRMqymhAXvSU93BiDI1sHdbG/7Egb6 Ywv4dr8WMBwh7pzDcAZle1OHOP2ZZDRrPSGm8m40ocOdWdz2Dq7BD68B8UTLigdE 21RWxq1SELgm47XT8slshkaW/vOZQb2kAjjIamH/mvhvNrDR5oFoOzBA2ImR83TZ wLu09MvL1dYhN0hTW02TkEfrYLNsvZ9FkRTl0vo+lLNKGPh9rRAdY8iYjUr7udgo Qi/Bnr0SIAyLdRoT/AxFgMpfyg9BSdPsYQ7QxRKZZiohVehHXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUEFf29/AoeGWil3wvzl+KGgTg2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2 OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRjYTU5NWQvOTRkZDNiMGUtNWNhZC0z ZmQ3LWI2NjQtZGU5NGM3YTM4MDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk3Njk0MDktNGRiMy00NDNlLTk4 MzctM2FmZDRkY2E1OTVkL2U5NzY5NDA5LTRkYjMtNDQzZS05ODM3LTNhZmQ0ZGNh NTk1ZC5jcmwwHwYDVR0jBBgwFoAU9sgJduTwzi4GSBnxH9jLBMH/tewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZk NGRjYTU5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGPoecRx9+Ooqg2VHiY/uTQDm+yU0s1DcyIGf9cOa7ADpZTvhy49WLX cj//2cx1y/FI5HZMzHzFtfMlZZQ+JVZBTEgn8X7lrmZud7O7Vy6adyslxi18o1/Z cZU6ipx5/G4+l+bpXBnSyHQXguRCKtK0pByNAX6JhntLtcRrb1u2veFJs2MRu6sq 3I+9AVkst+p5XnVQ47y08AyIDVt5n+CR+Rgs0Tjv0Y6q0TjMgjDdyT1p1nomZwT/ fxr+kdUo8eY0ETMYoeiFQh8ntJSlXwe1xi0iFtKBcGpKw0VzKlb7oX8ZdriNp4+Q QbtL/nHwIvmEAL/zUpoYIDrvE5Vfj0Q= -----END CERTIFICATE-----Generated at Wed Aug 6 14:12:40 2025 by rpki-client