$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/88e6ec49-be39-3251-a910-0312e6ac5681.roa File: 88e6ec49-be39-3251-a910-0312e6ac5681.roa (raw, json) Hash identifier: HsJGZq38+klKDe+LWJr1VCY5Q5v0H79Oa7L5mteFER8= Subject key identifier: 40:83:4C:60:DB:54:41:8B:76:B3:10:9D:1B:09:1D:1F:0E:56:E1:CE Certificate issuer: /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Certificate serial: 010D0C9F4328584A7C3E54FD4527A2AEDCF30B80 Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/88e6ec49-be39-3251-a910-0312e6ac5681.roa Signing time: Fri 11 Jul 2025 17:46:35 +0000 ROA not before: Fri 11 Jul 2025 17:46:35 +0000 ROA not after: Thu 09 Oct 2025 17:46:35 +0000 asID: 152868 IP address blocks: 173.0.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7c:3e:54:fd:45:27:a2:ae:dc:f3:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Validity Not Before: Jul 11 17:46:35 2025 GMT Not After : Oct 9 17:46:35 2025 GMT Subject: CN=15cf26b7-cf14-4cd7-97de-565c37718589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:14:3a:b4:2b:88:02:c3:91:57:20:8d:34: f6:c7:4a:fb:29:9c:f1:fb:46:65:e9:16:14:e9:ab: 12:da:4f:ae:bb:47:47:ad:3a:06:25:a7:ef:fa:0c: ee:b8:6f:52:4d:4e:6c:f9:15:35:e0:bc:45:30:46: 71:ba:10:47:4b:9c:d3:78:04:07:dc:5f:a2:93:bc: dd:7b:3f:b1:10:a7:3b:0a:e8:82:e1:07:bc:47:26: 8d:b1:26:67:60:a2:f4:89:4b:e8:58:07:3c:a9:d8: d5:1c:2d:5a:2b:27:ce:b7:55:f4:15:e8:ed:a0:5d: 60:51:0d:4a:13:bf:80:4a:b7:f2:eb:05:7f:48:db: 8d:0d:1b:7d:49:a5:d1:71:ea:a7:e7:0a:51:55:67: 0a:d7:00:93:40:3d:e9:ed:5f:60:2b:f9:03:3a:e7: e9:98:6c:b1:8a:4c:4b:96:a9:c9:7e:1b:4c:a6:1a: 20:b2:20:b1:9f:b1:43:7d:a8:a5:4d:05:59:46:ad: 86:29:bc:16:95:21:18:04:af:a4:94:05:a1:50:50: e2:a5:48:04:2d:81:58:c9:ff:16:80:13:38:b8:01: 6d:bb:54:f5:01:bb:6c:d1:47:51:4d:9d:7c:0c:11: 65:4e:47:df:26:fa:05:2a:39:5d:d3:14:3a:8f:4d: ca:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:83:4C:60:DB:54:41:8B:76:B3:10:9D:1B:09:1D:1F:0E:56:E1:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/88e6ec49-be39-3251-a910-0312e6ac5681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl X509v3 Authority Key Identifier: keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer sbgp-ipAddrBlock: critical IPv4: 173.0.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:6a:bf:c4:6b:37:59:e4:b3:74:1b:02:54:7a:0b:95:43:10: 28:d4:db:f3:b4:71:4f:35:df:2a:05:7a:a9:f9:f4:2c:06:65: 90:b4:6b:0b:41:7f:fe:71:2e:93:d7:5d:7c:0a:06:b9:51:3e: ae:c6:c8:87:8d:b5:69:fd:be:ec:73:0c:2d:33:aa:55:c4:eb: ec:8b:7c:38:14:0a:15:68:26:c3:66:b4:10:56:08:14:71:a9: b4:6a:04:2d:5d:66:c9:51:7a:39:41:06:4a:86:60:8c:1c:b2: 4c:04:ce:11:cc:ff:b0:2f:ee:d6:df:b2:1e:8c:05:f9:03:8e: d1:b6:d6:f4:da:ae:4c:84:1c:b8:6b:b4:22:c1:83:32:67:98: f9:de:0b:62:92:5e:7e:df:f2:0b:bd:b4:6e:58:37:8c:16:6d: b0:d8:5b:84:53:e1:12:98:b1:e5:07:3e:b9:a1:2a:46:a7:92: fc:d1:20:db:58:0a:08:8c:b9:25:c8:bc:04:c9:d4:5c:aa:17: c7:cc:6f:46:bf:29:96:64:c8:cc:ac:bc:11:fd:5f:b8:b0:23: 35:49:85:22:4d:1c:1d:3a:51:1a:6d:0f:32:0d:18:06:d5:ae: 40:09:c9:d2:1c:24:58:cc:f4:6c:7b:9c:c6:62:05:15:1f:55: 92:b9:14:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp8PlT9RSeirtzzC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkOTdlN2EtYzMxZC00MTdhLWJjMDctMWVjZGI5NmJl MDlmMB4XDTI1MDcxMTE3NDYzNVoXDTI1MTAwOTE3NDYzNVowLzEtMCsGA1UEAxMk MTVjZjI2YjctY2YxNC00Y2Q3LTk3ZGUtNTY1YzM3NzE4NTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte4UOrQriALDkVcgjTT2x0r7KZzx+0Zl6RYU 6asS2k+uu0dHrToGJafv+gzuuG9STU5s+RU14LxFMEZxuhBHS5zTeAQH3F+ik7zd ez+xEKc7CuiC4Qe8RyaNsSZnYKL0iUvoWAc8qdjVHC1aKyfOt1X0FejtoF1gUQ1K E7+ASrfy6wV/SNuNDRt9SaXRceqn5wpRVWcK1wCTQD3p7V9gK/kDOufpmGyxikxL lqnJfhtMphogsiCxn7FDfailTQVZRq2GKbwWlSEYBK+klAWhUFDipUgELYFYyf8W gBM4uAFtu1T1Abts0UdRTZ18DBFlTkffJvoFKjld0xQ6j03KSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECDTGDbVEGLdrMQnRsJHR8OVuHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5 N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNkYjk2YmUwOWYvODhlNmVjNDktYmUzOS0z MjUxLWE5MTAtMDMxMmU2YWM1NjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWJkOTdlN2EtYzMxZC00MTdhLWJj MDctMWVjZGI5NmJlMDlmLzFiZDk3ZTdhLWMzMWQtNDE3YS1iYzA3LTFlY2RiOTZi ZTA5Zi5jcmwwHwYDVR0jBBgwFoAU4LxGbY9f3COEYkIcIshswe7ry44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNk Yjk2YmUwOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArQBvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBqv8RrN1nks3QbAlR6C5VDECjU2/O0cU813yoFeqn59CwGZZC0awtB f/5xLpPXXXwKBrlRPq7GyIeNtWn9vuxzDC0zqlXE6+yLfDgUChVoJsNmtBBWCBRx qbRqBC1dZslRejlBBkqGYIwcskwEzhHM/7Av7tbfsh6MBfkDjtG21vTarkyEHLhr tCLBgzJnmPneC2KSXn7f8gu9tG5YN4wWbbDYW4RT4RKYseUHPrmhKkankvzRINtY CgiMuSXIvATJ1FyqF8fMb0a/KZZkyMysvBH9X7iwIzVJhSJNHB06URptDzINGAbV rkAJydIcJFjM9Gx7nMZiBRUfVZK5FCg= -----END CERTIFICATE-----Generated at Mon Aug 4 14:49:15 2025 by rpki-client