$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa File: a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa (raw, json) Hash identifier: VkgUD7DgHvQNYROeaDUXDwXBl5CknA4JW3OVEholacM= Subject key identifier: 33:3C:F9:3D:E3:72:91:E0:6F:0E:D8:46:C4:C0:EF:25:FF:1B:31:CB Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F4328584A8B0B5F5BF0A959EBC1E0B000 Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 398203 IP address blocks: 169.150.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:5f:5b:f0:a9:59:eb:c1:e0:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=4b246d96-b6b5-4655-bcc4-86a926063ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:f5:e2:96:09:49:fd:c9:61:af:07:3f:75: 47:9a:ce:b0:36:18:c6:c6:09:58:41:61:c7:b9:b3: 73:f7:fe:b0:a6:0d:2a:83:9b:31:a7:69:41:6f:7d: 66:89:5d:14:6f:67:24:b5:a6:6a:75:86:94:d3:0b: ac:b4:db:d6:9b:d4:94:9f:11:73:bd:aa:39:54:40: 31:2f:7b:cb:e6:f8:f2:3a:70:0c:f9:e6:75:8c:9c: 1e:6b:86:7e:6d:d8:ba:c5:56:73:39:90:73:ff:cb: 2f:5e:de:98:6e:8e:ad:66:67:49:ad:7a:9e:0e:16: f8:2e:e8:4e:47:34:42:fe:e7:2a:6a:57:fc:09:e3: 91:33:75:80:0d:c2:f9:22:6b:c0:b9:ed:d8:02:1c: 27:e2:20:f6:55:53:27:6c:5f:76:77:1b:42:02:71: 72:76:30:39:1e:db:ed:3b:f0:0f:b8:06:a2:8a:a8: 7c:e2:2b:49:46:82:fa:d0:74:5c:4b:85:f2:ca:8d: 72:af:9c:af:17:1b:79:d9:bf:43:ff:e9:0d:66:89: 89:44:5b:bc:a2:29:f9:a9:80:36:7d:26:ec:bf:9a: 9e:45:b6:6f:0c:af:92:30:57:7e:bc:1b:ee:50:a1: a9:03:6f:01:4d:2d:67:57:4a:64:f6:27:cd:48:96: 05:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3C:F9:3D:E3:72:91:E0:6F:0E:D8:46:C4:C0:EF:25:FF:1B:31:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv4: 169.150.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:bc:f9:16:0f:0b:79:e3:97:83:07:2f:f3:ef:c1:fd:8f:54: 06:fd:09:df:26:3c:96:ab:48:4c:5f:6d:e0:ab:69:04:eb:d3: f3:34:72:1d:e2:fd:cc:bd:d8:d3:a5:ec:2b:a3:0a:e5:84:b1: 6d:3e:84:be:22:8b:fb:7d:d3:29:4c:62:fa:9c:36:31:60:6f: 8d:47:a7:a7:b2:d1:ed:b3:fd:af:d5:2e:f5:88:13:8f:9c:f1: 65:06:b4:f6:83:1f:b7:83:36:62:7c:7b:e0:42:97:f0:56:17: c7:81:c2:c2:95:3d:d7:d0:46:0e:b1:9b:56:91:ee:22:5e:27: 13:d4:bb:23:18:de:f8:0e:96:df:8c:38:27:56:c5:0c:c2:ca: 61:2a:ac:60:b7:51:59:0c:f2:8d:cc:74:75:fe:34:58:0a:e3: e0:d2:55:02:17:fe:06:76:75:ba:2e:7e:b8:b0:8b:42:95:e8: 71:1d:89:23:cc:88:5d:e6:d6:37:7f:ff:8b:97:63:07:28:9c: e2:6e:14:e6:18:42:e5:0e:d5:d4:68:ab:9b:fe:5c:ab:16:70: 88:e8:90:b9:c3:1d:51:bb:21:4d:70:c5:cb:13:20:9b:c3:f2: a1:aa:16:7d:26:ca:3e:79:9b:35:62:ce:d5:fe:55:a0:77:c5: b3:50:da:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC19b8KlZ68HgsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk NGIyNDZkOTYtYjZiNS00NjU1LWJjYzQtODZhOTI2MDYzZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz/14pYJSf3JYa8HP3VHms6wNhjGxglYQWHH ubNz9/6wpg0qg5sxp2lBb31miV0Ub2cktaZqdYaU0wustNvWm9SUnxFzvao5VEAx L3vL5vjyOnAM+eZ1jJwea4Z+bdi6xVZzOZBz/8svXt6Ybo6tZmdJrXqeDhb4LuhO RzRC/ucqalf8CeORM3WADcL5ImvAue3YAhwn4iD2VVMnbF92dxtCAnFydjA5Htvt O/APuAaiiqh84itJRoL60HRcS4Xyyo1yr5yvFxt52b9D/+kNZomJRFu8oin5qYA2 fSbsv5qeRbZvDK+SMFd+vBvuUKGpA28BTS1nV0pk9ifNSJYFFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM8+T3jcpHgbw7YRsTA7yX/GzHLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvYTZhNzNlNTUtYmZhZi0z ODNlLWIwNDQtYjlkMDEyMGNlNGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqZaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa8+RYPC3njl4MHL/Pvwf2PVAb9Cd8mPJarSExfbeCraQTr0/M0ch3i /cy92NOl7CujCuWEsW0+hL4ii/t90ylMYvqcNjFgb41Hp6ey0e2z/a/VLvWIE4+c 8WUGtPaDH7eDNmJ8e+BCl/BWF8eBwsKVPdfQRg6xm1aR7iJeJxPUuyMY3vgOlt+M OCdWxQzCymEqrGC3UVkM8o3MdHX+NFgK4+DSVQIX/gZ2dboufriwi0KV6HEdiSPM iF3m1jd//4uXYwconOJuFOYYQuUO1dRoq5v+XKsWcIjokLnDHVG7IU1wxcsTIJvD 8qGqFn0myj55mzViztX+VaB3xbNQ2n4= -----END CERTIFICATE-----Generated at Mon Aug 4 18:24:37 2025 by rpki-client