$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1a12e9d1-bf40-3240-880e-24f9bd5ae078.roa File: 1a12e9d1-bf40-3240-880e-24f9bd5ae078.roa (raw, json) Hash identifier: BZc6v2JWalKq3f7QT4pG948rUzV/6fZeZEVdU8ezyyE= Subject key identifier: 91:8A:B3:66:86:73:6F:76:10:75:86:62:F0:CF:9C:54:28:73:F9:88 Certificate issuer: /CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Certificate serial: 010D0C9F4328584B715CA905F533E1D8DF9C3CE0 Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1a12e9d1-bf40-3240-880e-24f9bd5ae078.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 20940 IP address blocks: 216.238.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a9:05:f5:33:e1:d8:df:9c:3c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=80a20d57-ecf9-4b32-a40b-08be233dd354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4f:38:bb:d3:40:67:57:b8:35:d0:b8:61:7b: ed:c4:26:76:0c:15:91:f7:c3:27:3c:27:7c:8e:08: 39:48:bf:79:46:62:15:c6:34:4f:43:cd:96:02:e3: 01:07:82:7d:c8:50:47:40:de:f6:87:d5:7c:b4:1a: 79:6c:b2:69:40:8c:88:a2:b7:13:80:bf:28:42:7a: f9:ac:95:8c:61:c3:87:e6:6d:69:3b:c1:e8:8f:c1: 39:05:5e:cf:a6:06:bb:e9:5c:e5:5f:35:63:6e:f1: 1e:34:09:ed:52:e6:9f:2f:da:73:46:cc:c4:db:0b: b4:2c:cd:f7:ce:00:87:c3:c4:1b:44:99:40:6e:73: 68:06:10:35:db:34:11:67:86:c1:e3:1b:b0:ae:5f: 7a:e5:61:85:aa:86:7a:2a:c8:9b:1a:01:8b:dd:db: 95:cc:3f:f4:37:c0:8c:10:6e:68:b5:83:be:a4:8b: d9:54:c2:e3:a9:a4:ca:cb:3d:87:e4:52:cd:71:79: 01:2a:0a:85:78:58:89:e4:3a:77:b1:07:3c:43:e7: e8:38:98:7d:8d:e8:ea:d7:39:bc:b5:8b:5f:17:f8: f7:1f:55:db:f4:48:72:77:1b:0b:a1:fc:9e:9e:7a: 06:5f:ce:65:0f:79:6b:a7:14:f8:f0:e0:c9:ec:14: 3e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8A:B3:66:86:73:6F:76:10:75:86:62:F0:CF:9C:54:28:73:F9:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1a12e9d1-bf40-3240-880e-24f9bd5ae078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl X509v3 Authority Key Identifier: keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer sbgp-ipAddrBlock: critical IPv4: 216.238.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:5d:f6:35:bf:2d:8e:be:87:e9:f9:c8:37:ba:da:1e:50:25: 28:d0:62:8d:be:20:91:94:d9:4d:c9:f8:e8:df:cb:56:0d:71: a2:a0:ce:6c:05:39:b9:45:9c:ab:f1:1e:e1:7c:f1:2a:95:bb: 74:79:0a:9a:83:8f:90:90:d0:72:6e:9b:d3:53:41:76:51:3a: 1c:0d:e6:fd:e5:64:5b:d2:45:e2:5d:9d:2f:d8:81:9e:f4:62: e0:6c:a3:84:1f:0d:d1:de:7e:fd:6d:57:95:a4:7d:0d:40:24: 96:7f:2d:09:69:c7:8d:d3:8a:5c:ed:1e:4c:c1:68:ba:08:cb: 72:88:1b:04:5c:b0:25:c0:58:a5:6f:4c:6c:95:44:f9:a8:2b: ac:13:81:0a:d2:e7:ab:f6:60:a3:bc:17:22:c5:b6:ec:d7:be: ed:4b:38:c4:94:f4:d5:5e:cb:81:bc:a3:66:d2:d8:69:ec:11: 3e:35:cc:19:62:2e:f5:1e:1b:23:5e:05:d8:c3:24:ac:ab:e4: 34:46:0c:70:66:33:e8:c7:0b:4a:43:c6:b0:89:37:b4:aa:f4: 53:1c:a2:e5:67:3a:30:34:b7:d2:dc:cf:9a:c0:7f:ca:a4:2e: b8:82:bf:ea:2f:fc:34:fa:5b:78:f1:4d:55:b4:4d:02:83:6e: 58:98:bd:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKkF9TPh2N+cPOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4 ZWY1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ODBhMjBkNTctZWNmOS00YjMyLWE0MGItMDhiZTIzM2RkMzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv084u9NAZ1e4NdC4YXvtxCZ2DBWR98MnPCd8 jgg5SL95RmIVxjRPQ82WAuMBB4J9yFBHQN72h9V8tBp5bLJpQIyIorcTgL8oQnr5 rJWMYcOH5m1pO8Hoj8E5BV7Ppga76VzlXzVjbvEeNAntUuafL9pzRszE2wu0LM33 zgCHw8QbRJlAbnNoBhA12zQRZ4bB4xuwrl965WGFqoZ6KsibGgGL3duVzD/0N8CM EG5otYO+pIvZVMLjqaTKyz2H5FLNcXkBKgqFeFiJ5Dp3sQc8Q+foOJh9jejq1zm8 tYtfF/j3H1Xb9EhydxsLofyennoGX85lD3lrpxT48ODJ7BQ+eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGKs2aGc292EHWGYvDPnFQoc/mIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0 Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvMWExMmU5ZDEtYmY0MC0z MjQwLTg4MGUtMjRmOWJkNWFlMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3 MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj MzQzMzhlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O6TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9d9jW/LY6+h+n5yDe62h5QJSjQYo2+IJGU2U3J+Ojfy1YNcaKgzmwF OblFnKvxHuF88SqVu3R5CpqDj5CQ0HJum9NTQXZROhwN5v3lZFvSReJdnS/YgZ70 YuBso4QfDdHefv1tV5WkfQ1AJJZ/LQlpx43TilztHkzBaLoIy3KIGwRcsCXAWKVv TGyVRPmoK6wTgQrS56v2YKO8FyLFtuzXvu1LOMSU9NVey4G8o2bS2GnsET41zBli LvUeGyNeBdjDJKyr5DRGDHBmM+jHC0pDxrCJN7Sq9FMcouVnOjA0t9Lcz5rAf8qk LriCv+ov/DT6W3jxTVW0TQKDbliYvYM= -----END CERTIFICATE-----Generated at Mon Oct 20 05:29:22 2025 by rpki-client