$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa File: 2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa (raw, json) Hash identifier: 8WCrMfqUwL1gP5HrOQqwyAhhZQQ4oS5JeFK9+rl2cKU= Subject key identifier: 76:0A:A3:FE:01:2D:89:D9:5B:F2:4B:AB:52:1B:40:E9:E6:28:E8:96 Certificate issuer: /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Certificate serial: 010D0C9F4328584AD936664616AED9DBB096FC80 Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 22135 IP address blocks: 173.242.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:66:46:16:ae:d9:db:b0:96:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=20210b85-c24d-4afd-a020-762b12ded119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:be:cc:bf:4b:a4:8f:9d:b8:90:1b:43:1b:53: 02:bf:c6:8e:f3:20:21:02:3c:8d:33:c3:41:2c:20: d4:83:6e:1a:05:f7:0a:99:fb:1d:7a:70:ac:3e:34: cf:a3:62:f5:71:75:19:36:d0:39:25:44:85:f8:e4: 67:0b:02:e4:68:0c:f2:df:a2:78:71:c2:c8:5d:1a: 0f:f1:f6:a3:17:a0:93:36:98:fb:a9:e3:7b:cb:48: ac:7e:d1:ed:ff:3e:89:e8:f9:03:ab:dc:55:b9:e6: 15:a3:8e:82:5c:21:a9:b7:33:8e:46:a6:ad:72:38: 6a:56:bf:2d:4b:61:9b:bc:55:5b:52:39:ba:e1:a1: 73:5a:d0:e1:a2:b1:6a:bd:15:bf:b3:af:b6:ee:68: 2f:4c:09:4b:50:b6:1a:8f:3e:81:ad:50:c7:cd:a1: 47:32:98:a7:0b:51:47:dd:70:0c:e9:2f:ff:97:4b: 66:df:bd:68:00:e6:21:4a:50:71:c6:bf:8c:b3:04: a7:5b:a6:09:ea:9d:70:59:68:ca:e2:7f:a6:9b:87: 82:73:89:53:ef:db:d5:7b:4c:d7:9c:03:e4:8f:7e: a6:f9:c1:cc:ea:2e:97:a5:dd:a5:50:17:27:e3:af: e7:48:ce:b3:21:3f:a4:76:77:dd:4f:47:64:80:c6: dc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0A:A3:FE:01:2D:89:D9:5B:F2:4B:AB:52:1B:40:E9:E6:28:E8:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl X509v3 Authority Key Identifier: keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer sbgp-ipAddrBlock: critical IPv4: 173.242.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a9:21:2e:20:9e:84:ff:09:0e:85:b3:1e:b6:8e:0c:ed:2f: 26:8f:00:f3:5a:76:45:c1:fa:34:b7:93:25:f8:07:5a:3b:ae: 2a:ac:cf:74:d5:3c:84:05:43:30:76:dc:4e:70:2b:cf:e7:3a: c3:69:d5:d2:11:2d:f2:68:90:aa:27:ee:73:69:fd:97:f5:eb: 15:10:14:fd:1e:d0:4c:41:ca:6c:b2:96:77:85:fb:3f:42:c8: 17:44:53:aa:4c:eb:19:da:50:e3:1b:87:ca:fd:46:2c:18:68: ab:99:07:2d:4e:3b:b7:96:a4:5a:73:4c:2f:80:8d:ff:dd:c6: a3:eb:02:e4:99:bf:96:65:7d:77:95:91:15:31:f5:08:4a:6c: fe:4e:4c:6f:33:7e:09:5a:9f:8c:44:19:aa:fc:b6:02:65:5e: 79:72:9a:b3:3c:93:07:53:e0:ed:35:4a:2f:e6:45:08:33:16: 36:d2:f6:b1:10:2f:a9:58:f1:28:60:98:b3:3a:d9:97:81:62: 18:7b:3c:f6:fc:62:10:6f:8d:06:56:dc:cb:12:ca:92:4e:be: 33:ee:f5:f3:82:58:83:46:9e:51:ce:1e:7d:30:1f:23:50:6b: 1f:a5:79:ee:62:07:5d:29:46:92:a6:3a:ec:44:b4:0d:56:dd: 72:e3:18:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNmZGFq7Z27CW/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5NDk5YTctZGQ3My00ZDI4LWIzYWQtMjgxM2UxNDIx YzY0MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MjAyMTBiODUtYzI0ZC00YWZkLWEwMjAtNzYyYjEyZGVkMTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib7Mv0ukj524kBtDG1MCv8aO8yAhAjyNM8NB LCDUg24aBfcKmfsdenCsPjTPo2L1cXUZNtA5JUSF+ORnCwLkaAzy36J4ccLIXRoP 8fajF6CTNpj7qeN7y0isftHt/z6J6PkDq9xVueYVo46CXCGptzOORqatcjhqVr8t S2GbvFVbUjm64aFzWtDhorFqvRW/s6+27mgvTAlLULYajz6BrVDHzaFHMpinC1FH 3XAM6S//l0tm371oAOYhSlBxxr+MswSnW6YJ6p1wWWjK4n+mm4eCc4lT79vVe0zX nAPkj36m+cHM6i6Xpd2lUBcn46/nSM6zIT+kdnfdT0dkgMbcwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYKo/4BLYnZW/JLq1IbQOnmKOiWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDk0 OTlhNy1kZDczLTRkMjgtYjNhZC0yODEzZTE0MjFjNjQvMmZmM2IyMjctYjQwMC0z Y2I4LWFmMTAtYTM1ZjRhMDgwMmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ5NDk5YTctZGQ3My00ZDI4LWIz YWQtMjgxM2UxNDIxYzY0LzVkOTQ5OWE3LWRkNzMtNGQyOC1iM2FkLTI4MTNlMTQy MWM2NC5jcmwwHwYDVR0jBBgwFoAUButBQNUQLNt8DYziewcWWtswkqkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZDk0OTlhNy1kZDczLTRkMjgtYjNhZC0yODEz ZTE0MjFjNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfIOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqpIS4gnoT/CQ6Fsx62jgztLyaPAPNadkXB+jS3kyX4B1o7riqsz3TV PIQFQzB23E5wK8/nOsNp1dIRLfJokKon7nNp/Zf16xUQFP0e0ExBymyylneF+z9C yBdEU6pM6xnaUOMbh8r9RiwYaKuZBy1OO7eWpFpzTC+Ajf/dxqPrAuSZv5ZlfXeV kRUx9QhKbP5OTG8zfglan4xEGar8tgJlXnlymrM8kwdT4O01Si/mRQgzFjbS9rEQ L6lY8ShgmLM62ZeBYhh7PPb8YhBvjQZW3MsSypJOvjPu9fOCWINGnlHOHn0wHyNQ ax+lee5iB10pRpKmOuxEtA1W3XLjGE8= -----END CERTIFICATE-----Generated at Sat Aug 23 20:57:22 2025 by rpki-client