$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/5b0f7ce6-9e65-3027-ace5-5004e591656b.roa File: 5b0f7ce6-9e65-3027-ace5-5004e591656b.roa (raw, json) Hash identifier: ZLbedW6t+xtJwRl98mbEqH7tTWiyP+hr4jqEpb0JJFk= Subject key identifier: 0C:9D:D3:73:05:0D:49:06:0C:2F:73:EE:8C:5B:06:C3:34:86:A8:7D Certificate issuer: /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Certificate serial: 010D0C9F4328584AECC1248E3CB505DE6AC71A00 Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/5b0f7ce6-9e65-3027-ace5-5004e591656b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 141776 IP address blocks: 174.136.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:24:8e:3c:b5:05:de:6a:c7:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b36746c0-9643-4be5-b472-31323ec8001b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:4a:c6:6c:f7:03:14:1d:b5:d6:6a:38:3c: 1b:26:80:e7:39:be:bf:9c:79:1d:71:f5:b6:fd:27: 1e:48:83:bf:9e:10:0b:42:cc:eb:ae:9b:b4:d3:07: 4c:3d:1b:3d:03:fc:5a:ed:a9:63:a0:ac:db:18:45: 04:7e:9b:c6:e3:77:cc:40:9e:29:99:e9:2f:70:86: b8:b1:d0:e4:28:6d:e6:2e:e7:3d:32:69:d8:f8:0c: ce:24:04:3c:53:38:e2:6a:aa:90:16:b0:6e:d4:8a: cd:07:5a:9f:86:17:8f:8e:86:c9:6b:64:f8:8e:5b: 8a:3e:d5:0a:89:5c:1b:ec:54:54:d4:64:8f:65:30: db:22:ac:fb:94:a0:df:78:6b:a0:94:1e:3e:28:b1: aa:fe:b1:30:57:77:e3:89:3f:7b:d7:15:76:1f:01: 8b:79:1b:90:5f:68:35:e1:db:81:5d:5c:64:f9:6d: 2c:bb:b9:34:d6:22:76:28:1d:34:14:89:bc:e0:35: d8:97:c9:9b:e8:8e:7d:68:3c:50:28:ca:b5:82:d7: 29:32:28:70:b9:fd:95:82:2e:47:27:49:e1:43:9a: c8:c7:4a:bf:75:44:de:28:95:2b:be:ea:6c:77:81: c7:ee:af:fc:f2:9a:64:da:c0:91:f5:54:cc:8a:6f: c7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9D:D3:73:05:0D:49:06:0C:2F:73:EE:8C:5B:06:C3:34:86:A8:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/5b0f7ce6-9e65-3027-ace5-5004e591656b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl X509v3 Authority Key Identifier: keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer sbgp-ipAddrBlock: critical IPv4: 174.136.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:b3:21:79:d2:2f:86:6f:ec:53:07:c0:78:50:c2:5c:65:cd: 78:3c:4d:31:0d:20:7a:d8:bf:2d:f3:c5:a0:ae:4f:23:2c:02: 29:66:3e:c4:26:e8:05:cf:12:ee:3e:a3:fa:ee:1f:ec:63:a1: 54:26:fa:96:9e:57:57:57:f3:89:47:73:4c:64:0e:38:8d:0a: 03:6d:4f:3c:91:ac:3a:be:81:62:11:f5:88:b7:1e:f5:48:fb: 0b:c2:da:82:8e:26:95:74:fc:c6:42:6d:2c:f9:d1:bc:8c:6a: 94:d1:73:35:3f:1e:53:ae:31:da:4c:5f:ec:ed:b4:3e:04:be: dd:c9:b8:12:5a:fa:5a:c8:72:84:1c:d7:1e:d5:7b:42:3b:8e: ed:bd:cd:6a:1e:ac:07:12:23:f9:74:77:6c:97:ff:03:75:83: 21:07:6f:80:b4:41:8c:71:36:c3:90:f8:75:d2:50:9d:50:63: be:6d:fe:cc:7e:25:62:66:b7:13:b7:c8:ea:84:98:e7:17:86: c3:2d:07:18:de:50:9d:12:e9:c6:6b:cd:3e:87:71:a6:35:be: f5:fc:6b:b4:75:ac:17:79:0a:87:b8:df:3c:c2:ca:73:72:0d: ee:3a:77:bb:dc:7a:bc:70:60:f0:8f:30:64:18:e2:2a:f5:72: 93:04:86:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswSSOPLUF3mrHGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYxOTM3M2ItMmNjNS00MGY0LWE2ZDAtN2NjYWNjNjM0 ODU3MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjM2NzQ2YzAtOTY0My00YmU1LWI0NzItMzEzMjNlYzgwMDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY9Kxmz3AxQdtdZqODwbJoDnOb6/nHkdcfW2 /SceSIO/nhALQszrrpu00wdMPRs9A/xa7aljoKzbGEUEfpvG43fMQJ4pmekvcIa4 sdDkKG3mLuc9MmnY+AzOJAQ8UzjiaqqQFrBu1IrNB1qfhhePjobJa2T4jluKPtUK iVwb7FRU1GSPZTDbIqz7lKDfeGuglB4+KLGq/rEwV3fjiT971xV2HwGLeRuQX2g1 4duBXVxk+W0su7k01iJ2KB00FIm84DXYl8mb6I59aDxQKMq1gtcpMihwuf2Vgi5H J0nhQ5rIx0q/dUTeKJUrvupsd4HH7q/88ppk2sCR9VTMim/H4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyd03MFDUkGDC9z7oxbBsM0hqh9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5 MzczYi0yY2M1LTQwZjQtYTZkMC03Y2NhY2M2MzQ4NTcvNWIwZjdjZTYtOWU2NS0z MDI3LWFjZTUtNTAwNGU1OTE2NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGYxOTM3M2ItMmNjNS00MGY0LWE2 ZDAtN2NjYWNjNjM0ODU3LzBmMTkzNzNiLTJjYzUtNDBmNC1hNmQwLTdjY2FjYzYz NDg1Ny5jcmwwHwYDVR0jBBgwFoAUp46RWPy5WfebiT1L1fsMf5AC/TMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5MzczYi0yY2M1LTQwZjQtYTZkMC03Y2Nh Y2M2MzQ4NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArojvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWzIXnSL4Zv7FMHwHhQwlxlzXg8TTENIHrYvy3zxaCuTyMsAilmPsQm 6AXPEu4+o/ruH+xjoVQm+paeV1dX84lHc0xkDjiNCgNtTzyRrDq+gWIR9Yi3HvVI +wvC2oKOJpV0/MZCbSz50byMapTRczU/HlOuMdpMX+zttD4Evt3JuBJa+lrIcoQc 1x7Ve0I7ju29zWoerAcSI/l0d2yX/wN1gyEHb4C0QYxxNsOQ+HXSUJ1QY75t/sx+ JWJmtxO3yOqEmOcXhsMtBxjeUJ0S6cZrzT6HcaY1vvX8a7R1rBd5Coe43zzCynNy De46d7vcerxwYPCPMGQY4ir1cpMEhjc= -----END CERTIFICATE-----Generated at Sun Aug 24 02:31:39 2025 by rpki-client