$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/cafe05d5-4cc0-3c47-96c7-96ae62b8eeef.roa File: cafe05d5-4cc0-3c47-96c7-96ae62b8eeef.roa (raw, json) Hash identifier: I1vzt4z+WNd7VlV87JzHPM4a9bxuhYCz4V64oIq+YgM= Subject key identifier: C7:7C:61:E7:4F:BA:14:6C:E6:4F:D1:E1:8A:7E:A6:82:5C:A0:06:9F Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584ADA9BD51911A7BB21F3451580 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/cafe05d5-4cc0-3c47-96c7-96ae62b8eeef.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 13335 IP address blocks: 169.197.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:d5:19:11:a7:bb:21:f3:45:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=29828c35-85a5-4115-a40d-a88c86a3e8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0e:9e:13:4a:f1:fa:6e:e5:9a:31:37:44:6a: 6f:34:21:f3:a1:b8:a1:ba:eb:5a:41:c7:86:b5:16: 92:65:6a:16:fc:ac:32:72:63:c4:9c:25:ea:c4:cf: a5:5e:b3:ab:95:31:39:8a:4d:31:b8:8c:2c:3b:67: 31:d0:b1:1c:a8:49:a9:79:f5:7d:04:b1:83:ce:65: 88:ff:61:a8:b1:60:34:c1:6b:0e:1f:93:6f:5b:78: e7:47:4d:f6:1f:85:29:81:77:07:d5:40:0d:f0:67: fb:11:77:bf:a9:d5:1b:4d:29:38:68:3e:69:06:6e: 6a:59:de:bb:cd:1a:e6:54:dc:94:b6:70:d5:fb:38: c9:86:64:0b:ad:5d:31:13:ac:c3:97:ce:f6:52:87: 6a:e5:1a:5f:91:11:e7:17:b2:d1:5a:c6:39:39:0c: e4:e2:f0:bc:c7:8a:f1:c5:0e:e3:1e:4c:7b:63:67: 89:10:49:0e:8c:9f:b8:56:8e:6b:a5:d5:5d:e1:58: 92:44:69:77:2b:0d:f7:ea:bc:6c:95:27:99:4b:e3: e1:b0:3f:fa:31:8b:a3:a6:ed:a9:22:14:c2:c3:26: b0:da:e5:76:84:14:ac:1e:f3:c4:bd:31:ac:d5:77: 78:ce:fe:eb:4e:14:52:e2:b1:98:1e:9a:48:2c:6f: 35:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7C:61:E7:4F:BA:14:6C:E6:4F:D1:E1:8A:7E:A6:82:5C:A0:06:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/cafe05d5-4cc0-3c47-96c7-96ae62b8eeef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 169.197.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:f9:aa:a8:31:2d:ba:89:26:76:55:8c:e8:03:b1:92:40:12: 14:b6:35:60:e1:48:df:b1:d6:c7:1c:7c:58:eb:ce:c7:70:8f: 7b:4e:3c:a6:6a:97:bc:ad:9f:69:01:b1:7e:c4:05:c0:ac:1f: d9:0a:8b:c5:13:b9:e8:a7:e2:d5:1b:fe:4d:d1:7e:f9:a8:78: f4:7b:58:34:64:df:0a:b1:df:5a:7f:1f:e3:2a:d6:28:bd:6c: 24:24:f1:b0:8c:f1:fd:61:7b:a6:1d:63:6c:56:4e:37:84:d4: f4:da:c6:91:b0:b2:f1:87:f2:d0:f0:c5:09:c2:60:27:62:15: 6c:a2:fb:c6:07:3a:71:52:8b:c8:f1:b9:1e:1b:a6:a5:60:68: c8:8d:29:73:26:1b:93:db:9b:4a:e5:f2:6c:89:63:f9:ca:8c: 14:5c:a4:58:b2:0e:23:79:a8:ab:44:75:d9:c1:ca:69:53:0b: 23:37:43:a0:b6:59:f5:a7:3d:f3:7b:67:a2:39:3f:b4:0e:22: 0d:c2:57:fb:ac:87:9d:51:7d:a3:b5:14:80:2f:66:e0:47:45: 9f:32:10:76:92:3b:6d:38:a6:bb:9a:6d:d9:01:f4:90:c6:34: bc:89:98:69:a5:26:3b:e1:7d:05:35:a7:e6:2f:7e:c5:ef:f4: d4:3d:bf:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram9UZEae7IfNFFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk Mjk4MjhjMzUtODVhNS00MTE1LWE0MGQtYTg4Yzg2YTNlOGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA6eE0rx+m7lmjE3RGpvNCHzobihuutaQceG tRaSZWoW/KwycmPEnCXqxM+lXrOrlTE5ik0xuIwsO2cx0LEcqEmpefV9BLGDzmWI /2GosWA0wWsOH5NvW3jnR032H4UpgXcH1UAN8Gf7EXe/qdUbTSk4aD5pBm5qWd67 zRrmVNyUtnDV+zjJhmQLrV0xE6zDl872Uodq5RpfkRHnF7LRWsY5OQzk4vC8x4rx xQ7jHkx7Y2eJEEkOjJ+4Vo5rpdVd4ViSRGl3Kw336rxslSeZS+PhsD/6MYujpu2p IhTCwyaw2uV2hBSsHvPEvTGs1Xd4zv7rThRS4rGYHppILG81YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMd8YedPuhRs5k/R4Yp+poJcoAafMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvY2FmZTA1ZDUtNGNjMC0z YzQ3LTk2YzctOTZhZTYyYjhlZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqcVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJz5qqgxLbqJJnZVjOgDsZJAEhS2NWDhSN+x1sccfFjrzsdwj3tOPKZq l7ytn2kBsX7EBcCsH9kKi8UTuein4tUb/k3RfvmoePR7WDRk3wqx31p/H+Mq1ii9 bCQk8bCM8f1he6YdY2xWTjeE1PTaxpGwsvGH8tDwxQnCYCdiFWyi+8YHOnFSi8jx uR4bpqVgaMiNKXMmG5Pbm0rl8myJY/nKjBRcpFiyDiN5qKtEddnBymlTCyM3Q6C2 WfWnPfN7Z6I5P7QOIg3CV/ush51RfaO1FIAvZuBHRZ8yEHaSO204pruabdkB9JDG NLyJmGmlJjvhfQU1p+YvfsXv9NQ9vws= -----END CERTIFICATE-----Generated at Sat Aug 23 15:46:12 2025 by rpki-client