$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2feedb99-0486-317c-ac00-ef06c3c3a21c.roa File: 2feedb99-0486-317c-ac00-ef06c3c3a21c.roa (raw, json) Hash identifier: CjSLR04rDJLkO8qJzxyk2bTDkURBjO5/h2vzGvN+Qes= Subject key identifier: B7:EE:8D:91:34:8B:9F:4A:91:38:50:F7:05:70:3E:D4:35:C6:21:B2 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584AA1619AE54446A3313C81FB00 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2feedb99-0486-317c-ac00-ef06c3c3a21c.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 11426 IP address blocks: 24.172.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:9a:e5:44:46:a3:31:3c:81:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=2536fb8a-6612-431b-9706-064cf303ed01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:4a:11:6e:f3:77:63:2d:54:b5:6e:a9:e1: 79:66:65:a6:55:4e:43:ee:26:6b:45:8c:da:96:e7: a2:9b:e3:b0:2e:f7:a3:8e:4a:f3:23:f3:73:d4:0b: e8:db:87:20:d3:94:de:cd:be:38:6e:8f:09:33:66: 54:32:ec:a8:1d:78:95:c2:c7:70:70:20:3e:ac:69: 48:47:c4:4b:6d:6b:77:ae:f5:00:fc:6c:6d:cf:0a: cd:60:85:65:0e:c5:2c:f8:6a:a6:0e:42:82:20:ea: 86:fa:1f:78:1f:09:d1:f6:ee:c2:4e:df:c1:d0:54: ea:10:69:1a:ee:ed:3f:16:e7:db:9d:5f:f9:18:8f: ad:e4:43:5c:05:c3:fa:15:13:a4:f2:65:ba:ba:78: 0c:54:f1:46:b6:72:78:33:50:41:73:aa:0b:be:1c: 8f:01:35:36:c0:af:4a:cd:97:b7:86:5d:cc:cf:07: be:8d:ca:7b:ed:22:2e:1d:d3:33:60:59:b5:29:1c: 2d:e3:e0:48:1e:48:ec:3c:e1:19:60:76:88:56:65: e7:d2:7d:5b:25:db:59:28:69:09:70:b1:b5:b6:af: 20:60:62:c3:a6:f5:56:56:7f:1a:14:6a:cf:a8:74: cf:dd:f6:4a:66:83:56:7a:93:de:7b:01:2f:48:ed: 1b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EE:8D:91:34:8B:9F:4A:91:38:50:F7:05:70:3E:D4:35:C6:21:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2feedb99-0486-317c-ac00-ef06c3c3a21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 24.172.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:47:b3:03:45:f7:b1:f3:e8:fd:30:bd:59:da:19:14:fe:51: c5:55:42:92:d2:db:78:46:3d:af:2b:55:db:b8:83:d7:cf:15: d0:7c:3c:e9:0b:ce:8e:88:85:d7:77:94:42:e6:92:f0:9b:b5: 3a:81:f7:ec:a0:8b:d2:9c:96:c8:71:fb:ca:e4:0a:55:86:92: ad:8e:25:aa:10:e5:c9:04:1f:ed:61:50:0c:9f:ee:f8:a6:22: 7d:07:a0:d5:8f:84:73:66:46:f1:ed:eb:8c:8c:f7:37:aa:5e: 63:24:43:17:26:aa:20:01:36:18:89:24:67:4e:d4:a1:3e:38: 39:f0:04:ee:28:77:63:c0:a4:f3:1d:1e:e4:97:21:29:2e:6c: d8:cf:b8:c4:d7:30:ce:d0:d0:18:dd:c6:5a:8c:87:9a:50:e5: ef:da:ad:00:d1:4e:ec:a3:5e:82:5a:73:72:d0:db:11:6a:c0: 69:53:bb:45:fc:41:aa:1e:a2:46:62:a4:6e:c4:b1:24:31:4f: e7:38:8a:36:d3:c3:71:69:a1:d5:b4:31:65:6b:2a:bb:47:4a: 45:ec:75:f9:4f:25:76:de:5e:2d:2c:cc:a3:59:2c:e7:c3:16: a7:91:9d:8a:fa:66:c9:eb:21:c2:ca:a7:17:1f:06:2b:2a:39: ec:52:46:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYZrlREajMTyB+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk MjUzNmZiOGEtNjYxMi00MzFiLTk3MDYtMDY0Y2YzMDNlZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorFKEW7zd2MtVLVuqeF5ZmWmVU5D7iZrRYza lueim+OwLvejjkrzI/Nz1Avo24cg05Tezb44bo8JM2ZUMuyoHXiVwsdwcCA+rGlI R8RLbWt3rvUA/GxtzwrNYIVlDsUs+GqmDkKCIOqG+h94HwnR9u7CTt/B0FTqEGka 7u0/FufbnV/5GI+t5ENcBcP6FROk8mW6ungMVPFGtnJ4M1BBc6oLvhyPATU2wK9K zZe3hl3Mzwe+jcp77SIuHdMzYFm1KRwt4+BIHkjsPOEZYHaIVmXn0n1bJdtZKGkJ cLG1tq8gYGLDpvVWVn8aFGrPqHTP3fZKZoNWepPeewEvSO0bfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfujZE0i59KkThQ9wVwPtQ1xiGyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMmZlZWRiOTktMDQ4Ni0z MTdjLWFjMDAtZWYwNmMzYzNhMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGKz+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApHswNF97Hz6P0wvVnaGRT+UcVVQpLS23hGPa8rVdu4g9fPFdB8POkL zo6Ihdd3lELmkvCbtTqB9+ygi9Kclshx+8rkClWGkq2OJaoQ5ckEH+1hUAyf7vim In0HoNWPhHNmRvHt64yM9zeqXmMkQxcmqiABNhiJJGdO1KE+ODnwBO4od2PApPMd HuSXISkubNjPuMTXMM7Q0BjdxlqMh5pQ5e/arQDRTuyjXoJac3LQ2xFqwGlTu0X8 QaoeokZipG7EsSQxT+c4ijbTw3FpodW0MWVrKrtHSkXsdflPJXbeXi0szKNZLOfD FqeRnYr6ZsnrIcLKpxcfBisqOexSRiI= -----END CERTIFICATE-----Generated at Sat Aug 23 16:35:25 2025 by rpki-client