$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/338cea59-ff1b-3803-a80b-30cf371da502.roa File: 338cea59-ff1b-3803-a80b-30cf371da502.roa (raw, json) Hash identifier: lB8NghA1zPWb5SxMfJi6Lo99x0SSMy+NinuP43VAvWY= Subject key identifier: AB:D8:12:B9:73:F3:88:83:1F:97:F7:24:D5:80:D4:0E:63:93:A8:09 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584B821DAF6DCFDCE0004F5FEA40 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/338cea59-ff1b-3803-a80b-30cf371da502.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 11955 IP address blocks: 65.28.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:af:6d:cf:dc:e0:00:4f:5f:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=312b908b-c650-4281-a22a-253db4dd5973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:97:a4:02:d3:80:b3:12:9e:f8:cc:ed:c9:9a: b1:d9:5d:0a:40:65:59:9b:03:a8:03:e5:d5:22:a6: d4:8f:6a:b5:4b:4e:2e:d2:2b:fb:de:71:09:db:e2: 24:de:8c:86:21:9d:21:36:98:7f:20:3a:38:de:11: 7c:4a:5e:bb:70:f3:6f:16:ce:d7:ab:70:e2:ef:a3: aa:5c:80:42:e0:ee:06:5e:bb:86:3d:8b:28:f2:b4: 17:f3:f0:b0:9e:3c:dd:18:29:77:93:14:3d:c0:18: ab:cb:c4:f4:ba:f6:22:f1:d6:3c:83:cb:80:21:4a: 42:fb:56:58:8a:a3:ac:ea:40:bb:35:21:be:f8:2a: a4:60:40:27:3c:cf:0f:ed:f0:56:a7:0f:1b:68:69: 1e:cd:40:6a:3c:08:de:80:37:7a:8e:89:96:92:ce: 26:75:c4:f1:67:25:44:3c:b4:06:44:b5:85:10:86: ec:69:b6:d7:0e:fd:80:78:d9:e8:0f:48:8e:3f:fb: ed:10:b6:81:86:ff:23:6d:ec:3b:1e:0a:84:e9:d1: 06:ba:87:57:a6:f4:31:12:2b:c4:b9:5b:92:ff:45: 70:08:e3:cd:85:f6:f9:9a:c6:ce:17:ca:63:75:d6: 7f:b9:5f:5c:13:f8:86:ab:d1:bd:47:13:92:b5:fa: 5a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D8:12:B9:73:F3:88:83:1F:97:F7:24:D5:80:D4:0E:63:93:A8:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/338cea59-ff1b-3803-a80b-30cf371da502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 65.28.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:02:47:f8:99:4c:a0:b7:b7:23:32:47:da:21:12:8c:42:02: c6:9e:d2:7b:d6:1d:97:bd:fc:46:c0:0d:a4:43:13:29:c3:6d: 72:a7:0b:a9:72:e3:22:47:95:53:7a:a6:c0:8f:75:e8:8d:28: 04:4f:aa:62:07:c5:03:19:1e:d9:41:24:dc:f9:2b:4d:da:f5: fb:a7:1a:5c:12:78:71:f4:a9:25:4f:e1:fb:05:ca:99:bf:cc: b4:b5:c9:c6:3b:e0:e6:a9:ba:15:f8:09:4a:19:c6:cd:a9:05: 5c:09:78:c9:f9:97:be:96:b5:cf:ef:98:05:96:20:6d:3e:17: 57:8c:88:d9:58:f2:4b:15:f6:e3:c5:ab:a0:28:d0:60:30:a1: 49:07:63:c9:f1:f1:35:ee:18:f3:f8:2d:28:51:5c:63:ad:7d: 7f:cf:4f:95:3c:d1:88:d9:ca:18:97:3d:0a:48:09:3b:40:e3: 66:a6:13:a0:2a:59:21:ae:17:34:a9:d0:66:af:a3:9d:a1:d9: 95:cf:b7:c8:15:d1:b9:ec:c6:0a:e4:bb:4b:35:90:23:d4:1a: a5:ce:69:13:61:b6:ee:af:bf:ed:ad:b2:c1:db:15:89:e7:8f: 35:e5:14:99:e3:20:79:a6:a9:a3:9d:1b:a7:7a:19:c1:fd:f9: 88:24:1e:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHa9tz9zgAE9f6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MzEyYjkwOGItYzY1MC00MjgxLWEyMmEtMjUzZGI0ZGQ1OTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpekAtOAsxKe+MztyZqx2V0KQGVZmwOoA+XV IqbUj2q1S04u0iv73nEJ2+Ik3oyGIZ0hNph/IDo43hF8Sl67cPNvFs7Xq3Di76Oq XIBC4O4GXruGPYso8rQX8/CwnjzdGCl3kxQ9wBiry8T0uvYi8dY8g8uAIUpC+1ZY iqOs6kC7NSG++CqkYEAnPM8P7fBWpw8baGkezUBqPAjegDd6jomWks4mdcTxZyVE PLQGRLWFEIbsabbXDv2AeNnoD0iOP/vtELaBhv8jbew7HgqE6dEGuodXpvQxEivE uVuS/0VwCOPNhfb5msbOF8pjddZ/uV9cE/iGq9G9RxOStfpaswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvYErlz84iDH5f3JNWA1A5jk6gJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMzM4Y2VhNTktZmYxYi0z ODAzLWE4MGItMzBjZjM3MWRhNTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQRyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoCR/iZTKC3tyMyR9ohEoxCAsae0nvWHZe9/EbADaRDEynDbXKnC6ly 4yJHlVN6psCPdeiNKARPqmIHxQMZHtlBJNz5K03a9funGlwSeHH0qSVP4fsFypm/ zLS1ycY74OapuhX4CUoZxs2pBVwJeMn5l76Wtc/vmAWWIG0+F1eMiNlY8ksV9uPF q6Ao0GAwoUkHY8nx8TXuGPP4LShRXGOtfX/PT5U80YjZyhiXPQpICTtA42amE6Aq WSGuFzSp0Gavo52h2ZXPt8gV0bnsxgrku0s1kCPUGqXOaRNhtu6vv+2tssHbFYnn jzXlFJnjIHmmqaOdG6d6GcH9+YgkHto= -----END CERTIFICATE-----Generated at Mon Oct 20 10:36:02 2025 by rpki-client