$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/59947b81-a42a-3af5-9527-cce4c900cfa7.roa File: 59947b81-a42a-3af5-9527-cce4c900cfa7.roa (raw, json) Hash identifier: Ekx0EyFhgwu1Tpc+2G3uojUhDcl8QUBaHnCc/bViGyc= Subject key identifier: 18:66:33:29:28:24:08:20:E2:80:54:9B:40:8A:EC:27:94:2B:85:7C Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584AA160FBC7C95F247FA1FA7AC0 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/59947b81-a42a-3af5-9527-cce4c900cfa7.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 11159 IP address blocks: 173.196.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:fb:c7:c9:5f:24:7f:a1:fa:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=d13103ed-184e-4c1c-b5ac-cce3b2a43f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:52:61:1c:a9:61:a0:5c:88:02:d9:c2:c7:5c: 7b:db:ad:59:61:ed:36:44:26:01:98:e6:4a:51:9f: 56:09:ee:f4:f9:e6:5a:4b:c9:16:59:97:38:81:29: 1b:70:6b:9b:7d:00:38:db:a2:c5:1d:f9:b0:3a:c7: 8a:b9:6d:56:9e:f3:fe:a8:6d:56:6c:d6:c3:d6:93: 75:53:ef:f7:50:6c:92:5b:92:0c:74:fd:b1:dd:18: 89:3c:8d:8a:41:03:f8:ff:33:88:03:df:04:b2:35: d1:e9:58:7e:61:76:8f:6d:0a:79:62:37:4e:6d:6e: 0b:96:06:54:13:d7:03:48:f6:1d:c6:68:e7:23:68: fc:f6:46:d9:2c:f7:17:09:e5:08:92:85:aa:e4:47: e3:87:85:48:8f:05:11:b7:46:22:fb:6f:57:e6:48: ce:7b:64:8f:5c:a3:2a:ab:41:97:09:dd:df:0d:2b: 6b:a6:d0:b2:f6:9b:cb:f5:86:53:68:fa:49:31:e5: cb:48:b5:d0:ab:e0:ce:02:5a:1a:2a:f7:87:e2:0e: aa:2d:67:3b:3e:52:1f:08:7d:75:82:e3:ee:8d:50: 0d:c0:16:a1:52:cb:c1:0b:84:46:28:5e:1b:11:0e: c3:5e:cf:be:99:d7:03:c7:71:bc:8e:52:a4:c7:12: d5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:66:33:29:28:24:08:20:E2:80:54:9B:40:8A:EC:27:94:2B:85:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/59947b81-a42a-3af5-9527-cce4c900cfa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 173.196.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e5:47:b0:60:09:63:f4:af:25:0f:6e:57:60:e6:6f:ba:41: 64:6c:6d:51:cf:50:b6:c4:dd:5e:88:4c:92:4b:f9:69:a6:d9: d0:ef:27:f9:26:38:11:17:64:fc:c8:05:4c:b6:c7:01:b1:6d: 3f:89:e5:6b:19:4c:46:f2:c6:c9:c2:b0:a8:8b:57:17:9e:8e: 13:ef:97:03:43:63:3e:51:d0:be:e0:cb:9a:7e:7f:ac:8a:ba: 1f:54:8b:ce:cb:7a:ed:b3:53:45:cf:13:c0:5d:59:07:f8:81: 1c:49:b1:49:cd:e0:6d:30:2e:31:4a:94:82:33:65:5e:f6:2b: 6c:46:70:3b:95:bc:95:b6:78:ad:40:c6:34:1c:71:b1:01:21: b8:87:45:83:7c:c2:a5:69:10:ca:ac:dd:3c:5f:87:e3:db:aa: 85:6b:56:10:2d:96:27:88:da:1f:fe:82:25:28:b9:2e:7b:06: 8c:f2:ef:35:12:7d:82:89:5d:b4:11:ad:1b:28:b7:61:73:df: 96:45:cb:be:9a:52:36:e9:da:0b:79:23:77:fa:13:40:cf:65: e3:a8:79:47:e3:d4:32:be:4d:91:b9:a8:5f:23:78:e4:2c:00: 6e:e9:c2:c1:25:9d:ca:09:fd:f7:3b:fd:35:4a:f5:0c:21:71: 37:29:26:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYPvHyV8kf6H6esAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ZDEzMTAzZWQtMTg0ZS00YzFjLWI1YWMtY2NlM2IyYTQzZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplJhHKlhoFyIAtnCx1x7261ZYe02RCYBmOZK UZ9WCe70+eZaS8kWWZc4gSkbcGubfQA426LFHfmwOseKuW1WnvP+qG1WbNbD1pN1 U+/3UGySW5IMdP2x3RiJPI2KQQP4/zOIA98EsjXR6Vh+YXaPbQp5YjdObW4LlgZU E9cDSPYdxmjnI2j89kbZLPcXCeUIkoWq5Efjh4VIjwURt0Yi+29X5kjOe2SPXKMq q0GXCd3fDStrptCy9pvL9YZTaPpJMeXLSLXQq+DOAloaKveH4g6qLWc7PlIfCH11 guPujVANwBahUsvBC4RGKF4bEQ7DXs++mdcDx3G8jlKkxxLVwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhmMykoJAgg4oBUm0CK7CeUK4V8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNTk5NDdiODEtYTQyYS0z YWY1LTk1MjctY2NlNGM5MDBjZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHlR7BgCWP0ryUPbldg5m+6QWRsbVHPULbE3V6ITJJL+Wmm2dDvJ/km OBEXZPzIBUy2xwGxbT+J5WsZTEbyxsnCsKiLVxeejhPvlwNDYz5R0L7gy5p+f6yK uh9Ui87Leu2zU0XPE8BdWQf4gRxJsUnN4G0wLjFKlIIzZV72K2xGcDuVvJW2eK1A xjQccbEBIbiHRYN8wqVpEMqs3Txfh+PbqoVrVhAtlieI2h/+giUouS57Bozy7zUS fYKJXbQRrRsot2Fz35ZFy76aUjbp2gt5I3f6E0DPZeOoeUfj1DK+TZG5qF8jeOQs AG7pwsElncoJ/fc7/TVK9QwhcTcpJoE= -----END CERTIFICATE-----Generated at Sat Aug 23 18:54:40 2025 by rpki-client