$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/82cfa31a-e171-308b-ac82-b988a75fcd4c.roa File: 82cfa31a-e171-308b-ac82-b988a75fcd4c.roa (raw, json) Hash identifier: FgLB3w+DZq5bwDIljihA3imw3ccLmv5YhfnuOpIABDE= Subject key identifier: 5F:44:9C:D4:8A:A2:39:E8:76:1C:CA:0D:5A:08:D3:EC:5F:B7:4F:D4 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584AA160E367AA09A09FAF681700 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/82cfa31a-e171-308b-ac82-b988a75fcd4c.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 3456 IP address blocks: 142.136.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:e3:67:aa:09:a0:9f:af:68:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=a5cf2abb-72a3-4ad6-96ce-0cf951fa6331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:36:b9:77:a6:43:c2:42:9b:ee:8f:b4:5c:59: 93:db:6a:e9:d9:e1:3f:f3:3f:cb:7b:c5:c7:11:f5: e2:4c:5a:d5:51:4e:9d:98:f1:b8:01:45:bd:23:38: bb:ff:74:03:e0:7c:41:7a:82:03:3c:24:09:07:ab: 9e:ee:e1:c6:e0:aa:70:c8:fe:1d:3b:22:f7:3e:e5: ec:68:0e:77:d7:7e:7f:72:65:88:7a:81:3d:2d:3d: 43:f3:cb:97:36:81:ba:bc:77:f4:d6:5c:2c:dd:14: 03:99:3f:b9:ab:bb:25:a8:ea:dd:8c:31:27:dc:79: b3:ad:aa:91:b6:15:da:e8:92:86:22:b8:bf:57:25: a5:db:be:86:cd:5e:e7:61:04:43:90:e3:37:37:0f: 07:04:28:10:11:ed:ca:df:ee:07:5f:41:f3:65:a3: 10:dd:3e:18:0e:d1:97:3a:c5:4a:db:29:a0:d3:2d: 4d:03:a0:24:b1:ff:ea:a8:05:d5:d0:45:36:36:b4: 51:bf:25:38:b7:9f:35:43:e7:6b:d7:ed:75:29:ea: d8:bd:ef:22:bd:00:26:c3:8a:31:b1:39:15:74:1f: 85:31:64:ef:b5:f8:91:55:8c:b5:b2:58:2a:83:1c: cc:64:f9:62:30:63:12:a3:cf:d7:a1:49:1b:69:41: fa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:44:9C:D4:8A:A2:39:E8:76:1C:CA:0D:5A:08:D3:EC:5F:B7:4F:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/82cfa31a-e171-308b-ac82-b988a75fcd4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 142.136.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:69:0c:b0:f7:11:37:30:93:84:41:7e:cc:86:e7:c5:a9:0d: 76:66:2e:7e:f3:b4:8e:b0:31:c7:e2:7d:20:09:ff:1b:ed:1a: 8b:3c:ec:9e:bc:21:04:9d:00:34:95:a1:5c:ee:df:e9:8b:b5: 31:e7:c2:d6:f8:d3:5f:0f:66:46:2b:88:6f:a0:ff:3d:bd:90: 49:36:ab:fa:53:ad:e2:69:83:32:0d:b5:d2:7e:bf:a6:03:8c: 55:ee:4a:35:cc:1e:28:0a:3d:ce:54:83:71:22:74:82:32:78: e1:c4:d4:ba:aa:9b:95:34:41:e2:8f:09:4c:66:f8:f4:83:ab: 81:3c:57:61:28:93:32:84:a4:64:3c:fb:ae:aa:07:79:93:3a: db:f4:78:82:53:a2:1d:bb:e9:05:0e:e6:a5:e2:9f:10:bb:71: dc:6d:5c:27:2c:f3:ee:e6:01:e9:f8:d2:08:fa:93:29:ab:bc: 58:d2:20:5b:71:25:dc:f7:93:7d:b6:a0:0f:a4:0f:df:49:51: a4:91:f0:ba:6b:eb:36:9b:9f:be:54:2a:86:1a:1b:b9:44:f2: cb:e3:1b:a9:e2:9c:a6:64:3e:61:cf:88:e1:3a:ee:56:67:f9: 1c:3f:8a:9a:f2:86:5e:06:02:d0:d0:bd:6f:7f:de:6a:0c:15: 8e:a4:fd:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYONnqgmgn69oFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk YTVjZjJhYmItNzJhMy00YWQ2LTk2Y2UtMGNmOTUxZmE2MzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTa5d6ZDwkKb7o+0XFmT22rp2eE/8z/Le8XH EfXiTFrVUU6dmPG4AUW9Izi7/3QD4HxBeoIDPCQJB6ue7uHG4KpwyP4dOyL3PuXs aA53135/cmWIeoE9LT1D88uXNoG6vHf01lws3RQDmT+5q7slqOrdjDEn3HmzraqR thXa6JKGIri/VyWl276GzV7nYQRDkOM3Nw8HBCgQEe3K3+4HX0HzZaMQ3T4YDtGX OsVK2ymg0y1NA6Aksf/qqAXV0EU2NrRRvyU4t581Q+dr1+11KerYve8ivQAmw4ox sTkVdB+FMWTvtfiRVYy1slgqgxzMZPliMGMSo8/XoUkbaUH6awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9EnNSKojnodhzKDVoI0+xft0/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvODJjZmEzMWEtZTE3MS0z MDhiLWFjODItYjk4OGE3NWZjZDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjogAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZpDLD3ETcwk4RBfsyG58WpDXZmLn7ztI6wMcfifSAJ/xvtGos87J68 IQSdADSVoVzu3+mLtTHnwtb4018PZkYriG+g/z29kEk2q/pTreJpgzINtdJ+v6YD jFXuSjXMHigKPc5Ug3EidIIyeOHE1Lqqm5U0QeKPCUxm+PSDq4E8V2EokzKEpGQ8 +66qB3mTOtv0eIJToh276QUO5qXinxC7cdxtXCcs8+7mAen40gj6kymrvFjSIFtx Jdz3k322oA+kD99JUaSR8Lpr6zabn75UKoYaG7lE8svjG6ninKZkPmHPiOE67lZn +Rw/ipryhl4GAtDQvW9/3moMFY6k/aA= -----END CERTIFICATE-----Generated at Sat Aug 23 16:31:28 2025 by rpki-client