$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/844da407-f39a-370d-81ac-4ac4bd4a5b38.roa File: 844da407-f39a-370d-81ac-4ac4bd4a5b38.roa (raw, json) Hash identifier: wwQeHM4x/45xDzRfWPnSpLGFdhCMJhA6jZX6V2beH/U= Subject key identifier: B1:36:95:72:5C:0F:59:DB:86:3E:A0:DF:09:AE:C8:38:0D:35:88:40 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584AA161AA2FCAACFE23FE7CDF80 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/844da407-f39a-370d-81ac-4ac4bd4a5b38.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20001 IP address blocks: 142.129.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:aa:2f:ca:ac:fe:23:fe:7c:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=cb76f28d-1555-4740-946e-58c4d8e3dac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bc:44:2e:8d:bf:02:11:e7:d3:56:a6:8b:71: 2f:7d:6b:33:2a:ec:03:74:3c:bb:67:eb:e7:1c:78: cc:a3:27:e3:15:cb:a0:15:70:d2:67:97:7c:08:b8: 6e:18:34:1d:36:48:0c:67:e0:e0:c0:b9:e2:7c:15: 4a:27:d0:06:a4:bb:ef:aa:3a:d5:e9:5f:82:ee:11: b8:07:70:34:45:56:52:d5:e8:5f:32:d0:55:97:97: d8:10:1c:84:09:e3:82:9d:75:85:94:34:97:33:76: a1:14:35:d5:6e:a4:eb:2c:b1:34:6c:0e:dc:2f:fc: f1:6b:52:4f:8a:58:2a:d1:e9:2e:be:3a:e1:ec:1f: 32:c9:7f:b2:37:06:08:5f:d2:0b:2c:02:ed:67:86: 5c:12:cd:e2:28:1b:75:24:b7:09:97:f7:a4:1c:2a: 36:bc:0b:da:b6:6c:c0:e8:58:ae:8d:f1:f8:3f:12: 8d:63:d2:43:2d:df:22:7c:10:18:0b:c1:4f:53:9d: d3:2a:f8:b8:62:8a:42:87:22:71:0f:99:30:e8:e1: 95:56:40:f3:80:55:8d:22:b9:c9:dd:d5:0e:d3:78: f9:53:37:6f:ce:3d:e7:0d:d9:94:89:6f:7c:65:cc: 01:f2:ac:26:46:79:02:76:c2:be:d0:ec:cf:66:bf: fe:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:36:95:72:5C:0F:59:DB:86:3E:A0:DF:09:AE:C8:38:0D:35:88:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/844da407-f39a-370d-81ac-4ac4bd4a5b38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 142.129.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ec:44:c1:0b:c7:d4:f6:03:cd:9f:aa:3b:cd:2f:dc:35:45: cf:41:cf:ca:cd:c6:3f:ed:42:9f:b3:4c:6b:be:30:14:2d:3a: b8:68:5a:7c:58:f4:e3:b3:2d:a4:9c:05:93:53:4b:3c:5d:04: a3:1f:10:41:06:fd:4b:e4:4e:63:0c:1c:26:56:4a:10:8a:84: 45:dc:da:a3:e9:02:1d:4c:63:ac:16:b4:9a:65:21:7c:c5:01: 09:95:2c:4b:47:dd:95:49:09:cd:90:25:71:4d:b0:29:e0:bf: 5b:88:6e:4c:07:c8:bc:13:b7:60:15:71:b1:dc:3b:5e:75:f4: 1a:5e:10:28:23:c4:06:b6:e9:4a:7c:40:6b:90:2c:94:45:ee: 19:e0:72:3e:7d:3d:17:78:3e:e7:22:5f:49:46:11:d9:af:50: fb:eb:c6:da:df:87:61:1f:f0:37:64:29:b3:a3:db:59:5d:8d: 59:1b:f2:1e:b1:2f:4f:2e:3d:e5:d1:6e:50:9d:8b:9b:3e:bd: f2:a9:1b:62:2f:09:6a:ed:70:3e:2c:00:43:6e:c6:3e:dc:2d: a0:9b:ce:f7:b0:d6:3e:e6:ab:17:55:53:2c:7d:92:88:92:61: 70:1b:e0:50:e9:67:e1:e8:df:f2:b2:2a:08:ad:47:c3:e4:cd: b6:92:76:d8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqhYaovyqz+I/5834AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk Y2I3NmYyOGQtMTU1NS00NzQwLTk0NmUtNThjNGQ4ZTNkYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7xELo2/AhHn01ami3EvfWszKuwDdDy7Z+vn HHjMoyfjFcugFXDSZ5d8CLhuGDQdNkgMZ+DgwLnifBVKJ9AGpLvvqjrV6V+C7hG4 B3A0RVZS1ehfMtBVl5fYEByECeOCnXWFlDSXM3ahFDXVbqTrLLE0bA7cL/zxa1JP ilgq0ekuvjrh7B8yyX+yNwYIX9ILLALtZ4ZcEs3iKBt1JLcJl/ekHCo2vAvatmzA 6FiujfH4PxKNY9JDLd8ifBAYC8FPU53TKvi4YopChyJxD5kw6OGVVkDzgFWNIrnJ 3dUO03j5Uzdvzj3nDdmUiW98ZcwB8qwmRnkCdsK+0OzPZr/+hwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLE2lXJcD1nbhj6g3wmuyDgNNYhAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvODQ0ZGE0MDctZjM5YS0z NzBkLTgxYWMtNGFjNGJkNGE1YjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjoEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADuxEwQvH1PYDzZ+qO80v3DVFz0HPys3GP+1Cn7NMa74wFC06uGhafFj0 47MtpJwFk1NLPF0Eox8QQQb9S+ROYwwcJlZKEIqERdzao+kCHUxjrBa0mmUhfMUB CZUsS0fdlUkJzZAlcU2wKeC/W4huTAfIvBO3YBVxsdw7XnX0Gl4QKCPEBrbpSnxA a5AslEXuGeByPn09F3g+5yJfSUYR2a9Q++vG2t+HYR/wN2Qps6PbWV2NWRvyHrEv Ty495dFuUJ2Lmz698qkbYi8Jau1wPiwAQ27GPtwtoJvO97DWPuarF1VTLH2SiJJh cBvgUOln4ejf8rIqCK1Hw+TNtpJ22A== -----END CERTIFICATE-----Generated at Sat Aug 23 16:37:28 2025 by rpki-client