$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c6976367-1c27-3d0a-b842-b3f28176af4b.roa File: c6976367-1c27-3d0a-b842-b3f28176af4b.roa (raw, json) Hash identifier: uq1RrofnI500cLu2hLogU3qeKj6Hvl/TftxDmRcMGwU= Subject key identifier: 60:29:08:56:95:3D:C4:42:FC:75:F8:4A:7A:2A:8E:CD:CD:EA:F4:B6 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584B821CE07F299DD5516732BA80 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c6976367-1c27-3d0a-b842-b3f28176af4b.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 10796 IP address blocks: 24.165.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:e0:7f:29:9d:d5:51:67:32:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=98e9c0e6-095d-479c-9d8c-c5a1b9008cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:73:9d:0c:92:13:8d:d9:8d:9e:f5:75:4e:07: 81:d1:ee:59:a0:16:50:06:83:6d:7b:ee:4b:53:ef: d6:1c:2c:07:e5:d1:81:0f:8b:e1:68:10:77:81:ba: 29:30:04:43:4c:00:87:00:f0:3b:80:28:c0:ff:e0: 59:0c:44:c0:2b:f1:9a:b4:04:79:63:44:0e:4f:43: de:52:5d:b7:d4:a0:b0:71:04:52:74:12:56:64:11: 5b:5f:19:2d:9e:d8:fe:ad:8d:25:82:d2:2f:15:09: c5:bd:9a:8e:4d:a2:91:53:16:66:da:0c:eb:0e:f1: a6:25:1c:eb:9d:5e:eb:03:63:ec:6f:bf:e5:09:c0: 6e:97:67:65:1c:7c:9b:bd:72:44:f6:f7:1c:c7:7c: a3:37:ac:e0:a7:38:90:c9:f1:82:35:2e:5c:c4:3c: bc:96:b1:5c:7d:47:06:c0:8e:7d:bc:f9:63:ac:f4: 56:d9:f5:c0:3c:a0:a8:de:4f:86:22:bf:ef:ef:10: 48:76:48:6c:cf:c8:c3:24:3e:27:ef:2e:80:f9:8b: cd:60:90:a5:fb:0a:fa:33:fb:9b:5e:37:f1:57:4a: 2f:e0:05:f3:66:fb:50:83:82:ab:2c:e6:21:7a:ab: 64:e1:93:87:37:da:e9:28:b6:0a:96:54:ad:c7:a4: 4f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:29:08:56:95:3D:C4:42:FC:75:F8:4A:7A:2A:8E:CD:CD:EA:F4:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c6976367-1c27-3d0a-b842-b3f28176af4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 24.165.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:5b:83:70:74:38:13:8f:b8:af:f0:3d:aa:1f:5c:4a:2a:ed: 5b:3d:ae:71:06:14:3b:ef:20:3e:06:2e:2e:c1:fc:6f:12:05: 8f:64:e3:66:c4:72:b8:b2:40:ff:4f:fa:ad:ab:b5:36:54:f7: 2b:35:7d:9c:6d:ea:92:04:56:ec:83:d2:cf:b9:0e:3f:ca:e9: e3:76:14:bf:8d:e2:a4:97:60:31:2b:e3:93:fb:f0:d7:72:eb: 83:f9:f3:23:78:db:8f:92:57:dc:c1:5f:4d:65:46:2d:e4:dd: 23:1b:46:b7:90:50:03:73:e6:ef:12:f9:62:87:28:ef:e9:17: 25:bb:06:48:1a:a5:f9:90:22:a4:90:52:01:2e:6c:b4:f9:70: ae:e5:20:2d:d5:24:07:50:cb:cb:1a:ff:b1:ff:68:92:a0:f8: 9c:12:12:a6:95:07:30:d2:8e:0c:91:51:7a:be:40:ef:8d:4d: e0:ba:51:5b:86:dc:25:bb:d7:58:b3:17:f0:cf:c7:c0:12:82: f6:ad:14:85:13:5d:ec:55:09:0b:ee:78:ba:c4:f0:b6:75:aa: 34:45:b5:26:7b:e1:b4:6a:50:2f:32:00:03:fe:23:56:d1:03: f1:79:07:eb:4c:8f:13:71:2a:d9:3d:43:30:78:e2:6f:01:de: da:4f:36:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHOB/KZ3VUWcyuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk OThlOWMwZTYtMDk1ZC00NzljLTlkOGMtYzVhMWI5MDA4Y2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXOdDJITjdmNnvV1TgeB0e5ZoBZQBoNte+5L U+/WHCwH5dGBD4vhaBB3gbopMARDTACHAPA7gCjA/+BZDETAK/GatAR5Y0QOT0Pe Ul231KCwcQRSdBJWZBFbXxktntj+rY0lgtIvFQnFvZqOTaKRUxZm2gzrDvGmJRzr nV7rA2Psb7/lCcBul2dlHHybvXJE9vccx3yjN6zgpziQyfGCNS5cxDy8lrFcfUcG wI59vPljrPRW2fXAPKCo3k+GIr/v7xBIdkhsz8jDJD4n7y6A+YvNYJCl+wr6M/ub XjfxV0ov4AXzZvtQg4KrLOYheqtk4ZOHN9rpKLYKllStx6RPjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGApCFaVPcRC/HX4Snoqjs3N6vS2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYzY5NzYzNjctMWMyNy0z ZDBhLWI4NDItYjNmMjgxNzZhZjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGKWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNbg3B0OBOPuK/wPaofXEoq7Vs9rnEGFDvvID4GLi7B/G8SBY9k42bE criyQP9P+q2rtTZU9ys1fZxt6pIEVuyD0s+5Dj/K6eN2FL+N4qSXYDEr45P78Ndy 64P58yN424+SV9zBX01lRi3k3SMbRreQUANz5u8S+WKHKO/pFyW7BkgapfmQIqSQ UgEubLT5cK7lIC3VJAdQy8sa/7H/aJKg+JwSEqaVBzDSjgyRUXq+QO+NTeC6UVuG 3CW711izF/DPx8ASgvatFIUTXexVCQvueLrE8LZ1qjRFtSZ74bRqUC8yAAP+I1bR A/F5B+tMjxNxKtk9QzB44m8B3tpPNrY= -----END CERTIFICATE-----Generated at Mon Oct 20 07:13:02 2025 by rpki-client