$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3c0e3024-e92b-31d2-b990-e2ef55be62d7.roa File: 3c0e3024-e92b-31d2-b990-e2ef55be62d7.roa (raw, json) Hash identifier: 1lufZE+AodbAkggYR9Qy02YT2ArKFPImSOGQPL41+Y8= Subject key identifier: 07:66:4C:34:04:AB:70:1E:65:A8:A6:A8:18:50:B4:D2:01:BC:0B:33 Certificate issuer: /CN=269d2481-9b5f-41f2-a09c-92994a3ae335 Certificate serial: 010D0C9F4328584AE891317B23A0E263C7340800 Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3c0e3024-e92b-31d2-b990-e2ef55be62d7.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 398343 IP address blocks: 128.254.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:31:7b:23:a0:e2:63:c7:34:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=da1fca1f-6351-43ec-a93b-df8fa25f7af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:54:42:96:a5:a0:a0:e6:63:40:6d:2b:77:37: e1:e3:33:cc:3e:7f:d7:20:47:2b:8c:7e:9c:34:4e: a3:1e:71:94:fb:ef:55:49:bb:be:59:bb:33:e0:67: 9b:b4:46:ea:47:86:d7:03:13:9e:e2:8a:56:e8:fd: d5:77:fd:53:ac:c2:92:db:1a:2f:2d:8d:d5:23:c9: 8a:69:f3:cf:2c:04:29:e7:cd:3e:38:d2:df:8d:59: b0:c9:48:96:89:6e:9f:a2:ac:cb:8b:8b:fd:ef:0b: 9c:8f:d2:68:97:ec:37:19:38:11:4b:85:f0:66:63: d4:10:36:11:c6:28:83:f6:e0:c4:36:2f:cc:b2:f8: 5c:3e:a7:e6:f0:dc:fb:35:3c:b1:0f:8f:3c:bb:f7: 1b:d5:b7:34:6b:10:80:92:cf:28:d6:da:5b:f5:19: 5e:50:53:7b:1c:12:81:0b:43:46:2d:9d:a9:b7:85: 92:8b:8d:d7:b9:24:1c:e9:aa:02:91:bb:7f:63:a8: 42:b6:5e:62:bc:75:61:3a:f0:87:bc:5f:8f:a9:4d: 64:24:73:c5:58:1d:da:00:28:a3:57:36:8f:37:88: c3:52:a2:ac:f1:1a:2c:2d:0e:4b:02:49:d8:9b:8b: 75:9a:81:e7:40:b3:23:62:fa:c3:69:e8:af:68:8e: 92:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:66:4C:34:04:AB:70:1E:65:A8:A6:A8:18:50:B4:D2:01:BC:0B:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3c0e3024-e92b-31d2-b990-e2ef55be62d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl X509v3 Authority Key Identifier: keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer sbgp-ipAddrBlock: critical IPv4: 128.254.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:22:e0:67:50:a4:9a:3d:a5:99:df:80:fc:7a:9b:1a:77:82: 7d:bb:af:aa:c9:d2:55:30:1a:7c:ae:99:01:32:66:f8:49:d8: 0f:25:71:c6:98:4a:ca:03:bd:ee:06:b0:76:b0:23:cd:39:2b: 8d:4d:3b:d2:fb:7d:ec:53:9f:e4:e0:b4:73:b9:f3:04:3f:87: b9:23:3e:81:d5:0b:25:32:d7:fe:ce:d6:25:d6:06:12:87:58: 21:a6:12:ec:4e:9d:04:ae:c8:ab:21:aa:9d:20:e5:b6:49:55: eb:48:e8:e8:2f:93:c9:e3:b2:71:d3:3f:5a:6a:74:c8:3f:46: 63:88:5d:ea:56:df:91:b1:0f:e7:e6:77:e5:7b:a3:e6:d9:8e: e4:07:c9:36:1a:21:d3:bf:2b:ab:83:58:11:36:c5:15:4f:a9: 68:12:5b:cc:5e:9c:0d:8b:d7:eb:f1:c1:89:1e:72:96:a4:56: 45:96:d5:39:17:b8:f0:1b:b4:a6:6b:14:e7:96:69:45:a2:c9: 25:03:72:a1:ca:42:02:cf:57:a6:28:5d:3f:64:9e:a5:89:12: 21:f7:a6:b2:50:e5:5f:18:f8:2b:2c:4d:7f:a7:89:47:3e:04: 01:17:e5:3d:6c:00:e2:b4:1a:cc:d4:5f:b9:4d:3d:b0:c6:99: 64:17:3e:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTF7I6DiY8c0CAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjY5ZDI0ODEtOWI1Zi00MWYyLWEwOWMtOTI5OTRhM2Fl MzM1MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk ZGExZmNhMWYtNjM1MS00M2VjLWE5M2ItZGY4ZmEyNWY3YWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFRClqWgoOZjQG0rdzfh4zPMPn/XIEcrjH6c NE6jHnGU++9VSbu+Wbsz4GebtEbqR4bXAxOe4opW6P3Vd/1TrMKS2xovLY3VI8mK afPPLAQp580+ONLfjVmwyUiWiW6foqzLi4v97wucj9Jol+w3GTgRS4XwZmPUEDYR xiiD9uDENi/MsvhcPqfm8Nz7NTyxD488u/cb1bc0axCAks8o1tpb9RleUFN7HBKB C0NGLZ2pt4WSi43XuSQc6aoCkbt/Y6hCtl5ivHVhOvCHvF+PqU1kJHPFWB3aACij VzaPN4jDUqKs8RosLQ5LAknYm4t1moHnQLMjYvrDaeivaI6SSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdmTDQEq3AeZaimqBhQtNIBvAszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNjlk MjQ4MS05YjVmLTQxZjItYTA5Yy05Mjk5NGEzYWUzMzUvM2MwZTMwMjQtZTkyYi0z MWQyLWI5OTAtZTJlZjU1YmU2MmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjY5ZDI0ODEtOWI1Zi00MWYyLWEw OWMtOTI5OTRhM2FlMzM1LzI2OWQyNDgxLTliNWYtNDFmMi1hMDljLTkyOTk0YTNh ZTMzNS5jcmwwHwYDVR0jBBgwFoAUb9iBPHMZnPatpduCmqBTFv8j7VQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNjlkMjQ4MS05YjVmLTQxZjItYTA5Yy05Mjk5 NGEzYWUzMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP6SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQi4GdQpJo9pZnfgPx6mxp3gn27r6rJ0lUwGnyumQEyZvhJ2A8lccaY SsoDve4GsHawI805K41NO9L7fexTn+TgtHO58wQ/h7kjPoHVCyUy1/7O1iXWBhKH WCGmEuxOnQSuyKshqp0g5bZJVetI6Ogvk8njsnHTP1pqdMg/RmOIXepW35GxD+fm d+V7o+bZjuQHyTYaIdO/K6uDWBE2xRVPqWgSW8xenA2L1+vxwYkecpakVkWW1TkX uPAbtKZrFOeWaUWiySUDcqHKQgLPV6YoXT9knqWJEiH3prJQ5V8Y+CssTX+niUc+ BAEX5T1sAOK0GszUX7lNPbDGmWQXPmA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:47:22 2025 by rpki-client