$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0ea354f9-3515-3bb3-9d80-a40c47cbaa35.roa File: 0ea354f9-3515-3bb3-9d80-a40c47cbaa35.roa (raw, json) Hash identifier: ZmfKy1Ez/KVVnmDW87DaIp2yDp3EX3JZuQTf+dQVaHY= Subject key identifier: 6D:3D:46:B2:16:93:64:FE:2E:08:CC:5C:02:F2:56:08:28:CB:12:D2 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584B1AD193C0C3985E0111C06680 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0ea354f9-3515-3bb3-9d80-a40c47cbaa35.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 9009 IP address blocks: 173.211.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:93:c0:c3:98:5e:01:11:c0:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=c67995a6-c1a8-4414-8d9c-33652bcb0a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ed:29:fa:c6:d5:e5:ba:c9:83:a9:39:f1:c5: 6b:90:21:46:2f:f0:7c:96:25:2e:29:17:b6:6b:3b: 2c:f5:ba:86:bd:ff:84:69:de:9f:87:d4:3b:dd:43: f8:57:56:80:1e:58:cb:57:15:f8:39:6f:4e:9b:31: ed:57:5e:4a:1d:0c:74:1b:f3:af:bf:ac:14:cd:15: b4:fa:fa:be:cc:f6:e8:31:54:57:dd:b7:0c:4e:56: 2e:0b:d8:89:cd:f4:53:72:99:68:06:18:d7:12:6d: 8c:38:3e:1b:17:67:c6:67:2d:de:5e:6f:94:70:06: f4:5c:7e:a6:ce:f7:5e:a2:8f:0f:84:50:a8:da:5c: a5:98:2d:f4:c6:87:d7:c3:2d:f8:dd:cf:1a:29:51: c6:85:40:70:6f:95:10:37:22:d9:4c:34:3e:2b:c4: 05:45:6c:d4:be:74:cc:63:aa:41:c4:8a:00:1d:c0: ef:50:75:57:99:21:5d:fe:e7:f0:84:79:16:de:fa: 33:f0:5b:d8:94:40:83:ba:d3:56:6b:4c:f0:9d:92: 20:3f:f8:17:90:01:bb:15:57:d1:23:6a:d1:5e:dd: 06:a1:36:99:4e:46:b4:51:0d:94:bc:36:48:bc:73: d4:84:4c:4e:5b:28:ee:31:63:42:98:c6:a4:72:e8: 4d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3D:46:B2:16:93:64:FE:2E:08:CC:5C:02:F2:56:08:28:CB:12:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0ea354f9-3515-3bb3-9d80-a40c47cbaa35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 173.211.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e5:58:b1:b6:14:f6:83:44:1f:9f:64:c7:aa:0e:45:c9:a7:3e: f8:4d:c8:fc:c6:4d:22:ee:fc:96:bc:a9:8a:a1:23:1c:24:cd: a6:08:ac:3d:15:7e:81:a3:68:79:8d:d2:f8:9c:25:bf:a0:3d: 5d:60:70:98:e3:33:a1:eb:bd:f9:32:48:a8:bf:67:7d:ac:3c: cd:4e:59:31:de:bc:84:ea:fd:c2:79:15:10:cf:07:1b:b9:6f: b4:5c:17:e0:eb:41:ed:73:bf:fa:51:20:27:2b:32:5b:7c:13: 1d:99:fc:e4:84:57:07:4c:ae:08:1f:4f:31:82:80:cb:bc:f3: db:4a:8d:36:29:db:0a:9c:46:55:de:07:36:32:0b:a2:f2:0f: 87:c7:16:1b:cc:90:27:78:c4:2c:39:81:d3:4e:be:33:09:bb: 3b:9d:7a:ab:17:01:e8:f5:93:e0:c7:cb:d9:d4:9d:14:ca:e4: 0d:71:60:43:b0:ba:d8:55:58:a8:e8:4c:22:bf:f9:cf:ff:9f: de:50:67:d5:af:57:3e:f2:e0:3d:15:b5:5e:27:74:6c:d5:cf: 82:b6:8e:bf:d7:4e:1d:50:e2:7a:c7:94:7b:1a:75:bd:90:6d: 45:e8:53:85:d6:13:72:f2:5a:84:76:fc:72:c1:54:30:a4:a6: 82:0a:64:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0ZPAw5heARHAZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YzY3OTk1YTYtYzFhOC00NDE0LThkOWMtMzM2NTJiY2IwYTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO0p+sbV5brJg6k58cVrkCFGL/B8liUuKRe2 azss9bqGvf+Ead6fh9Q73UP4V1aAHljLVxX4OW9OmzHtV15KHQx0G/Ovv6wUzRW0 +vq+zPboMVRX3bcMTlYuC9iJzfRTcploBhjXEm2MOD4bF2fGZy3eXm+UcAb0XH6m zvdeoo8PhFCo2lylmC30xofXwy343c8aKVHGhUBwb5UQNyLZTDQ+K8QFRWzUvnTM Y6pBxIoAHcDvUHVXmSFd/ufwhHkW3voz8FvYlECDutNWa0zwnZIgP/gXkAG7FVfR I2rRXt0GoTaZTka0UQ2UvDZIvHPUhExOWyjuMWNCmMakcuhNUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG09RrIWk2T+LgjMXALyVggoyxLSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMGVhMzU0ZjktMzUxNS0z YmIzLTlkODAtYTQwYzQ3Y2JhYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrdNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOVYsbYU9oNEH59kx6oORcmnPvhNyPzGTSLu/Ja8qYqhIxwkzaYIrD0V foGjaHmN0vicJb+gPV1gcJjjM6HrvfkySKi/Z32sPM1OWTHevITq/cJ5FRDPBxu5 b7RcF+DrQe1zv/pRICcrMlt8Ex2Z/OSEVwdMrggfTzGCgMu889tKjTYp2wqcRlXe BzYyC6LyD4fHFhvMkCd4xCw5gdNOvjMJuzudeqsXAej1k+DHy9nUnRTK5A1xYEOw uthVWKjoTCK/+c//n95QZ9WvVz7y4D0VtV4ndGzVz4K2jr/XTh1Q4nrHlHsadb2Q bUXoU4XWE3LyWoR2/HLBVDCkpoIKZCc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:12:37 2025 by rpki-client