$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/33886230-909a-3c78-8a7d-882d456f43a0.roa File: 33886230-909a-3c78-8a7d-882d456f43a0.roa (raw, json) Hash identifier: rtZxXUH3+4Bb0lNTb1oMOE/2H1zVKqGZs8AEGGT8S54= Subject key identifier: 6D:39:0E:65:C4:24:89:10:CA:F6:80:3A:44:A6:B4:A3:15:31:9A:87 Certificate issuer: /CN=3506dd4b-c904-4daa-9013-78c3d05bbcce Certificate serial: 010D0C9F4328584AE2FBC6A2A6B30E75966D0180 Authority key identifier: 38:0F:6F:65:C3:DD:EB:FC:45:AC:6F:0A:2C:FB:47:BE:7C:E0:E0:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/33886230-909a-3c78-8a7d-882d456f43a0.roa Signing time: Sun 17 Aug 2025 13:00:41 +0000 ROA not before: Sun 17 Aug 2025 13:00:41 +0000 ROA not after: Sat 15 Nov 2025 14:00:41 +0000 asID: 399105 IP address blocks: 172.99.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/3506dd4b-c904-4daa-9013-78c3d05bbcce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/3506dd4b-c904-4daa-9013-78c3d05bbcce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e2:fb:c6:a2:a6:b3:0e:75:96:6d:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3506dd4b-c904-4daa-9013-78c3d05bbcce Validity Not Before: Aug 17 13:00:41 2025 GMT Not After : Nov 15 14:00:41 2025 GMT Subject: CN=c50ef8b8-646f-4d91-beab-135353151117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7d:37:06:ce:c7:af:1c:77:f2:c2:2b:ea:19: 4d:48:76:e1:2b:54:1c:0a:e2:ab:e1:72:42:18:b3: f6:64:5b:6c:24:79:6a:c1:f8:0f:45:18:61:79:54: 92:20:c9:8c:a5:c2:a7:97:52:09:10:8f:aa:e8:44: a8:c7:8a:71:0d:52:9b:4b:07:57:b8:4e:21:db:72: b0:00:f9:dc:8b:e9:25:e2:80:a8:bf:d1:70:24:97: 75:e3:e9:82:45:a9:fb:09:cd:d7:fd:5f:2f:6a:3f: 92:f5:87:0c:a0:9c:9e:10:23:02:78:8f:78:51:1f: c6:14:79:b3:dd:9a:b1:57:8d:d6:eb:45:8c:30:54: 05:02:82:f8:ae:aa:a4:24:5f:89:44:cc:b5:12:9d: f5:a5:34:3d:27:16:1e:a9:3c:2d:a6:54:af:68:66: fb:22:21:8d:63:0c:3c:d2:cf:1d:d4:da:2b:da:81: dd:09:7c:75:76:13:5a:86:d1:32:a4:a6:24:89:1d: c1:99:a8:65:86:46:83:3f:7a:16:74:e8:ac:af:d7: 2c:33:17:e5:48:69:10:82:7e:93:4f:c3:4c:2f:a2: 53:3c:66:de:02:ec:31:9f:aa:e9:76:16:67:95:63: c2:ba:c0:b4:27:b9:7f:08:11:4b:66:67:13:21:62: d6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:39:0E:65:C4:24:89:10:CA:F6:80:3A:44:A6:B4:A3:15:31:9A:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/33886230-909a-3c78-8a7d-882d456f43a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/3506dd4b-c904-4daa-9013-78c3d05bbcce.crl X509v3 Authority Key Identifier: keyid:38:0F:6F:65:C3:DD:EB:FC:45:AC:6F:0A:2C:FB:47:BE:7C:E0:E0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce.cer sbgp-ipAddrBlock: critical IPv4: 172.99.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:7c:af:c9:8e:8b:38:0c:f4:a8:e8:34:ba:c6:13:7e:1c:8f: 6c:cd:f5:3b:3e:ce:7c:d0:1b:41:91:78:dc:47:5c:22:7b:2c: 86:2f:77:f2:f7:9c:97:94:02:51:1d:97:a9:de:71:24:02:ef: 60:5d:fe:a6:f2:82:23:c7:c4:a2:82:ca:59:4b:d8:a6:9b:a1: a6:59:d9:f3:b4:2f:35:f2:2f:ae:6f:e4:03:eb:b4:0d:86:d1: 32:f4:1c:f2:d3:05:a7:5a:73:43:c1:64:00:32:49:8b:e9:24: 02:f2:c8:65:fa:c4:40:c8:a5:28:ef:b1:7e:2e:d4:a1:61:d9: 71:5a:06:8b:1b:74:bd:be:3a:ea:74:ef:09:65:23:ec:0d:60: 7c:2b:d6:c1:23:ad:a3:24:02:a4:74:12:4d:c0:26:ee:32:94: cf:26:1a:8d:fc:59:63:15:dd:b9:ab:cd:14:14:25:dc:ff:90: ca:a7:44:e4:b5:a5:1b:06:eb:27:3a:96:18:1a:64:b7:61:3e: d5:67:7f:83:8e:13:68:3c:4c:07:dc:01:d8:58:fa:30:e8:b3: 5c:88:42:5d:b2:a3:89:43:43:e0:fc:83:8f:dd:55:73:02:6e: 73:e0:6d:b3:e2:40:42:af:81:7a:64:02:cd:bb:24:ba:d2:46: 76:e1:91:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEri+8aiprMOdZZtAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzUwNmRkNGItYzkwNC00ZGFhLTkwMTMtNzhjM2QwNWJi Y2NlMB4XDTI1MDgxNzEzMDA0MVoXDTI1MTExNTE0MDA0MVowLzEtMCsGA1UEAxMk YzUwZWY4YjgtNjQ2Zi00ZDkxLWJlYWItMTM1MzUzMTUxMTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm303Bs7Hrxx38sIr6hlNSHbhK1QcCuKr4XJC GLP2ZFtsJHlqwfgPRRhheVSSIMmMpcKnl1IJEI+q6ESox4pxDVKbSwdXuE4h23Kw APnci+kl4oCov9FwJJd14+mCRan7Cc3X/V8vaj+S9YcMoJyeECMCeI94UR/GFHmz 3ZqxV43W60WMMFQFAoL4rqqkJF+JRMy1Ep31pTQ9JxYeqTwtplSvaGb7IiGNYww8 0s8d1Nor2oHdCXx1dhNahtEypKYkiR3BmahlhkaDP3oWdOisr9csMxflSGkQgn6T T8NML6JTPGbeAuwxn6rpdhZnlWPCusC0J7l/CBFLZmcTIWLWFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG05DmXEJIkQyvaAOkSmtKMVMZqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zNTA2 ZGQ0Yi1jOTA0LTRkYWEtOTAxMy03OGMzZDA1YmJjY2UvMzM4ODYyMzAtOTA5YS0z Yzc4LThhN2QtODgyZDQ1NmY0M2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzUwNmRkNGItYzkwNC00ZGFhLTkw MTMtNzhjM2QwNWJiY2NlLzM1MDZkZDRiLWM5MDQtNGRhYS05MDEzLTc4YzNkMDVi YmNjZS5jcmwwHwYDVR0jBBgwFoAUOA9vZcPd6/xFrG8KLPtHvnzg4HgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zNTA2ZGQ0Yi1jOTA0LTRkYWEtOTAxMy03OGMz ZDA1YmJjY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGP2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGV8r8mOizgM9KjoNLrGE34cj2zN9Ts+znzQG0GReNxHXCJ7LIYvd/L3 nJeUAlEdl6necSQC72Bd/qbygiPHxKKCyllL2KaboaZZ2fO0LzXyL65v5APrtA2G 0TL0HPLTBadac0PBZAAySYvpJALyyGX6xEDIpSjvsX4u1KFh2XFaBosbdL2+Oup0 7wllI+wNYHwr1sEjraMkAqR0Ek3AJu4ylM8mGo38WWMV3bmrzRQUJdz/kMqnROS1 pRsG6yc6lhgaZLdhPtVnf4OOE2g8TAfcAdhY+jDos1yIQl2yo4lDQ+D8g4/dVXMC bnPgbbPiQEKvgXpkAs27JLrSRnbhkVs= -----END CERTIFICATE-----Generated at Sun Aug 24 04:04:03 2025 by rpki-client