$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/496f49ea-3359-31aa-95bc-daa3ccdae006.roa File: 496f49ea-3359-31aa-95bc-daa3ccdae006.roa (raw, json) Hash identifier: J01T3sIiR+wzB1cfCPG3G9829zrGVwUySUa4bkRuHeU= Subject key identifier: 32:09:9E:85:24:29:84:53:68:08:E1:1D:D1:26:BE:E6:19:4C:6E:87 Certificate issuer: /CN=544240c0-1aad-4163-8ada-3b71180eac4f Certificate serial: 010D0C9F4328584AD23BAF480E067305A998E930 Authority key identifier: A7:B0:96:5B:48:01:56:7A:E0:42:9A:9F:7E:0C:3E:42:9A:BB:59:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/496f49ea-3359-31aa-95bc-daa3ccdae006.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 396982 IP address blocks: 147.146.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:af:48:0e:06:73:05:a9:98:e9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544240c0-1aad-4163-8ada-3b71180eac4f Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=b05c3caa-b2ce-481b-b335-1ab5a76d20ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a2:e7:44:6f:4e:a2:e0:17:80:59:89:6f:d3: 52:23:00:7d:28:02:73:bb:75:38:f3:f3:66:ec:4b: 4e:db:e3:b9:9f:95:13:9d:08:c4:80:73:98:80:f8: b8:89:5e:8a:61:ec:27:ba:7a:7b:b8:51:bc:fb:ad: 00:1c:b9:1f:24:d2:7b:6e:33:62:4e:dc:c5:c1:e1: de:7a:0b:69:7d:c5:7f:70:69:f8:94:88:70:9c:9f: 0f:25:e0:cb:72:0d:ef:0f:9d:00:89:4b:55:56:c3: 05:e7:58:41:d5:0a:b2:ba:a8:4c:7e:af:39:58:a4: d7:ca:b9:04:be:91:76:98:56:42:ec:42:cd:6e:96: 8f:e5:f8:48:d2:fb:30:c6:d4:50:d0:31:6c:3d:bb: c3:61:e4:ab:3f:dd:21:1d:21:e2:e8:5e:04:80:f7: bd:5c:c9:6e:87:ed:c0:17:3e:5b:fe:4f:a7:11:96: 8a:84:2e:02:57:82:e0:b5:6c:01:c9:ca:01:92:97: e4:e2:13:4e:f1:46:a6:84:d6:43:75:db:98:98:48: 00:8c:6c:46:b7:a5:27:a9:41:cf:76:c4:13:ac:15: e6:4e:5f:30:91:17:b4:dd:74:ce:23:03:df:6b:1b: c8:18:ad:e1:5e:af:a1:43:04:a7:a4:8b:f6:00:b8: ad:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:09:9E:85:24:29:84:53:68:08:E1:1D:D1:26:BE:E6:19:4C:6E:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/496f49ea-3359-31aa-95bc-daa3ccdae006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.crl X509v3 Authority Key Identifier: keyid:A7:B0:96:5B:48:01:56:7A:E0:42:9A:9F:7E:0C:3E:42:9A:BB:59:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer sbgp-ipAddrBlock: critical IPv4: 147.146.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:63:25:03:77:14:78:b4:57:16:ba:2a:08:1a:e5:ef:16:81: 0f:9b:00:a1:4d:56:fd:da:33:d1:9c:ea:a2:d5:3f:bf:c8:47: 39:85:8b:58:fc:b7:6f:b6:13:6d:b9:fd:fd:4f:0e:59:5f:2f: 78:92:50:b1:57:ea:0c:cc:48:d7:b4:76:e6:7a:62:66:50:8f: 00:17:b5:d4:7c:64:0d:75:ca:47:d5:8f:e7:45:5c:1d:c3:58: d6:6c:df:3d:b4:69:fa:53:3d:e4:74:dc:24:12:2a:d3:55:d6: ba:75:f5:29:4b:1c:ce:9a:38:5e:fd:a5:8f:11:97:4d:03:9a: d6:94:18:0e:25:6b:69:bf:63:62:f5:99:37:c1:df:c7:df:03: 8c:78:af:18:df:a9:19:5d:4a:ba:36:45:57:56:a6:2a:ee:f7: 01:36:fd:99:b0:c1:f9:7a:08:5d:6c:28:01:a9:c6:8e:2d:54: 0e:45:84:4e:a0:c1:dc:3a:56:38:a2:f3:f4:f1:8f:0c:93:c3: fb:c7:fe:9f:4f:f0:bd:9f:1f:40:3d:05:ad:48:17:a8:9d:2b: 1c:6a:e2:de:0b:53:f0:f0:7a:d7:bf:60:b4:21:29:1c:3b:76: 0b:d5:be:a8:04:91:63:65:ab:1b:52:9e:b2:f1:97:cb:33:c7: ba:f9:3c:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO69IDgZzBamY6TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQ0MjQwYzAtMWFhZC00MTYzLThhZGEtM2I3MTE4MGVh YzRmMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YjA1YzNjYWEtYjJjZS00ODFiLWIzMzUtMWFiNWE3NmQyMGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKLnRG9OouAXgFmJb9NSIwB9KAJzu3U48/Nm 7EtO2+O5n5UTnQjEgHOYgPi4iV6KYewnunp7uFG8+60AHLkfJNJ7bjNiTtzFweHe egtpfcV/cGn4lIhwnJ8PJeDLcg3vD50AiUtVVsMF51hB1QqyuqhMfq85WKTXyrkE vpF2mFZC7ELNbpaP5fhI0vswxtRQ0DFsPbvDYeSrP90hHSHi6F4EgPe9XMluh+3A Fz5b/k+nEZaKhC4CV4LgtWwBycoBkpfk4hNO8UamhNZDdduYmEgAjGxGt6UnqUHP dsQTrBXmTl8wkRe03XTOIwPfaxvIGK3hXq+hQwSnpIv2ALitMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIJnoUkKYRTaAjhHdEmvuYZTG6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NDQy NDBjMC0xYWFkLTQxNjMtOGFkYS0zYjcxMTgwZWFjNGYvNDk2ZjQ5ZWEtMzM1OS0z MWFhLTk1YmMtZGFhM2NjZGFlMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTQ0MjQwYzAtMWFhZC00MTYzLThh ZGEtM2I3MTE4MGVhYzRmLzU0NDI0MGMwLTFhYWQtNDE2My04YWRhLTNiNzExODBl YWM0Zi5jcmwwHwYDVR0jBBgwFoAUp7CWW0gBVnrgQpqffgw+Qpq7WR0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NDQyNDBjMC0xYWFkLTQxNjMtOGFkYS0zYjcx MTgwZWFjNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5LwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZjJQN3FHi0Vxa6Kgga5e8WgQ+bAKFNVv3aM9Gc6qLVP7/IRzmFi1j8 t2+2E225/f1PDllfL3iSULFX6gzMSNe0duZ6YmZQjwAXtdR8ZA11ykfVj+dFXB3D WNZs3z20afpTPeR03CQSKtNV1rp19SlLHM6aOF79pY8Rl00DmtaUGA4la2m/Y2L1 mTfB38ffA4x4rxjfqRldSro2RVdWpiru9wE2/Zmwwfl6CF1sKAGpxo4tVA5FhE6g wdw6Vjii8/TxjwyTw/vH/p9P8L2fH0A9Ba1IF6idKxxq4t4LU/Dwete/YLQhKRw7 dgvVvqgEkWNlqxtSnrLxl8szx7r5PKs= -----END CERTIFICATE-----Generated at Sun Aug 24 03:06:11 2025 by rpki-client