$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/ddf1701b-d672-3875-b1d1-39705ddd52d5.roa File: ddf1701b-d672-3875-b1d1-39705ddd52d5.roa (raw, json) Hash identifier: PkcpNB/Rov1TBM5uak/oBMvDWHkWJsr5+08fsH8WQ9M= Subject key identifier: 6C:5E:DF:38:B1:9B:26:56:A0:EB:3D:B1:41:FB:EB:32:C4:4E:EF:7D Certificate issuer: /CN=cc11e5dd-c2b3-493c-8534-431fa4878aa9 Certificate serial: 010D0C9F4328584ADECBBCCD154AF602641D8400 Authority key identifier: 96:B0:88:5C:AB:50:1F:7A:A1:77:AD:ED:76:FF:91:57:89:9E:F5:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/ddf1701b-d672-3875-b1d1-39705ddd52d5.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 3257 IP address blocks: 199.30.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:bc:cd:15:4a:f6:02:64:1d:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc11e5dd-c2b3-493c-8534-431fa4878aa9 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=78b24b36-1b8a-4066-b93d-1e3b5224c554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1a:00:3b:0b:0b:fc:4a:ef:97:0c:27:48:5e: 9d:a6:aa:71:b3:54:eb:ec:b5:69:4f:1a:43:cd:03: c6:c3:69:06:c7:16:ba:fe:63:0c:84:f0:1e:09:be: 41:36:c2:9c:46:2f:43:98:b3:2e:61:fb:d1:12:bf: 27:5d:52:32:8c:b9:84:58:6c:49:1c:80:ca:af:6f: 2c:02:67:ac:b7:02:25:44:42:5f:82:cb:3a:63:c9: 9a:38:59:f6:15:fd:4f:22:62:34:70:5a:3f:9d:80: b9:ab:c6:b1:09:94:9d:02:14:7b:99:f3:d5:95:a7: 69:7d:2f:8b:4d:63:8c:f3:71:6d:5a:0a:c3:51:c0: 0f:41:d1:cc:77:fd:42:f4:8f:a7:04:6b:bb:96:33: fc:38:47:d2:28:04:d2:d5:58:ef:5c:ee:fb:5d:b8: 0f:c0:77:4c:10:9e:34:f9:90:47:c7:90:96:c1:94: 45:60:41:75:e3:45:17:59:df:ff:a5:fc:36:74:e2: 8c:e2:43:1b:d8:fe:e3:40:e3:6f:bc:69:67:78:18: c1:7a:15:7e:9f:ed:77:5a:df:e2:51:df:34:6c:94: bd:b8:f5:9a:b1:35:bb:5d:23:d2:38:30:32:29:37: 88:22:b2:5b:e9:b7:c5:f5:6e:11:8c:4e:53:0e:5a: 91:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5E:DF:38:B1:9B:26:56:A0:EB:3D:B1:41:FB:EB:32:C4:4E:EF:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/ddf1701b-d672-3875-b1d1-39705ddd52d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.crl X509v3 Authority Key Identifier: keyid:96:B0:88:5C:AB:50:1F:7A:A1:77:AD:ED:76:FF:91:57:89:9E:F5:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer sbgp-ipAddrBlock: critical IPv4: 199.30.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:9d:cb:19:b6:9c:8b:50:c9:55:f7:a0:99:07:7f:43:13:3d: 18:64:d5:c3:c4:e5:e5:de:5e:92:6c:9b:c8:2b:9a:a5:e7:59: ab:e8:e3:f5:e4:81:3b:d1:0f:9a:f0:aa:ca:4c:62:02:12:7e: e3:a9:b3:db:ae:f6:43:e7:a3:5a:7a:07:13:ee:81:22:6d:08: 37:2b:80:59:1b:d6:d2:cb:89:33:c8:b4:2f:72:3d:80:96:56: 78:14:3e:91:4a:53:ec:40:2a:a3:6e:06:f0:65:6b:b5:8b:b9: d0:7b:6e:a9:0e:df:9d:80:21:b3:95:32:1b:b0:2e:ab:76:3d: 46:ea:f4:b7:81:ba:85:23:03:91:fd:14:2d:c3:f7:2e:c6:ba: dd:49:cc:d5:cf:c1:92:8c:36:e3:71:93:b0:be:0c:13:59:83: ee:8d:29:7e:52:6c:d7:5f:00:c1:03:eb:42:01:23:84:8c:04: a1:ff:5a:28:53:d2:33:2f:1d:d5:88:c8:e8:d9:0e:56:54:06: 80:c8:9b:73:77:fd:c6:42:2c:b4:c4:4d:27:6f:8b:9a:ec:b1: a7:72:b5:be:0b:0b:7d:da:b2:b7:fb:46:38:de:e2:6b:21:5b: 89:73:96:33:39:93:91:3a:c7:61:65:1f:85:7b:8b:58:25:0f: 09:24:4c:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey7zNFUr2AmQdhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MxMWU1ZGQtYzJiMy00OTNjLTg1MzQtNDMxZmE0ODc4 YWE5MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk NzhiMjRiMzYtMWI4YS00MDY2LWI5M2QtMWUzYjUyMjRjNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRoAOwsL/ErvlwwnSF6dpqpxs1Tr7LVpTxpD zQPGw2kGxxa6/mMMhPAeCb5BNsKcRi9DmLMuYfvREr8nXVIyjLmEWGxJHIDKr28s AmestwIlREJfgss6Y8maOFn2Ff1PImI0cFo/nYC5q8axCZSdAhR7mfPVladpfS+L TWOM83FtWgrDUcAPQdHMd/1C9I+nBGu7ljP8OEfSKATS1VjvXO77XbgPwHdMEJ40 +ZBHx5CWwZRFYEF140UXWd//pfw2dOKM4kMb2P7jQONvvGlneBjBehV+n+13Wt/i Ud80bJS9uPWasTW7XSPSODAyKTeIIrJb6bfF9W4RjE5TDlqRbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxe3zixmyZWoOs9sUH76zLETu99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzEx ZTVkZC1jMmIzLTQ5M2MtODUzNC00MzFmYTQ4NzhhYTkvZGRmMTcwMWItZDY3Mi0z ODc1LWIxZDEtMzk3MDVkZGQ1MmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2MxMWU1ZGQtYzJiMy00OTNjLTg1 MzQtNDMxZmE0ODc4YWE5L2NjMTFlNWRkLWMyYjMtNDkzYy04NTM0LTQzMWZhNDg3 OGFhOS5jcmwwHwYDVR0jBBgwFoAUlrCIXKtQH3qhd63tdv+RV4me9cYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzExZTVkZC1jMmIzLTQ5M2MtODUzNC00MzFm YTQ4NzhhYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2dyxm2nItQyVX3oJkHf0MTPRhk1cPE5eXeXpJsm8grmqXnWavo4/Xk gTvRD5rwqspMYgISfuOps9uu9kPno1p6BxPugSJtCDcrgFkb1tLLiTPItC9yPYCW VngUPpFKU+xAKqNuBvBla7WLudB7bqkO352AIbOVMhuwLqt2PUbq9LeBuoUjA5H9 FC3D9y7Gut1JzNXPwZKMNuNxk7C+DBNZg+6NKX5SbNdfAMED60IBI4SMBKH/WihT 0jMvHdWIyOjZDlZUBoDIm3N3/cZCLLTETSdvi5rssadytb4LC33asrf7Rjje4msh W4lzljM5k5E6x2FlH4V7i1glDwkkTC8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:50:32 2025 by rpki-client