$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/4ee5944c-2578-327e-8b6d-d50b04da84cd.roa File: 4ee5944c-2578-327e-8b6d-d50b04da84cd.roa (raw, json) Hash identifier: Ee1X51DWMUlsYhd+83OITZ90jT5ckFoB8c/+A/TuIGQ= Subject key identifier: 3C:56:47:1F:38:F0:51:50:6E:A8:57:70:2E:3F:55:2F:ED:06:11:CE Certificate issuer: /CN=e0d54f0d-8151-4500-80b5-008165b77555 Certificate serial: 010D0C9F4328584AF5214FD31BC2FDE512108640 Authority key identifier: 6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/4ee5944c-2578-327e-8b6d-d50b04da84cd.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 173.241.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:4f:d3:1b:c2:fd:e5:12:10:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0d54f0d-8151-4500-80b5-008165b77555 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=c9c8f1b9-de7c-4951-b938-cd83c44c7d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:86:00:2e:1c:22:55:27:00:3c:35:28:4e:fc: 87:20:fb:a5:80:f5:c4:79:fc:92:f5:cb:29:9d:45: a3:99:d2:46:8d:9e:33:e7:8e:b1:fb:65:0b:8d:4f: cd:29:b3:09:e4:77:ca:f2:68:9c:ed:a1:73:03:8f: 1b:eb:a5:11:29:2a:46:62:db:60:31:38:7d:4d:d7: fd:b0:4a:6d:1d:1a:9f:9f:29:f6:68:12:44:37:ff: 3f:66:d8:c0:10:83:32:6a:88:21:0c:65:f7:a8:bd: 63:a4:50:02:1d:5a:7f:78:63:a1:36:c0:00:f1:22: 04:44:24:47:c7:69:65:5d:ca:1e:fd:c2:c9:23:8c: 74:55:99:e2:ae:3d:cf:54:90:8c:95:30:d9:90:36: 06:17:ff:05:9d:8a:1e:13:5d:19:8e:8c:44:e9:da: 30:31:9f:64:b3:09:6a:33:ec:64:9e:9f:e2:2d:bf: cb:1d:96:d1:27:46:d3:c4:d1:9f:0a:8a:84:eb:95: 72:e1:60:d6:cf:bc:d1:82:af:c7:c8:e3:c8:3f:51: 2a:62:94:c6:04:ca:40:06:fa:96:65:d5:77:4e:bb: b3:25:8a:8e:43:1d:99:53:d0:f1:e2:7b:74:2a:28: 8f:05:f6:25:ae:6c:ee:99:a2:c2:c3:c0:10:20:e5: ce:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:56:47:1F:38:F0:51:50:6E:A8:57:70:2E:3F:55:2F:ED:06:11:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/4ee5944c-2578-327e-8b6d-d50b04da84cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl X509v3 Authority Key Identifier: keyid:6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer sbgp-ipAddrBlock: critical IPv4: 173.241.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:19:f4:5c:04:6f:ab:a1:59:54:38:d3:cd:73:05:84:5b:42: cb:9d:96:c4:30:95:ed:a9:03:a3:79:84:6b:e8:36:42:15:76: 82:d4:f3:09:4d:15:fa:ac:50:06:6a:0b:99:aa:91:6c:7f:83: 77:8a:49:76:74:d1:9d:7f:73:c7:37:a0:e2:a5:d4:53:66:2e: 50:69:48:12:70:63:4f:82:45:d3:92:89:05:bb:74:11:e9:1a: ea:f1:6b:e9:e2:1d:11:f8:ad:38:31:b0:1d:01:9f:35:90:75: 29:57:6e:68:18:38:db:be:b1:fd:cf:39:d3:40:24:fd:53:b4: fa:5f:37:83:61:58:10:b0:01:18:93:d0:31:d6:6a:f3:2f:52: ea:8e:31:5c:35:f3:fd:4f:33:67:d6:51:57:e9:b9:4b:d5:e2: 29:02:45:1a:44:ac:32:fd:cb:40:a7:a9:bb:3b:63:4e:1a:bc: 28:f6:c8:1e:45:f6:7b:ac:d1:70:d6:28:fd:d9:3b:fd:d4:54: 52:79:8a:aa:db:21:ce:63:65:65:a1:5c:e6:8b:6c:44:d4:c8: b3:74:d0:a4:07:95:44:4c:d6:d8:29:cc:06:9c:7c:92:dc:8f: 50:52:c5:ac:9d:7e:c0:fa:d6:45:c8:8e:a5:2f:d4:b7:0c:95: 29:ad:63:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IU/TG8L95RIQhkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTBkNTRmMGQtODE1MS00NTAwLTgwYjUtMDA4MTY1Yjc3 NTU1MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YzljOGYxYjktZGU3Yy00OTUxLWI5MzgtY2Q4M2M0NGM3ZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4YALhwiVScAPDUoTvyHIPulgPXEefyS9csp nUWjmdJGjZ4z546x+2ULjU/NKbMJ5HfK8mic7aFzA48b66URKSpGYttgMTh9Tdf9 sEptHRqfnyn2aBJEN/8/ZtjAEIMyaoghDGX3qL1jpFACHVp/eGOhNsAA8SIERCRH x2llXcoe/cLJI4x0VZnirj3PVJCMlTDZkDYGF/8FnYoeE10ZjoxE6dowMZ9kswlq M+xknp/iLb/LHZbRJ0bTxNGfCoqE65Vy4WDWz7zRgq/HyOPIP1EqYpTGBMpABvqW ZdV3TruzJYqOQx2ZU9Dx4nt0KiiPBfYlrmzumaLCw8AQIOXOqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxWRx848FFQbqhXcC4/VS/tBhHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lMGQ1 NGYwZC04MTUxLTQ1MDAtODBiNS0wMDgxNjViNzc1NTUvNGVlNTk0NGMtMjU3OC0z MjdlLThiNmQtZDUwYjA0ZGE4NGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTBkNTRmMGQtODE1MS00NTAwLTgw YjUtMDA4MTY1Yjc3NTU1L2UwZDU0ZjBkLTgxNTEtNDUwMC04MGI1LTAwODE2NWI3 NzU1NS5jcmwwHwYDVR0jBBgwFoAUa7m912tofp5cuk1nda1orFOXENswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lMGQ1NGYwZC04MTUxLTQ1MDAtODBiNS0wMDgx NjViNzc1NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0Z9FwEb6uhWVQ4081zBYRbQsudlsQwle2pA6N5hGvoNkIVdoLU8wlN FfqsUAZqC5mqkWx/g3eKSXZ00Z1/c8c3oOKl1FNmLlBpSBJwY0+CRdOSiQW7dBHp Gurxa+niHRH4rTgxsB0BnzWQdSlXbmgYONu+sf3POdNAJP1TtPpfN4NhWBCwARiT 0DHWavMvUuqOMVw18/1PM2fWUVfpuUvV4ikCRRpErDL9y0Cnqbs7Y04avCj2yB5F 9nus0XDWKP3ZO/3UVFJ5iqrbIc5jZWWhXOaLbETUyLN00KQHlURM1tgpzAacfJLc j1BSxaydfsD61kXIjqUv1LcMlSmtY+c= -----END CERTIFICATE-----Generated at Sun Oct 19 17:53:43 2025 by rpki-client