$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/941ea716-5fb7-34ea-bb6c-e9dd6b87c20e.roa File: 941ea716-5fb7-34ea-bb6c-e9dd6b87c20e.roa (raw, json) Hash identifier: YQEKsoJVA0aNIFlmz7wFOkmM7S6kLfnV6tHUiGDWYNE= Subject key identifier: DA:CF:E6:EB:97:9D:14:48:41:23:DD:4C:A9:CA:BA:E6:8F:CC:52:DE Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584AEC5844D247F048DFB068E100 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/941ea716-5fb7-34ea-bb6c-e9dd6b87c20e.roa Signing time: Wed 20 Aug 2025 21:29:23 +0000 ROA not before: Wed 20 Aug 2025 21:29:23 +0000 ROA not after: Tue 18 Nov 2025 22:29:23 +0000 asID: 137220 IP address blocks: 192.163.14.0/24 maxlen: 24 192.163.15.0/24 maxlen: 24 192.163.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:58:44:d2:47:f0:48:df:b0:68:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Aug 20 21:29:23 2025 GMT Not After : Nov 18 22:29:23 2025 GMT Subject: CN=650ea039-8cee-4dfe-b69f-5bc7a1f1c59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6f:27:21:36:81:2d:c3:40:83:4d:8a:1c:7c: c3:e6:3c:37:19:a4:4d:48:c6:22:4c:8e:a1:ee:9a: 17:f6:df:f6:f6:c2:65:70:05:a1:f4:a4:16:40:4c: 2f:2b:05:98:79:3c:0f:4d:3b:59:22:fc:7d:6b:4b: ef:6d:fc:c6:f8:55:35:8d:32:b4:90:90:c6:05:ee: 0d:cc:6f:a1:da:60:10:3a:6e:d2:42:8d:e7:9a:4b: 3d:79:0b:32:66:05:30:89:f1:d8:cc:2c:4b:7c:33: 28:e3:e5:ab:bd:e6:1f:40:07:74:76:6c:1b:c9:b1: 8c:6c:44:bb:01:16:aa:82:c8:3b:cf:6c:ab:72:58: c7:68:78:48:4c:1f:4a:d4:56:cc:92:61:a9:62:05: e1:b4:49:d4:c3:f2:be:9e:ca:1b:a0:cc:89:6a:bd: 12:38:bc:65:7a:9a:2b:17:22:8c:30:b9:73:c4:8f: fe:29:5a:01:10:fd:ae:86:f1:1e:24:71:46:73:ff: 97:7c:89:56:b5:46:fd:c4:66:3d:5a:8b:c1:df:e3: 89:66:da:53:81:b5:f7:7a:f0:a1:15:a7:73:0c:37: 30:6d:79:7e:92:25:53:30:a8:58:f4:64:d7:59:34: 8d:24:a2:cb:a8:76:12:1d:16:8d:ae:ab:c7:a6:ac: 54:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CF:E6:EB:97:9D:14:48:41:23:DD:4C:A9:CA:BA:E6:8F:CC:52:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/941ea716-5fb7-34ea-bb6c-e9dd6b87c20e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 192.163.14.0/23 192.163.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:5d:30:25:b6:2a:ac:4b:85:89:1d:0d:c2:5e:7a:8b:c0:b1: b0:2c:f9:f7:a8:80:ed:97:d1:7f:17:aa:bd:4a:33:2b:72:b0: 1a:e9:a7:0d:d6:58:54:e7:a0:d2:77:63:21:4f:9b:28:04:35: e5:e4:59:92:a9:94:87:b8:80:89:37:43:61:98:89:52:6c:c5: ee:1a:1a:c3:09:63:ff:a6:d3:8c:8d:27:3f:7b:2e:a6:bf:82: 27:0a:17:7d:3e:5a:be:58:cb:4a:4d:86:05:0e:38:db:4b:ee: 35:31:bf:0c:e1:5b:ce:d6:3f:5a:82:c3:b9:62:91:7d:e8:f4: 73:e9:6e:14:a8:f1:ad:84:76:2b:a7:ed:d9:58:7c:6b:8b:64: 90:08:b5:49:5a:60:3b:2e:5b:e5:39:9e:ec:1c:3c:ab:4a:21: 84:8d:40:ca:cf:ff:7f:a6:5e:27:08:1e:c9:04:2a:70:9c:82: d9:59:5c:d7:b2:ca:c8:8a:13:3a:38:2f:02:08:5a:9e:30:10: 33:4f:b7:69:d7:3c:e2:a1:02:02:ff:9a:25:62:7e:12:28:f7: 8b:2e:e8:45:66:2a:d2:13:23:4f:37:61:39:ce:fe:e2:ee:f6: f2:97:00:2c:49:e0:a7:f8:b0:39:31:ea:03:75:5d:e9:e8:86: ac:3f:ad:9f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErsWETSR/BI37Bo4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI1MDgyMDIxMjkyM1oXDTI1MTExODIyMjkyM1owLzEtMCsGA1UEAxMk NjUwZWEwMzktOGNlZS00ZGZlLWI2OWYtNWJjN2ExZjFjNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG8nITaBLcNAg02KHHzD5jw3GaRNSMYiTI6h 7poX9t/29sJlcAWh9KQWQEwvKwWYeTwPTTtZIvx9a0vvbfzG+FU1jTK0kJDGBe4N zG+h2mAQOm7SQo3nmks9eQsyZgUwifHYzCxLfDMo4+WrveYfQAd0dmwbybGMbES7 ARaqgsg7z2yrcljHaHhITB9K1FbMkmGpYgXhtEnUw/K+nsoboMyJar0SOLxlepor FyKMMLlzxI/+KVoBEP2uhvEeJHFGc/+XfIlWtUb9xGY9WovB3+OJZtpTgbX3evCh FadzDDcwbXl+kiVTMKhY9GTXWTSNJKLLqHYSHRaNrqvHpqxUdwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNrP5uuXnRRIQSPdTKnKuuaPzFLeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvOTQxZWE3MTYtNWZiNy0z NGVhLWJiNmMtZTlkZDZiODdjMjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwKMOAwQA wKMRMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADFdMCW2KqxLhYkdDcJeeovAsbAs+feogO2X0X8Xqr1KMyty sBrppw3WWFTnoNJ3YyFPmygENeXkWZKplIe4gIk3Q2GYiVJsxe4aGsMJY/+m04yN Jz97Lqa/gicKF30+Wr5Yy0pNhgUOONtL7jUxvwzhW87WP1qCw7likX3o9HPpbhSo 8a2Ediun7dlYfGuLZJAItUlaYDsuW+U5nuwcPKtKIYSNQMrP/3+mXicIHskEKnCc gtlZXNeyysiKEzo4LwIIWp4wEDNPt2nXPOKhAgL/miVifhIo94su6EVmKtITI083 YTnO/uLu9vKXACxJ4Kf4sDkx6gN1Xenohqw/rZ8= -----END CERTIFICATE-----Generated at Sat Aug 23 21:52:29 2025 by rpki-client