$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1a12e9d1-bf40-3240-880e-24f9bd5ae078.roa File: 1a12e9d1-bf40-3240-880e-24f9bd5ae078.roa (raw, json) Hash identifier: 7C4SXN2u8zBbniHVIJ70ai+OlsEAcCC0jjwLTfEjICM= Subject key identifier: 9C:9E:4A:50:40:63:B7:3B:37:DE:15:79:A7:9B:AF:CA:FA:E3:0A:22 Certificate issuer: /CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Certificate serial: 010D0C9F4328584A90A0B473640B97A8B10D3F80 Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1a12e9d1-bf40-3240-880e-24f9bd5ae078.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 20940 IP address blocks: 216.238.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:b4:73:64:0b:97:a8:b1:0d:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=6248b312-5beb-4db1-9217-647ffab69286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c5:74:23:9d:22:be:bf:f7:12:c2:9f:e6:de: 71:df:66:ca:3b:cf:fa:04:e3:18:80:c3:0c:d8:0f: 26:ac:a6:97:47:fe:9d:40:0e:9d:fa:d9:31:1d:a2: 6e:7f:94:29:d9:ed:04:d8:e8:6b:58:69:63:21:11: b3:0e:51:7c:56:73:41:db:87:c4:4c:19:c8:d2:2a: 03:6f:c0:cb:59:6b:56:a4:2b:05:3f:06:73:ad:4d: 5d:88:93:6b:5b:7c:fc:b8:0d:d2:05:54:36:c6:06: 4d:bd:ea:76:65:ea:f9:98:92:b1:b0:8c:d2:ce:1b: ed:c4:ac:d7:a1:5d:09:de:1c:d3:81:ad:90:58:73: 4d:a4:1c:1a:01:7c:d1:ad:cc:24:be:7f:52:0a:91: a1:62:71:a2:39:8c:8c:f4:b8:4d:0b:f5:5e:aa:61: d5:46:ec:dd:c2:8d:6b:58:a9:60:82:25:3a:00:92: 07:88:bb:bf:39:5f:f0:c5:80:ce:5d:77:0c:20:6c: 13:ba:bb:1a:57:d2:be:bb:1b:17:b6:04:fe:c6:19: 94:79:ed:b2:53:9d:23:db:42:90:c1:7d:8f:f4:0c: fd:18:e3:91:45:d4:58:19:d0:ee:34:04:97:a6:b5: 1f:94:4c:e5:bf:06:70:dd:8a:b9:30:2a:0d:eb:46: 12:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9E:4A:50:40:63:B7:3B:37:DE:15:79:A7:9B:AF:CA:FA:E3:0A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1a12e9d1-bf40-3240-880e-24f9bd5ae078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl X509v3 Authority Key Identifier: keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer sbgp-ipAddrBlock: critical IPv4: 216.238.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:a1:8f:68:78:4e:2d:f0:96:d1:0a:a1:82:14:8d:fb:42:88: dc:35:72:9e:71:52:59:36:a4:7f:f4:93:98:f0:18:b8:f5:70: 14:bb:1c:5a:b9:7f:df:28:7e:85:11:14:8e:cf:10:6a:ec:18: 4c:9f:5f:c9:19:57:eb:4a:f1:98:de:69:6b:59:6f:ef:4b:bc: a9:f3:aa:61:e3:6a:ab:06:25:1a:30:7b:ef:9f:6b:82:19:1e: c8:18:8f:88:6e:0d:0a:27:7f:74:4c:af:bd:d3:0d:4c:6b:d7: b3:94:fb:5d:b3:03:d6:5e:45:dd:47:fd:ce:f9:44:1c:85:0e: 87:67:0d:7c:02:78:5c:94:c7:e4:3d:73:ff:16:42:ca:7f:d9: a3:70:3b:cc:90:c8:30:e9:1f:0e:71:7d:a6:91:87:67:04:cd: 35:1b:e3:be:dc:d6:e9:9e:8c:0b:9e:4d:d4:14:c8:e4:12:eb: d9:ec:59:e6:70:e4:de:03:72:7e:83:57:ab:5b:5c:c7:cd:b6: 3b:80:8c:cf:01:ae:0c:f3:84:3c:f0:1d:ba:63:f6:f5:0a:e4: 16:88:4d:ae:df:a8:d2:66:c1:ec:b2:ea:c5:e2:db:ef:10:11: 12:05:c7:26:9d:b2:02:41:be:20:41:79:aa:12:eb:0d:2e:ca: 3f:2d:57:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoLRzZAuXqLENP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4 ZWY1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NjI0OGIzMTItNWJlYi00ZGIxLTkyMTctNjQ3ZmZhYjY5Mjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMV0I50ivr/3EsKf5t5x32bKO8/6BOMYgMMM 2A8mrKaXR/6dQA6d+tkxHaJuf5Qp2e0E2OhrWGljIRGzDlF8VnNB24fETBnI0ioD b8DLWWtWpCsFPwZzrU1diJNrW3z8uA3SBVQ2xgZNvep2Zer5mJKxsIzSzhvtxKzX oV0J3hzTga2QWHNNpBwaAXzRrcwkvn9SCpGhYnGiOYyM9LhNC/VeqmHVRuzdwo1r WKlggiU6AJIHiLu/OV/wxYDOXXcMIGwTursaV9K+uxsXtgT+xhmUee2yU50j20KQ wX2P9Az9GOORRdRYGdDuNASXprUflEzlvwZw3Yq5MCoN60YSWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyeSlBAY7c7N94Veaebr8r64woiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0 Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvMWExMmU5ZDEtYmY0MC0z MjQwLTg4MGUtMjRmOWJkNWFlMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3 MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj MzQzMzhlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O6TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKihj2h4Ti3wltEKoYIUjftCiNw1cp5xUlk2pH/0k5jwGLj1cBS7HFq5 f98ofoURFI7PEGrsGEyfX8kZV+tK8ZjeaWtZb+9LvKnzqmHjaqsGJRowe++fa4IZ HsgYj4huDQonf3RMr73TDUxr17OU+12zA9ZeRd1H/c75RByFDodnDXwCeFyUx+Q9 c/8WQsp/2aNwO8yQyDDpHw5xfaaRh2cEzTUb477c1umejAueTdQUyOQS69nsWeZw 5N4Dcn6DV6tbXMfNtjuAjM8BrgzzhDzwHbpj9vUK5BaITa7fqNJmweyy6sXi2+8Q ERIFxyadsgJBviBBeaoS6w0uyj8tV+M= -----END CERTIFICATE-----Generated at Sun Jul 20 09:35:10 2025 by rpki-client