$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/d3d577df-aa74-3b9d-bb87-1860cb344c0e.roa File: d3d577df-aa74-3b9d-bb87-1860cb344c0e.roa (raw, json) Hash identifier: 8SsGcfqmbQNfPwlAK0zuMwM3Fez5bhk6SZ/zDmkg8Hw= Subject key identifier: A6:15:31:A8:58:C5:4E:6B:70:3C:0C:A8:61:DE:4D:27:AE:F7:00:69 Certificate issuer: /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Certificate serial: 010D0C9F4328584A9D30DFBE55274B2D05D5B780 Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/d3d577df-aa74-3b9d-bb87-1860cb344c0e.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 140731 IP address blocks: 174.136.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:df:be:55:27:4b:2d:05:d5:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=0a739a72-69ec-4be6-95cb-bf0e9915594d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:01:f9:47:85:f8:ba:6f:05:bd:d4:a1:7a:71: 10:80:48:39:7a:7c:22:82:0d:77:c5:4f:74:48:a3: 7a:f9:8d:e8:26:7f:40:0b:79:8e:66:6b:ef:38:3e: 5e:9d:93:bf:3c:bc:c1:c7:27:42:93:7d:0f:e9:17: 6f:d1:3a:28:47:91:4c:56:09:24:59:8f:99:81:e9: 89:e2:ed:d7:5b:59:e3:08:1f:57:2d:2f:de:c2:8b: 1b:51:b5:bf:6e:b3:be:47:28:95:65:b1:9d:1b:1d: 92:0b:64:09:ef:8c:8b:06:ea:f3:54:55:a7:99:19: 36:6a:51:d8:09:45:4c:ff:09:27:5f:34:6b:7e:4e: 07:c4:ce:96:5c:ad:b9:bb:74:25:05:6b:59:48:9b: 38:89:12:aa:a3:9b:ae:9a:76:09:c7:90:cd:1f:f1: 75:7a:97:58:e2:d6:71:9d:d3:dd:1b:3d:d6:1b:97: 5e:4a:bb:44:97:9f:71:29:c4:ef:d4:74:05:ca:88: d5:fa:d4:a3:76:18:06:63:72:ba:c3:8f:59:77:ac: ea:35:6d:7f:e5:8c:35:a5:47:28:bb:ce:1a:59:22: 11:f2:23:e5:63:37:0e:7c:c4:1f:9e:f8:0d:78:5b: ea:7c:25:b3:e2:a2:28:33:85:d7:06:1b:a1:a5:f7: 5c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:15:31:A8:58:C5:4E:6B:70:3C:0C:A8:61:DE:4D:27:AE:F7:00:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/d3d577df-aa74-3b9d-bb87-1860cb344c0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl X509v3 Authority Key Identifier: keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer sbgp-ipAddrBlock: critical IPv4: 174.136.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b0:8b:1b:e6:8c:c2:80:8d:09:f3:1c:28:e4:91:b2:c9:cf: 25:5e:61:d6:22:33:ea:9f:de:d5:77:dc:0e:43:27:b0:ab:26: 0b:eb:66:ae:16:d1:ee:51:fc:c0:db:d5:34:d1:4b:de:94:57: 25:96:9f:01:a4:d6:de:83:be:45:54:93:6b:b0:6c:70:42:91: 6e:7f:4f:bf:a9:c8:8d:c4:66:fd:3b:6e:d5:41:74:7c:6a:35: 00:bf:b9:40:1e:06:54:c7:5e:77:e6:ee:56:e2:ff:f2:ac:6a: 2f:81:d4:2f:32:a5:5f:e8:c5:4c:52:1d:31:54:ff:4d:ee:61: cc:8e:0f:83:3b:94:45:aa:33:e0:7f:60:f9:12:d7:93:c0:b5: e3:fb:d7:78:02:0e:ea:22:03:d7:c6:93:29:b5:a1:ac:b5:f8: 40:c8:10:26:c4:11:3e:f7:eb:b6:1a:03:82:bc:a8:47:06:6b: 47:7b:ea:f5:25:90:8f:74:55:9b:e4:61:ff:c7:3c:69:96:27: d6:1a:80:ca:cf:20:b0:08:85:eb:91:5b:e0:4d:2c:ba:ec:1e: 40:9e:68:5f:cf:fc:a9:3f:51:47:72:5a:16:1c:72:cc:38:18: 71:75:bb:f9:e9:97:5c:82:ea:a2:98:f0:89:89:9b:b0:8e:08: e9:d1:70:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMN++VSdLLQXVt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYxOTM3M2ItMmNjNS00MGY0LWE2ZDAtN2NjYWNjNjM0 ODU3MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk MGE3MzlhNzItNjllYy00YmU2LTk1Y2ItYmYwZTk5MTU1OTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgH5R4X4um8FvdShenEQgEg5enwigg13xU90 SKN6+Y3oJn9AC3mOZmvvOD5enZO/PLzBxydCk30P6Rdv0TooR5FMVgkkWY+ZgemJ 4u3XW1njCB9XLS/ewosbUbW/brO+RyiVZbGdGx2SC2QJ74yLBurzVFWnmRk2alHY CUVM/wknXzRrfk4HxM6WXK25u3QlBWtZSJs4iRKqo5uumnYJx5DNH/F1epdY4tZx ndPdGz3WG5deSrtEl59xKcTv1HQFyojV+tSjdhgGY3K6w49Zd6zqNW1/5Yw1pUco u84aWSIR8iPlYzcOfMQfnvgNeFvqfCWz4qIoM4XXBhuhpfdcmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYVMahYxU5rcDwMqGHeTSeu9wBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5 MzczYi0yY2M1LTQwZjQtYTZkMC03Y2NhY2M2MzQ4NTcvZDNkNTc3ZGYtYWE3NC0z YjlkLWJiODctMTg2MGNiMzQ0YzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGYxOTM3M2ItMmNjNS00MGY0LWE2 ZDAtN2NjYWNjNjM0ODU3LzBmMTkzNzNiLTJjYzUtNDBmNC1hNmQwLTdjY2FjYzYz NDg1Ny5jcmwwHwYDVR0jBBgwFoAUp46RWPy5WfebiT1L1fsMf5AC/TMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5MzczYi0yY2M1LTQwZjQtYTZkMC03Y2Nh Y2M2MzQ4NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArojtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmwixvmjMKAjQnzHCjkkbLJzyVeYdYiM+qf3tV33A5DJ7CrJgvrZq4W 0e5R/MDb1TTRS96UVyWWnwGk1t6DvkVUk2uwbHBCkW5/T7+pyI3EZv07btVBdHxq NQC/uUAeBlTHXnfm7lbi//Ksai+B1C8ypV/oxUxSHTFU/03uYcyOD4M7lEWqM+B/ YPkS15PAteP713gCDuoiA9fGkym1oay1+EDIECbEET7367YaA4K8qEcGa0d76vUl kI90VZvkYf/HPGmWJ9YagMrPILAIheuRW+BNLLrsHkCeaF/P/Kk/UUdyWhYccsw4 GHF1u/npl1yC6qKY8ImJm7COCOnRcDg= -----END CERTIFICATE-----Generated at Sat Jul 26 00:31:46 2025 by rpki-client