$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/17e9c215-3aa1-3b2b-8b8d-ce2fc2b25dc0.roa File: 17e9c215-3aa1-3b2b-8b8d-ce2fc2b25dc0.roa (raw, json) Hash identifier: W74xEoL5FGQcnSveXWrEQbbCsQvYOU3rTP/7z8Up8dA= Subject key identifier: 9D:F8:89:8C:7C:0F:EE:C3:91:0A:15:94:44:AB:61:5C:D6:57:A1:B4 Certificate issuer: /CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd Certificate serial: 010D0C9F4328584B276178107296AE4367015870 Authority key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/17e9c215-3aa1-3b2b-8b8d-ce2fc2b25dc0.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 398555 IP address blocks: 192.111.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:78:10:72:96:ae:43:67:01:58:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=9dda3fda-d41a-43fb-926e-d4d2de5e29c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ec:3f:dc:7b:17:34:3c:14:9a:38:17:24:1d: 4e:0e:dd:f8:e5:26:12:ef:d7:2e:61:cd:e3:3b:39: 9a:dd:51:44:4b:a6:f0:71:95:88:34:53:d9:66:9a: 5f:e3:10:1f:b3:94:87:cd:fe:85:15:a4:05:31:3d: 01:2a:ce:3e:92:72:a0:77:a0:e3:10:f0:ba:6b:bc: 5a:38:03:ad:dd:92:3f:cd:cf:ae:7d:b3:6b:71:c5: 55:b1:11:01:f6:23:da:70:1a:2e:f9:4b:51:d1:fb: 5e:60:43:74:e8:35:ee:99:7b:9a:7b:95:77:67:dd: 42:a3:74:72:80:69:f3:7f:db:1a:4e:ad:fb:6c:30: c8:46:65:35:8e:ff:c2:7f:43:7a:5f:85:39:ca:56: 71:0f:49:da:8d:52:4e:98:c9:ab:5d:c4:8d:28:13: 93:15:d6:5c:ab:be:df:28:c2:0e:2e:36:47:af:22: 07:a6:18:42:a0:57:4c:9e:a2:2d:21:a6:52:55:19: 54:50:26:fb:cb:3f:4e:79:65:70:0a:5e:ed:3f:c7: 9c:54:44:e8:ad:cb:be:69:d2:63:ce:4e:84:54:26: 11:d0:68:e0:04:80:f1:48:99:3a:ff:b9:b6:ab:eb: b4:85:90:41:5f:3c:91:d0:34:ab:7b:d4:00:11:27: 25:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F8:89:8C:7C:0F:EE:C3:91:0A:15:94:44:AB:61:5C:D6:57:A1:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/17e9c215-3aa1-3b2b-8b8d-ce2fc2b25dc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl X509v3 Authority Key Identifier: keyid:C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer sbgp-ipAddrBlock: critical IPv4: 192.111.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:44:05:1e:7a:69:76:21:de:c7:c0:b2:b3:08:3d:90:40:4f: 16:1b:bf:0a:53:fa:33:b6:aa:16:28:d5:32:ae:42:f5:96:d3: fc:2b:59:11:49:b1:fc:b9:1b:56:68:e0:e9:18:dc:c3:34:a7: 11:1f:e3:9a:ee:be:50:77:61:c6:6f:0a:82:f2:f5:67:55:ce: de:1e:b3:26:c1:e3:4b:30:2c:27:f1:eb:45:9b:0d:4f:c4:c0: 66:26:e4:c3:a8:34:18:03:0c:5b:44:46:ae:0c:5c:ea:19:18: b9:a6:1e:10:e7:42:70:b6:1f:a9:6e:f5:81:c0:42:41:46:5e: a1:20:a0:f2:64:ea:64:2a:7f:e5:17:74:4d:4b:52:7f:1a:05: 46:5b:a3:44:f5:a6:1d:57:5a:06:d8:e7:35:c7:65:30:5c:b4: a2:e2:7d:68:24:61:2b:b2:be:29:6e:f3:70:39:4d:5f:ae:75: d3:26:dd:4d:e8:2b:45:e9:c1:d6:35:a4:20:70:46:f8:1c:0c: 71:80:e6:3b:35:94:93:bf:1f:19:7c:f2:53:c3:86:19:17:1a: ad:d7:6b:16:6f:3b:00:f8:c4:12:5e:02:c5:29:12:30:28:e0: ef:74:0a:24:6d:a3:57:62:30:b0:13:30:b6:c7:31:fe:26:7a: f0:9f:2b:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYXgQcpauQ2cBWHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmVlN2I2N2UtNWU0Zi00YTA1LWE1OWUtOWU4MjBjODk4 ZmNkMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk OWRkYTNmZGEtZDQxYS00M2ZiLTkyNmUtZDRkMmRlNWUyOWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+w/3HsXNDwUmjgXJB1ODt345SYS79cuYc3j Ozma3VFES6bwcZWINFPZZppf4xAfs5SHzf6FFaQFMT0BKs4+knKgd6DjEPC6a7xa OAOt3ZI/zc+ufbNrccVVsREB9iPacBou+UtR0fteYEN06DXumXuae5V3Z91Co3Ry gGnzf9saTq37bDDIRmU1jv/Cf0N6X4U5ylZxD0najVJOmMmrXcSNKBOTFdZcq77f KMIOLjZHryIHphhCoFdMnqItIaZSVRlUUCb7yz9OeWVwCl7tP8ecVETorcu+adJj zk6EVCYR0GjgBIDxSJk6/7m2q+u0hZBBXzyR0DSre9QAESclaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ34iYx8D+7DkQoVlESrYVzWV6G0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3 YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgyMGM4OThmY2QvMTdlOWMyMTUtM2FhMS0z YjJiLThiOGQtY2UyZmMyYjI1ZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmVlN2I2N2UtNWU0Zi00YTA1LWE1 OWUtOWU4MjBjODk4ZmNkL2ZlZTdiNjdlLTVlNGYtNGEwNS1hNTllLTllODIwYzg5 OGZjZC5jcmwwHwYDVR0jBBgwFoAUyUCeXczprJIdAfK0l1qNJ/cvAbIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgy MGM4OThmY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpEBR56aXYh3sfAsrMIPZBATxYbvwpT+jO2qhYo1TKuQvWW0/wrWRFJ sfy5G1Zo4OkY3MM0pxEf45ruvlB3YcZvCoLy9WdVzt4esybB40swLCfx60WbDU/E wGYm5MOoNBgDDFtERq4MXOoZGLmmHhDnQnC2H6lu9YHAQkFGXqEgoPJk6mQqf+UX dE1LUn8aBUZbo0T1ph1XWgbY5zXHZTBctKLifWgkYSuyvilu83A5TV+uddMm3U3o K0XpwdY1pCBwRvgcDHGA5js1lJO/Hxl88lPDhhkXGq3XaxZvOwD4xBJeAsUpEjAo 4O90CiRto1diMLATMLbHMf4mevCfKzI= -----END CERTIFICATE-----Generated at Thu Oct 9 19:23:34 2025 by rpki-client