$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/ae548fa2-acd0-3aa2-9463-b60c668965c8.roa File: ae548fa2-acd0-3aa2-9463-b60c668965c8.roa (raw, json) Hash identifier: O0LAfJrJnv3VfNBv0ROzut8YXt9xvGZURdMC2GuCUnI= Subject key identifier: F1:8E:E4:E8:57:24:4E:E1:8C:39:59:24:59:9D:10:F7:99:B1:98:07 Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Certificate serial: 010D0C9F4328584B68FC9DFFA517911F82EEAB80 Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/ae548fa2-acd0-3aa2-9463-b60c668965c8.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 40495 IP address blocks: 174.137.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:9d:ff:a5:17:91:1f:82:ee:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=fc4c5f23-fd25-4e73-a790-71a81eba635e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:53:32:83:02:56:3e:06:d7:b2:e7:1f:7e:d1: 77:58:df:85:93:02:78:22:aa:09:d5:3b:15:9a:9e: b4:79:0c:f6:44:40:61:13:ec:21:d2:c3:90:29:36: 24:21:9b:3e:ac:cb:9a:43:d8:01:1f:e4:f3:ad:3e: 16:51:ce:2f:46:04:c1:c6:36:78:58:16:3e:5e:3b: 39:bb:ce:30:d6:59:27:0b:7c:13:39:c8:96:f7:f7: 57:c5:7c:e5:63:e0:c3:dc:c6:d2:f5:21:50:b8:ef: 4e:cd:c7:7b:10:15:bb:8b:81:8d:33:86:53:e8:ea: 26:0c:a1:8c:8a:8e:7e:a5:4b:30:3f:37:16:85:46: e6:0d:a9:a1:ca:a8:4b:93:1c:be:a1:4c:13:3d:92: 13:50:e1:01:d7:ec:46:ad:04:56:e2:9b:9b:88:1c: 0a:6c:2c:ec:37:f2:2e:34:e1:f6:ad:19:ea:02:99: 37:95:d6:59:8a:5b:18:7c:fb:4d:b9:9b:28:49:48: 41:fc:a9:dc:ea:ba:87:ce:bf:eb:cf:18:51:c2:31: 59:71:d3:03:4b:7c:4b:8b:81:82:1d:04:5b:97:36: d7:c9:61:59:cd:73:73:ef:38:33:72:28:45:d4:98: 0e:59:2b:ee:12:c3:cf:99:76:07:32:79:a9:49:e8: 5c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8E:E4:E8:57:24:4E:E1:8C:39:59:24:59:9D:10:F7:99:B1:98:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/ae548fa2-acd0-3aa2-9463-b60c668965c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl X509v3 Authority Key Identifier: keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer sbgp-ipAddrBlock: critical IPv4: 174.137.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:58:cd:3d:fe:9a:69:28:0f:30:7b:13:31:07:60:04:13:82: ee:3b:1a:9a:dd:e0:50:d5:9f:b5:3a:cc:c1:02:72:96:c6:de: 1b:90:ea:9a:60:d5:18:10:29:a7:d4:21:f2:61:3a:32:ae:83: 18:b6:20:5b:b3:49:c7:be:f8:5d:aa:c8:4a:c0:77:30:49:5b: 0d:53:a5:62:0f:99:5e:9d:e1:bc:03:0e:18:ed:ef:aa:25:8f: 8d:73:dc:a8:a4:75:92:99:aa:8e:6e:e5:cd:d9:63:7e:73:05: 84:87:bf:8e:d6:68:79:26:4b:08:69:40:e4:29:13:a0:8d:1f: c1:a3:c8:77:3f:01:f2:b4:74:ab:7f:b1:71:db:8f:c3:18:23: df:6f:8b:8c:c7:2d:a1:fb:12:36:86:ae:69:5a:d8:a9:39:5e: fa:bd:76:5a:15:9e:54:7c:b4:18:d9:b5:1d:ed:cc:09:b2:b2: f0:62:f9:f5:25:d8:82:0c:c5:50:c6:c3:e4:45:05:6a:16:a5: dc:59:24:cf:71:40:df:6d:16:d4:e5:ac:43:b3:f4:8a:78:76: 77:da:55:18:ac:a2:59:50:c4:37:90:aa:5f:f0:1d:b5:22:ce: 66:48:13:0a:4c:b3:f6:b6:7c:12:af:b3:af:dd:2f:51:26:fa: e5:aa:34:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/J3/pReRH4Luq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx ODhmMB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk ZmM0YzVmMjMtZmQyNS00ZTczLWE3OTAtNzFhODFlYmE2MzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlMygwJWPgbXsucfftF3WN+FkwJ4IqoJ1TsV mp60eQz2REBhE+wh0sOQKTYkIZs+rMuaQ9gBH+TzrT4WUc4vRgTBxjZ4WBY+Xjs5 u84w1lknC3wTOciW9/dXxXzlY+DD3MbS9SFQuO9Ozcd7EBW7i4GNM4ZT6OomDKGM io5+pUswPzcWhUbmDamhyqhLkxy+oUwTPZITUOEB1+xGrQRW4pubiBwKbCzsN/Iu NOH2rRnqApk3ldZZilsYfPtNuZsoSUhB/Knc6rqHzr/rzxhRwjFZcdMDS3xLi4GC HQRblzbXyWFZzXNz7zgzcihF1JgOWSvuEsPPmXYHMnmpSehcvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGO5OhXJE7hjDlZJFmdEPeZsZgHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvYWU1NDhmYTItYWNkMC0z YWEyLTk0NjMtYjYwYzY2ODk2NWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0 NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArol5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9YzT3+mmkoDzB7EzEHYAQTgu47Gprd4FDVn7U6zMECcpbG3huQ6ppg 1RgQKafUIfJhOjKugxi2IFuzSce++F2qyErAdzBJWw1TpWIPmV6d4bwDDhjt76ol j41z3KikdZKZqo5u5c3ZY35zBYSHv47WaHkmSwhpQOQpE6CNH8GjyHc/AfK0dKt/ sXHbj8MYI99vi4zHLaH7EjaGrmla2Kk5Xvq9dloVnlR8tBjZtR3tzAmysvBi+fUl 2IIMxVDGw+RFBWoWpdxZJM9xQN9tFtTlrEOz9Ip4dnfaVRisollQxDeQql/wHbUi zmZIEwpMs/a2fBKvs6/dL1Em+uWqNLo= -----END CERTIFICATE-----Generated at Thu Oct 9 03:52:55 2025 by rpki-client