$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c385f14f-caf2-3315-957b-4d9e053824be.roa File: c385f14f-caf2-3315-957b-4d9e053824be.roa (raw, json) Hash identifier: QkqPWwgWQyJ3lic4PvjgoueMVWJSULHm39XUdnrL/Uc= Subject key identifier: 2E:CD:D7:89:CF:16:E2:B3:37:85:92:BF:DC:DE:08:DC:29:87:14:FB Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Certificate serial: 010D0C9F4328584B68FC9E1666BE018B35614FC0 Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c385f14f-caf2-3315-957b-4d9e053824be.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 40495 IP address blocks: 174.137.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:9e:16:66:be:01:8b:35:61:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=fbbbded1-4ce5-487c-9b21-93dd2475e237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0e:86:52:4b:01:97:ee:c2:ff:db:46:a7:a5: 33:16:02:4a:8d:b3:8b:98:19:77:8b:be:f3:1d:28: 38:ad:bf:48:67:45:68:36:9f:a5:5f:1d:e4:e9:f4: 1f:cd:c5:f1:91:15:2b:9d:e5:2d:ce:37:e1:dc:d7: b8:74:88:75:5d:55:23:5f:82:78:ba:ed:98:44:10: fd:b7:b8:f1:ff:d6:c3:ad:ea:39:52:75:a1:a4:94: 2c:bb:5f:b9:01:91:25:b7:7f:57:bc:22:cc:1c:78: e8:a6:8e:55:aa:1f:99:4c:81:fc:ec:55:51:7c:5e: 58:8b:58:ec:82:65:7d:dc:a4:9f:b5:16:00:cf:db: e3:7a:24:ff:38:aa:3e:4d:82:1f:6f:90:19:ed:37: c8:7f:f9:06:b2:6d:27:8d:60:cc:15:fc:0b:8f:e8: 36:0b:2f:77:1e:7f:28:da:57:39:73:d6:1b:c2:cc: 6e:d9:c7:23:72:2c:3f:ed:a3:a2:64:0e:50:4a:f1: 4f:58:8e:13:14:7b:29:ed:4b:31:25:f6:d7:e8:8d: b5:56:02:4e:af:2f:cd:63:34:c3:61:14:44:66:07: c6:d8:c6:92:ff:f4:9d:c7:e0:b7:32:6a:4f:40:e3: 14:57:db:e1:14:dd:49:02:d0:d4:65:13:36:65:0e: c7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CD:D7:89:CF:16:E2:B3:37:85:92:BF:DC:DE:08:DC:29:87:14:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c385f14f-caf2-3315-957b-4d9e053824be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl X509v3 Authority Key Identifier: keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer sbgp-ipAddrBlock: critical IPv4: 174.137.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:05:2b:fb:2c:1c:43:5a:a4:82:e3:ad:92:07:6f:8e:f0:5e: ca:e3:3c:9e:1c:48:3d:41:40:13:b9:aa:d1:bd:73:b7:cb:28: f8:c0:24:79:f5:a4:05:a5:95:20:c0:58:70:37:7a:1c:4d:5c: 2c:ba:cc:dd:be:5f:16:04:35:00:69:26:13:cf:29:fd:78:c2: 09:41:d5:8e:d5:cb:c9:bb:7c:ed:f6:2a:13:be:10:c3:66:e1: 5a:55:48:75:0c:c0:d9:ae:76:c1:ba:9a:fd:57:d7:6d:e0:43: 3b:fc:ad:5b:bb:40:14:a2:56:32:1f:69:fc:b5:0d:58:db:fd: 72:19:72:59:25:6b:06:a0:c5:d0:59:28:d2:d7:8d:1b:37:c3: 42:20:a2:81:66:9b:b2:f2:e7:dc:da:18:4a:e1:3a:ab:1f:8a: 5d:e0:02:9b:c3:b6:4a:a1:0c:93:c4:27:96:6a:a1:8f:7a:db: 6c:14:f1:cf:ef:35:53:0c:ce:c3:21:ee:8b:cf:45:ab:9b:d4: a0:0e:98:28:a8:c5:d6:dd:77:93:4f:e3:07:a1:3d:f7:44:30: a8:63:c0:c5:37:82:54:5b:0d:3a:6f:f8:b0:69:44:d5:a0:42: d6:56:68:4c:ba:2d:95:60:35:e8:1a:e3:78:2a:69:a5:44:cc: 83:7d:3c:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/J4WZr4BizVhT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx ODhmMB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk ZmJiYmRlZDEtNGNlNS00ODdjLTliMjEtOTNkZDI0NzVlMjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA6GUksBl+7C/9tGp6UzFgJKjbOLmBl3i77z HSg4rb9IZ0VoNp+lXx3k6fQfzcXxkRUrneUtzjfh3Ne4dIh1XVUjX4J4uu2YRBD9 t7jx/9bDreo5UnWhpJQsu1+5AZElt39XvCLMHHjopo5Vqh+ZTIH87FVRfF5Yi1js gmV93KSftRYAz9vjeiT/OKo+TYIfb5AZ7TfIf/kGsm0njWDMFfwLj+g2Cy93Hn8o 2lc5c9Ybwsxu2ccjciw/7aOiZA5QSvFPWI4TFHsp7UsxJfbX6I21VgJOry/NYzTD YRREZgfG2MaS//Sdx+C3MmpPQOMUV9vhFN1JAtDUZRM2ZQ7HrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7N14nPFuKzN4WSv9zeCNwphxT7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvYzM4NWYxNGYtY2FmMi0z MzE1LTk1N2ItNGQ5ZTA1MzgyNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0 NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErolwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4FK/ssHENapILjrZIHb47wXsrjPJ4cSD1BQBO5qtG9c7fLKPjAJHn1 pAWllSDAWHA3ehxNXCy6zN2+XxYENQBpJhPPKf14wglB1Y7Vy8m7fO32KhO+EMNm 4VpVSHUMwNmudsG6mv1X123gQzv8rVu7QBSiVjIfafy1DVjb/XIZclklawagxdBZ KNLXjRs3w0IgooFmm7Ly59zaGErhOqsfil3gApvDtkqhDJPEJ5ZqoY9622wU8c/v NVMMzsMh7ovPRaub1KAOmCioxdbdd5NP4wehPfdEMKhjwMU3glRbDTpv+LBpRNWg QtZWaEy6LZVgNega43gqaaVEzIN9PGQ= -----END CERTIFICATE-----Generated at Thu Oct 9 03:53:42 2025 by rpki-client