$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4b571aa1-6f32-3058-a653-f83b3de42373.roa File: 4b571aa1-6f32-3058-a653-f83b3de42373.roa (raw, json) Hash identifier: ugBRG0XFwB+huVbAeivTL3gaGvozHmPo+adspkYIEn8= Subject key identifier: 9B:47:34:B4:36:BC:91:38:6A:60:94:3C:01:68:F1:C0:A6:0D:1C:AA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF521597DCE03C86BF8B90140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4b571aa1-6f32-3058-a653-f83b3de42373.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 0 IP address blocks: 69.36.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:59:7d:ce:03:c8:6b:f8:b9:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=1a43ce38-5635-4575-ae75-ac01c93f0557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:08:77:e0:10:74:ca:20:03:91:da:ae:03:04: 19:3e:1e:9f:2b:e8:82:ab:15:20:21:af:66:fc:4f: 61:24:e1:dc:fc:ac:34:ce:f3:62:eb:98:72:f1:b5: a9:e0:85:6d:4c:44:9f:aa:91:6c:96:56:34:74:16: f1:d3:75:64:39:af:dc:d3:30:a3:ea:ae:3e:e0:1a: b6:08:e8:88:e4:3c:74:ab:b6:88:c3:7b:50:3b:93: cd:e1:c8:3a:cf:5e:19:cb:d0:60:bb:b4:a3:c5:26: ae:b2:fa:89:7d:0a:1e:3b:fb:d1:7d:fa:34:4a:4e: 1d:39:e9:86:5f:26:39:07:52:a4:99:81:c1:29:27: 5c:9f:43:81:1f:d8:87:bc:d6:07:e2:32:74:9e:d6: 3b:22:eb:85:01:41:bb:f0:12:8a:82:5d:49:99:0f: 3f:27:e1:5b:ec:57:ea:b9:06:7c:88:bf:d7:77:6b: 94:21:75:9d:4c:d2:66:5e:93:20:24:31:2b:56:b3: 30:2f:7f:eb:b2:29:99:ce:4e:12:f5:d2:a1:c0:dc: a9:84:34:f3:50:58:83:ab:6a:b5:56:d8:b5:a2:ab: 67:d9:df:ef:cf:44:9b:38:bf:70:16:f3:cf:3e:79: 3d:ad:51:e3:ae:73:b4:4d:69:29:31:17:34:e3:ca: 99:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:47:34:B4:36:BC:91:38:6A:60:94:3C:01:68:F1:C0:A6:0D:1C:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4b571aa1-6f32-3058-a653-f83b3de42373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 69.36.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:7b:17:6b:d7:38:da:ea:5f:af:88:07:cc:1f:90:12:85:5d: de:bc:25:02:a8:9f:7b:cf:82:4e:b3:70:07:b2:34:83:da:4b: a0:1a:cf:19:5d:20:bd:91:14:cc:df:07:89:07:7a:95:5d:20: a5:75:c2:84:e5:fe:d6:17:93:d3:16:fa:63:da:5d:85:02:8e: 82:26:0b:61:27:79:d8:cf:23:7f:e0:ec:b5:73:53:a2:a9:94: 7f:01:05:22:b6:d5:44:63:57:1b:9f:e9:dc:db:e4:63:8d:66: dd:80:61:fc:7c:e8:48:5f:f9:98:a5:bb:2b:75:de:2f:1c:a5: 8d:21:aa:bb:a0:89:18:98:4c:b2:62:cf:dd:a7:f2:5a:8a:00: e6:90:ec:86:85:32:14:6a:2b:e8:f9:6f:da:c7:f1:a8:51:44: 98:30:8d:31:61:69:f6:50:bf:09:dd:49:88:33:31:15:c6:b7: 37:9a:6a:84:e3:3a:88:b7:b2:ce:47:a5:df:dc:7d:cc:8a:b1: 85:34:e7:a3:5d:9b:3b:27:39:6b:0e:84:a2:d4:1f:a5:f4:e6: 4e:48:c5:8e:a7:01:d2:6d:2c:e9:c0:6f:3b:68:e4:3f:a2:bb: 43:08:85:ab:2c:52:6c:4d:52:6e:4d:9a:86:a7:c4:10:29:9c: 31:be:c4:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVl9zgPIa/i5AUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MWE0M2NlMzgtNTYzNS00NTc1LWFlNzUtYWMwMWM5M2YwNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigh34BB0yiADkdquAwQZPh6fK+iCqxUgIa9m /E9hJOHc/Kw0zvNi65hy8bWp4IVtTESfqpFsllY0dBbx03VkOa/c0zCj6q4+4Bq2 COiI5Dx0q7aIw3tQO5PN4cg6z14Zy9Bgu7SjxSausvqJfQoeO/vRffo0Sk4dOemG XyY5B1KkmYHBKSdcn0OBH9iHvNYH4jJ0ntY7IuuFAUG78BKKgl1JmQ8/J+Fb7Ffq uQZ8iL/Xd2uUIXWdTNJmXpMgJDErVrMwL3/rsimZzk4S9dKhwNyphDTzUFiDq2q1 Vti1oqtn2d/vz0SbOL9wFvPPPnk9rVHjrnO0TWkpMRc048qZCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtHNLQ2vJE4amCUPAFo8cCmDRyqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGI1NzFhYTEtNmYzMi0z MDU4LWE2NTMtZjgzYjNkZTQyMzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSSTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACB7F2vXONrqX6+IB8wfkBKFXd68JQKon3vPgk6zcAeyNIPaS6Aazxld IL2RFMzfB4kHepVdIKV1woTl/tYXk9MW+mPaXYUCjoImC2EnedjPI3/g7LVzU6Kp lH8BBSK21URjVxuf6dzb5GONZt2AYfx86Ehf+Ziluyt13i8cpY0hqrugiRiYTLJi z92n8lqKAOaQ7IaFMhRqK+j5b9rH8ahRRJgwjTFhafZQvwndSYgzMRXGtzeaaoTj Ooi3ss5Hpd/cfcyKsYU056NdmzsnOWsOhKLUH6X05k5IxY6nAdJtLOnAbzto5D+i u0MIhassUmxNUm5NmoanxBApnDG+xPE= -----END CERTIFICATE-----Generated at Thu Oct 30 03:15:56 2025 by rpki-client