$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d45f4e38-211a-3253-8402-b74bec8ec0ff.roa File: d45f4e38-211a-3253-8402-b74bec8ec0ff.roa (raw, json) Hash identifier: hQzLmdlPQHKZajPWkIctop86i8YqHx28HP2PZPN4oHI= Subject key identifier: 65:D8:49:64:C3:CC:72:BE:5A:06:1C:F4:F9:2C:23:15:3D:9D:60:10 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584EC371FD47A035BE8C2621E180 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d45f4e38-211a-3253-8402-b74bec8ec0ff.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 40354 IP address blocks: 173.198.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:fd:47:a0:35:be:8c:26:21:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=1c110b52-2f9c-40c3-aad9-d787cee3b1de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f4:c4:2b:48:08:59:1d:5b:cc:35:4b:e5:aa: e6:02:c2:f5:69:5e:48:14:87:70:19:76:7d:1c:7c: a4:af:74:0b:b3:ef:d6:e8:d2:85:f4:28:47:7e:e1: 26:1c:40:3b:c2:ef:05:cb:68:a8:9f:2a:39:b9:51: ad:ba:65:72:47:b7:2a:c3:7f:fe:b0:cd:41:28:61: 63:36:2d:d6:33:ea:54:01:fa:2a:9b:f7:6a:7a:67: e5:81:eb:eb:db:b9:7c:6e:1a:cf:23:6b:d7:c6:76: 83:62:4c:ff:43:3d:0b:d2:a1:7b:ca:8e:34:f8:e3: de:fd:79:0c:82:12:2e:31:b3:b8:5b:48:c1:9a:9a: ed:d8:93:53:3b:ee:ff:fc:84:2f:11:a5:23:9c:26: af:fb:1c:45:c2:04:dd:5b:36:01:13:c1:97:82:64: 33:ff:3e:e2:67:9c:f8:52:34:98:7d:6c:b6:4b:38: 51:9e:e4:86:91:cd:28:33:5d:73:9a:cb:74:78:a5: 43:c5:b0:4c:1a:cd:d6:4d:ef:ad:f0:33:a0:9a:bd: 9e:ba:51:01:35:d0:bc:0f:79:73:d2:9b:cd:13:de: e7:4b:5e:c9:69:90:48:0e:16:b7:56:68:f0:5b:78: 31:aa:83:cd:1c:65:d6:0c:1c:5d:7a:91:84:a7:74: 9c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D8:49:64:C3:CC:72:BE:5A:06:1C:F4:F9:2C:23:15:3D:9D:60:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d45f4e38-211a-3253-8402-b74bec8ec0ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 173.198.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:37:bb:c9:71:fb:3c:2f:d8:33:bf:7d:65:22:03:8b:90:aa: 1f:03:41:5e:e2:d7:d7:d0:0d:c1:61:0c:b8:20:5e:5e:d7:2f: c9:4b:93:7c:e9:18:e0:35:40:4c:4c:72:85:a2:5d:26:04:5d: 6b:9c:98:a8:86:7e:a6:04:10:e2:f4:4d:94:46:fe:88:2e:09: fa:e0:9b:aa:9d:e4:04:52:53:94:bc:2b:51:d9:26:3d:3d:17: b5:17:ae:b9:81:a7:c6:2a:9a:af:26:47:1d:26:7c:17:0e:5e: f6:6f:b6:99:22:0e:49:b7:d2:d5:a2:06:5c:e6:bf:57:27:41: 25:25:72:78:84:0d:d5:b6:89:83:20:9d:a1:75:01:1a:44:36: 3b:f5:55:c1:e7:4e:3b:36:6f:92:ee:a2:6d:dd:9d:78:f4:94: bc:2e:68:c1:c3:4d:aa:56:ef:28:03:49:18:1b:f5:91:1c:23: 01:35:cb:58:ab:88:11:55:05:63:d1:d4:e7:62:73:3f:76:af: e4:3c:06:1c:19:7c:56:17:5f:4c:16:c9:e4:3a:39:24:42:c6: 17:53:7a:ca:82:2f:dd:d2:d2:17:ae:1c:0a:cd:21:38:bb:6f: 1d:f9:cb:c8:bd:ff:fb:40:48:ec:fa:5a:5d:2b:2a:9d:94:9b: 7e:fd:4f:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Dcf1HoDW+jCYh4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk MWMxMTBiNTItMmY5Yy00MGMzLWFhZDktZDc4N2NlZTNiMWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfTEK0gIWR1bzDVL5armAsL1aV5IFIdwGXZ9 HHykr3QLs+/W6NKF9ChHfuEmHEA7wu8Fy2ionyo5uVGtumVyR7cqw3/+sM1BKGFj Ni3WM+pUAfoqm/dqemflgevr27l8bhrPI2vXxnaDYkz/Qz0L0qF7yo40+OPe/XkM ghIuMbO4W0jBmprt2JNTO+7//IQvEaUjnCav+xxFwgTdWzYBE8GXgmQz/z7iZ5z4 UjSYfWy2SzhRnuSGkc0oM11zmst0eKVDxbBMGs3WTe+t8DOgmr2eulEBNdC8D3lz 0pvNE97nS17JaZBIDha3VmjwW3gxqoPNHGXWDBxdepGEp3Sc0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXYSWTDzHK+WgYc9PksIxU9nWAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZDQ1ZjRlMzgtMjExYS0z MjUzLTg0MDItYjc0YmVjOGVjMGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcaVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGs3u8lx+zwv2DO/fWUiA4uQqh8DQV7i19fQDcFhDLggXl7XL8lLk3zp GOA1QExMcoWiXSYEXWucmKiGfqYEEOL0TZRG/oguCfrgm6qd5ARSU5S8K1HZJj09 F7UXrrmBp8Yqmq8mRx0mfBcOXvZvtpkiDkm30tWiBlzmv1cnQSUlcniEDdW2iYMg naF1ARpENjv1VcHnTjs2b5Luom3dnXj0lLwuaMHDTapW7ygDSRgb9ZEcIwE1y1ir iBFVBWPR1Odicz92r+Q8BhwZfFYXX0wWyeQ6OSRCxhdTesqCL93S0heuHArNITi7 bx35y8i9//tASOz6Wl0rKp2Um379T6s= -----END CERTIFICATE-----Generated at Sat Sep 5 15:20:56 2026 by rpki-client