$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa File: ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa (raw, json) Hash identifier: BqK5UaFKWvi4K9drDplF9UpWRMdjsnYMSFFvIdMfOJU= Subject key identifier: 6B:B2:CA:42:B4:09:CB:8E:1C:20:CB:17:F7:74:29:70:51:BE:35:70 Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Certificate serial: 010D0C9F4328584AF95146639826486773F3E300 Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 6079 IP address blocks: 172.99.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:46:63:98:26:48:67:73:f3:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=8dc943f7-a795-4ace-88f2-635c380b2b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0c:fa:da:1c:72:a2:6f:4e:f6:d3:d8:a3:19: fa:5f:41:91:3e:77:90:2f:95:fe:20:f3:cf:bb:29: df:11:ae:98:84:4c:ec:b7:bf:4a:45:14:30:b8:d5: 99:ee:58:63:dc:0e:b7:8d:95:0b:f6:52:76:16:6a: 4a:e1:94:d8:c9:80:26:72:f0:b1:d6:b6:ff:ed:33: b0:0a:e2:38:e1:2e:89:24:0c:00:77:2c:a2:0a:82: 5b:f1:a7:39:ff:81:b0:3c:a6:d9:33:81:d1:3c:4d: 5d:3d:64:69:1f:74:10:c0:b0:72:02:5e:09:df:8a: e0:dc:78:8c:10:09:0b:c8:fe:1b:0c:89:af:09:2f: b1:5f:b9:9b:9b:ac:46:e8:31:03:31:dc:2a:4b:5d: be:00:3b:16:a2:e8:d7:ae:b5:49:5a:3b:1a:4b:6e: 79:ae:7b:59:72:11:ee:9d:9b:2e:0b:1a:28:0f:95: f4:a8:77:cf:06:ec:c8:8a:c7:25:8f:d9:f9:2f:11: 15:57:ec:1b:40:13:3d:d4:04:bd:43:4d:08:69:9e: b8:6f:96:2a:eb:95:66:b3:5c:30:cb:91:9f:51:61: b7:d4:fb:f2:70:a1:58:21:b2:e0:5d:c4:85:79:d8: d7:ac:a9:45:b3:f1:8c:e3:bb:94:39:40:9e:83:4b: 17:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B2:CA:42:B4:09:CB:8E:1C:20:CB:17:F7:74:29:70:51:BE:35:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl X509v3 Authority Key Identifier: keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer sbgp-ipAddrBlock: critical IPv4: 172.99.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:2e:81:95:d0:65:54:72:61:73:eb:71:4d:8e:06:14:e9:ad: ac:fb:9d:6a:f6:c5:8a:9c:91:41:c5:91:fa:94:aa:a5:c8:ac: 21:60:ab:43:0b:a4:40:5c:56:82:58:4e:e0:34:f0:c6:ba:49: 12:df:a1:eb:ba:bd:ab:ed:f7:26:8c:62:8d:d5:eb:e9:af:ad: 78:a6:9f:3e:bc:81:a0:86:9d:66:70:a7:17:f1:77:e3:93:61: 04:dc:ae:85:04:ba:89:4a:b8:6e:c8:35:a2:3f:fd:4d:67:d8: 09:da:c2:5c:c0:a5:c7:c3:fd:25:c5:f4:c5:14:72:c1:8d:ec: 22:f7:1d:e1:62:bc:23:02:87:93:3d:4e:33:d6:2e:9d:24:79: e3:59:a2:61:fa:aa:ea:fb:f1:0c:b9:e0:dd:35:dc:39:26:fe: e3:58:fc:d0:fd:cc:01:e6:5f:4e:06:36:e1:b8:47:8e:bb:be: da:7c:4c:73:24:5f:51:ee:0d:27:ed:51:fa:0c:c0:23:0e:6b: 26:97:26:a0:8a:49:b7:23:c5:d8:23:15:b8:9d:f5:d6:22:98: 89:b8:a0:dd:90:19:a8:81:c2:3b:8e:13:4f:34:a2:ad:7b:f0: 70:20:6a:e4:7a:42:e4:da:63:ca:6e:de:4d:1e:07:3e:be:4e: 58:af:f2:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUZjmCZIZ3Pz4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NTY4NWYtMTA0Yi00MWM5LTlmZTMtNTNkN2ZlNGQx NDFlMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OGRjOTQzZjctYTc5NS00YWNlLTg4ZjItNjM1YzM4MGIyYjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgz62hxyom9O9tPYoxn6X0GRPneQL5X+IPPP uynfEa6YhEzst79KRRQwuNWZ7lhj3A63jZUL9lJ2FmpK4ZTYyYAmcvCx1rb/7TOw CuI44S6JJAwAdyyiCoJb8ac5/4GwPKbZM4HRPE1dPWRpH3QQwLByAl4J34rg3HiM EAkLyP4bDImvCS+xX7mbm6xG6DEDMdwqS12+ADsWoujXrrVJWjsaS255rntZchHu nZsuCxooD5X0qHfPBuzIisclj9n5LxEVV+wbQBM91AS9Q00IaZ64b5Yq65Vms1ww y5GfUWG31PvycKFYIbLgXcSFedjXrKlFs/GM47uUOUCeg0sXDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuyykK0CcuOHCDLF/d0KXBRvjVwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1 Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0ZDE0MWUvYWU2ODlmNjUtNWRmOS0z Njk3LTk3MTEtMmZkZjcwYjRjYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2NTY4NWYtMTA0Yi00MWM5LTlm ZTMtNTNkN2ZlNGQxNDFlLzM5NjU2ODVmLTEwNGItNDFjOS05ZmUzLTUzZDdmZTRk MTQxZS5jcmwwHwYDVR0jBBgwFoAULU7sB30FdPaOk41H3eOCV9QL398wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3 ZmU0ZDE0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkugZXQZVRyYXPrcU2OBhTpraz7nWr2xYqckUHFkfqUqqXIrCFgq0ML pEBcVoJYTuA08Ma6SRLfoeu6vavt9yaMYo3V6+mvrXimnz68gaCGnWZwpxfxd+OT YQTcroUEuolKuG7INaI//U1n2AnawlzApcfD/SXF9MUUcsGN7CL3HeFivCMCh5M9 TjPWLp0keeNZomH6qur78Qy54N013Dkm/uNY/ND9zAHmX04GNuG4R467vtp8THMk X1HuDSftUfoMwCMOayaXJqCKSbcjxdgjFbid9dYimIm4oN2QGaiBwjuOE080oq17 8HAgauR6QuTaY8pu3k0eBz6+Tliv8v0= -----END CERTIFICATE-----Generated at Wed Sep 10 11:14:25 2025 by rpki-client