$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ee1ef8f6-a681-3453-9945-fe8a5a26a3cb.roa File: ee1ef8f6-a681-3453-9945-fe8a5a26a3cb.roa (raw, json) Hash identifier: vNNZI1qJHPW0xkIkUJhA/NmKTbfK4ru2qqF/g4CoViU= Subject key identifier: 37:E1:82:31:91:1F:66:89:E0:37:97:BB:38:5E:9E:1E:34:D6:CC:BB Certificate issuer: /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218 Certificate serial: 010D0C9F4328584AFAB682088B8F5C51D1940780 Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ee1ef8f6-a681-3453-9945-fe8a5a26a3cb.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 36344 IP address blocks: 69.168.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:82:08:8b:8f:5c:51:d1:94:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218 Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=030f9eb6-7fb1-4718-a14d-ca3d22ad0ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a9:81:b7:ce:f4:fb:89:6e:a0:13:6c:6d:79: e8:b8:bb:05:e6:d5:28:6f:8d:89:f1:19:24:70:06: 78:b4:fc:bb:e6:89:11:c0:a5:63:52:ba:af:0c:19: 37:7d:55:b8:04:47:56:ee:14:b2:70:d9:18:31:eb: 8b:cd:c3:1b:c7:d0:c4:32:3a:f1:e3:8b:87:f2:5a: 86:3a:e1:02:ae:af:d8:7a:a1:68:c2:a6:36:cd:a2: 08:73:70:65:27:99:35:f5:31:80:f5:57:b7:24:e5: 99:3c:3d:b1:8b:dd:25:e3:c2:23:23:a9:eb:ba:68: 48:c5:e0:93:00:0f:98:b1:e1:00:1c:8a:77:c9:8f: ac:6c:70:eb:ba:1b:11:40:72:46:11:df:fe:ae:e0: f9:62:54:8d:4c:be:c1:88:73:f5:08:88:e9:4b:1e: 2a:a0:10:b4:07:00:85:a2:8c:f4:c4:b6:3f:55:85: 1f:7f:df:c6:c4:69:68:33:b3:e4:76:e5:38:48:36: 4d:6e:26:0a:67:cd:ce:50:c5:b3:e8:ba:5b:b4:c7: d6:b9:6d:6f:ca:91:68:4b:92:08:bd:4e:df:c4:28: 98:a7:1a:5a:fb:65:4b:8d:35:76:f0:f8:81:55:0c: b8:18:53:ae:bb:d6:f2:40:33:04:cb:7f:81:e7:49: 34:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E1:82:31:91:1F:66:89:E0:37:97:BB:38:5E:9E:1E:34:D6:CC:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ee1ef8f6-a681-3453-9945-fe8a5a26a3cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl X509v3 Authority Key Identifier: keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer sbgp-ipAddrBlock: critical IPv4: 69.168.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:04:11:68:49:af:fe:7b:d9:40:4c:8b:34:b8:b7:51:a5:35: 84:a2:c2:92:d9:d5:b2:89:dd:4e:ed:1b:85:cb:40:71:12:ad: 27:35:28:92:0a:68:62:fa:a4:42:ae:ae:94:38:ad:81:8e:41: d3:71:f6:7b:f7:f1:a1:ef:1b:f3:b3:19:69:b5:5a:59:b4:2b: a7:bf:90:2f:4e:06:49:02:82:c4:67:71:c4:00:5e:51:17:a6: d2:02:9c:76:36:db:17:4d:83:ab:59:4c:ab:e3:e0:18:8b:35: 3c:72:af:65:f8:a5:b1:2a:99:31:a5:3e:ee:30:1c:b3:0f:55: f8:04:79:8c:65:e8:5e:a0:7f:b6:85:9e:1b:d7:fa:a5:bc:72: a6:e0:5f:27:9d:c4:e6:aa:ff:9f:26:1f:46:bc:93:dc:5d:ab: bc:71:ac:08:8b:80:7c:40:dd:91:ba:f1:14:56:1d:49:19:c7: 18:99:9c:b7:76:4a:1c:c4:2b:0f:cf:a3:9c:e0:ed:f7:ed:25: 52:0d:00:bf:2b:06:83:9c:3d:96:51:f4:0c:88:23:dc:9a:b7: 04:8b:3a:c0:79:59:da:a8:4c:c8:b6:ec:c5:b3:0a:5a:1c:c5: 71:32:a1:46:c0:19:94:c4:49:26:f5:9c:86:cc:21:1b:ec:9f: 5b:11:1a:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6toIIi49cUdGUB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWMxMWQzNTgtNjliOS00Yzk2LWJmNDctZTNlZGQ1Y2Zm MjE4MB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk MDMwZjllYjYtN2ZiMS00NzE4LWExNGQtY2EzZDIyYWQwYWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKmBt870+4luoBNsbXnouLsF5tUob42J8Rkk cAZ4tPy75okRwKVjUrqvDBk3fVW4BEdW7hSycNkYMeuLzcMbx9DEMjrx44uH8lqG OuECrq/YeqFowqY2zaIIc3BlJ5k19TGA9Ve3JOWZPD2xi90l48IjI6nrumhIxeCT AA+YseEAHIp3yY+sbHDruhsRQHJGEd/+ruD5YlSNTL7BiHP1CIjpSx4qoBC0BwCF ooz0xLY/VYUff9/GxGloM7PkduU4SDZNbiYKZ83OUMWz6LpbtMfWuW1vypFoS5II vU7fxCiYpxpa+2VLjTV28PiBVQy4GFOuu9byQDMEy3+B50k0jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfhgjGRH2aJ4DeXuzhenh401sy7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzEx ZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2VkZDVjZmYyMTgvZWUxZWY4ZjYtYTY4MS0z NDUzLTk5NDUtZmU4YTVhMjZhM2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWMxMWQzNTgtNjliOS00Yzk2LWJm NDctZTNlZGQ1Y2ZmMjE4L2VjMTFkMzU4LTY5YjktNGM5Ni1iZjQ3LWUzZWRkNWNm ZjIxOC5jcmwwHwYDVR0jBBgwFoAUoUAcC1VOMwu+PVO2Hd8acJrxAbYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzExZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2Vk ZDVjZmYyMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARajlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8EEWhJr/572UBMizS4t1GlNYSiwpLZ1bKJ3U7tG4XLQHESrSc1KJIK aGL6pEKurpQ4rYGOQdNx9nv38aHvG/OzGWm1Wlm0K6e/kC9OBkkCgsRnccQAXlEX ptICnHY22xdNg6tZTKvj4BiLNTxyr2X4pbEqmTGlPu4wHLMPVfgEeYxl6F6gf7aF nhvX+qW8cqbgXyedxOaq/58mH0a8k9xdq7xxrAiLgHxA3ZG68RRWHUkZxxiZnLd2 ShzEKw/Po5zg7fftJVINAL8rBoOcPZZR9AyII9yatwSLOsB5WdqoTMi27MWzCloc xXEyoUbAGZTESSb1nIbMIRvsn1sRGoo= -----END CERTIFICATE-----Generated at Mon Sep 8 05:06:27 2025 by rpki-client