$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2db2e59a-1695-343f-b14c-f4f1be9a9556.roa File: 2db2e59a-1695-343f-b14c-f4f1be9a9556.roa (raw, json) Hash identifier: TNVuLPOC3d7UHJlgYER9a/N5TRWPo3IX+TZdhRgi0ng= Subject key identifier: 16:81:02:89:96:98:FE:66:EA:1F:5E:4F:D2:CA:2B:A4:0D:19:A4:74 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584AC2E11546BB9DDF095D821540 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2db2e59a-1695-343f-b14c-f4f1be9a9556.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 13781 IP address blocks: 216.206.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:15:46:bb:9d:df:09:5d:82:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=00f50b68-9c7a-45e5-babd-9f86a3b05e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:53:89:f0:6d:49:70:93:40:7c:18:ac:5f:ee: ba:ff:c0:fb:04:78:24:7c:3f:63:84:14:6d:56:ba: 3f:87:b5:5a:74:8e:0a:39:b7:12:18:ab:75:d2:f4: 5f:90:16:ba:f6:f5:56:f7:d6:f5:ce:c2:ab:10:67: 39:8c:7b:2c:68:af:55:9f:8c:c6:45:67:5f:81:17: c6:61:21:5c:62:91:e4:7a:c9:e6:e6:e7:39:98:ab: e0:50:7c:c4:5e:e4:0f:50:80:87:c9:6c:6c:ad:ae: 26:e5:5b:e2:b4:e3:94:55:26:6b:14:dc:dc:61:73: 9b:5a:47:09:02:64:e4:17:0f:7c:ba:2a:3b:3f:f9: f2:4a:ac:55:2d:3e:32:a2:f0:73:70:97:ac:dc:9a: a6:a2:6d:33:86:6d:90:f7:4f:6f:83:6d:fd:0e:48: 3b:8f:63:5f:54:d4:e2:57:7a:64:99:60:2f:c0:4d: 1b:9a:64:b7:89:43:1b:68:42:c9:b2:e9:72:df:18: 03:12:9f:a9:a6:fa:44:7c:f6:8d:98:81:4a:78:db: a8:06:07:70:82:83:7e:e7:bf:3f:5b:e2:ef:15:2b: b8:0b:3d:3f:83:7e:01:de:d0:c1:eb:51:82:24:02: b0:90:06:91:04:e8:89:43:2c:30:e3:0c:07:65:d6: 06:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:81:02:89:96:98:FE:66:EA:1F:5E:4F:D2:CA:2B:A4:0D:19:A4:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2db2e59a-1695-343f-b14c-f4f1be9a9556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 216.206.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:3b:38:89:46:90:48:37:52:c5:36:8b:98:c7:0d:7a:40:08: 4d:44:c1:d0:49:fe:f1:72:fe:50:01:8f:c1:63:d9:7c:cb:fb: 55:00:a7:20:96:12:2a:06:03:4f:cf:53:61:84:15:3d:26:24: 6b:4c:51:41:bf:3a:ef:37:33:29:cf:7c:36:70:e7:d6:88:b6: d4:98:e1:6b:9e:1f:5c:e0:8c:73:e1:1d:11:3f:1b:2d:87:98: 50:f6:36:35:7d:a3:fe:33:b6:4c:3c:59:37:2a:e1:af:ef:54: 2f:aa:98:40:fe:ca:d4:91:6a:6b:bb:13:6b:91:ce:8a:b4:66: 38:60:48:1e:d8:80:8f:18:36:a4:ed:cc:aa:47:4c:7a:54:8c: 8c:8d:17:bd:75:44:dd:38:91:9c:ca:4b:51:4d:46:01:ba:4e: f3:12:75:d1:8b:05:c6:6c:84:39:a5:29:7a:24:cf:e9:c1:ee: ea:ae:3c:8f:2a:92:8e:ea:cc:f0:66:34:36:1a:44:92:3a:a3: 76:6f:41:33:44:ee:5c:70:32:27:3e:b7:70:34:7f:26:a7:49: ba:27:45:9e:0e:97:b5:d0:79:df:9e:7a:4a:83:06:0d:7c:a4: 64:07:43:b8:11:3a:d4:2c:4f:21:d4:6c:7e:b8:a8:a9:a5:53: 3e:f8:33:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4RVGu53fCV2CFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MDBmNTBiNjgtOWM3YS00NWU1LWJhYmQtOWY4NmEzYjA1ZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVOJ8G1JcJNAfBisX+66/8D7BHgkfD9jhBRt Vro/h7VadI4KObcSGKt10vRfkBa69vVW99b1zsKrEGc5jHssaK9Vn4zGRWdfgRfG YSFcYpHkesnm5uc5mKvgUHzEXuQPUICHyWxsra4m5VvitOOUVSZrFNzcYXObWkcJ AmTkFw98uio7P/nySqxVLT4yovBzcJes3Jqmom0zhm2Q909vg239Dkg7j2NfVNTi V3pkmWAvwE0bmmS3iUMbaELJsuly3xgDEp+ppvpEfPaNmIFKeNuoBgdwgoN+578/ W+LvFSu4Cz0/g34B3tDB61GCJAKwkAaRBOiJQyww4wwHZdYGDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaBAomWmP5m6h9eT9LKK6QNGaR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvMmRiMmU1OWEtMTY5NS0z NDNmLWIxNGMtZjRmMWJlOWE5NTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2M6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKo7OIlGkEg3UsU2i5jHDXpACE1EwdBJ/vFy/lABj8Fj2XzL+1UApyCW EioGA0/PU2GEFT0mJGtMUUG/Ou83MynPfDZw59aIttSY4WueH1zgjHPhHRE/Gy2H mFD2NjV9o/4ztkw8WTcq4a/vVC+qmED+ytSRamu7E2uRzoq0ZjhgSB7YgI8YNqTt zKpHTHpUjIyNF711RN04kZzKS1FNRgG6TvMSddGLBcZshDmlKXokz+nB7uquPI8q ko7qzPBmNDYaRJI6o3ZvQTNE7lxwMic+t3A0fyanSbonRZ4Ol7XQed+eekqDBg18 pGQHQ7gROtQsTyHUbH64qKmlUz74M1g= -----END CERTIFICATE-----Generated at Sat Aug 23 16:17:43 2025 by rpki-client