$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ea60e2b7-ef64-3ef2-8526-11a88aeedef3.roa File: ea60e2b7-ef64-3ef2-8526-11a88aeedef3.roa (raw, json) Hash identifier: uqMA0J4dQmsIUQyJ+Q8Utz2Cs4bvyxUwbIVCHyUhMOg= Subject key identifier: B6:70:85:D2:99:B6:F8:FA:FA:54:E4:20:D6:04:91:EB:C9:4A:78:D0 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D118A48297F3E9C0EAC180 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ea60e2b7-ef64-3ef2-8526-11a88aeedef3.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 21639 IP address blocks: 165.254.60.216/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:18:a4:82:97:f3:e9:c0:ea:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=9daeaa61-726f-4750-8ab5-ec66ede8bcd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:78:53:ab:b8:ff:e1:20:3e:3a:3e:94:0c:f6: ad:65:29:bf:9c:d2:c1:dc:22:54:2c:a4:f7:9e:33: 3e:c3:91:9e:db:97:67:ba:b1:c1:3d:76:73:34:22: a4:d8:b9:7b:67:05:d2:af:31:57:ec:64:cb:3d:05: 1a:fe:1a:cc:f2:ac:51:2f:a1:6e:53:0d:2b:50:58: ac:7f:d8:f2:bc:65:1d:d0:99:b6:06:53:62:82:4e: 64:33:6a:40:a4:4c:5e:d0:42:10:0b:0e:e0:c2:09: f8:5c:98:64:db:84:b9:61:a0:dc:45:1c:28:6e:89: 54:4c:34:12:db:c6:75:6e:32:38:28:77:30:3b:59: df:3e:8b:1b:d5:0b:f7:b6:bc:c7:7e:12:ee:47:c4: 4f:49:69:c6:e5:dc:db:8a:1b:79:6e:b0:b7:a0:a7: 52:0e:56:3c:db:50:90:a4:87:43:9a:6b:39:b3:e3: 41:bf:da:94:07:b7:bd:d8:1e:d7:61:8e:08:96:9c: 2c:62:f5:2f:e8:f8:e9:70:12:71:e0:2d:9b:86:79: 70:1a:9c:df:b0:66:d1:43:f4:29:0e:c2:81:c7:8b: 67:8f:73:52:9e:91:bb:d3:8c:25:18:c0:fb:f0:c5: 29:e9:71:28:cc:c1:03:8f:0c:07:d0:73:c7:e5:e4: 4f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:70:85:D2:99:B6:F8:FA:FA:54:E4:20:D6:04:91:EB:C9:4A:78:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ea60e2b7-ef64-3ef2-8526-11a88aeedef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.60.216/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:89:e7:6d:14:a2:a3:45:56:35:69:3a:49:ab:4a:80:03:dc: 3f:48:b0:1f:04:0a:ea:99:d2:59:74:9e:27:aa:02:05:e8:91: 64:2a:7a:16:51:1c:9f:78:f5:2c:24:8e:29:02:2f:72:a8:cc: 49:4c:85:a9:28:88:e8:d8:73:eb:4e:14:1c:21:77:62:76:3a: 9a:66:8a:54:22:36:13:4a:d4:d2:d3:2a:38:b1:44:fe:ac:8d: ac:f1:ef:61:e0:c0:47:fb:4c:90:29:da:e4:3a:a1:b8:15:98: 60:6d:51:6e:7b:62:5c:8c:40:dd:e0:73:a1:0b:46:f7:dd:7e: 0b:52:e2:69:28:ed:46:9e:da:f7:e1:13:da:aa:17:b2:b8:eb: 3e:c5:f5:fe:14:c6:93:1a:97:5b:e1:ba:74:8e:77:eb:38:59: a8:58:97:b9:bb:a0:8e:1f:15:53:8c:6f:24:92:35:08:e5:99: 49:06:1a:a1:01:b2:19:d6:1f:1e:cb:a2:68:b1:bf:86:ad:51: 6c:13:7a:8c:18:83:5d:69:9d:36:e9:d7:8e:d4:bc:a1:6c:ba: be:ef:25:c4:bf:f6:db:70:a2:df:ea:54:fc:c0:94:1c:14:4a: ed:f4:67:c9:51:04:2c:bf:be:7e:60:33:4b:c2:58:46:07:45: e8:3c:87:52 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErX0Rikgpfz6cDqwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk OWRhZWFhNjEtNzI2Zi00NzUwLThhYjUtZWM2NmVkZThiY2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XhTq7j/4SA+Oj6UDPatZSm/nNLB3CJULKT3 njM+w5Ge25dnurHBPXZzNCKk2Ll7ZwXSrzFX7GTLPQUa/hrM8qxRL6FuUw0rUFis f9jyvGUd0Jm2BlNigk5kM2pApExe0EIQCw7gwgn4XJhk24S5YaDcRRwobolUTDQS 28Z1bjI4KHcwO1nfPosb1Qv3trzHfhLuR8RPSWnG5dzbiht5brC3oKdSDlY821CQ pIdDmms5s+NBv9qUB7e92B7XYY4IlpwsYvUv6PjpcBJx4C2bhnlwGpzfsGbRQ/Qp DsKBx4tnj3NSnpG704wlGMD78MUp6XEozMEDjwwH0HPH5eRPYwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLZwhdKZtvj6+lTkINYEkevJSnjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZWE2MGUyYjctZWY2NC0z ZWYyLTg1MjYtMTFhODhhZWVkZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDpf482DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAfiedtFKKjRVY1aTpJq0qAA9w/SLAfBArqmdJZdJ4nqgIF6JFkKnoW URyfePUsJI4pAi9yqMxJTIWpKIjo2HPrThQcIXdidjqaZopUIjYTStTS0yo4sUT+ rI2s8e9h4MBH+0yQKdrkOqG4FZhgbVFue2JcjEDd4HOhC0b33X4LUuJpKO1Gntr3 4RPaqheyuOs+xfX+FMaTGpdb4bp0jnfrOFmoWJe5u6COHxVTjG8kkjUI5ZlJBhqh AbIZ1h8ey6Josb+GrVFsE3qMGINdaZ026deO1LyhbLq+7yXEv/bbcKLf6lT8wJQc FErt9GfJUQQsv75+YDNLwlhGB0XoPIdS -----END CERTIFICATE-----Generated at Sat Aug 23 14:49:47 2025 by rpki-client