$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/a07b204f-edf4-348e-a1c8-032675f4fe15.roa File: a07b204f-edf4-348e-a1c8-032675f4fe15.roa (raw, json) Hash identifier: k7D1P4d9vaCi1NvOtMsRy9hS8zS0RFRyvX4u4Gsojmg= Subject key identifier: 92:FB:68:F2:BC:B5:68:ED:6B:4D:E6:A1:9F:D9:14:F3:1E:73:A1:D7 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584AC5AB9301B568012962AE5980 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/a07b204f-edf4-348e-a1c8-032675f4fe15.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 16696 IP address blocks: 216.247.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:93:01:b5:68:01:29:62:ae:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=85a43927-83b6-4c92-ac1a-a9c4263dadbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:86:00:3a:a7:e4:94:2d:41:bb:63:eb:71:7f: 4f:61:b6:8a:3c:20:75:88:98:12:e9:c1:7e:6e:ba: cd:26:f0:5e:40:ea:90:73:34:a6:c7:10:37:db:dd: 04:11:62:e7:2f:39:fd:c1:fe:94:13:cd:7f:4d:2d: b1:7a:85:23:c8:cd:3e:d0:82:c9:e0:8e:72:b2:7d: a9:36:31:97:81:8e:3b:41:ba:7c:bf:7e:b7:d0:4e: 76:1c:41:f8:fd:19:26:d1:b7:ce:d9:b3:0a:69:82: f0:28:8d:2d:7b:a4:4c:1a:ba:68:dc:b7:6d:88:3f: c5:78:f0:4a:f7:e5:14:44:e1:fb:83:f9:4b:ac:d6: 23:fe:07:19:ff:dd:46:6e:ba:f1:2f:52:bc:68:4c: 3b:94:ee:19:50:b4:66:8b:8b:da:3b:61:af:d8:b2: 34:d8:fe:4e:61:1d:e0:ac:5e:57:4e:f7:1d:2f:37: 20:80:8a:3a:f2:a0:15:da:d3:68:cb:a3:86:b2:a9: c5:a8:2b:42:32:30:13:a6:a6:c6:a8:ce:3a:73:48: ce:2a:3e:18:36:af:a5:d2:73:2f:81:e5:b0:78:38: f5:fc:b0:2a:24:10:68:ab:52:c0:76:10:f4:8c:68: 51:a4:65:f0:61:ea:69:06:89:fb:53:1a:27:6d:2f: 2c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FB:68:F2:BC:B5:68:ED:6B:4D:E6:A1:9F:D9:14:F3:1E:73:A1:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/a07b204f-edf4-348e-a1c8-032675f4fe15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 216.247.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:22:76:bf:fa:15:8c:e9:12:3f:43:ac:51:6f:63:5a:f6:3e: c9:84:4b:e6:00:21:8c:fd:aa:95:39:e0:a9:e3:9c:ec:e2:58: a7:d1:b5:12:d4:41:e7:1e:cd:7c:de:c4:59:41:6c:26:f0:0c: ad:14:9b:84:b6:0d:e2:ce:cb:ed:1b:49:e8:88:81:6f:8d:95: 47:9a:e3:82:a1:19:2e:1c:60:e1:0d:58:ae:ae:e6:4b:a5:90: 8d:18:75:07:69:d9:9c:9b:b1:2c:5b:be:66:ed:5e:73:32:39: 59:28:39:11:9c:2e:73:ad:76:0e:dd:26:d5:8c:fe:8c:ea:fd: 6c:92:99:1a:d3:ea:ba:f7:c9:21:80:e3:89:4c:ee:5f:33:44: f8:80:56:3b:ce:ca:0d:8b:9e:4f:8b:d2:e6:3c:a9:a5:7c:e6: ba:90:4d:d6:05:80:02:94:1d:d7:2b:8b:33:93:84:61:ae:3d: 3d:30:e3:4b:4b:cb:53:b7:e8:75:6b:c5:d0:bc:70:c8:89:99: 59:c9:b0:56:c2:6a:e7:f1:7f:b4:99:36:e9:04:da:b5:84:7c: 12:16:b1:ce:e1:93:a3:c2:8b:fe:f3:e4:ad:08:5a:d1:a1:48: 5a:51:16:c7:ac:fa:3f:c3:bd:83:ba:f1:c6:00:0e:a2:99:3b: 4d:89:6b:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5MBtWgBKWKuWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk ODVhNDM5MjctODNiNi00YzkyLWFjMWEtYTljNDI2M2RhZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4YAOqfklC1Bu2PrcX9PYbaKPCB1iJgS6cF+ brrNJvBeQOqQczSmxxA3290EEWLnLzn9wf6UE81/TS2xeoUjyM0+0ILJ4I5ysn2p NjGXgY47Qbp8v3630E52HEH4/Rkm0bfO2bMKaYLwKI0te6RMGrpo3LdtiD/FePBK 9+UUROH7g/lLrNYj/gcZ/91GbrrxL1K8aEw7lO4ZULRmi4vaO2Gv2LI02P5OYR3g rF5XTvcdLzcggIo68qAV2tNoy6OGsqnFqCtCMjATpqbGqM46c0jOKj4YNq+l0nMv geWweDj1/LAqJBBoq1LAdhD0jGhRpGXwYeppBon7UxonbS8sfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJL7aPK8tWjta03moZ/ZFPMec6HXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYTA3YjIwNGYtZWRmNC0z NDhlLWExYzgtMDMyNjc1ZjRmZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Pf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkidr/6FYzpEj9DrFFvY1r2PsmES+YAIYz9qpU54KnjnOziWKfRtRLU QecezXzexFlBbCbwDK0Um4S2DeLOy+0bSeiIgW+NlUea44KhGS4cYOENWK6u5kul kI0YdQdp2ZybsSxbvmbtXnMyOVkoORGcLnOtdg7dJtWM/ozq/WySmRrT6rr3ySGA 44lM7l8zRPiAVjvOyg2Lnk+L0uY8qaV85rqQTdYFgAKUHdcrizOThGGuPT0w40tL y1O36HVrxdC8cMiJmVnJsFbCaufxf7SZNukE2rWEfBIWsc7hk6PCi/7z5K0IWtGh SFpRFses+j/DvYO68cYADqKZO02Jaws= -----END CERTIFICATE-----Generated at Sun Aug 24 07:10:46 2025 by rpki-client