$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e21f367a-40c1-3c90-b30a-ec98806099f3.roa File: e21f367a-40c1-3c90-b30a-ec98806099f3.roa (raw, json) Hash identifier: cyN1sM2+6Hx85ED4NOH+rpM5IgEcl6/8uiHBCKjs2Og= Subject key identifier: F3:7C:38:7F:2A:FE:02:62:49:67:CF:C8:73:24:74:03:63:1B:A0:F1 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584AC5AB92C3666A0FA03E260080 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e21f367a-40c1-3c90-b30a-ec98806099f3.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 16696 IP address blocks: 216.120.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:92:c3:66:6a:0f:a0:3e:26:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=7facc551-b7ee-40bc-b370-105a7750e6f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:54:23:f1:12:c6:99:c9:2b:01:a7:07:66:ea: 77:86:7c:94:34:31:60:b3:34:ec:96:fd:16:a7:cb: 5f:fd:15:70:3c:ee:49:97:c6:57:ae:67:08:19:88: 62:93:e7:23:73:79:2d:70:92:8a:34:0a:de:1a:32: dc:61:09:4c:2e:66:1f:4d:c7:9d:f3:5b:47:46:e7: 62:ce:46:c5:99:ee:a1:64:56:fe:e8:48:6e:d4:53: a3:c1:9b:3e:1b:c9:80:70:c7:40:18:37:56:1b:9c: ec:78:bd:26:1d:70:31:4f:90:18:06:66:d8:08:b0: f5:9b:42:e1:da:ed:15:3c:82:89:da:61:b7:6b:dc: 3a:1d:31:8a:46:e5:9e:9f:7b:7d:f5:cb:0f:2a:89: 14:50:14:b6:ea:97:92:a1:0f:a3:2e:67:de:77:6e: 72:d4:12:f8:3a:cc:48:23:8e:1f:14:80:d5:eb:66: 09:59:1e:56:f6:b5:8e:2a:dd:68:b8:03:8f:98:07: 92:54:a4:27:b1:06:67:e1:dd:c7:69:c4:63:81:ab: 62:e0:eb:db:9f:e3:00:89:36:b7:b6:89:03:6d:12: da:25:bf:c9:1f:e1:54:59:ab:52:8c:98:87:29:b0: 93:0c:f5:df:e3:bb:71:84:64:d1:3b:a0:7b:17:03: a4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7C:38:7F:2A:FE:02:62:49:67:CF:C8:73:24:74:03:63:1B:A0:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e21f367a-40c1-3c90-b30a-ec98806099f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 216.120.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:9b:c1:bf:85:eb:dd:33:d8:f0:95:53:42:8c:d3:94:60:0b: fa:8d:5f:b1:58:f0:08:b0:a8:ce:ed:d0:15:7b:18:cf:16:76: 8b:9f:d1:e7:ec:11:24:5a:ff:d2:60:d9:1c:22:2f:ef:55:87: a6:39:e8:62:1a:04:eb:55:97:25:e4:f0:d2:94:a9:91:85:3f: 2d:c1:9b:e1:7e:6c:80:5e:50:36:d0:35:8b:a0:70:4b:4c:8a: cd:5c:f1:96:73:7a:ec:47:19:b0:b4:cd:01:28:5e:26:96:4c: fd:2e:ba:37:e4:cd:e7:d3:29:b8:87:2a:ae:ed:66:92:3d:bd: a1:a6:2a:2f:61:52:50:57:77:fb:5d:88:04:97:a9:80:c6:ac: fc:a6:b0:de:ac:ba:5d:c4:ba:0e:ec:d9:b8:6e:96:52:76:10: a5:9b:5c:55:1d:f9:31:e4:35:b0:bc:43:c8:72:a5:53:cc:fc: 2c:3d:c2:88:be:d1:d4:53:c2:d1:8a:89:c0:d6:9d:35:46:49: e8:20:bf:95:e3:d8:47:46:e9:09:15:57:88:ce:06:30:fe:e1: 52:f7:03:c8:d4:a2:16:de:94:07:c7:5a:42:3e:98:07:9a:b9: 2a:d2:7c:21:36:5c:ed:f3:8f:95:1d:7f:e0:1b:6c:75:68:76: 79:79:95:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5LDZmoPoD4mAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk N2ZhY2M1NTEtYjdlZS00MGJjLWIzNzAtMTA1YTc3NTBlNmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVQj8RLGmckrAacHZup3hnyUNDFgszTslv0W p8tf/RVwPO5Jl8ZXrmcIGYhik+cjc3ktcJKKNAreGjLcYQlMLmYfTced81tHRudi zkbFme6hZFb+6Ehu1FOjwZs+G8mAcMdAGDdWG5zseL0mHXAxT5AYBmbYCLD1m0Lh 2u0VPIKJ2mG3a9w6HTGKRuWen3t99csPKokUUBS26peSoQ+jLmfed25y1BL4OsxI I44fFIDV62YJWR5W9rWOKt1ouAOPmAeSVKQnsQZn4d3HacRjgati4Ovbn+MAiTa3 tokDbRLaJb/JH+FUWatSjJiHKbCTDPXf47txhGTRO6B7FwOk4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPN8OH8q/gJiSWfPyHMkdANjG6DxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZTIxZjM2N2EtNDBjMS0z YzkwLWIzMGEtZWM5ODgwNjA5OWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2HjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAubwb+F690z2PCVU0KM05RgC/qNX7FY8AiwqM7t0BV7GM8Wdouf0efs ESRa/9Jg2RwiL+9Vh6Y56GIaBOtVlyXk8NKUqZGFPy3Bm+F+bIBeUDbQNYugcEtM is1c8ZZzeuxHGbC0zQEoXiaWTP0uujfkzefTKbiHKq7tZpI9vaGmKi9hUlBXd/td iASXqYDGrPymsN6sul3Eug7s2bhullJ2EKWbXFUd+THkNbC8Q8hypVPM/Cw9woi+ 0dRTwtGKicDWnTVGSeggv5Xj2EdG6QkVV4jOBjD+4VL3A8jUohbelAfHWkI+mAea uSrSfCE2XO3zj5Udf+AbbHVodnl5lfE= -----END CERTIFICATE-----Generated at Sun Aug 24 09:45:57 2025 by rpki-client