$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0ad6e3c1-d403-3349-83f5-f0ef0fca24b0.roa File: 0ad6e3c1-d403-3349-83f5-f0ef0fca24b0.roa (raw, json) Hash identifier: 361YqpDEdO2thWsZE20vhoz9CV0q+mUK7vaL1t7sRNQ= Subject key identifier: EE:DA:97:2D:AF:BE:19:5E:CB:24:4C:20:8F:BD:6A:C3:6F:69:34:74 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584ADA9BC76C2F8C50ED65B49380 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0ad6e3c1-d403-3349-83f5-f0ef0fca24b0.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 394708 IP address blocks: 216.255.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c7:6c:2f:8c:50:ed:65:b4:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=86af936b-c878-424c-9a3e-961d4763be88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:f6:cf:a1:13:87:e2:96:5d:fb:36:64:21: ec:6f:ce:6e:80:8a:6e:dd:03:e0:48:e6:9a:2d:68: c9:81:20:25:c9:f8:70:fc:e5:ac:d8:fa:7b:af:70: 09:d0:5e:03:15:c0:39:08:36:17:fa:91:8d:b4:e2: 0a:ed:16:d0:fb:b3:2d:42:0b:de:9c:ef:6c:da:34: 18:2f:f0:65:98:c4:bd:ee:53:82:bc:d4:f8:2d:aa: 8d:28:04:20:3d:c2:23:4a:94:8f:f8:31:08:cf:1b: 2a:f7:99:9a:8e:e7:37:b0:a4:e8:e9:06:12:55:6c: 1a:6a:0a:ba:6e:5d:08:61:b9:a3:72:37:6a:b6:6e: 00:19:80:20:57:51:d8:6c:13:b7:af:7d:a1:c3:24: f3:5e:c2:2e:10:ea:4b:af:40:19:f3:c6:80:e2:6d: 1d:25:13:6a:17:9b:f0:55:21:dd:1b:c6:9a:48:81: b1:d7:10:37:c8:cc:cc:62:6d:dd:c6:1c:95:4c:fb: f4:ff:2d:6f:85:64:59:ab:a2:1c:b5:fc:b0:8a:33: 57:31:04:7f:4e:16:21:24:2f:84:90:80:ee:7a:62: ca:e8:13:68:b3:4b:02:1b:9b:75:ed:cd:1b:89:50: 86:41:2a:4b:1b:df:35:85:86:fc:68:24:67:96:b8: 90:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DA:97:2D:AF:BE:19:5E:CB:24:4C:20:8F:BD:6A:C3:6F:69:34:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0ad6e3c1-d403-3349-83f5-f0ef0fca24b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:75:fd:3f:ad:66:af:24:7f:b4:19:2f:01:28:94:3e:f8:0a: 6b:d5:b9:da:62:79:6d:8d:81:0c:c8:01:a7:bb:f8:ae:94:03: ff:31:fe:3d:1a:49:41:46:c3:7d:42:94:12:ba:26:5e:33:3d: 25:f1:69:b9:88:0b:a5:41:85:41:38:57:0d:11:f8:e5:2d:c3: a5:19:89:dc:a9:a5:b6:2b:8a:9e:bc:5c:f7:0f:92:5d:34:2d: 79:7b:47:5a:2a:01:e8:af:e0:13:0d:87:d8:a9:06:27:00:36: ea:0b:14:83:27:97:88:fd:c5:6c:28:be:a1:01:ba:55:32:ea: 05:64:8e:d7:90:78:2c:e0:20:eb:59:94:5b:f8:f1:ee:ce:93: 02:b4:4b:cd:9a:ee:a7:90:3e:c6:b6:42:a9:37:83:fd:52:6d: a4:f4:7f:b6:36:a7:02:3c:ad:f7:c8:b2:39:10:d7:d8:bf:a4: e8:c8:4b:ec:59:07:51:20:81:b7:f7:4a:61:1d:82:a1:9a:5f: c3:6b:16:5d:74:86:e9:3a:4a:6d:3b:a1:ac:78:e5:e4:ea:95: 46:cc:9c:97:61:87:c2:a0:c1:ca:a5:1e:1f:08:a8:a6:d0:a5: af:71:12:22:50:2a:44:9d:e3:f2:0e:6e:a8:bd:46:fd:8b:c7: 04:a8:09:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8dsL4xQ7WW0k4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk ODZhZjkzNmItYzg3OC00MjRjLTlhM2UtOTYxZDQ3NjNiZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4T2z6ETh+KWXfs2ZCHsb85ugIpu3QPgSOaa LWjJgSAlyfhw/OWs2Pp7r3AJ0F4DFcA5CDYX+pGNtOIK7RbQ+7MtQgvenO9s2jQY L/BlmMS97lOCvNT4LaqNKAQgPcIjSpSP+DEIzxsq95majuc3sKTo6QYSVWwaagq6 bl0IYbmjcjdqtm4AGYAgV1HYbBO3r32hwyTzXsIuEOpLr0AZ88aA4m0dJRNqF5vw VSHdG8aaSIGx1xA3yMzMYm3dxhyVTPv0/y1vhWRZq6IctfywijNXMQR/ThYhJC+E kIDuemLK6BNos0sCG5t17c0biVCGQSpLG981hYb8aCRnlriQowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7aly2vvhleyyRMII+9asNvaTR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvMGFkNmUzYzEtZDQwMy0z MzQ5LTgzZjUtZjBlZjBmY2EyNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2P8VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG51/T+tZq8kf7QZLwEolD74CmvVudpieW2NgQzIAae7+K6UA/8x/j0a SUFGw31ClBK6Jl4zPSXxabmIC6VBhUE4Vw0R+OUtw6UZidyppbYrip68XPcPkl00 LXl7R1oqAeiv4BMNh9ipBicANuoLFIMnl4j9xWwovqEBulUy6gVkjteQeCzgIOtZ lFv48e7OkwK0S82a7qeQPsa2Qqk3g/1SbaT0f7Y2pwI8rffIsjkQ19i/pOjIS+xZ B1Eggbf3SmEdgqGaX8NrFl10huk6Sm07oax45eTqlUbMnJdhh8KgwcqlHh8IqKbQ pa9xEiJQKkSd4/IObqi9Rv2LxwSoCXw= -----END CERTIFICATE-----Generated at Sat Aug 23 22:03:22 2025 by rpki-client