$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/52b589e8-99f0-3b48-9395-f5736678ef4d.roa File: 52b589e8-99f0-3b48-9395-f5736678ef4d.roa (raw, json) Hash identifier: KvPo4TQAxTKTDo56Cvm31xUmwTnyRkx2ba7RTOZhXYw= Subject key identifier: 3E:AC:C9:26:DE:45:00:A2:26:E5:87:A7:F3:E5:A2:78:65:DD:F8:25 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584ADA9BC707555EA75D12A89040 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/52b589e8-99f0-3b48-9395-f5736678ef4d.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 394708 IP address blocks: 216.255.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c7:07:55:5e:a7:5d:12:a8:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=47e965a8-1ecb-42de-8f4d-a4dca0092bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a3:79:74:30:b7:9d:9e:ef:56:99:98:3c:c4: 7b:a8:f0:82:ed:dc:43:9f:c4:9e:c1:ca:2d:f9:ea: 34:3e:82:77:0e:8b:4f:0f:af:45:82:a8:87:7e:ec: a9:ff:e7:74:f5:7f:64:3e:fa:10:e8:9d:4e:85:f3: 87:a0:69:6d:80:2d:49:b7:1c:e2:d9:ac:bc:ac:f3: 16:1e:57:1c:b2:89:1c:4e:21:cd:c2:06:95:5f:0b: bc:5b:2c:17:18:2c:4a:bc:c2:31:27:98:0a:93:cd: 70:ba:c7:cb:f9:b1:dc:ed:7b:a1:01:ce:bb:bf:54: 46:01:2c:b7:c7:b4:aa:68:7d:59:13:38:00:84:6e: 60:b6:8e:e1:ee:7a:90:c9:4d:e7:d5:bc:43:c3:e5: cd:cb:e1:c2:09:d9:ca:96:39:d4:b6:04:41:70:b5: 6b:98:cc:f8:ff:1a:e0:fc:39:7c:d6:77:f4:75:eb: 37:de:fe:aa:b2:5b:ad:b1:e5:31:ee:34:b1:81:ce: bc:0c:42:8c:cf:84:dd:64:96:8c:10:01:f1:d7:fe: 49:be:13:0c:fd:c6:89:6d:8e:87:b6:fe:ca:38:25: c3:e5:99:6e:d4:ee:4f:29:65:48:52:aa:08:ac:ff: e7:69:3a:b0:56:c4:a1:36:e1:27:47:56:ed:e7:9f: 29:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AC:C9:26:DE:45:00:A2:26:E5:87:A7:F3:E5:A2:78:65:DD:F8:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/52b589e8-99f0-3b48-9395-f5736678ef4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ca:b0:17:f4:3d:c9:e5:ae:32:ba:2a:a3:44:da:fa:89:46: bb:fd:51:26:4d:2b:21:e2:94:c1:ee:dc:38:04:5d:eb:fc:35: e3:85:cc:f8:a3:67:35:a3:cd:df:0c:da:7f:96:fb:4a:a9:3f: ce:eb:88:62:a5:2c:68:d2:d2:cc:b5:98:01:81:af:7b:91:aa: 97:46:3e:61:23:fc:6a:8b:cf:22:52:d6:ca:ed:fa:b8:5a:ed: 49:26:9a:d6:dd:b0:d5:48:7b:fe:8e:5c:60:95:64:33:b5:b9: 3f:1b:d8:34:db:8d:6e:a4:2e:97:59:dd:7a:64:28:3d:b4:02: 17:ba:a8:b5:9e:e4:91:11:46:08:1d:b5:cd:0b:b0:91:01:c9: 48:c9:95:36:55:85:ed:85:19:f3:1e:b2:0f:98:4f:e8:89:d9: 2e:d7:8a:5f:e9:72:23:36:86:f0:ab:09:ad:e8:75:94:60:7f: 86:b5:a4:69:c6:0c:c0:a7:7c:27:4c:ee:a6:52:7f:b1:77:29: 33:0f:a9:9d:cb:a4:2c:76:cc:7d:4b:00:2f:13:20:e1:50:d9: 13:65:dc:5e:2e:e4:2f:8f:0a:0e:e5:5f:8c:82:35:a2:43:3e: c5:4a:d7:a2:4f:7d:87:42:e5:1c:28:cd:c7:90:74:74:bb:83: 94:8e:07:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8cHVV6nXRKokEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk NDdlOTY1YTgtMWVjYi00MmRlLThmNGQtYTRkY2EwMDkyYmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqN5dDC3nZ7vVpmYPMR7qPCC7dxDn8Sewcot +eo0PoJ3DotPD69FgqiHfuyp/+d09X9kPvoQ6J1OhfOHoGltgC1Jtxzi2ay8rPMW HlccsokcTiHNwgaVXwu8WywXGCxKvMIxJ5gKk81wusfL+bHc7XuhAc67v1RGASy3 x7SqaH1ZEzgAhG5gto7h7nqQyU3n1bxDw+XNy+HCCdnKljnUtgRBcLVrmMz4/xrg /Dl81nf0des33v6qslutseUx7jSxgc68DEKMz4TdZJaMEAHx1/5JvhMM/caJbY6H tv7KOCXD5Zlu1O5PKWVIUqoIrP/naTqwVsShNuEnR1bt558pwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6sySbeRQCiJuWHp/Plonhl3fglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvNTJiNTg5ZTgtOTlmMC0z YjQ4LTkzOTUtZjU3MzY2NzhlZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2P8CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/KsBf0PcnlrjK6KqNE2vqJRrv9USZNKyHilMHu3DgEXev8NeOFzPij ZzWjzd8M2n+W+0qpP87riGKlLGjS0sy1mAGBr3uRqpdGPmEj/GqLzyJS1srt+rha 7UkmmtbdsNVIe/6OXGCVZDO1uT8b2DTbjW6kLpdZ3XpkKD20Ahe6qLWe5JERRggd tc0LsJEByUjJlTZVhe2FGfMesg+YT+iJ2S7Xil/pciM2hvCrCa3odZRgf4a1pGnG DMCnfCdM7qZSf7F3KTMPqZ3LpCx2zH1LAC8TIOFQ2RNl3F4u5C+PCg7lX4yCNaJD PsVK16JPfYdC5RwozceQdHS7g5SOB+U= -----END CERTIFICATE-----Generated at Sat Aug 23 23:48:30 2025 by rpki-client