$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa File: a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa (raw, json) Hash identifier: ZmU1u5QerTO4AozuYnIIgdld//RVb0rVtPFH/5L0JDE= Subject key identifier: 11:3D:4A:B6:FA:D3:DD:7C:4F:44:DA:91:0D:27:02:B0:4C:C9:BC:18 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584AF52127ED60A6CDA0C598F200 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 18434 IP address blocks: 216.189.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:27:ed:60:a6:cd:a0:c5:98:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=bf168b23-c05b-4fd9-aaf4-305ffe53b618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c9:cb:68:c2:34:9c:df:f4:08:fe:8f:20:d9: 25:3d:33:2c:0b:21:5c:61:6d:7a:2f:ad:58:62:70: 55:09:75:18:78:f9:7a:6e:9d:fc:2e:e8:a4:6d:7e: b5:2b:c3:23:85:52:e6:d4:75:83:2c:47:7c:96:d3: b7:87:7d:d8:d0:a8:36:82:b2:59:6c:57:1b:01:78: 07:28:4a:fb:30:92:0a:f4:2f:53:f9:d2:5a:9a:51: e2:9f:ac:9a:28:0d:54:de:36:84:5b:e8:8f:48:39: fe:28:99:2e:38:4b:ed:88:76:1b:bb:03:c7:95:6c: 37:e8:2c:99:4d:43:44:49:43:c8:b1:29:b8:94:44: 73:67:a5:11:cd:3f:71:b7:e8:25:2c:9b:f4:e8:26: 1a:ae:75:59:ac:a5:91:e5:99:07:94:e7:04:68:91: 55:90:a9:5d:10:1e:c7:1e:8c:54:d0:b9:30:41:96: 1e:f9:8c:01:57:69:90:15:fc:69:4b:11:06:1a:aa: 81:6f:a8:f5:19:58:99:3f:6c:fd:13:ad:d2:cf:55: 70:bd:57:f5:ad:17:35:01:23:9a:01:96:2b:aa:65: c9:5c:73:c6:53:78:15:4c:fa:df:f0:6e:30:49:46: e4:19:dd:95:70:c7:5a:8d:03:13:db:1d:f7:5d:6d: 6b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3D:4A:B6:FA:D3:DD:7C:4F:44:DA:91:0D:27:02:B0:4C:C9:BC:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 216.189.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:0e:cc:28:bf:59:f2:d8:da:95:85:de:f3:28:8a:07:a3:8e: ea:ba:b1:e4:67:93:12:38:85:2b:d0:76:dc:ee:f2:92:c5:70: a5:7e:b0:c2:a8:20:93:27:d7:d4:9e:fa:6e:90:0d:52:a4:c0: 07:de:8e:7f:de:c2:df:a7:08:44:29:38:82:89:de:c2:4d:36: 43:92:fa:d5:44:99:30:1e:ee:41:72:ee:e5:18:86:f8:38:6c: 37:df:a6:4d:b6:14:15:9a:0b:f3:79:3b:2a:7b:61:a3:d1:09: a2:12:2e:40:92:06:c6:99:2b:65:8c:8d:40:db:b3:f0:7b:4c: cf:91:83:8c:e2:a9:c1:48:e8:7c:c3:5f:75:a4:34:d4:16:96: c3:c5:33:6c:1e:eb:f0:ee:99:7b:5a:ef:5b:61:cf:2d:50:7d: 1e:ee:a6:f1:15:e1:af:c5:59:de:91:20:52:f0:bc:4d:30:63: a7:bb:ab:f6:0f:83:3c:f4:20:dc:64:2c:c6:b2:85:69:22:31: 77:54:27:91:0d:72:7a:e8:2f:3e:1d:e9:b0:56:ec:6f:15:61: f9:10:6c:df:7c:db:bf:ae:91:b2:14:57:09:b5:fd:ca:2c:8d: 19:8f:4a:51:68:53:ed:e0:6b:d5:4c:4d:9b:b7:0c:9d:a1:d3: 13:b6:6a:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ISftYKbNoMWY8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YmYxNjhiMjMtYzA1Yi00ZmQ5LWFhZjQtMzA1ZmZlNTNiNjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsnLaMI0nN/0CP6PINklPTMsCyFcYW16L61Y YnBVCXUYePl6bp38LuikbX61K8MjhVLm1HWDLEd8ltO3h33Y0Kg2grJZbFcbAXgH KEr7MJIK9C9T+dJamlHin6yaKA1U3jaEW+iPSDn+KJkuOEvtiHYbuwPHlWw36CyZ TUNESUPIsSm4lERzZ6URzT9xt+glLJv06CYarnVZrKWR5ZkHlOcEaJFVkKldEB7H HoxU0LkwQZYe+YwBV2mQFfxpSxEGGqqBb6j1GViZP2z9E63Sz1VwvVf1rRc1ASOa AZYrqmXJXHPGU3gVTPrf8G4wSUbkGd2VcMdajQMT2x33XW1rsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBE9Srb60918T0TakQ0nArBMybwYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvYTFmMmRlZDAtMTljNS0z YTk3LTk1M2ItMmVhMTI2ZGExYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2L38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0OzCi/WfLY2pWF3vMoigejjuq6seRnkxI4hSvQdtzu8pLFcKV+sMKo IJMn19Se+m6QDVKkwAfejn/ewt+nCEQpOIKJ3sJNNkOS+tVEmTAe7kFy7uUYhvg4 bDffpk22FBWaC/N5Oyp7YaPRCaISLkCSBsaZK2WMjUDbs/B7TM+Rg4ziqcFI6HzD X3WkNNQWlsPFM2we6/DumXta71thzy1QfR7upvEV4a/FWd6RIFLwvE0wY6e7q/YP gzz0INxkLMayhWkiMXdUJ5ENcnroLz4d6bBW7G8VYfkQbN9827+ukbIUVwm1/cos jRmPSlFoU+3ga9VMTZu3DJ2h0xO2ak0= -----END CERTIFICATE-----Generated at Mon Aug 25 06:09:41 2025 by rpki-client