$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa File: 609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa (raw, json) Hash identifier: lp350hz9hFOH6rLfGRwpKZswlcycj5gS4MpRSF/uzL0= Subject key identifier: FB:94:1B:6D:FE:95:F7:B9:20:E5:B2:7C:93:D5:E1:47:4F:35:A0:21 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584B63673FE7322C8A33CDDC6700 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 394002 IP address blocks: 216.230.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3f:e7:32:2c:8a:33:cd:dc:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=25403d86-fde9-48f0-99d7-ce55d81b3fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dc:d5:39:5f:0e:bd:16:a4:cf:91:f8:a4:ba: bf:c8:e0:81:b6:25:5d:56:bc:7c:00:16:64:78:43: b1:81:1c:ac:37:e6:02:7b:1d:90:72:0c:4f:19:c0: b2:27:a9:a9:30:d0:52:c3:e0:bc:9e:e4:a3:d8:f0: 71:8b:65:32:59:97:02:73:dd:53:7b:ba:03:74:4a: 4a:d8:e4:aa:a6:31:9e:91:99:03:48:71:db:7a:b2: 99:43:8b:80:d1:e6:db:11:49:dc:06:10:98:c6:fa: 3e:f6:3f:d4:93:10:d8:ad:5a:a9:af:72:2f:e5:4b: 95:24:a5:3d:e0:76:34:ac:e7:89:ad:67:1c:43:fe: 6f:ee:d0:07:bf:1b:82:7e:dd:44:08:e7:23:ba:7b: 63:e1:7a:21:d4:58:66:7c:b0:d6:c0:aa:c5:3e:f5: f2:fb:05:54:97:12:f9:54:f8:2e:a0:62:2e:e6:cd: e5:90:44:76:22:c2:9b:04:8f:be:c4:4d:90:9b:f9: 8e:18:92:3b:a8:fc:1b:78:d8:41:84:95:12:ce:ba: 7c:c7:c2:aa:44:85:a2:76:f8:98:77:a9:e9:80:35: 7a:c2:0f:b4:95:2f:c8:fa:83:2a:cf:e1:40:58:0d: d4:b2:50:f4:36:4e:21:cf:25:99:a7:9b:45:8d:44: 68:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:94:1B:6D:FE:95:F7:B9:20:E5:B2:7C:93:D5:E1:47:4F:35:A0:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 216.230.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:6b:a3:88:9f:d4:15:6e:3c:ab:95:97:ad:c2:97:bc:0a:c2: 40:d9:2f:e2:0e:ce:d2:b8:65:51:6b:e2:41:aa:d2:25:a6:6c: 76:16:be:76:76:57:34:a1:ab:d7:f6:c9:d5:c8:1b:37:cd:e9: dc:21:d7:c2:97:ef:af:30:3b:06:e7:f7:5c:ce:a1:ef:28:d4: f0:f0:d6:e8:6c:41:49:c6:38:71:34:7b:57:56:d8:b1:b9:68: 47:74:7a:43:85:a1:f4:41:bc:e3:b6:15:5a:f3:35:bc:a0:6b: 49:2f:2b:04:27:20:3d:2d:72:4d:81:c0:8d:cd:53:28:7c:0a: 72:7f:6f:f1:c7:57:0f:5a:29:40:01:ad:42:71:7d:fe:bb:c5: 04:93:55:a7:ce:c9:b2:81:25:04:9b:41:26:80:59:54:af:ee: 42:46:10:cc:df:09:b2:c4:45:98:54:af:58:29:9f:1c:c5:bc: 7f:d5:5e:f7:98:c5:d7:bd:39:89:96:94:08:15:ee:8b:bd:f7: 91:e8:08:cd:f4:51:5c:84:f7:09:1a:85:0c:ca:ab:4c:b4:0b: f0:3e:23:0d:07:70:80:86:c2:bf:93:ce:42:32:e4:bc:b9:aa: 2b:22:62:ee:dc:56:28:67:86:24:fb:f0:81:f7:18:4d:75:6c: 04:9d:ea:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZz/nMiyKM83cZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk MjU0MDNkODYtZmRlOS00OGYwLTk5ZDctY2U1NWQ4MWIzZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9zVOV8OvRakz5H4pLq/yOCBtiVdVrx8ABZk eEOxgRysN+YCex2QcgxPGcCyJ6mpMNBSw+C8nuSj2PBxi2UyWZcCc91Te7oDdEpK 2OSqpjGekZkDSHHberKZQ4uA0ebbEUncBhCYxvo+9j/UkxDYrVqpr3Iv5UuVJKU9 4HY0rOeJrWccQ/5v7tAHvxuCft1ECOcjuntj4Xoh1FhmfLDWwKrFPvXy+wVUlxL5 VPguoGIu5s3lkER2IsKbBI++xE2Qm/mOGJI7qPwbeNhBhJUSzrp8x8KqRIWidviY d6npgDV6wg+0lS/I+oMqz+FAWA3UslD0Nk4hzyWZp5tFjURobwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuUG23+lfe5IOWyfJPV4UdPNaAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvNjA5ZWMxZTAtNDA4Yi0z YmZkLTk3NmItM2QwY2NiZDI5MzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtro4if1BVuPKuVl63Cl7wKwkDZL+IOztK4ZVFr4kGq0iWmbHYWvnZ2 VzShq9f2ydXIGzfN6dwh18KX768wOwbn91zOoe8o1PDw1uhsQUnGOHE0e1dW2LG5 aEd0ekOFofRBvOO2FVrzNbyga0kvKwQnID0tck2BwI3NUyh8CnJ/b/HHVw9aKUAB rUJxff67xQSTVafOybKBJQSbQSaAWVSv7kJGEMzfCbLERZhUr1gpnxzFvH/VXveY xde9OYmWlAgV7ou995HoCM30UVyE9wkahQzKq0y0C/A+Iw0HcICGwr+TzkIy5Ly5 qisiYu7cVihnhiT78IH3GE11bASd6kU= -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:08 2025 by rpki-client