$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/7349fb17-24d7-3b46-9c87-43a461d41c0b.roa File: 7349fb17-24d7-3b46-9c87-43a461d41c0b.roa (raw, json) Hash identifier: SSnzM3JxmB3IcZ7IDKpc0OznR1dUN0z9eYzTLyxVDFY= Subject key identifier: 4B:3E:9F:35:74:38:41:C5:CE:12:B3:57:E8:36:E3:B2:EA:61:6F:C4 Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F4328584ADD6669D798C3AFE53607C680 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/7349fb17-24d7-3b46-9c87-43a461d41c0b.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 54225 IP address blocks: 216.21.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:69:d7:98:c3:af:e5:36:07:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=5a9e68bc-73f8-4cba-b08c-3d21779ceb68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:42:fa:1b:91:3a:5b:99:95:fc:5b:cd:77:82: 79:5d:b6:1b:44:66:80:cd:2d:59:e1:1b:7a:11:31: 94:1b:77:79:f6:8c:77:c5:48:c9:45:13:0a:3e:c6: 92:f8:33:01:d1:f2:e5:7f:81:00:20:03:f3:2d:04: 04:a6:c7:fa:ef:fa:73:cc:32:cf:e3:6a:13:72:e4: d6:cb:36:12:2f:f1:79:49:be:ed:36:da:06:7d:fe: e2:16:28:cc:a7:76:d4:27:b6:e4:c0:fc:36:69:5e: f2:dd:3e:59:71:7e:77:e7:3b:69:90:fa:e8:3d:b4: ff:9f:1f:8d:8b:61:61:99:14:14:0b:c7:3f:c8:5e: 55:36:f8:d2:b0:bb:ac:57:aa:d1:e0:c5:a2:fa:45: 88:4b:b9:30:52:28:cb:7a:a6:c6:c3:0e:fb:7a:1c: 4d:ae:68:38:a7:1c:a6:65:13:19:40:ea:d5:a9:e3: 85:da:e6:a6:06:ac:2a:d4:0b:47:13:0f:ed:d3:04: bf:01:1f:7d:57:38:44:06:c3:a5:34:ba:2f:86:82: d1:b9:3a:fc:09:41:b0:bb:03:99:fd:cd:e7:cb:c6: 16:f4:8a:ec:a5:91:95:ed:84:ae:6b:bc:8f:0f:71: 06:bf:a5:d7:4e:5d:9e:ef:d8:d8:a9:5f:f2:46:9c: c1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3E:9F:35:74:38:41:C5:CE:12:B3:57:E8:36:E3:B2:EA:61:6F:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/7349fb17-24d7-3b46-9c87-43a461d41c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv4: 216.21.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:37:e7:75:23:d2:09:48:15:96:b9:ae:1c:77:be:ef:54:fe: a1:c5:73:a5:3b:0d:0a:21:8c:95:80:6c:fd:fd:2f:62:59:59: 25:e5:16:ea:36:59:00:4b:ea:2c:a0:88:ff:32:61:02:de:65: 15:71:54:dd:89:12:e1:76:57:2b:f5:0c:92:19:40:ea:d6:79: da:bf:3e:9c:59:73:fd:6d:8c:62:a6:25:6a:67:60:fb:09:b0: 55:f5:2b:d9:0e:25:27:35:43:ae:3d:60:34:f7:93:cc:e6:d6: 50:6f:6b:44:f7:c4:f7:22:c4:25:f4:a2:8f:8b:80:3c:80:8b: e1:ca:27:f2:0d:9c:bf:2d:48:4b:73:06:79:26:62:3d:c5:b3: a7:46:a6:63:e2:ba:dc:36:16:64:45:72:f2:82:06:0e:b1:aa: 56:c7:19:97:da:5f:f3:18:30:e3:a5:d5:8c:3e:0b:8e:dd:48: 89:4d:5d:2a:75:2b:54:d4:9e:2b:59:af:ea:7c:9b:54:a2:6f: 69:a2:c6:c0:25:01:3b:70:24:89:e9:2a:83:ba:6a:b2:d2:8d: 7c:8e:55:04:03:79:47:67:ba:98:17:ef:2d:fc:93:be:33:2a: 58:5b:bc:d8:27:6f:1f:da:85:a7:a6:a3:e4:29:d7:0b:26:28: 11:5f:cd:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZmnXmMOv5TYHxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NWE5ZTY4YmMtNzNmOC00Y2JhLWIwOGMtM2QyMTc3OWNlYjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0L6G5E6W5mV/FvNd4J5XbYbRGaAzS1Z4Rt6 ETGUG3d59ox3xUjJRRMKPsaS+DMB0fLlf4EAIAPzLQQEpsf67/pzzDLP42oTcuTW yzYSL/F5Sb7tNtoGff7iFijMp3bUJ7bkwPw2aV7y3T5ZcX535ztpkProPbT/nx+N i2FhmRQUC8c/yF5VNvjSsLusV6rR4MWi+kWIS7kwUijLeqbGww77ehxNrmg4pxym ZRMZQOrVqeOF2uamBqwq1AtHEw/t0wS/AR99VzhEBsOlNLovhoLRuTr8CUGwuwOZ /c3ny8YW9IrspZGV7YSua7yPD3EGv6XXTl2e79jYqV/yRpzBXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEs+nzV0OEHFzhKzV+g247LqYW/EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvNzM0OWZiMTctMjRkNy0z YjQ2LTljODctNDNhNDYxZDQxYzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2BXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGY353Uj0glIFZa5rhx3vu9U/qHFc6U7DQohjJWAbP39L2JZWSXlFuo2 WQBL6iygiP8yYQLeZRVxVN2JEuF2Vyv1DJIZQOrWedq/PpxZc/1tjGKmJWpnYPsJ sFX1K9kOJSc1Q649YDT3k8zm1lBva0T3xPcixCX0oo+LgDyAi+HKJ/INnL8tSEtz BnkmYj3Fs6dGpmPiutw2FmRFcvKCBg6xqlbHGZfaX/MYMOOl1Yw+C47dSIlNXSp1 K1TUnitZr+p8m1Sib2mixsAlATtwJInpKoO6arLSjXyOVQQDeUdnupgX7y38k74z KlhbvNgnbx/ahaemo+Qp1wsmKBFfzWI= -----END CERTIFICATE-----Generated at Sat Aug 23 16:13:24 2025 by rpki-client