$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa File: 2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa (raw, json) Hash identifier: QneJ0wd/wEcr9STil7rrnpk0BWZJmTFpeSHswms9mbQ= Subject key identifier: F6:D3:EB:DA:03:B4:26:D9:AD:13:CA:AB:35:15:21:0F:F7:C9:19:D9 Certificate issuer: /CN=4433fb4a-0d4c-40b7-b64f-d25082cbc954 Certificate serial: 010D0C9F4328584AD3A0F18FFA44E6F165D04B00 Authority key identifier: 22:E7:3A:FC:FE:25:50:4F:7C:AA:03:5E:26:53:05:C9:DF:0D:22:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 400071 IP address blocks: 216.73.182.0/23 maxlen: 32 2602:fc31::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f1:8f:fa:44:e6:f1:65:d0:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4433fb4a-0d4c-40b7-b64f-d25082cbc954 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=14ee56cb-803f-4558-8225-63e39c1face8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3a:c0:e2:e8:5b:60:c4:6a:91:97:4b:2b:f1: b5:c7:56:21:00:8c:b7:4c:d2:29:5f:13:00:be:4f: 4e:b9:7c:0f:c1:ae:af:31:5e:0c:95:8e:ed:40:63: dd:4d:44:0d:4c:7e:b1:5f:cd:49:4c:04:e5:66:98: 4f:c8:90:a3:68:05:0a:fa:e8:3c:da:eb:04:ae:4a: f9:ce:83:e5:72:de:ff:d9:d9:53:fc:5d:21:af:ac: 0c:6e:05:1e:55:6c:d9:d2:b3:64:7d:cc:ef:ef:04: 34:3d:7c:1f:37:75:7e:f7:f5:05:51:b0:83:f0:05: 41:e5:3f:89:47:e3:b8:75:a3:01:34:69:7a:27:b5: ff:c0:e2:a2:87:bf:c0:bb:ff:5b:b4:66:68:4e:81: 9d:3f:59:d1:fe:89:82:be:8a:79:62:a0:0a:b9:ab: 81:1c:87:09:e8:6b:69:da:fd:a6:dc:d6:8f:af:40: 5f:6b:02:e1:00:d1:c0:c7:a6:42:cb:e6:40:5a:4e: ab:ac:69:bf:4a:a0:0a:df:bb:80:2f:80:79:77:05: a2:87:14:7e:3d:b2:63:34:c5:5c:f4:e1:6d:84:c8: a5:83:32:0f:39:66:13:38:77:f5:a8:dd:f6:e4:7f: 09:80:81:1b:42:98:da:83:d1:f9:91:9e:42:93:dc: f1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D3:EB:DA:03:B4:26:D9:AD:13:CA:AB:35:15:21:0F:F7:C9:19:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.crl X509v3 Authority Key Identifier: keyid:22:E7:3A:FC:FE:25:50:4F:7C:AA:03:5E:26:53:05:C9:DF:0D:22:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer sbgp-ipAddrBlock: critical IPv4: 216.73.182.0/23 IPv6: 2602:fc31::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:f8:2c:94:40:8f:1c:63:ef:99:25:6c:d6:e8:04:e3:94:b2: 9c:8c:db:3a:c9:cb:f7:80:f4:21:89:8f:52:a1:ff:65:9c:cb: 78:01:4f:46:12:64:e3:bd:87:45:9f:1e:dc:a1:c8:39:ef:b1: 8b:0b:d3:52:04:90:e3:53:7a:03:a3:af:77:8d:78:ed:1a:f5: d1:84:8d:25:f3:b1:15:96:dd:11:28:c3:f4:2f:29:c5:51:80: 58:9a:fa:64:84:87:78:e3:f2:4e:35:19:f3:e5:8d:8e:c0:3e: b0:28:71:67:4f:98:01:49:8d:4f:41:fc:2c:d5:a4:e5:fb:24: 68:b5:81:dc:26:3f:12:08:7d:03:78:16:6b:ea:46:ef:3a:bf: ba:06:21:25:5b:5a:5a:90:6d:32:dd:54:8d:1f:fa:07:f4:95: 42:f8:51:65:b9:cc:4f:40:6c:26:6b:96:07:d6:f6:84:4f:e3: d7:e1:03:fa:81:8a:d8:41:7a:7a:9c:9c:92:63:c0:cd:40:55: d6:ab:a1:d7:b4:2f:34:b4:be:1f:1b:65:f6:4c:a3:b9:d6:35: d5:0f:6f:7c:ec:42:75:7d:39:7f:f1:eb:04:c0:78:20:57:e0: a3:c7:47:e0:d2:bb:2c:9d:77:b8:91:62:f9:f3:ed:1b:a9:36: 81:1f:14:10 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWErToPGP+kTm8WXQSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQzM2ZiNGEtMGQ0Yy00MGI3LWI2NGYtZDI1MDgyY2Jj OTU0MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk MTRlZTU2Y2ItODAzZi00NTU4LTgyMjUtNjNlMzljMWZhY2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzrA4uhbYMRqkZdLK/G1x1YhAIy3TNIpXxMA vk9OuXwPwa6vMV4MlY7tQGPdTUQNTH6xX81JTATlZphPyJCjaAUK+ug82usErkr5 zoPlct7/2dlT/F0hr6wMbgUeVWzZ0rNkfczv7wQ0PXwfN3V+9/UFUbCD8AVB5T+J R+O4daMBNGl6J7X/wOKih7/Au/9btGZoToGdP1nR/omCvop5YqAKuauBHIcJ6Gtp 2v2m3NaPr0BfawLhANHAx6ZCy+ZAWk6rrGm/SqAK37uAL4B5dwWihxR+PbJjNMVc 9OFthMilgzIPOWYTOHf1qN325H8JgIEbQpjag9H5kZ5Ck9zxGQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPbT69oDtCbZrRPKqzUVIQ/3yRnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NDMz ZmI0YS0wZDRjLTQwYjctYjY0Zi1kMjUwODJjYmM5NTQvMmI0ZDdkMjEtNjE2ZS0z ODRhLWFjZjUtMmIyNGQ1MzNjN2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDQzM2ZiNGEtMGQ0Yy00MGI3LWI2 NGYtZDI1MDgyY2JjOTU0LzQ0MzNmYjRhLTBkNGMtNDBiNy1iNjRmLWQyNTA4MmNi Yzk1NC5jcmwwHwYDVR0jBBgwFoAUIuc6/P4lUE98qgNeJlMFyd8NIgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NDMzZmI0YS0wZDRjLTQwYjctYjY0Zi1kMjUw ODJjYmM5NTQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQB2Em2MA4E AgACMAgDBgQmAvwxADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBm+CyUQI8cY++ZJWzW6ATjlLKcjNs6ycv3 gPQhiY9Sof9lnMt4AU9GEmTjvYdFnx7cocg577GLC9NSBJDjU3oDo693jXjtGvXR hI0l87EVlt0RKMP0LynFUYBYmvpkhId44/JONRnz5Y2OwD6wKHFnT5gBSY1PQfws 1aTl+yRotYHcJj8SCH0DeBZr6kbvOr+6BiElW1pakG0y3VSNH/oH9JVC+FFlucxP QGwma5YH1vaET+PX4QP6gYrYQXp6nJySY8DNQFXWq6HXtC80tL4fG2X2TKO51jXV D2987EJ1fTl/8esEwHggV+Cjx0fg0rssnXe4kWL58+0bqTaBHxQQ -----END CERTIFICATE-----Generated at Sat Aug 23 23:45:12 2025 by rpki-client