$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa File: c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa (raw, json) Hash identifier: 6d5n5pLf8j4Z85lP1JXgVh85exaROnP4DcOyGiIQmiQ= Subject key identifier: 18:6E:58:E5:C3:2F:44:57:D8:84:60:66:14:78:60:95:8D:A0:62:9D Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584AF0F1341A698825284D8A5000 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 395831 IP address blocks: 216.157.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:34:1a:69:88:25:28:4d:8a:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=095af635-313c-48d0-a7cd-be8f93b2bed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:4b:bd:e5:32:89:4f:3b:80:10:6a:02:db: 3c:fe:5c:41:ce:5f:38:bd:16:26:b5:c2:10:4f:a8: d2:96:a4:c8:94:9c:3f:07:e8:0b:58:4a:a4:06:5e: c8:75:69:3e:34:87:d9:0d:ad:0c:ac:81:14:a4:af: 88:5f:87:f1:0d:8b:12:2e:ff:84:a1:c1:df:86:35: a6:23:b0:c3:27:f0:11:f4:16:8f:bb:17:7a:b1:ce: d1:01:ff:d2:e8:84:49:2c:36:e4:72:aa:7b:8e:da: c5:a4:b1:fe:7e:62:80:fe:1d:bf:44:ee:d4:56:fa: 18:6d:03:62:ed:0a:f6:25:ab:5d:90:4e:80:67:7f: dd:fa:8a:c8:de:e7:48:79:c3:a3:29:67:28:28:be: 11:0e:dd:66:8c:32:0c:1e:ed:da:94:2a:d3:0a:11: a5:b9:f9:93:39:21:7c:05:fb:c8:61:97:f4:7a:8d: 20:78:91:ca:00:97:8f:7f:41:17:16:dd:5c:e6:47: 0f:ab:7c:c2:4b:d8:7a:b5:b1:01:ac:53:38:70:00: 01:c7:9c:cc:3b:c0:56:e1:19:e3:1f:49:97:93:e3: ec:e2:6b:f7:34:b6:8d:a6:9a:24:01:99:e8:30:4f: 97:74:8e:65:8b:a3:b2:7d:1b:dd:d1:9a:1c:5b:ed: 33:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6E:58:E5:C3:2F:44:57:D8:84:60:66:14:78:60:95:8D:A0:62:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:3b:75:10:8c:11:3d:2b:ce:9d:40:4a:e8:49:62:93:c4:f5: a7:41:46:c2:c4:ca:6e:3a:9d:83:f7:86:5e:74:b9:3a:f0:b8: 07:25:e8:e8:5b:79:db:c3:bf:f5:a6:26:c2:d5:b2:4c:75:ae: bb:35:bb:a4:81:dd:75:f8:89:64:76:b5:61:c4:f8:8e:9a:1f: fd:21:4d:0f:63:c6:d6:e2:f4:ec:5f:ad:35:6d:50:63:76:83: 00:16:d1:26:0d:86:51:55:60:45:ae:a6:6b:5f:97:0f:70:cd: 59:f4:1d:c0:78:5b:16:c6:92:de:da:26:b8:b0:12:9a:44:48: 2d:02:fa:47:1f:aa:3b:39:52:0d:c1:1f:82:9a:47:6e:0a:5a: 46:70:6e:96:5a:68:e9:2e:4c:88:7c:1d:b0:37:69:a5:61:6e: 72:2c:af:ab:0c:c6:2d:26:c6:a9:14:12:90:5a:41:5a:f4:d8: 30:e7:a9:dc:4f:53:05:c7:e3:53:72:2b:aa:52:aa:d9:fb:8f: f4:11:48:03:83:aa:7f:37:ef:e3:24:6f:15:78:76:ca:65:cc: b6:08:48:d1:15:e6:2c:ce:1d:24:d7:d1:1d:48:6c:48:18:ab: 1c:a1:88:ed:8c:ee:39:ba:d1:1e:f6:b3:0d:0e:51:7e:fd:2a: a2:b2:00:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TQaaYglKE2KUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MDk1YWY2MzUtMzEzYy00OGQwLWE3Y2QtYmU4ZjkzYjJiZWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgBLveUyiU87gBBqAts8/lxBzl84vRYmtcIQ T6jSlqTIlJw/B+gLWEqkBl7IdWk+NIfZDa0MrIEUpK+IX4fxDYsSLv+EocHfhjWm I7DDJ/AR9BaPuxd6sc7RAf/S6IRJLDbkcqp7jtrFpLH+fmKA/h2/RO7UVvoYbQNi 7Qr2JatdkE6AZ3/d+orI3udIecOjKWcoKL4RDt1mjDIMHu3alCrTChGlufmTOSF8 BfvIYZf0eo0geJHKAJePf0EXFt1c5kcPq3zCS9h6tbEBrFM4cAABx5zMO8BW4Rnj H0mXk+Ps4mv3NLaNppokAZnoME+XdI5li6OyfRvd0ZocW+0ztQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhuWOXDL0RX2IRgZhR4YJWNoGKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYzJmZDNmMWQtN2RmNy0z Y2UwLTkyMzAtN2FhNzAwY2RiNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk7dRCMET0rzp1ASuhJYpPE9adBRsLEym46nYP3hl50uTrwuAcl6Ohb edvDv/WmJsLVskx1rrs1u6SB3XX4iWR2tWHE+I6aH/0hTQ9jxtbi9OxfrTVtUGN2 gwAW0SYNhlFVYEWupmtflw9wzVn0HcB4WxbGkt7aJriwEppESC0C+kcfqjs5Ug3B H4KaR24KWkZwbpZaaOkuTIh8HbA3aaVhbnIsr6sMxi0mxqkUEpBaQVr02DDnqdxP UwXH41NyK6pSqtn7j/QRSAODqn837+MkbxV4dsplzLYISNEV5izOHSTX0R1IbEgY qxyhiO2M7jm60R72sw0OUX79KqKyAII= -----END CERTIFICATE-----Generated at Sat Aug 23 19:52:40 2025 by rpki-client