$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/474f025a-32e9-3b41-ab03-4d107ec88789.roa File: 474f025a-32e9-3b41-ab03-4d107ec88789.roa (raw, json) Hash identifier: yopPoDe6RZGrOzuWxvU12XoXreylsm95YlXl/fzLvlU= Subject key identifier: 3F:46:47:D2:68:20:E4:6E:7F:01:6C:55:6E:A6:D2:0F:03:F2:89:59 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584B28C6E3A4EEEC2509AF5A7484 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/474f025a-32e9-3b41-ab03-4d107ec88789.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 9009 IP address blocks: 216.158.193.0/24 maxlen: 24 216.158.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:e3:a4:ee:ec:25:09:af:5a:74:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=a53946a0-4bb4-4014-94ac-cd3107a7b0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7c:94:1a:a9:2e:3c:4a:f1:4e:e0:4c:84:1c: c7:1b:76:c2:84:21:e5:e9:83:0c:52:42:8f:9f:10: 42:3a:42:5f:61:23:dc:04:07:93:e6:37:21:9c:48: cd:97:fb:4f:48:c4:69:de:64:2f:84:f0:ca:5d:0c: 91:b3:4a:6b:0e:29:e2:b0:a0:4c:ab:2c:81:ad:18: 93:fb:86:33:44:7e:f0:07:2e:72:1b:82:ae:f4:3d: 1b:15:ba:a8:1f:34:3b:ef:20:d7:be:64:b6:08:61: b2:0d:58:0d:3f:af:50:17:9d:d2:a3:a5:05:2a:53: 42:7c:58:f4:48:6e:4b:55:89:90:d9:cf:f5:32:4e: 45:ff:45:b9:8f:7d:1c:2f:eb:ed:2e:38:fe:2e:c3: 8e:16:f4:19:ab:ec:41:39:b5:4f:61:ad:7b:bb:07: c1:31:54:12:62:26:95:2e:30:8f:69:30:e8:d1:65: 48:07:16:3f:2f:72:ef:41:93:29:af:2a:c3:bd:4d: b5:82:44:0a:2d:9c:5b:45:ac:74:12:e5:6b:34:62: ca:1b:d8:7e:09:b3:5f:ac:76:33:42:cf:fb:e3:93: b5:0f:9a:01:e3:8a:2b:78:6a:fa:c5:13:28:73:3a: 43:3d:89:dd:5e:ba:0d:55:ba:12:0e:d9:94:81:70: 6c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:46:47:D2:68:20:E4:6E:7F:01:6C:55:6E:A6:D2:0F:03:F2:89:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/474f025a-32e9-3b41-ab03-4d107ec88789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 216.158.193.0/24 216.158.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:63:3d:29:f5:f6:37:70:87:5a:30:32:74:df:ee:9e:58:60: 83:3b:59:c8:ba:d7:53:b9:ea:1c:df:c2:a3:ec:22:45:d9:25: 9f:28:4c:ba:29:04:48:8a:95:46:58:53:78:dc:f1:e8:cd:d4: 6e:4f:74:74:3d:4b:cd:01:13:33:98:f7:2d:f4:b0:0f:bf:86: cf:b7:6e:93:95:aa:92:02:7e:f9:2b:58:82:cd:cf:4a:f5:bd: f0:e5:be:f6:ca:cc:c9:6a:21:de:aa:25:ae:b6:6a:ea:62:ba: 3c:88:83:49:6a:11:4e:b0:b3:ee:78:2c:15:55:7b:24:a2:5a: 7b:7d:27:49:fb:6d:89:46:46:3b:64:86:ce:7e:0e:9b:0d:1f: d2:3d:11:cb:6b:70:5b:a7:a4:e3:24:15:a1:9b:91:3a:8a:b6: c8:68:a5:cc:18:f9:46:2b:d8:67:61:5f:39:66:b6:88:e8:2c: 6f:ac:50:ec:72:f2:03:89:2d:fd:46:5a:ba:9a:43:7e:94:70: be:e3:bd:be:fe:2e:f2:d0:a7:4f:47:b1:c2:64:64:33:2e:48: 29:6c:d5:95:da:36:20:02:8b:b6:cb:32:2a:d0:10:42:fd:1b: dd:6c:7a:c3:cc:4f:24:cf:77:fe:29:d4:b7:22:c2:7a:9f:3c: 5f:06:3c:9c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsoxuOk7uwlCa9adIQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk YTUzOTQ2YTAtNGJiNC00MDE0LTk0YWMtY2QzMTA3YTdiMGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3yUGqkuPErxTuBMhBzHG3bChCHl6YMMUkKP nxBCOkJfYSPcBAeT5jchnEjNl/tPSMRp3mQvhPDKXQyRs0prDinisKBMqyyBrRiT +4YzRH7wBy5yG4Ku9D0bFbqoHzQ77yDXvmS2CGGyDVgNP69QF53So6UFKlNCfFj0 SG5LVYmQ2c/1Mk5F/0W5j30cL+vtLjj+LsOOFvQZq+xBObVPYa17uwfBMVQSYiaV LjCPaTDo0WVIBxY/L3LvQZMpryrDvU21gkQKLZxbRax0EuVrNGLKG9h+CbNfrHYz Qs/745O1D5oB44oreGr6xRMoczpDPYndXroNVboSDtmUgXBsmwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFD9GR9JoIORufwFsVW6m0g8D8olZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvNDc0ZjAyNWEtMzJlOS0z YjQxLWFiMDMtNGQxMDdlYzg4Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2J7BAwQA 2J7bMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIxjPSn19jdwh1owMnTf7p5YYIM7Wci611O56hzfwqPsIkXZ JZ8oTLopBEiKlUZYU3jc8ejN1G5PdHQ9S80BEzOY9y30sA+/hs+3bpOVqpICfvkr WILNz0r1vfDlvvbKzMlqId6qJa62aupiujyIg0lqEU6ws+54LBVVeySiWnt9J0n7 bYlGRjtkhs5+DpsNH9I9EctrcFunpOMkFaGbkTqKtshopcwY+UYr2GdhXzlmtojo LG+sUOxy8gOJLf1GWrqaQ36UcL7jvb7+LvLQp09HscJkZDMuSCls1ZXaNiACi7bL MirQEEL9G91sesPMTyTPd/4p1LciwnqfPF8GPJw= -----END CERTIFICATE-----Generated at Mon Oct 20 10:52:12 2025 by rpki-client