$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa File: 9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa (raw, json) Hash identifier: wEcpWtVJoaLo4/He8LkujNIiy0qW3j0p58BN2e59Kew= Subject key identifier: 38:3D:A2:89:91:01:B1:EF:73:DF:67:5E:E5:67:D3:AD:84:96:DE:59 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584ADECBB67D16A4FF42C3981580 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 11426 IP address blocks: 216.158.207.0/24 maxlen: 24 216.158.211.0/24 maxlen: 24 216.158.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:b6:7d:16:a4:ff:42:c3:98:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=c4d029e8-dea3-4072-a358-b89edcb067af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fe:65:59:f2:e4:b8:82:51:e0:9c:59:44:ef: 87:89:df:33:92:96:94:f4:60:99:12:32:80:34:e7: fb:34:89:07:03:fc:05:cd:e3:e7:a9:6a:83:83:a1: 59:c3:c1:4d:fb:fc:27:75:20:75:5f:2d:90:f9:17: c4:be:74:07:75:18:f6:76:73:81:bc:1b:80:48:58: 8b:5c:67:69:15:e4:62:3d:15:b0:e2:87:0e:9b:75: 28:2a:02:fd:8d:07:5a:d7:e4:a3:f9:df:d5:d3:ac: b0:d6:6d:40:d4:17:e1:8c:4a:f8:26:39:15:d2:b8: d4:fc:27:e9:04:32:9e:e4:17:b7:db:fa:e1:2f:5e: c6:3f:f6:0b:4a:34:75:0b:2b:28:36:92:62:1d:63: 19:ae:a2:52:92:a5:5d:0f:df:84:8e:02:4d:3f:12: d6:88:74:c5:c4:7f:25:4f:87:52:4e:0e:2f:2e:a0: 14:e8:c6:aa:8a:49:4b:e0:0c:e4:b8:79:7e:07:32: 4e:e9:9e:ab:60:fc:2b:f6:2a:bc:fb:13:9e:50:11: f0:e3:c2:4f:66:1f:2e:19:16:4f:44:c5:0d:70:97: cd:2a:23:17:bc:e8:8f:52:c9:2a:db:3c:65:97:25: f9:64:9f:1c:ac:ab:b8:e9:b9:2b:7a:d5:d0:11:59: 8b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3D:A2:89:91:01:B1:EF:73:DF:67:5E:E5:67:D3:AD:84:96:DE:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 216.158.207.0/24 216.158.211.0/24 216.158.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:1e:f8:da:77:2e:66:88:99:62:8e:19:24:6e:f7:1a:26:ac: 79:90:13:8e:e6:24:57:36:a3:b3:73:e6:7c:6f:81:6b:07:72: ec:e8:a6:38:13:92:58:15:f4:49:a0:17:b9:b0:a4:ac:7f:a5: 8b:40:a2:76:77:c9:cb:6e:52:35:8d:41:23:f8:52:d2:6e:12: 12:3b:09:fe:85:35:ae:08:35:69:04:e6:cd:e1:fd:ff:20:c6: cd:49:7e:78:fc:45:54:5f:63:af:d2:19:de:c2:39:68:cb:7c: 83:75:c4:40:87:78:74:6a:64:59:5c:16:80:61:c6:43:68:c5: 35:a8:b2:98:7f:8d:10:96:bc:1b:36:fc:2e:50:e6:d6:63:81: 56:68:7b:62:1f:9d:e0:75:4b:98:99:62:ea:13:8f:e0:f5:ea: 17:94:11:7b:e7:d2:49:52:d8:b4:ef:8c:8e:16:9c:2a:81:40: 21:3d:75:81:74:4b:7f:b6:a8:37:41:4d:a4:04:53:e6:1e:06: 24:2c:95:66:ba:5b:c3:34:22:af:c3:ba:5d:14:b4:3d:29:a5: be:f9:a5:2a:be:ee:f1:b5:d5:1a:6c:31:5e:86:f8:f3:6c:72: 83:a2:c7:82:f7:91:8c:17:4a:92:11:89:ca:ec:35:9e:00:0c: e8:47:6c:f9 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWErey7Z9FqT/QsOYFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk YzRkMDI5ZTgtZGVhMy00MDcyLWEzNTgtYjg5ZWRjYjA2N2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv5lWfLkuIJR4JxZRO+Hid8zkpaU9GCZEjKA NOf7NIkHA/wFzePnqWqDg6FZw8FN+/wndSB1Xy2Q+RfEvnQHdRj2dnOBvBuASFiL XGdpFeRiPRWw4ocOm3UoKgL9jQda1+Sj+d/V06yw1m1A1BfhjEr4JjkV0rjU/Cfp BDKe5Be32/rhL17GP/YLSjR1CysoNpJiHWMZrqJSkqVdD9+EjgJNPxLWiHTFxH8l T4dSTg4vLqAU6MaqiklL4AzkuHl+BzJO6Z6rYPwr9iq8+xOeUBHw48JPZh8uGRZP RMUNcJfNKiMXvOiPUskq2zxllyX5ZJ8crKu46bkretXQEVmLSQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDg9oomRAbHvc99nXuVn062Elt5ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvOWJkOWZmMWYtODdmOS0z ZjAwLWJiNmItMWY4ZTI0OGIwYjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA2J7PAwQA 2J7TAwQA2J7cMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACoe+Np3LmaImWKOGSRu9xomrHmQE47mJFc2o7Nz 5nxvgWsHcuzopjgTklgV9EmgF7mwpKx/pYtAonZ3yctuUjWNQSP4UtJuEhI7Cf6F Na4INWkE5s3h/f8gxs1Jfnj8RVRfY6/SGd7COWjLfIN1xECHeHRqZFlcFoBhxkNo xTWosph/jRCWvBs2/C5Q5tZjgVZoe2IfneB1S5iZYuoTj+D16heUEXvn0klS2LTv jI4WnCqBQCE9dYF0S3+2qDdBTaQEU+YeBiQslWa6W8M0Iq/Dul0UtD0ppb75pSq+ 7vG11RpsMV6G+PNscoOix4L3kYwXSpIRicrsNZ4ADOhHbPk= -----END CERTIFICATE-----Generated at Sat Aug 23 16:02:15 2025 by rpki-client