$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa File: 0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa (raw, json) Hash identifier: qU+HXAUZouQLrb+3EGiWWldgSMRO5FEOOR7FDUmcM1c= Subject key identifier: 53:D0:8B:E8:E8:9A:C0:19:20:F1:96:36:57:B0:FC:4E:D3:DD:95:3C Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584AD3A0F554EBCB3FCB7E4B3A00 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 394111 IP address blocks: 216.213.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f5:54:eb:cb:3f:cb:7e:4b:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=b0c95b1a-6491-4135-9e29-1a94ad979e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d8:f5:54:b2:8d:6b:7c:95:e5:00:30:e5:1c: bc:bc:3b:fa:8a:8e:ac:2d:ae:ac:4e:ab:4c:43:a5: 64:aa:b0:fd:1f:15:47:15:62:5e:c8:29:49:63:a9: 6e:78:f1:b7:e6:c8:f3:f5:3e:b1:db:16:e3:8a:ab: 89:36:67:e9:44:5d:1b:d5:99:80:b4:89:9a:27:f8: 0c:72:f2:86:22:81:02:fb:2e:93:6a:2c:b1:5d:ac: bb:39:65:7d:0b:7f:6b:6a:c3:f3:30:10:32:73:d8: 95:60:f1:0b:c8:3d:dc:ae:a4:b6:b7:b6:fe:78:12: ff:e0:1c:db:df:b8:4d:c8:40:11:a5:dc:08:c4:2d: bd:b5:c3:d1:6f:b8:c8:7e:2d:a6:dd:3c:0b:c0:77: f2:ca:7b:27:ed:9d:73:99:99:b3:2b:67:4e:df:bd: 4b:ae:63:96:a4:f1:08:3e:6b:59:ad:86:2f:a2:a3: fd:dd:9e:8d:24:89:2e:8d:9a:40:e2:a5:cf:f3:d2: c6:f7:e2:43:6b:cb:d9:b0:5b:f0:54:8b:04:be:08: 5f:16:f5:6a:b2:fa:fd:b4:e5:2c:0a:e7:b6:1f:bf: f3:70:9d:8b:7d:fa:42:83:f2:b0:71:d5:6b:39:b1: 6c:90:28:54:dc:1a:63:91:f6:18:fc:e3:0e:e5:69: da:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D0:8B:E8:E8:9A:C0:19:20:F1:96:36:57:B0:FC:4E:D3:DD:95:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 216.213.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6b:99:ba:fa:d5:29:28:d2:d4:79:35:5e:e9:72:df:1f:9a: a8:9d:29:d7:ab:0c:10:48:5b:69:14:94:29:b8:15:f0:26:ad: 5a:d7:97:9f:e3:21:ba:ae:d1:4c:3d:cc:8e:aa:5d:93:19:52: ae:64:46:30:48:94:1c:6d:5c:82:c6:31:41:83:bc:58:b5:b6: f8:3f:05:5a:f1:2a:3f:dd:83:b4:9a:1c:3f:a8:08:c1:19:40: 86:71:96:29:d4:fb:ef:31:32:b6:16:9b:f3:90:62:af:9e:8f: 56:56:29:c9:83:b8:2b:a8:35:a5:58:04:78:49:d6:6d:e6:1c: 19:20:09:3d:20:3d:4a:45:28:bc:c8:aa:18:85:aa:15:fe:32: 76:b5:6b:9b:40:62:35:56:78:ad:e0:f5:b5:4f:e0:ac:3e:91: 6e:6b:83:e4:7e:cf:03:cb:25:4b:70:22:b9:bd:76:7c:7e:73: db:b5:c2:34:52:53:f4:80:a1:a7:0f:3a:c2:ee:96:fe:ac:11: 05:71:62:03:03:4c:56:3d:85:8f:d5:74:a1:bd:09:bc:90:ce: 75:b1:cf:45:26:b0:87:86:6d:de:47:31:bb:a4:7d:85:5f:da: 11:db:6f:43:68:5e:97:44:fa:95:ef:9d:09:c8:cc:23:d3:3a: c4:80:d7:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPVU68s/y35LOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk YjBjOTViMWEtNjQ5MS00MTM1LTllMjktMWE5NGFkOTc5ZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29j1VLKNa3yV5QAw5Ry8vDv6io6sLa6sTqtM Q6VkqrD9HxVHFWJeyClJY6luePG35sjz9T6x2xbjiquJNmfpRF0b1ZmAtImaJ/gM cvKGIoEC+y6TaiyxXay7OWV9C39rasPzMBAyc9iVYPELyD3crqS2t7b+eBL/4Bzb 37hNyEARpdwIxC29tcPRb7jIfi2m3TwLwHfyynsn7Z1zmZmzK2dO371LrmOWpPEI PmtZrYYvoqP93Z6NJIkujZpA4qXP89LG9+JDa8vZsFvwVIsEvghfFvVqsvr9tOUs Cue2H7/zcJ2LffpCg/KwcdVrObFskChU3BpjkfYY/OMO5WnaEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPQi+jomsAZIPGWNlew/E7T3ZU8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvMGVkMTQ2OWYtZGUzMC0z YTIzLWIwZDQtNzYxY2MxMTg2YTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2NUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZrmbr61Sko0tR5NV7pct8fmqidKderDBBIW2kUlCm4FfAmrVrXl5/j Ibqu0Uw9zI6qXZMZUq5kRjBIlBxtXILGMUGDvFi1tvg/BVrxKj/dg7SaHD+oCMEZ QIZxlinU++8xMrYWm/OQYq+ej1ZWKcmDuCuoNaVYBHhJ1m3mHBkgCT0gPUpFKLzI qhiFqhX+Mna1a5tAYjVWeK3g9bVP4Kw+kW5rg+R+zwPLJUtwIrm9dnx+c9u1wjRS U/SAoacPOsLulv6sEQVxYgMDTFY9hY/VdKG9CbyQznWxz0UmsIeGbd5HMbukfYVf 2hHbb0NoXpdE+pXvnQnIzCPTOsSA18w= -----END CERTIFICATE-----Generated at Sun Aug 24 00:05:25 2025 by rpki-client