$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0e39875d-36eb-30c1-a32a-1bc0e47a7d1d.roa File: 0e39875d-36eb-30c1-a32a-1bc0e47a7d1d.roa (raw, json) Hash identifier: cR8oUdadEN3lDojg5WemCZWyKPy5rFPd8KErWOldhJ0= Subject key identifier: 23:5C:E7:85:FC:47:13:41:E5:45:9A:C7:12:93:CD:C7:0D:BA:D0:A8 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584AC8767B431012B7B9086C3D40 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0e39875d-36eb-30c1-a32a-1bc0e47a7d1d.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13536 IP address blocks: 216.107.192.0/20 maxlen: 24 216.107.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:7b:43:10:12:b7:b9:08:6c:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=78b4cef0-34ad-4ba2-86c0-b9eeae0e51ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:43:e3:c6:59:63:10:76:33:32:90:a5:02: 20:a8:cb:25:53:a5:2f:f6:36:fe:d8:40:d4:ee:94: 99:ff:ec:09:7e:fe:a7:06:42:d1:65:b5:86:96:28: 16:44:c2:58:80:51:86:f5:a7:04:f2:2d:ad:3a:7e: d1:e9:90:b8:97:16:53:0a:b3:d3:cd:d8:9a:58:69: c1:d3:89:dd:bb:59:5f:34:ee:cc:76:f7:b1:a5:d1: 8b:b2:d9:eb:48:f3:5a:f6:c4:0f:c8:00:ed:3a:46: ba:99:6a:80:b0:4b:80:53:70:35:e8:ef:a3:41:b6: ec:f9:62:1f:ce:d9:82:16:59:f0:20:08:2d:e5:ed: 8f:2a:d0:99:07:38:68:e7:bb:8b:c1:08:ad:84:90: f8:da:80:5a:84:46:84:62:ff:7c:c3:e3:1c:5d:09: d0:56:30:90:ca:ae:36:65:61:a3:f6:20:9b:8f:79: 03:e7:3f:cf:81:ce:6d:42:9c:f1:3c:f3:3a:a9:9a: ef:e2:e9:bf:3c:48:6c:f3:89:df:f6:a6:68:20:6a: b4:26:3f:c7:bd:6c:77:25:5f:0f:ce:83:32:6b:a6: 0d:90:87:72:37:a2:78:3e:30:d5:74:5f:26:e2:8a: cd:aa:79:56:2d:e0:6c:f4:60:2f:eb:83:4e:e9:44: c8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5C:E7:85:FC:47:13:41:E5:45:9A:C7:12:93:CD:C7:0D:BA:D0:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0e39875d-36eb-30c1-a32a-1bc0e47a7d1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.107.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:6b:f3:40:bf:95:93:8a:21:55:d8:b4:8e:e4:5b:c3:6d:62: 96:a6:dd:aa:32:a4:5d:da:29:16:6c:57:79:cc:22:16:2d:24: 03:e6:d9:3d:88:17:f9:5a:a5:fc:b3:3f:76:bb:bf:13:de:2d: 8b:be:8c:cd:6a:79:8a:d0:25:50:db:c1:ce:7d:40:6b:b0:8c: db:ef:e5:a0:dc:64:08:24:25:c7:ac:7f:eb:12:ac:81:0b:f3: 2d:5e:af:1a:4a:8a:08:13:0a:15:1a:07:41:03:b8:d4:48:57: 22:9f:cf:2f:d8:95:f4:c1:95:db:04:50:e2:bc:68:21:81:15: 5b:1c:17:42:8d:c3:92:fa:fd:b8:ea:44:c3:36:3e:34:e0:32: f8:29:49:83:5a:25:12:1b:3f:70:de:ff:88:ee:ee:f6:b9:a6: 7d:b1:8f:9d:8c:35:51:34:87:b9:0b:1f:2b:e7:77:36:73:f2: ef:09:dd:c7:fe:40:46:42:2b:e6:3c:ae:ff:57:97:4d:2b:c1: 43:54:ed:5f:4d:44:be:76:6e:55:af:dd:da:0d:77:21:85:12: 9b:08:79:a0:4a:b9:9b:ea:c0:15:9e:af:9c:0e:18:2b:da:7f: 20:b9:15:b7:03:0f:b9:6e:6c:6a:fb:c1:14:63:f8:58:d0:3d: 91:74:28:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdntDEBK3uQhsPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk NzhiNGNlZjAtMzRhZC00YmEyLTg2YzAtYjllZWFlMGU1MWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEVD48ZZYxB2MzKQpQIgqMslU6Uv9jb+2EDU 7pSZ/+wJfv6nBkLRZbWGligWRMJYgFGG9acE8i2tOn7R6ZC4lxZTCrPTzdiaWGnB 04ndu1lfNO7MdvexpdGLstnrSPNa9sQPyADtOka6mWqAsEuAU3A16O+jQbbs+WIf ztmCFlnwIAgt5e2PKtCZBzho57uLwQithJD42oBahEaEYv98w+McXQnQVjCQyq42 ZWGj9iCbj3kD5z/Pgc5tQpzxPPM6qZrv4um/PEhs84nf9qZoIGq0Jj/HvWx3JV8P zoMya6YNkIdyN6J4PjDVdF8m4orNqnlWLeBs9GAv64NO6UTIZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNc54X8RxNB5UWaxxKTzccNutCoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMGUzOTg3NWQtMzZlYi0z MGMxLWEzMmEtMWJjMGU0N2E3ZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2GvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVr80C/lZOKIVXYtI7kW8NtYpam3aoypF3aKRZsV3nMIhYtJAPm2T2I F/lapfyzP3a7vxPeLYu+jM1qeYrQJVDbwc59QGuwjNvv5aDcZAgkJcesf+sSrIEL 8y1erxpKiggTChUaB0EDuNRIVyKfzy/YlfTBldsEUOK8aCGBFVscF0KNw5L6/bjq RMM2PjTgMvgpSYNaJRIbP3De/4ju7va5pn2xj52MNVE0h7kLHyvndzZz8u8J3cf+ QEZCK+Y8rv9Xl00rwUNU7V9NRL52blWv3doNdyGFEpsIeaBKuZvqwBWer5wOGCva fyC5FbcDD7lubGr7wRRj+FjQPZF0KBA= -----END CERTIFICATE-----Generated at Sun Aug 24 00:26:58 2025 by rpki-client