$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/90ddf9e8-709b-3c6c-9947-ac0daf687943.roa File: 90ddf9e8-709b-3c6c-9947-ac0daf687943.roa (raw, json) Hash identifier: eGit6X7vgRRjUfqkaBW1p3+PWcOS0oDQe5Y4V7A+OAU= Subject key identifier: 4C:EA:29:5F:B2:4A:29:44:0A:84:50:00:01:3E:14:4C:25:24:86:1E Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584AC5AB94747E6330C7F87B3E50 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/90ddf9e8-709b-3c6c-9947-ac0daf687943.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13536 IP address blocks: 216.114.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:94:74:7e:63:30:c7:f8:7b:3e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=351b6fd7-77c3-4c24-b914-d057e1be16a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8e:38:48:65:49:f0:e0:94:4a:4d:f1:2f:1e: e4:5d:11:9d:18:5a:ca:98:f7:0f:52:a6:4e:72:39: 9b:c5:62:99:10:18:19:2a:9a:bf:f0:27:dc:8e:7c: ef:aa:bb:45:9b:5d:f7:71:a0:fa:63:42:19:f2:1a: d8:2f:87:60:c9:71:9c:d3:0a:bc:8b:2c:c1:69:a4: 59:1b:4f:6e:8a:c0:7a:ad:c9:b0:14:bf:64:41:23: 82:da:c4:bc:7d:83:4c:a1:de:83:47:52:e9:f5:32: b6:38:b2:07:9d:73:73:b4:3c:5c:fb:61:fb:a9:4f: 78:84:d1:12:73:73:d0:2d:d4:9a:b1:55:00:ae:2c: d0:8a:2e:05:d3:66:37:75:55:2c:b9:5c:96:dc:37: aa:31:5b:51:f9:05:19:25:b0:90:6b:02:73:9f:3e: a6:61:33:3f:32:88:d5:87:c3:34:70:4f:45:1f:a9: 66:d6:77:af:8a:7e:63:68:5c:8d:b2:b8:fa:78:9b: 3a:bb:49:6f:d0:0a:8a:57:bb:a6:dc:4c:ef:ee:d6: 11:a8:6e:3d:60:2f:ef:76:99:70:2e:53:af:56:6c: c8:2f:86:57:0f:02:87:4b:d4:73:76:b7:f3:91:53: d6:cc:6d:8f:9c:c3:b3:f4:d5:36:e1:dd:de:9e:3b: ee:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EA:29:5F:B2:4A:29:44:0A:84:50:00:01:3E:14:4C:25:24:86:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/90ddf9e8-709b-3c6c-9947-ac0daf687943.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.114.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:4f:b5:d1:0b:11:5a:70:20:59:65:5b:51:eb:a1:a7:47:59: ce:97:78:29:ed:62:f7:ea:03:bf:59:81:2d:f1:f7:fc:64:46: 1f:63:b4:4a:33:9e:01:95:e5:53:4d:29:bb:3d:41:81:86:33: ce:a9:74:ea:4a:a4:47:58:50:16:ef:22:69:86:39:44:0b:9f: 83:0d:3e:06:4b:b9:76:6f:83:32:36:9d:2a:c4:8b:ca:7d:d6: 2d:82:2d:68:7b:dd:f4:cf:f1:46:fc:ab:c2:df:78:9d:f9:51: 4b:54:c3:24:7b:ca:8a:8d:b9:a7:78:dd:33:44:68:74:1a:54: 15:fc:f5:9a:1b:3c:93:0e:51:e7:49:e4:7e:34:13:75:d2:c3: fc:c7:36:3b:1f:ca:b0:0d:a7:32:95:3c:8f:b5:11:ef:63:59: 6c:8a:c6:b5:54:ce:b8:65:6b:f7:cf:18:65:ff:e6:c7:38:ec: 4c:58:5a:de:12:50:b0:77:88:41:48:8c:a8:d8:1e:b4:73:95: eb:8b:8a:8b:b4:93:e9:78:8a:3b:30:28:88:64:02:e6:a1:20: f5:b5:38:ed:e4:c2:ee:f2:66:0b:23:a3:be:6f:57:6f:3c:15: de:9a:be:de:91:44:62:84:07:c9:90:66:af:8b:8d:0a:52:20: 91:74:54:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5R0fmMwx/h7PlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MzUxYjZmZDctNzdjMy00YzI0LWI5MTQtZDA1N2UxYmUxNmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo44SGVJ8OCUSk3xLx7kXRGdGFrKmPcPUqZO cjmbxWKZEBgZKpq/8CfcjnzvqrtFm133caD6Y0IZ8hrYL4dgyXGc0wq8iyzBaaRZ G09uisB6rcmwFL9kQSOC2sS8fYNMod6DR1Lp9TK2OLIHnXNztDxc+2H7qU94hNES c3PQLdSasVUArizQii4F02Y3dVUsuVyW3DeqMVtR+QUZJbCQawJznz6mYTM/MojV h8M0cE9FH6lm1nevin5jaFyNsrj6eJs6u0lv0AqKV7um3Ezv7tYRqG49YC/vdplw LlOvVmzIL4ZXDwKHS9RzdrfzkVPWzG2PnMOz9NU24d3enjvuTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzqKV+ySilECoRQAAE+FEwlJIYeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvOTBkZGY5ZTgtNzA5Yi0z YzZjLTk5NDctYWMwZGFmNjg3OTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HKdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJPtdELEVpwIFllW1HroadHWc6XeCntYvfqA79ZgS3x9/xkRh9jtEoz ngGV5VNNKbs9QYGGM86pdOpKpEdYUBbvImmGOUQLn4MNPgZLuXZvgzI2nSrEi8p9 1i2CLWh73fTP8Ub8q8LfeJ35UUtUwyR7yoqNuad43TNEaHQaVBX89ZobPJMOUedJ 5H40E3XSw/zHNjsfyrANpzKVPI+1Ee9jWWyKxrVUzrhla/fPGGX/5sc47ExYWt4S ULB3iEFIjKjYHrRzleuLiou0k+l4ijswKIhkAuahIPW1OO3kwu7yZgsjo75vV288 Fd6avt6RRGKEB8mQZq+LjQpSIJF0VMI= -----END CERTIFICATE-----Generated at Sun Aug 24 03:16:59 2025 by rpki-client