$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa File: 61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa (raw, json) Hash identifier: D9Q+2cUYm7cfq7NELuTmdhewIS9me98SDIWTYRzLSGY= Subject key identifier: 57:2A:E4:1C:38:68:34:F7:F9:4D:B1:02:BB:EE:1F:61:91:E0:C6:98 Certificate issuer: /CN=e91007f4-8b69-443f-87b7-248480814a0d Certificate serial: 010D0C9F4328584AD23BB27B2CDCD17EDC65A4E0 Authority key identifier: A7:95:A3:A8:E1:31:73:8C:3A:4C:DC:61:E8:20:AF:8E:4F:70:E0:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 11039 IP address blocks: 128.164.0.0/16 maxlen: 16 161.253.0.0/16 maxlen: 16 161.253.0.0/17 maxlen: 17 161.253.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b2:7b:2c:dc:d1:7e:dc:65:a4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e91007f4-8b69-443f-87b7-248480814a0d Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=d96fda4e-3925-409d-8d76-657f90e5e331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:55:22:8d:0a:9e:06:02:e9:d5:fe:34:0a:da: f9:6e:0a:5a:24:ff:25:ed:6d:a1:f1:c0:0d:35:09: a7:e7:18:93:96:1c:fe:c5:b4:a1:f8:73:db:08:ab: 7e:a4:97:1d:44:63:10:2f:3d:2e:74:b9:aa:a8:7f: 25:d8:e7:ab:ef:34:d0:61:cb:2b:ad:6d:d4:39:c5: d0:20:7e:9c:cf:c8:b9:43:f2:ef:8d:c7:70:d4:4b: 0b:68:47:04:77:fc:1f:41:e6:0f:81:ac:24:6c:30: 8a:42:2f:a2:a2:dc:13:79:72:f5:62:71:29:77:2d: 97:48:bf:a5:58:a0:c4:cb:51:46:a9:3d:3b:1b:9d: 80:67:66:4c:3b:76:bd:87:2b:44:c9:f7:7d:d5:20: 76:3b:e2:e1:8c:93:fa:a6:57:27:71:fe:30:92:65: d1:05:66:2f:bb:1e:b4:b8:d9:09:d5:ca:27:8a:8f: b1:b5:55:1c:7c:d4:4a:44:a2:b2:16:47:d7:ad:45: 1a:a1:b6:ec:71:99:1a:92:87:ee:bc:c1:13:23:7a: 26:7b:93:61:d1:45:2d:68:46:19:79:9f:c9:ad:5b: 28:8d:09:45:c7:17:e5:b0:9f:fd:6b:17:99:58:7c: 15:ad:75:56:74:1a:ac:ab:4c:cd:5a:45:18:b9:67: 73:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2A:E4:1C:38:68:34:F7:F9:4D:B1:02:BB:EE:1F:61:91:E0:C6:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.crl X509v3 Authority Key Identifier: keyid:A7:95:A3:A8:E1:31:73:8C:3A:4C:DC:61:E8:20:AF:8E:4F:70:E0:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d.cer sbgp-ipAddrBlock: critical IPv4: 128.164.0.0/16 161.253.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:20:84:e5:3f:dc:78:00:77:8f:52:bc:aa:3d:09:b4:14:45: ca:b7:24:51:22:0f:82:58:b3:4b:97:d6:a3:12:a1:d2:e4:42: 11:80:4b:5c:65:ac:3a:26:47:82:10:17:4e:d6:02:2f:41:86: 78:b9:ef:e1:c9:d2:68:b5:5d:9c:04:46:30:1e:53:5f:94:af: 7e:9c:f6:0b:c1:e0:cd:78:12:b9:3e:e5:0a:7c:b8:04:b9:de: 4e:dc:6e:95:bc:f1:25:92:d2:20:01:bc:12:4e:d3:a1:6d:8f: b2:aa:86:0d:83:7f:3f:0e:79:dc:e8:13:34:92:83:78:ef:a0: 8e:8e:72:69:93:3d:14:b5:8f:dc:99:76:1a:7e:2b:37:d0:b5: 2f:0c:d4:fd:a5:8d:7c:15:ec:94:79:a4:b8:75:03:11:1c:87: 4f:44:e0:85:28:f1:32:44:72:ef:d1:64:ae:97:31:e7:49:59: 22:2e:78:84:bb:50:29:b7:cf:52:b7:0e:ea:5d:71:b7:02:df: f3:3a:c8:d6:97:4c:be:22:84:fa:82:8d:2a:fc:68:ac:0b:7c: b7:b7:45:8f:60:34:f9:39:76:b8:5b:f5:69:61:8a:a0:55:cf: 4c:45:22:73:f3:26:1b:cc:69:a6:c8:90:25:b3:cf:83:52:ca: 75:ab:63:8a -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWErSO7J7LNzRftxlpOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTkxMDA3ZjQtOGI2OS00NDNmLTg3YjctMjQ4NDgwODE0 YTBkMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZDk2ZmRhNGUtMzkyNS00MDlkLThkNzYtNjU3ZjkwZTVlMzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lUijQqeBgLp1f40Ctr5bgpaJP8l7W2h8cAN NQmn5xiTlhz+xbSh+HPbCKt+pJcdRGMQLz0udLmqqH8l2Oer7zTQYcsrrW3UOcXQ IH6cz8i5Q/Lvjcdw1EsLaEcEd/wfQeYPgawkbDCKQi+iotwTeXL1YnEpdy2XSL+l WKDEy1FGqT07G52AZ2ZMO3a9hytEyfd91SB2O+LhjJP6plcncf4wkmXRBWYvux60 uNkJ1conio+xtVUcfNRKRKKyFkfXrUUaobbscZkakofuvMETI3ome5Nh0UUtaEYZ eZ/JrVsojQlFxxflsJ/9axeZWHwVrXVWdBqsq0zNWkUYuWdz5QIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFFcq5Bw4aDT3+U2xArvuH2GR4MaYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lOTEw MDdmNC04YjY5LTQ0M2YtODdiNy0yNDg0ODA4MTRhMGQvNjFkZThhMTEtOWY1ZC0z ZTc2LWE3MmQtNmYzMGFhNDk0ZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTkxMDA3ZjQtOGI2OS00NDNmLTg3 YjctMjQ4NDgwODE0YTBkL2U5MTAwN2Y0LThiNjktNDQzZi04N2I3LTI0ODQ4MDgx NGEwZC5jcmwwHwYDVR0jBBgwFoAUp5WjqOExc4w6TNxh6CCvjk9w4I8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lOTEwMDdmNC04YjY5LTQ0M2YtODdiNy0yNDg0 ODA4MTRhMGQuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgKQDAwCh /TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBYIITlP9x4AHePUryqPQm0FEXKtyRRIg+CWLNLl9ajEqHS5EIR gEtcZaw6JkeCEBdO1gIvQYZ4ue/hydJotV2cBEYwHlNflK9+nPYLweDNeBK5PuUK fLgEud5O3G6VvPElktIgAbwSTtOhbY+yqoYNg38/Dnnc6BM0koN476COjnJpkz0U tY/cmXYafis30LUvDNT9pY18FeyUeaS4dQMRHIdPROCFKPEyRHLv0WSulzHnSVki LniEu1Apt89Stw7qXXG3At/zOsjWl0y+IoT6go0q/GisC3y3t0WPYDT5OXa4W/Vp YYqgVc9MRSJz8yYbzGmmyJAls8+DUsp1q2OK -----END CERTIFICATE-----Generated at Sat Aug 23 21:57:54 2025 by rpki-client