$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2f4e8136-4f8b-3401-9a4b-293d34fe3c28.roa File: 2f4e8136-4f8b-3401-9a4b-293d34fe3c28.roa (raw, json) Hash identifier: piCLi4YZBImUTkuR/NdpX2ThH33/ta0fgObh7jiEZxg= Subject key identifier: 87:15:CC:64:38:F9:47:5F:79:2A:1E:D1:6B:1A:4C:D3:3A:0C:EC:8C Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584AECC117FDE6D30871DA9A08B8 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2f4e8136-4f8b-3401-9a4b-293d34fe3c28.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 62164 IP address blocks: 216.224.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:17:fd:e6:d3:08:71:da:9a:08:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=8dad9d8d-15d8-41aa-929e-67fdae932622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a5:63:3d:b6:04:b9:1a:39:43:27:96:9a:69: c3:5a:5c:89:40:d3:b7:dc:c5:25:ef:7e:d4:d9:10: e9:a5:ad:8c:fc:50:35:c6:90:bc:1a:19:de:d3:60: 23:ac:29:dd:98:0e:1a:bf:00:6d:73:95:26:d7:c9: b5:05:62:4e:ac:96:31:81:c8:1f:d1:c4:a6:36:28: 9d:95:ee:c4:e3:e8:51:01:18:f0:58:2a:cc:2a:84: 28:f3:6b:f6:81:24:90:9c:42:55:60:67:26:3b:aa: 04:a0:14:05:01:e1:cb:c5:8d:47:05:04:59:26:cb: 7a:a9:13:ab:e5:b4:ff:75:a4:9d:ac:2f:8e:be:07: ba:0f:cd:56:81:61:2a:61:0a:85:82:9f:72:6d:44: 1a:21:9d:7b:d7:70:01:7c:55:64:75:e7:f2:cb:38: d5:f0:45:07:82:04:c5:df:0c:0c:1a:ea:b7:cd:24: ba:a8:92:e4:3c:ee:2d:4e:c6:72:b5:61:3f:f4:bd: 1e:10:1e:7e:a3:e3:68:03:5a:b2:cb:a6:50:4a:f9: 14:2f:4f:2f:c0:7e:ab:ec:cb:59:14:30:ea:8c:e9: 13:ee:f8:a6:87:6e:6b:2c:e2:46:35:cd:85:8b:a2: eb:25:ab:c3:bc:5f:0b:d4:3e:53:68:19:69:50:10: ae:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:15:CC:64:38:F9:47:5F:79:2A:1E:D1:6B:1A:4C:D3:3A:0C:EC:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2f4e8136-4f8b-3401-9a4b-293d34fe3c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:99:cc:5e:c2:c9:be:d9:01:c6:61:ef:6a:35:02:48:74:8f: d8:b0:77:14:20:eb:dc:36:31:5b:fb:94:41:54:a1:82:42:79: b6:3a:4a:0e:90:d0:a8:e4:31:ab:ee:10:7e:b8:3f:4b:0c:f6: 89:c3:20:01:77:6e:ea:0d:51:c3:f8:e2:1f:de:f0:c0:23:64: 3b:1e:b7:df:8b:31:7f:33:7c:9c:e2:2d:a7:0c:e4:4c:fa:d3: 6b:fc:a1:82:7a:7a:b6:ff:b6:ee:02:2d:65:6f:08:65:bb:98: 6e:76:56:7e:c0:94:b5:86:ee:f5:16:ef:83:34:58:90:0e:24: d3:e0:5c:cc:52:ac:d0:79:ba:17:f3:d0:1c:46:cb:a7:32:45: 34:70:ec:81:20:eb:12:86:4f:08:fd:e0:b4:6c:13:55:15:5c: 5c:d4:fb:d8:13:ad:dc:41:ff:59:ef:b3:48:ad:b4:0b:be:a7: c7:32:0e:b8:3b:3f:cf:10:95:61:9d:19:ab:5d:55:47:db:09: 59:f3:a6:9b:ff:0f:36:4a:7e:c8:66:83:07:ad:16:6d:db:09: e3:18:dd:9d:27:ac:7d:ca:47:b9:d0:70:c8:ec:cb:74:c9:0b: cd:6d:a1:d8:95:f0:5c:b6:2a:a2:79:9c:5f:0e:3a:d4:a4:f4: 42:e8:ee:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswRf95tMIcdqaCLgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OGRhZDlkOGQtMTVkOC00MWFhLTkyOWUtNjdmZGFlOTMyNjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaVjPbYEuRo5QyeWmmnDWlyJQNO33MUl737U 2RDppa2M/FA1xpC8Ghne02AjrCndmA4avwBtc5Um18m1BWJOrJYxgcgf0cSmNiid le7E4+hRARjwWCrMKoQo82v2gSSQnEJVYGcmO6oEoBQFAeHLxY1HBQRZJst6qROr 5bT/daSdrC+Ovge6D81WgWEqYQqFgp9ybUQaIZ1713ABfFVkdefyyzjV8EUHggTF 3wwMGuq3zSS6qJLkPO4tTsZytWE/9L0eEB5+o+NoA1qyy6ZQSvkUL08vwH6r7MtZ FDDqjOkT7vimh25rLOJGNc2Fi6LrJavDvF8L1D5TaBlpUBCuEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcVzGQ4+UdfeSoe0WsaTNM6DOyMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMmY0ZTgxMzYtNGY4Yi0z NDAxLTlhNGItMjkzZDM0ZmUzYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeZzF7Cyb7ZAcZh72o1Akh0j9iwdxQg69w2MVv7lEFUoYJCebY6Sg6Q 0KjkMavuEH64P0sM9onDIAF3buoNUcP44h/e8MAjZDset9+LMX8zfJziLacM5Ez6 02v8oYJ6erb/tu4CLWVvCGW7mG52Vn7AlLWG7vUW74M0WJAOJNPgXMxSrNB5uhfz 0BxGy6cyRTRw7IEg6xKGTwj94LRsE1UVXFzU+9gTrdxB/1nvs0ittAu+p8cyDrg7 P88QlWGdGatdVUfbCVnzppv/DzZKfshmgwetFm3bCeMY3Z0nrH3KR7nQcMjsy3TJ C81todiV8Fy2KqJ5nF8OOtSk9ELo7h0= -----END CERTIFICATE-----Generated at Sat Aug 23 18:13:27 2025 by rpki-client