$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/4758fc45-0e76-3be9-a994-2b017acc14e5.roa File: 4758fc45-0e76-3be9-a994-2b017acc14e5.roa (raw, json) Hash identifier: NlP1OdkwU60KtZBs37VEHBULFCesBS5qFPAqkZ4Pt6g= Subject key identifier: 5B:7B:88:B0:00:1F:97:07:FA:C4:C4:81:D3:90:0A:0C:93:A4:3F:7D Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584AE032132737D8B48D211E9B40 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/4758fc45-0e76-3be9-a994-2b017acc14e5.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 25198 IP address blocks: 216.83.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:32:13:27:37:d8:b4:8d:21:1e:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=4bf8d097-218b-4a6d-9647-63c2dc3b0636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cd:ab:47:fd:b7:13:54:42:71:4f:4a:0b:a8: 3c:cb:03:51:df:46:21:41:51:9f:04:3b:6e:b1:8f: b7:08:ab:70:10:1e:2d:0e:51:80:c9:64:d4:9e:c9: d1:f9:75:32:ff:a8:c0:b8:b4:72:5f:b1:10:a5:60: f0:47:79:c6:e4:23:06:4b:da:12:d3:7e:57:69:81: 27:54:08:2c:53:ef:9a:f6:0d:47:32:58:20:fa:de: 93:fe:d4:c1:84:4e:88:db:bb:14:a4:e0:16:c8:3e: 69:85:1f:ae:2b:c8:e4:63:7e:f1:31:61:61:a8:7b: da:64:ab:8a:5f:cf:ec:8d:20:56:5b:74:b3:c6:a5: 7b:5a:0a:bb:44:7c:d2:97:c7:c0:5e:7d:30:87:af: ca:90:d3:3b:90:ae:9f:55:06:ba:3b:af:6e:ad:b1: 14:9c:25:3e:a4:55:35:f5:7f:2e:52:fb:79:73:bd: e1:85:6c:0b:3c:b0:b0:75:68:1e:c5:8f:29:1c:c3: 22:0b:f0:49:1e:3a:46:b1:bd:61:54:07:12:7d:d3: a8:fe:34:ca:b7:de:b6:20:5a:bb:a9:6b:f6:5b:b8: 7f:00:e1:f9:a2:73:0e:8f:fe:62:da:63:01:97:8d: c0:c5:ce:b8:8f:20:b6:95:2f:c8:9d:47:71:2c:45: c7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7B:88:B0:00:1F:97:07:FA:C4:C4:81:D3:90:0A:0C:93:A4:3F:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/4758fc45-0e76-3be9-a994-2b017acc14e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:1a:98:69:83:61:26:b2:ef:fa:08:e6:a6:c9:15:bf:64:5e: 04:22:50:e8:aa:ec:cc:5c:59:88:69:de:35:0b:c2:72:dd:e9: 4c:47:97:cc:df:3c:bf:e9:f1:fa:bb:1b:a0:db:1f:74:88:2e: ca:71:40:1d:4a:ba:e5:32:b4:3e:7d:fd:2f:ab:dc:74:49:48: ce:e4:30:24:cf:b4:80:4f:19:b0:a9:24:19:fc:e2:5b:fb:e9: ea:b6:2c:bb:fb:dc:96:11:98:fe:3c:69:e7:13:da:5e:10:9e: d6:1e:10:5b:4d:8b:fd:8b:69:d7:ee:67:1e:07:8b:9e:58:89: d2:b3:e2:ff:88:88:f2:5e:74:62:76:ae:58:c9:13:25:4b:25: d0:1e:35:a8:ed:7f:ea:89:31:bf:08:ca:02:2d:aa:cb:b5:ee: 5b:66:26:5b:f4:ae:79:f5:8c:2d:21:0a:59:0f:f6:aa:1e:a2: 4f:e0:d9:38:06:2b:e2:53:73:e4:03:7c:75:a5:26:63:49:64: ef:b6:eb:95:24:b8:7a:8d:f2:b5:d4:5d:82:38:17:b2:81:29: e5:d1:c9:1e:1c:76:4c:3c:8c:ff:c4:92:51:60:7f:7d:67:ab: 5e:07:3d:c5:f3:fb:2e:64:6c:fe:05:23:d2:eb:56:04:a4:c1: c1:69:03:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMhMnN9i0jSEem0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk NGJmOGQwOTctMjE4Yi00YTZkLTk2NDctNjNjMmRjM2IwNjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M2rR/23E1RCcU9KC6g8ywNR30YhQVGfBDtu sY+3CKtwEB4tDlGAyWTUnsnR+XUy/6jAuLRyX7EQpWDwR3nG5CMGS9oS035XaYEn VAgsU++a9g1HMlgg+t6T/tTBhE6I27sUpOAWyD5phR+uK8jkY37xMWFhqHvaZKuK X8/sjSBWW3SzxqV7Wgq7RHzSl8fAXn0wh6/KkNM7kK6fVQa6O69urbEUnCU+pFU1 9X8uUvt5c73hhWwLPLCwdWgexY8pHMMiC/BJHjpGsb1hVAcSfdOo/jTKt962IFq7 qWv2W7h/AOH5onMOj/5i2mMBl43Axc64jyC2lS/InUdxLEXHuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFt7iLAAH5cH+sTEgdOQCgyTpD99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvNDc1OGZjNDUtMGU3Ni0z YmU5LWE5OTQtMmIwMTdhY2MxNGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAamGmDYSay7/oI5qbJFb9kXgQiUOiq7MxcWYhp3jULwnLd6UxHl8zf PL/p8fq7G6DbH3SILspxQB1KuuUytD59/S+r3HRJSM7kMCTPtIBPGbCpJBn84lv7 6eq2LLv73JYRmP48aecT2l4QntYeEFtNi/2LadfuZx4Hi55YidKz4v+IiPJedGJ2 rljJEyVLJdAeNajtf+qJMb8IygItqsu17ltmJlv0rnn1jC0hClkP9qoeok/g2TgG K+JTc+QDfHWlJmNJZO+265UkuHqN8rXUXYI4F7KBKeXRyR4cdkw8jP/EklFgf31n q14HPcXz+y5kbP4FI9LrVgSkwcFpA/M= -----END CERTIFICATE-----Generated at Sat Aug 23 18:11:16 2025 by rpki-client