$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/4432433d-c4b1-3e44-82cc-f2a46a31efce.roa File: 4432433d-c4b1-3e44-82cc-f2a46a31efce.roa (raw, json) Hash identifier: 5fDlOxoAZSCSMtyeOTDEjdyDsESp+Obb781ciOQ28sw= Subject key identifier: F0:64:9D:2F:CC:2D:A6:9C:B7:32:89:32:16:4E:1A:25:60:18:18:80 Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Certificate serial: 010D0C9F4328584AF5215700D7D807F42FF01580 Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/4432433d-c4b1-3e44-82cc-f2a46a31efce.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 399575 IP address blocks: 216.205.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:57:00:d7:d8:07:f4:2f:f0:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=54b49295-83e8-4714-892d-de259f7005d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b7:99:71:64:50:74:51:fb:81:9b:3a:25:db: dd:64:c7:b1:4c:a6:10:99:51:29:8f:1c:34:6b:13: 20:96:e0:dc:49:30:36:89:3c:3b:e9:ed:4d:f0:b7: 65:9b:d4:5e:24:f0:2c:4b:c4:ba:0e:3c:ab:a5:ee: c2:f7:6f:ac:13:47:fb:db:a3:5b:43:aa:e8:e2:10: 4d:c5:07:31:13:d4:98:20:08:e8:29:2c:2e:22:c5: c3:fe:9d:50:ec:2d:91:23:7e:c4:39:db:3b:55:29: 3e:5a:68:df:1b:bd:48:9b:d3:52:68:01:15:a3:5d: 5d:fe:77:5e:35:77:2a:c0:94:f6:76:31:46:90:14: 4a:ff:91:7a:49:7f:f4:46:54:6c:c6:63:2c:2a:e5: b5:97:b6:e3:91:de:69:3e:95:34:ec:30:65:72:e9: b3:8c:52:0a:ff:db:c3:28:f5:04:a8:ea:2c:2a:3a: 5e:bb:ea:90:ee:36:f8:9f:c9:08:17:b5:ee:1f:67: 02:80:16:4c:b9:a4:4f:a7:24:5f:e0:5b:f2:1e:70: ac:b2:6d:64:bf:3a:c8:00:f3:13:55:d4:ff:d4:8a: 68:78:22:8b:2c:10:e7:f7:ff:5a:b1:db:ee:b4:cb: 7a:61:f7:35:56:67:88:ce:58:3b:d7:39:a3:84:ba: e1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:64:9D:2F:CC:2D:A6:9C:B7:32:89:32:16:4E:1A:25:60:18:18:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/4432433d-c4b1-3e44-82cc-f2a46a31efce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl X509v3 Authority Key Identifier: keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer sbgp-ipAddrBlock: critical IPv4: 216.205.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:68:48:6e:45:40:c1:e3:44:48:4b:d1:ad:e9:2b:3c:45:da: 02:da:5a:c8:53:a2:43:27:5d:3d:f5:75:51:ce:12:48:52:8e: a0:72:2d:6b:dd:4d:2b:f8:35:4e:5d:07:a0:32:4e:75:22:76: 11:c6:27:7a:d7:a9:75:b9:50:f4:fa:3e:db:3e:cd:39:18:45: a0:4c:ff:8f:27:59:67:00:d1:4e:db:a6:a8:91:76:b1:83:ca: f5:8e:cd:f5:44:97:df:63:d3:5b:1e:ba:0c:2c:ed:75:29:e8: 13:26:c3:85:1f:7e:4c:96:b4:68:f6:3d:07:f3:db:a7:76:71: 37:4b:38:16:07:e8:98:5f:13:1c:ed:58:66:28:af:c3:45:12: 59:10:e9:42:5f:ed:06:5c:2a:2f:fd:c9:e7:b1:5a:ab:0c:5b: 09:ee:2f:3d:b6:42:90:93:51:e4:3e:21:58:cb:ad:59:0e:9b: d6:d9:77:7d:2c:10:ad:0d:ce:29:b3:97:77:f3:37:7f:1a:18: 3e:9d:c4:0f:a0:3c:a8:f6:c3:a6:ee:f4:f8:09:f6:b2:f3:27: f5:46:36:7f:5d:29:b8:0b:47:56:43:79:32:c5:88:76:16:d3: 95:98:dc:ff:23:d3:1d:f4:12:02:5e:d2:2a:1a:6e:7b:a7:c8: 96:09:f8:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVcA19gH9C/wFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm OGNhMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NTRiNDkyOTUtODNlOC00NzE0LTg5MmQtZGUyNTlmNzAwNWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhreZcWRQdFH7gZs6JdvdZMexTKYQmVEpjxw0 axMgluDcSTA2iTw76e1N8Ldlm9ReJPAsS8S6Djyrpe7C92+sE0f726NbQ6ro4hBN xQcxE9SYIAjoKSwuIsXD/p1Q7C2RI37EOds7VSk+WmjfG71Im9NSaAEVo11d/nde NXcqwJT2djFGkBRK/5F6SX/0RlRsxmMsKuW1l7bjkd5pPpU07DBlcumzjFIK/9vD KPUEqOosKjpeu+qQ7jb4n8kIF7XuH2cCgBZMuaRPpyRf4FvyHnCssm1kvzrIAPMT VdT/1IpoeCKLLBDn9/9asdvutMt6Yfc1VmeIzlg71zmjhLrh6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBknS/MLaactzKJMhZOGiVgGBiAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4 N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvNDQzMjQzM2QtYzRiMS0z ZTQ0LTgyY2MtZjJhNDZhMzFlZmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1 YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4 NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2M1hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhoSG5FQMHjREhL0a3pKzxF2gLaWshTokMnXT31dVHOEkhSjqByLWvd TSv4NU5dB6AyTnUidhHGJ3rXqXW5UPT6Pts+zTkYRaBM/48nWWcA0U7bpqiRdrGD yvWOzfVEl99j01seugws7XUp6BMmw4UffkyWtGj2PQfz26d2cTdLOBYH6JhfExzt WGYor8NFElkQ6UJf7QZcKi/9yeexWqsMWwnuLz22QpCTUeQ+IVjLrVkOm9bZd30s EK0Nzimzl3fzN38aGD6dxA+gPKj2w6bu9PgJ9rLzJ/VGNn9dKbgLR1ZDeTLFiHYW 05WY3P8j0x30EgJe0ioabnunyJYJ+Io= -----END CERTIFICATE-----Generated at Sun Aug 24 09:12:39 2025 by rpki-client