$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/d60fdc5a-378e-367d-9d61-db73276455c0.roa File: d60fdc5a-378e-367d-9d61-db73276455c0.roa (raw, json) Hash identifier: JKxYBRZ+9Xe6MooGAcLYh+kaRV7rmU2F03ZY+r7keqw= Subject key identifier: AE:9A:48:0E:C3:85:CA:24:CF:03:78:3C:6F:82:8D:56:83:62:A6:42 Certificate issuer: /CN=24652152-0111-4df2-a7ef-61ad3cdecb58 Certificate serial: 010D0C9F4328584B0E4154D9F1D01E6679BAA480 Authority key identifier: 59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/d60fdc5a-378e-367d-9d61-db73276455c0.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 13389 IP address blocks: 216.179.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:54:d9:f1:d0:1e:66:79:ba:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24652152-0111-4df2-a7ef-61ad3cdecb58 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=7f4ec01b-066a-4a5f-9298-74d477f8da94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5c:b1:be:21:c3:4e:d0:50:3c:59:59:2f:1b: a1:ba:9f:3d:04:ca:66:0e:76:d1:3e:22:e3:22:dc: 4c:74:60:7d:59:5d:c9:ca:5f:7d:9d:f9:28:b9:63: ec:e1:97:e7:db:94:52:58:4a:68:2c:34:53:2b:f9: c3:47:7c:b0:12:22:52:11:b3:5a:7a:a7:c0:12:73: b0:92:cd:84:8d:a7:7f:86:d3:d6:1d:a4:4b:72:88: 8e:0e:a7:17:7b:c3:77:3c:e9:bc:00:4f:f0:22:1c: 9a:bf:8e:ed:d2:70:bc:d5:2e:6f:e6:2f:54:b1:61: b2:92:30:f1:a5:33:3a:c2:10:20:56:29:cd:c5:ee: 74:11:13:51:57:01:ad:61:a1:1a:2b:fa:9e:2f:a0: 7d:af:7f:63:c2:b6:1d:83:c7:67:ff:8d:b8:d5:39: 99:2b:9e:6a:91:e2:1d:c8:98:9c:22:0d:48:6f:83: 76:d3:19:a9:af:5b:b1:f9:14:03:02:fa:64:41:9c: 73:c3:07:ad:3e:a8:3e:af:2d:d3:09:09:91:7c:59: 8b:b8:87:09:82:18:fa:bf:df:af:23:65:a8:6b:c0: 62:44:c2:ff:e5:2b:8c:84:ec:8a:b3:33:10:97:a4: 3e:94:0c:f6:ef:0b:93:f2:0b:8b:50:d4:49:f2:22: d1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9A:48:0E:C3:85:CA:24:CF:03:78:3C:6F:82:8D:56:83:62:A6:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/d60fdc5a-378e-367d-9d61-db73276455c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl X509v3 Authority Key Identifier: keyid:59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer sbgp-ipAddrBlock: critical IPv4: 216.179.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:95:32:85:d1:c7:90:38:99:b5:a2:35:60:fb:5b:c9:12:7d: c2:29:e1:d2:a3:c7:e1:6e:2a:c1:ca:79:c0:12:0d:e8:9f:99: 48:50:67:87:3c:4f:6c:2a:c2:ce:13:5b:6b:0b:66:fa:1b:01: 1a:88:d1:6e:eb:66:cf:a9:75:65:a5:a7:02:1f:cc:2e:ca:a9: 13:b5:39:b9:1c:ec:3d:17:a3:01:e8:46:8e:f7:ce:c2:be:2f: 87:23:62:5f:dc:53:a9:2e:5d:a9:78:20:24:60:55:a0:0d:02: ef:c2:22:ee:7d:44:80:bf:c6:d2:b0:d3:16:c8:0d:ef:e6:43: 5e:1e:7b:5f:fe:d7:62:da:cb:b1:d9:f9:88:cb:8f:e6:59:2c: 09:20:2a:06:48:fb:3d:a6:bf:d3:f3:13:c2:87:38:bb:c6:1d: bb:99:82:8b:8b:fe:f3:2d:21:bf:f5:8f:7c:f7:33:38:f9:cc: 2b:0f:5a:ca:92:ab:eb:f2:87:f7:1c:e4:5d:b7:85:51:33:66: 68:70:d1:90:97:b1:a9:c2:69:ea:33:6a:ec:3b:5e:3f:07:2e: 44:23:53:fa:66:8b:80:ff:87:3d:61:74:64:19:c5:71:f9:6d: f4:bd:21:db:cb:f5:84:b5:27:d9:36:e1:1c:f2:e9:75:44:8b: e9:01:0a:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQVTZ8dAeZnm6pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ2NTIxNTItMDExMS00ZGYyLWE3ZWYtNjFhZDNjZGVj YjU4MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk N2Y0ZWMwMWItMDY2YS00YTVmLTkyOTgtNzRkNDc3ZjhkYTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulyxviHDTtBQPFlZLxuhup89BMpmDnbRPiLj ItxMdGB9WV3Jyl99nfkouWPs4Zfn25RSWEpoLDRTK/nDR3ywEiJSEbNaeqfAEnOw ks2Ejad/htPWHaRLcoiODqcXe8N3POm8AE/wIhyav47t0nC81S5v5i9UsWGykjDx pTM6whAgVinNxe50ERNRVwGtYaEaK/qeL6B9r39jwrYdg8dn/4241TmZK55qkeId yJicIg1Ib4N20xmpr1ux+RQDAvpkQZxzwwetPqg+ry3TCQmRfFmLuIcJghj6v9+v I2Woa8BiRML/5SuMhOyKszMQl6Q+lAz27wuT8guLUNRJ8iLR8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6aSA7DhcokzwN4PG+CjVaDYqZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNDY1 MjE1Mi0wMTExLTRkZjItYTdlZi02MWFkM2NkZWNiNTgvZDYwZmRjNWEtMzc4ZS0z NjdkLTlkNjEtZGI3MzI3NjQ1NWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjQ2NTIxNTItMDExMS00ZGYyLWE3 ZWYtNjFhZDNjZGVjYjU4LzI0NjUyMTUyLTAxMTEtNGRmMi1hN2VmLTYxYWQzY2Rl Y2I1OC5jcmwwHwYDVR0jBBgwFoAUWQ8g4w63EW5P5zO9A1k28CvF7PAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNDY1MjE1Mi0wMTExLTRkZjItYTdlZi02MWFk M2NkZWNiNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2LOaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGVMoXRx5A4mbWiNWD7W8kSfcIp4dKjx+FuKsHKecASDeifmUhQZ4c8 T2wqws4TW2sLZvobARqI0W7rZs+pdWWlpwIfzC7KqRO1Obkc7D0XowHoRo73zsK+ L4cjYl/cU6kuXal4ICRgVaANAu/CIu59RIC/xtKw0xbIDe/mQ14ee1/+12Lay7HZ +YjLj+ZZLAkgKgZI+z2mv9PzE8KHOLvGHbuZgouL/vMtIb/1j3z3Mzj5zCsPWsqS q+vyh/cc5F23hVEzZmhw0ZCXsanCaeozauw7Xj8HLkQjU/pmi4D/hz1hdGQZxXH5 bfS9IdvL9YS1J9k24Rzy6XVEi+kBClg= -----END CERTIFICATE-----Generated at Tue Oct 21 13:23:03 2025 by rpki-client