$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5af3ca-44fc-378f-8a8d-67e59613cc9e.roa File: cd5af3ca-44fc-378f-8a8d-67e59613cc9e.roa (raw, json) Hash identifier: TLcxCB5IZ8SmhDNOjVEmROzRFuFMK3RtZED2rC8WLnU= Subject key identifier: 5B:C3:3C:4A:22:3F:3A:AF:4F:6A:58:57:30:C3:66:78:7F:AF:B1:5D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584AC7EB986177094D2129724800 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5af3ca-44fc-378f-8a8d-67e59613cc9e.roa Signing time: Thu 07 Aug 2025 20:21:19 +0000 ROA not before: Thu 07 Aug 2025 20:21:19 +0000 ROA not after: Wed 05 Nov 2025 21:21:19 +0000 asID: 852 IP address blocks: 216.198.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:eb:98:61:77:09:4d:21:29:72:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Aug 7 20:21:19 2025 GMT Not After : Nov 5 21:21:19 2025 GMT Subject: CN=7f82afa3-6ed3-45bf-90fe-3e0c3c4164a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c8:37:b8:47:7d:14:02:58:9c:ab:cc:af:c8: 86:be:09:8d:87:54:0e:7a:1f:41:89:d4:f3:d5:66: e8:24:b1:51:83:f6:d2:1e:f4:fa:05:2b:2f:a8:51: a9:3c:e4:f7:4d:3d:bd:c5:d3:1b:bd:f1:d0:bf:8a: 56:79:ae:f0:b1:35:cc:48:0a:46:c1:2e:d8:d2:3b: c9:b0:55:2d:4e:dc:35:ac:4a:5f:4c:37:5c:81:ec: 9b:7a:98:81:4c:e5:a7:37:8e:86:0e:6a:0b:10:c4: d7:02:49:5f:85:bb:ed:5f:7e:48:2b:99:7c:9f:1f: d5:68:a5:f7:cd:84:f3:c6:79:a7:20:79:4d:d9:88: d3:13:b5:71:61:8b:11:78:de:4e:46:75:07:6f:3a: 5b:44:7d:2e:f0:cb:b2:01:2b:30:b3:5d:e1:7b:2c: 42:66:c0:b9:d3:f4:40:df:aa:53:4c:d3:49:01:fc: 0c:04:41:d2:9f:ca:ce:bb:50:91:ac:55:25:48:fd: a7:ea:af:8b:0d:05:77:a7:c6:92:36:76:83:3c:76: 53:06:06:64:a9:01:80:bb:5e:f5:fc:84:94:ac:48: ad:70:cf:12:bf:6f:49:6c:2b:c7:2f:13:d2:06:99: ea:1b:bf:b1:00:d6:df:03:dd:9e:75:d9:14:79:62: 15:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C3:3C:4A:22:3F:3A:AF:4F:6A:58:57:30:C3:66:78:7F:AF:B1:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5af3ca-44fc-378f-8a8d-67e59613cc9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 216.198.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:fb:d1:eb:be:cd:a3:41:8f:1a:16:1e:b5:f1:b5:de:f4:8c: 57:e5:b5:4e:af:1f:25:63:c8:46:f9:41:d4:64:f9:ed:e6:c0: f4:1f:e3:bd:1d:ba:61:6c:68:3c:dd:a3:44:33:a9:29:56:a4: 7a:8e:17:cd:9c:cc:f0:61:82:c4:62:af:3e:e2:20:17:7f:ce: 82:f2:21:86:c4:d4:3d:5f:fa:d8:fa:8e:9d:a4:52:17:c4:91: af:77:29:e2:c1:8c:a4:0f:cf:f9:3c:bb:58:3a:8d:88:d4:66: cb:56:8b:c3:43:3e:ec:bf:f6:b7:df:a5:97:0f:12:65:7a:ad: 0d:32:ae:a0:64:05:a7:8e:a1:82:ea:bd:c7:d7:07:a0:e1:52: 60:13:13:71:46:58:38:fe:6e:ee:06:c7:63:f9:c3:31:ae:e3: 2e:c0:28:9a:f3:5a:cc:19:c1:45:18:8f:3c:70:c8:05:ee:3f: 87:75:0c:0c:cb:82:90:21:5e:e2:ee:c3:7f:97:b5:0b:94:95: 62:d3:fd:24:fb:f3:45:63:d4:8e:7b:0e:df:f4:e3:31:94:84: 32:b9:70:66:9c:e3:3a:f6:38:b5:8d:07:48:83:20:70:c2:58: b6:42:4f:73:da:f0:61:92:da:56:93:fb:84:46:1a:16:61:53: 34:67:8d:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErH65hhdwlNISlySAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDgwNzIwMjExOVoXDTI1MTEwNTIxMjExOVowLzEtMCsGA1UEAxMk N2Y4MmFmYTMtNmVkMy00NWJmLTkwZmUtM2UwYzNjNDE2NGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcg3uEd9FAJYnKvMr8iGvgmNh1QOeh9BidTz 1WboJLFRg/bSHvT6BSsvqFGpPOT3TT29xdMbvfHQv4pWea7wsTXMSApGwS7Y0jvJ sFUtTtw1rEpfTDdcgeybepiBTOWnN46GDmoLEMTXAklfhbvtX35IK5l8nx/VaKX3 zYTzxnmnIHlN2YjTE7VxYYsReN5ORnUHbzpbRH0u8MuyASsws13heyxCZsC50/RA 36pTTNNJAfwMBEHSn8rOu1CRrFUlSP2n6q+LDQV3p8aSNnaDPHZTBgZkqQGAu171 /ISUrEitcM8Sv29JbCvHLxPSBpnqG7+xANbfA92eddkUeWIVHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvDPEoiPzqvT2pYVzDDZnh/r7FdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2Q1YWYzY2EtNDRmYy0z NzhmLThhOGQtNjdlNTk2MTNjYzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2MaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz70eu+zaNBjxoWHrXxtd70jFfltU6vHyVjyEb5QdRk+e3mwPQf470d umFsaDzdo0QzqSlWpHqOF82czPBhgsRirz7iIBd/zoLyIYbE1D1f+tj6jp2kUhfE ka93KeLBjKQPz/k8u1g6jYjUZstWi8NDPuy/9rffpZcPEmV6rQ0yrqBkBaeOoYLq vcfXB6DhUmATE3FGWDj+bu4Gx2P5wzGu4y7AKJrzWswZwUUYjzxwyAXuP4d1DAzL gpAhXuLuw3+XtQuUlWLT/ST780Vj1I57Dt/04zGUhDK5cGac4zr2OLWNB0iDIHDC WLZCT3Pa8GGS2laT+4RGGhZhUzRnjRc= -----END CERTIFICATE-----Generated at Sat Aug 23 18:19:26 2025 by rpki-client