$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa File: a1e68bbb-553c-3456-9cb1-105008ad29db.roa (raw, json) Hash identifier: bvXQf41K0ouXngPihxo7omeRpfNN59Pw4G2GxoR6ckc= Subject key identifier: F9:D2:3D:61:B5:40:78:97:25:ED:D6:25:DD:1B:28:90:AB:21:C0:22 Certificate issuer: /CN=70212b19-99d4-4532-a7e0-a5bdbef20170 Certificate serial: 010D0C9F4328584AC9DB9B0B95AF5BD30302CAA8 Authority key identifier: 10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 216.147.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:9b:0b:95:af:5b:d3:03:02:ca:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70212b19-99d4-4532-a7e0-a5bdbef20170 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=e3ae8e19-2982-4445-83aa-5f9a3f97804c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:12:05:ee:72:31:10:55:75:31:c3:1e:ae:91: da:bc:d2:ab:bc:97:68:8c:b0:6d:af:2b:5b:51:01: d1:c7:14:23:29:9d:e9:e0:c7:3d:0d:d3:1a:e6:c3: 8a:1e:f9:bf:0d:15:34:7c:26:71:7a:9b:6b:c7:27: fa:8d:67:c1:81:16:54:49:fd:a9:f5:ac:7f:ca:fe: 61:5c:6b:61:8a:6e:76:a2:31:4f:23:33:b6:b4:83: 4f:e0:9e:00:d8:28:26:f4:48:8e:c6:c8:97:ce:ef: d7:fd:f6:98:41:45:45:f6:c4:81:d8:3f:49:f4:11: e2:3f:59:b5:26:6b:d1:ce:94:11:19:0e:bf:0c:bb: e3:b9:6b:bf:dc:1b:b2:2c:b7:60:9c:87:16:33:e9: 4a:40:c5:c8:d7:c1:c9:dc:0e:7a:13:c3:a7:7b:9e: 46:2c:25:a0:be:65:9e:63:a1:27:a1:4b:25:17:b9: 5d:f1:55:f9:cf:91:ea:e3:f1:b6:d3:01:a5:42:b2: 0f:83:e8:2d:1c:db:aa:a2:f8:03:cf:86:a0:0e:55: 45:08:9e:2e:c4:11:e8:ec:9d:b8:a1:5b:ee:4e:47: 21:d0:6a:ff:55:92:1a:8e:a0:2a:4a:e0:02:f4:8e: 87:2f:cc:d6:aa:30:3e:06:1c:3a:46:47:72:0a:9e: 00:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D2:3D:61:B5:40:78:97:25:ED:D6:25:DD:1B:28:90:AB:21:C0:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a1e68bbb-553c-3456-9cb1-105008ad29db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl X509v3 Authority Key Identifier: keyid:10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer sbgp-ipAddrBlock: critical IPv4: 216.147.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:0e:c0:71:36:c5:9a:41:1b:2d:bf:ff:62:ef:50:76:be:c0: ce:01:b6:d4:0c:bf:5a:60:52:16:c2:d6:ca:1c:95:35:b6:8a: fa:9c:3e:f5:5f:1c:8f:a4:58:17:62:11:4c:a7:c4:f6:9e:a8: df:59:a5:2d:1a:b2:2b:cd:68:40:c5:04:9a:19:09:36:dd:d0: a7:1f:fd:46:27:96:d0:d9:2e:3a:ab:94:34:0a:28:52:5e:91: e7:cc:57:ca:48:f9:c0:6c:8e:4e:8c:5f:49:f2:c7:6d:30:62: f8:70:b2:b7:f2:61:b4:a2:92:6b:6f:7b:5c:7b:fb:08:1c:8b: 45:2f:79:66:4a:35:fd:cf:3b:15:ce:cf:fa:5b:35:60:9a:e9: 95:22:f6:65:38:70:d7:bb:fa:69:5b:85:94:52:91:2e:93:38: 31:7f:03:a9:4e:7f:b4:0b:55:2b:a0:e6:6f:e4:1b:8a:08:d8: 10:28:a9:b7:a5:53:26:cf:5a:15:a4:f3:bc:cf:62:d2:48:22: 9c:33:e9:44:c9:a6:46:1a:78:db:37:e8:78:f8:d8:21:2b:80: 01:3e:40:8e:63:13:fc:2c:2f:43:77:2d:1e:c0:2a:b8:36:49: 82:b7:3c:d4:a6:04:bd:82:ce:02:d9:70:ed:17:6d:89:20:3d: 4d:67:f5:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ25sLla9b0wMCyqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAyMTJiMTktOTlkNC00NTMyLWE3ZTAtYTViZGJlZjIw MTcwMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk ZTNhZThlMTktMjk4Mi00NDQ1LTgzYWEtNWY5YTNmOTc4MDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxIF7nIxEFV1McMerpHavNKrvJdojLBtrytb UQHRxxQjKZ3p4Mc9DdMa5sOKHvm/DRU0fCZxeptrxyf6jWfBgRZUSf2p9ax/yv5h XGthim52ojFPIzO2tINP4J4A2Cgm9EiOxsiXzu/X/faYQUVF9sSB2D9J9BHiP1m1 JmvRzpQRGQ6/DLvjuWu/3BuyLLdgnIcWM+lKQMXI18HJ3A56E8One55GLCWgvmWe Y6EnoUslF7ld8VX5z5Hq4/G20wGlQrIPg+gtHNuqovgDz4agDlVFCJ4uxBHo7J24 oVvuTkch0Gr/VZIajqAqSuAC9I6HL8zWqjA+Bhw6RkdyCp4AhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnSPWG1QHiXJe3WJd0bKJCrIcAiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MDIx MmIxOS05OWQ0LTQ1MzItYTdlMC1hNWJkYmVmMjAxNzAvYTFlNjhiYmItNTUzYy0z NDU2LTljYjEtMTA1MDA4YWQyOWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzAyMTJiMTktOTlkNC00NTMyLWE3 ZTAtYTViZGJlZjIwMTcwLzcwMjEyYjE5LTk5ZDQtNDUzMi1hN2UwLWE1YmRiZWYy MDE3MC5jcmwwHwYDVR0jBBgwFoAUEDo3ilx+8pj7dD0sbWIEicpkovUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MDIxMmIxOS05OWQ0LTQ1MzItYTdlMC1hNWJk YmVmMjAxNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2JMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8OwHE2xZpBGy2//2LvUHa+wM4BttQMv1pgUhbC1soclTW2ivqcPvVf HI+kWBdiEUynxPaeqN9ZpS0asivNaEDFBJoZCTbd0Kcf/UYnltDZLjqrlDQKKFJe kefMV8pI+cBsjk6MX0nyx20wYvhwsrfyYbSikmtve1x7+wgci0UveWZKNf3POxXO z/pbNWCa6ZUi9mU4cNe7+mlbhZRSkS6TODF/A6lOf7QLVSug5m/kG4oI2BAoqbel UybPWhWk87zPYtJIIpwz6UTJpkYaeNs36Hj42CErgAE+QI5jE/wsL0N3LR7AKrg2 SYK3PNSmBL2CzgLZcO0XbYkgPU1n9ao= -----END CERTIFICATE-----Generated at Sat Aug 23 08:33:13 2025 by rpki-client