$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb9b8aa9-f6f1-376f-b0fa-131a7071e16a.roa File: bb9b8aa9-f6f1-376f-b0fa-131a7071e16a.roa (raw, json) Hash identifier: iCudPoWdBkavtfssrjUs0ta7ykVMXbXuSkMuPeTyTpM= Subject key identifier: 5B:55:0F:BC:9A:E9:FD:D6:1E:C8:75:99:FB:93:B5:E0:DC:4E:72:A6 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584B5141F093AADDE5C0715F7480 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb9b8aa9-f6f1-376f-b0fa-131a7071e16a.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 214054 IP address blocks: 216.122.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:f0:93:aa:dd:e5:c0:71:5f:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=e5ab804e-69b8-40bd-9dd8-d0d2ab45e5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6f:f7:c8:2d:88:62:4a:55:9c:94:01:31:52: dd:13:53:33:df:10:d2:fa:34:6f:a7:f9:40:63:78: 31:ae:79:2e:47:2d:db:7d:16:3a:a3:cb:fc:a4:00: 5a:aa:63:71:59:1e:00:8c:51:01:ab:57:d0:0b:96: 72:ff:ce:2e:72:9e:1b:6e:82:ee:c1:41:dd:a9:2a: 59:0c:9a:55:8b:2e:16:ab:c5:2d:ba:f5:d8:91:56: c2:f6:73:af:e2:db:61:89:ec:88:23:9f:c2:bb:c8: 0e:9d:50:12:17:be:df:bd:08:4c:6c:27:63:bc:f8: c7:ec:1b:4f:57:f1:70:c3:e8:46:33:61:8b:a0:ee: 5e:f3:fc:c6:cb:34:0a:b8:9f:ad:31:fc:25:45:b6: fe:22:34:a6:23:6d:be:9c:be:b7:d1:c7:06:ee:66: 60:ef:6f:08:e3:05:dd:d3:ac:76:16:79:83:d3:18: 51:38:d5:96:56:70:a3:2a:49:26:33:87:d3:c0:00: 0a:99:77:f1:3f:b1:2f:f4:32:f1:df:ea:8c:42:f6: e7:80:0d:c8:24:5a:78:be:d1:23:84:31:96:43:1b: 6d:78:28:73:92:79:95:db:40:fb:f0:b6:85:c1:e8: 19:c2:f3:36:ce:0d:db:b3:ba:a8:0c:c3:12:5d:07: c6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:55:0F:BC:9A:E9:FD:D6:1E:C8:75:99:FB:93:B5:E0:DC:4E:72:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb9b8aa9-f6f1-376f-b0fa-131a7071e16a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 216.122.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:c7:82:1a:9a:17:6e:a6:02:50:15:03:53:4f:0e:48:70:36: b7:f7:e2:0a:f7:7b:d9:53:f7:30:36:b5:8f:93:07:02:21:b8: b9:c4:cf:57:ac:9e:21:6b:20:d7:56:4f:84:12:d7:e2:49:10: 04:93:b8:98:d4:14:b9:20:e5:aa:1d:61:4a:76:25:01:a5:ee: b6:37:43:12:f1:7b:88:b4:b4:9f:84:cb:a7:ea:5d:0c:a0:50: 81:5c:f3:e3:c7:80:df:30:e9:96:b9:cc:fa:93:32:78:07:7d: c7:64:b9:2e:e0:d7:9e:1c:74:91:90:dc:1f:0c:6c:48:00:94: 51:f0:d4:17:57:7d:0a:7e:4d:c8:32:22:b8:27:8d:2e:cf:21: 42:02:e6:db:1e:4e:5a:4c:03:b3:c1:10:84:f4:e6:c0:cf:87: 66:d0:ea:fa:9b:1c:a4:17:52:13:06:e1:4f:4b:97:82:bc:07: 18:85:30:e7:a3:b6:8b:d7:f2:36:44:3b:72:d3:e1:45:af:91: ca:21:75:e2:a2:d9:bc:41:d9:0b:9d:6f:cc:19:a0:4e:63:e3: 3e:f3:bd:15:11:14:4a:b3:4a:95:26:9d:e1:2c:38:e0:0e:09: d3:3b:2f:1f:ff:45:62:12:cf:b6:1d:bc:96:31:90:cd:e1:5c: e2:b4:56:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQfCTqt3lwHFfdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk ZTVhYjgwNGUtNjliOC00MGJkLTlkZDgtZDBkMmFiNDVlNWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW/3yC2IYkpVnJQBMVLdE1Mz3xDS+jRvp/lA Y3gxrnkuRy3bfRY6o8v8pABaqmNxWR4AjFEBq1fQC5Zy/84ucp4bboLuwUHdqSpZ DJpViy4Wq8UtuvXYkVbC9nOv4tthieyII5/Cu8gOnVASF77fvQhMbCdjvPjH7BtP V/Fww+hGM2GLoO5e8/zGyzQKuJ+tMfwlRbb+IjSmI22+nL630ccG7mZg728I4wXd 06x2FnmD0xhRONWWVnCjKkkmM4fTwAAKmXfxP7Ev9DLx3+qMQvbngA3IJFp4vtEj hDGWQxtteChzknmV20D78LaFwegZwvM2zg3bs7qoDMMSXQfGxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtVD7ya6f3WHsh1mfuTteDcTnKmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYmI5YjhhYTktZjZmMS0z NzZmLWIwZmEtMTMxYTcwNzFlMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7HghqaF26mAlAVA1NPDkhwNrf34gr3e9lT9zA2tY+TBwIhuLnEz1es niFrINdWT4QS1+JJEASTuJjUFLkg5aodYUp2JQGl7rY3QxLxe4i0tJ+Ey6fqXQyg UIFc8+PHgN8w6Za5zPqTMngHfcdkuS7g154cdJGQ3B8MbEgAlFHw1BdXfQp+Tcgy IrgnjS7PIUIC5tseTlpMA7PBEIT05sDPh2bQ6vqbHKQXUhMG4U9Ll4K8BxiFMOej tovX8jZEO3LT4UWvkcohdeKi2bxB2Qudb8wZoE5j4z7zvRURFEqzSpUmneEsOOAO CdM7Lx//RWISz7YdvJYxkM3hXOK0Vgg= -----END CERTIFICATE-----Generated at Tue Oct 21 06:45:05 2025 by rpki-client