$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/29337e97-2bc3-342e-a96e-80aec57d00a1.roa File: 29337e97-2bc3-342e-a96e-80aec57d00a1.roa (raw, json) Hash identifier: n6ENeR4yK7DXhGatquuHIndhGKHh1Sx/4D5Je2+1Zt4= Subject key identifier: F2:49:02:06:2A:8F:C7:CD:1E:AF:CA:78:A5:AE:A7:2C:91:52:AD:6C Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F4328584B64CE3005FFD25F9D08CD6EC0 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/29337e97-2bc3-342e-a96e-80aec57d00a1.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 36492 IP address blocks: 216.252.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:30:05:ff:d2:5f:9d:08:cd:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=da573527-f316-40c7-8960-0967b88fac96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:22:16:86:ae:62:7b:c0:df:2d:7d:87:10:23: cb:a4:5d:23:ec:b9:16:6f:e1:d2:a3:df:f9:4d:8b: 29:78:bf:91:bc:57:8a:16:fd:9c:bd:88:62:28:15: 4f:fc:6b:1b:63:42:6c:19:18:11:41:3f:a8:68:1d: 96:5f:be:8c:26:e3:48:99:81:6f:ee:86:dc:20:89: d6:c7:bb:b3:35:93:bd:35:d0:ad:52:ee:fe:a5:13: cb:82:5c:60:23:99:23:e7:4f:16:d2:21:a9:ca:48: e3:40:bb:44:a6:93:ca:69:07:5b:db:b6:c4:72:dc: ed:2d:51:b5:93:c8:18:f2:e4:ab:da:fb:71:88:ea: 43:4e:34:dc:8b:28:f0:9e:19:ea:29:6e:af:ac:a8: 33:20:01:10:7e:fc:32:bd:69:b0:7b:07:0a:1d:6c: 0c:1e:3a:04:06:c5:67:41:54:b0:19:a0:e7:40:dc: ac:93:09:25:b6:d4:1a:af:66:86:7f:64:af:2e:71: da:e1:6a:17:67:5d:2a:15:2b:95:ee:13:dd:34:9f: d1:ce:b8:52:be:0c:6e:80:47:43:0a:86:ad:b8:4c: b0:c5:0d:35:74:ea:f9:81:76:a2:ff:07:74:84:e8: d7:db:4a:6f:a6:5e:42:a1:77:42:b6:14:a1:c2:c6: c7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:49:02:06:2A:8F:C7:CD:1E:AF:CA:78:A5:AE:A7:2C:91:52:AD:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/29337e97-2bc3-342e-a96e-80aec57d00a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 216.252.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:5a:fc:d4:ab:89:3a:d8:50:f0:4d:f8:bc:25:c3:46:22:f0: d3:d2:89:ab:89:70:b4:41:d9:44:28:40:31:06:c0:2d:28:3f: df:5d:54:c9:07:f7:07:94:be:73:86:79:1e:74:90:98:b3:b6: 8e:c4:da:b2:4e:3c:fa:a9:4c:8b:b3:1e:17:6e:dc:34:80:0a: bc:2b:86:aa:eb:13:64:f3:85:19:64:90:fe:93:23:a3:de:9d: 36:7d:47:6a:ba:08:cf:e9:71:d3:73:50:05:33:b7:4e:1a:0b: 2b:af:30:84:75:ea:84:a7:75:4e:a1:fd:eb:35:a7:8a:5b:4c: 46:64:e7:af:ab:39:4b:3b:40:25:66:58:d2:15:e9:66:5f:88: 27:6d:17:b3:07:7a:dd:d2:c9:55:d3:5c:c5:4f:68:33:90:79: 65:c1:72:bd:52:11:d0:b7:25:cc:eb:0e:f9:4f:b6:2c:f9:18: 08:16:9c:ff:a5:49:60:9a:46:1e:28:f9:a5:93:77:d9:79:f9: 3b:bc:0f:23:f0:28:d5:a7:12:3f:6b:69:ee:01:c6:d2:a1:62: 45:64:2e:66:b7:01:e9:61:c1:37:9b:79:2c:1d:8a:8f:f3:de: 18:f4:ce:7c:2f:57:59:5b:c9:da:96:9e:b6:78:7e:cf:a5:76: c9:99:32:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzjAF/9JfnQjNbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGE1NzM1MjctZjMxNi00MGM3LTg5NjAtMDk2N2I4OGZhYzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriIWhq5ie8DfLX2HECPLpF0j7LkWb+HSo9/5 TYspeL+RvFeKFv2cvYhiKBVP/GsbY0JsGRgRQT+oaB2WX76MJuNImYFv7obcIInW x7uzNZO9NdCtUu7+pRPLglxgI5kj508W0iGpykjjQLtEppPKaQdb27bEctztLVG1 k8gY8uSr2vtxiOpDTjTciyjwnhnqKW6vrKgzIAEQfvwyvWmwewcKHWwMHjoEBsVn QVSwGaDnQNyskwklttQar2aGf2SvLnHa4WoXZ10qFSuV7hPdNJ/RzrhSvgxugEdD CoatuEywxQ01dOr5gXai/wd0hOjX20pvpl5CoXdCthShwsbHpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJJAgYqj8fNHq/KeKWupyyRUq1sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvMjkzMzdlOTctMmJjMy0z NDJlLWE5NmUtODBhZWM1N2QwMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFta/NSriTrYUPBN+Lwlw0Yi8NPSiauJcLRB2UQoQDEGwC0oP99dVMkH 9weUvnOGeR50kJizto7E2rJOPPqpTIuzHhdu3DSACrwrhqrrE2TzhRlkkP6TI6Pe nTZ9R2q6CM/pcdNzUAUzt04aCyuvMIR16oSndU6h/es1p4pbTEZk56+rOUs7QCVm WNIV6WZfiCdtF7MHet3SyVXTXMVPaDOQeWXBcr1SEdC3JczrDvlPtiz5GAgWnP+l SWCaRh4o+aWTd9l5+Tu8DyPwKNWnEj9rae4BxtKhYkVkLma3AelhwTebeSwdio/z 3hj0znwvV1lbydqWnrZ4fs+ldsmZMoo= -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:50 2025 by rpki-client