$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/de86099d-1376-3261-90ab-da88c15a123d.roa File: de86099d-1376-3261-90ab-da88c15a123d.roa (raw, json) Hash identifier: 3tpQKyCTbN3ZlHgfUGr6tHrYkena1tQMmjUApIJKCjU= Subject key identifier: B9:74:30:38:14:44:9E:E4:5A:C1:93:17:6F:DC:B2:9A:CF:14:93:3A Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F4328584B64CD5BAF5E2877F58FC63E00 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/de86099d-1376-3261-90ab-da88c15a123d.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 36492 IP address blocks: 216.252.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:5b:af:5e:28:77:f5:8f:c6:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=59d55eba-2ed7-4599-bcd1-5b6a7a1653fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c1:59:72:2e:c0:98:ee:59:d6:99:c2:af:2a: d2:87:bb:c9:5a:19:25:c9:1a:51:09:68:1e:46:53: 7c:f8:e7:5e:64:6a:33:5a:bc:93:fe:d6:d3:ee:fe: a0:85:38:9d:67:72:4f:a1:1d:b9:46:47:c8:47:c1: 93:fe:0f:15:56:3d:51:e8:31:e7:3b:f6:80:95:a8: 39:83:62:1f:4a:5b:71:46:e9:56:ac:47:a6:99:18: a8:95:ea:db:2b:77:59:c4:6f:2f:84:4a:ec:e1:1e: 9c:d0:93:97:6e:26:fc:9c:6c:81:2c:80:6f:29:1d: 3a:31:1d:d9:a8:df:74:2f:29:fd:22:d3:13:8b:4b: 80:7b:13:86:4f:92:50:98:b6:0e:b3:1f:28:57:11: 2e:e8:22:c5:cf:6e:df:70:73:ca:1e:47:c6:66:1b: 87:f3:ac:ce:1f:5f:b5:b1:06:51:7e:ad:59:68:be: 6a:b4:dd:ac:6a:91:d3:3e:07:2f:6d:33:c1:d8:f6: 4d:79:ad:5d:c9:e1:f3:d5:2e:63:82:cb:5f:fd:33: 87:b8:f8:6b:5c:5b:41:30:af:86:6e:5a:f7:48:69: 2a:24:54:cc:44:2b:f2:e2:37:cb:2e:ea:c1:ee:57: 43:45:67:fb:1f:e9:75:a8:da:84:5d:54:6a:b0:40: a2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:74:30:38:14:44:9E:E4:5A:C1:93:17:6F:DC:B2:9A:CF:14:93:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/de86099d-1376-3261-90ab-da88c15a123d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 216.252.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:aa:4e:46:e2:ad:3f:af:94:b3:68:9c:4f:c6:53:b3:ff:74: 6a:1a:10:92:be:71:3e:78:81:2c:3f:ef:68:f9:73:6b:98:b7: c0:e7:1b:9b:89:f9:ef:4a:17:4d:06:53:49:92:e0:c4:3a:29: 36:81:52:f9:f6:1a:66:b2:4d:56:ca:9e:9e:39:5b:29:73:3a: 1f:17:3a:4b:05:29:2e:ea:d1:3e:8e:0b:3a:ac:9e:cd:81:2f: fe:6b:51:4e:60:ee:a9:3d:c8:fe:3a:8b:7c:cd:af:e8:ba:6a: 4e:af:de:da:67:a1:9c:e9:86:1a:6d:6c:79:0d:68:1d:a3:0d: 34:93:ed:58:e3:2a:7a:3a:1d:9e:ed:e9:f6:9a:21:2e:0c:a7: a0:4d:b3:9d:b5:91:73:fb:58:ed:7e:d7:1e:1c:26:29:34:cb: 37:02:46:e2:de:70:ca:dd:79:40:bc:4d:ce:03:b4:17:33:61: 0d:fd:a0:91:71:15:da:64:a6:27:f2:10:10:bc:a5:c9:e8:bc: 3f:50:32:fa:06:93:27:50:5d:ed:77:af:6e:ad:ec:24:5f:e8: a0:ec:bf:da:19:0c:a5:c9:01:93:f4:b8:dc:1d:aa:c3:53:a0: da:a0:a3:64:de:d9:3a:fa:2a:97:11:b0:96:7d:33:fd:44:e1: 2c:46:0a:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVuvXih39Y/GPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTlkNTVlYmEtMmVkNy00NTk5LWJjZDEtNWI2YTdhMTY1M2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMFZci7AmO5Z1pnCryrSh7vJWhklyRpRCWge RlN8+OdeZGozWryT/tbT7v6ghTidZ3JPoR25RkfIR8GT/g8VVj1R6DHnO/aAlag5 g2IfSltxRulWrEemmRiolerbK3dZxG8vhErs4R6c0JOXbib8nGyBLIBvKR06MR3Z qN90Lyn9ItMTi0uAexOGT5JQmLYOsx8oVxEu6CLFz27fcHPKHkfGZhuH86zOH1+1 sQZRfq1ZaL5qtN2sapHTPgcvbTPB2PZNea1dyeHz1S5jgstf/TOHuPhrXFtBMK+G blr3SGkqJFTMRCvy4jfLLurB7ldDRWf7H+l1qNqEXVRqsECipwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLl0MDgURJ7kWsGTF2/csprPFJM6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvZGU4NjA5OWQtMTM3Ni0z MjYxLTkwYWItZGE4OGMxNWExMjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PzdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2qTkbirT+vlLNonE/GU7P/dGoaEJK+cT54gSw/72j5c2uYt8DnG5uJ +e9KF00GU0mS4MQ6KTaBUvn2GmayTVbKnp45WylzOh8XOksFKS7q0T6OCzqsns2B L/5rUU5g7qk9yP46i3zNr+i6ak6v3tpnoZzphhptbHkNaB2jDTST7VjjKno6HZ7t 6faaIS4Mp6BNs521kXP7WO1+1x4cJik0yzcCRuLecMrdeUC8Tc4DtBczYQ39oJFx FdpkpifyEBC8pcnovD9QMvoGkydQXe13r26t7CRf6KDsv9oZDKXJAZP0uNwdqsNT oNqgo2Te2Tr6KpcRsJZ9M/1E4SxGChA= -----END CERTIFICATE-----Generated at Mon Oct 20 18:38:32 2025 by rpki-client