$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/1df3ae92-04ac-3713-b0ef-69ef18b8e136.roa File: 1df3ae92-04ac-3713-b0ef-69ef18b8e136.roa (raw, json) Hash identifier: Z73lvYqR3oiUSVKKxyrr7fddp7b75uJ3UcXScQuHHB0= Subject key identifier: D2:41:0F:58:B9:0D:79:DC:8A:F1:5E:B9:22:E1:99:8E:78:2B:16:01 Certificate issuer: /CN=88e1646b-e1b3-42e7-8591-3a57fd436369 Certificate serial: 010D0C9F4328584B48E1C5BCC418A5BE1DB21DE0 Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/1df3ae92-04ac-3713-b0ef-69ef18b8e136.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 6122 IP address blocks: 205.221.0.0/16 maxlen: 24 216.159.0.0/17 maxlen: 24 216.159.128.0/18 maxlen: 24 216.159.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c5:bc:c4:18:a5:be:1d:b2:1d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=b0de2b45-95d8-4983-a953-e6af3004d4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a7:16:9f:c1:4d:ee:6e:ef:40:94:c2:43:5b: 2f:d1:09:39:2a:1c:a3:05:eb:80:b9:84:3e:e7:38: 0a:5e:90:21:ae:93:17:28:5f:21:72:b5:84:87:8b: ec:27:ef:8e:f5:f5:d3:88:57:c0:13:eb:31:40:a6: 9f:c8:83:af:83:f0:9c:d9:02:f7:18:2e:d1:b8:8f: f0:01:cd:6d:63:60:f0:7d:6f:36:a8:73:e0:bd:0c: 74:0c:5c:ca:fd:92:0c:b1:e7:79:94:fd:a4:55:f1: 88:ea:2d:d3:56:17:0d:59:5c:63:38:3d:e5:eb:c8: 80:6e:cb:d2:de:18:a2:b2:93:ce:20:bd:0e:1d:de: fa:3e:d7:16:cf:43:83:0a:96:a8:ab:ae:ee:f6:09: e9:91:c4:9f:3b:d6:17:fa:32:35:dd:e4:b6:95:16: 57:08:f2:45:13:df:78:e5:9e:16:41:d9:42:e6:07: ca:36:d0:e6:c7:16:5b:8e:57:4f:68:26:ac:6d:42: 43:44:71:02:24:2a:88:69:b7:03:8a:d5:35:d2:40: c1:09:10:27:cd:98:eb:98:e5:53:f0:5a:c9:21:54: 83:c0:6f:95:13:54:06:2f:38:68:e9:29:b4:62:c7: 3b:b3:8b:dd:25:fe:07:39:9c:14:12:5c:64:e7:71: 0b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:41:0F:58:B9:0D:79:DC:8A:F1:5E:B9:22:E1:99:8E:78:2B:16:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/1df3ae92-04ac-3713-b0ef-69ef18b8e136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl X509v3 Authority Key Identifier: keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer sbgp-ipAddrBlock: critical IPv4: 205.221.0.0/16 216.159.0.0-216.159.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:62:d7:7a:81:9c:e1:e1:6b:1b:45:8b:e7:f9:a1:f2:61:98: 4e:17:26:11:a1:d7:bc:28:28:73:d1:07:41:e9:8d:a7:a9:68: 1f:4b:90:12:f0:90:3a:48:1e:57:25:76:f4:9a:9b:21:fa:76: 22:54:84:09:b6:f3:d3:75:82:fe:00:42:7c:65:1a:d6:41:50: 86:ed:37:f9:7b:52:9c:dc:45:5d:37:e1:30:a2:0c:ce:3e:83: c2:0a:08:76:12:c5:e3:53:05:da:48:35:6c:5e:1a:91:4b:39: 82:90:8b:3d:97:53:05:82:02:7c:03:cb:18:1f:a0:cd:cd:ea: 7a:5b:9b:a8:eb:73:db:76:55:5b:7a:e8:44:a6:d9:b1:25:b3: 73:7f:8d:c0:2a:c7:26:34:72:fb:4f:f0:66:2c:6d:e9:da:94: c4:a4:51:50:e6:62:76:75:10:17:35:41:b6:60:de:f2:9f:55: 6b:0e:fe:23:c8:51:d5:d7:e2:31:11:f5:89:97:ef:77:ea:8b: f8:20:71:31:4d:77:65:2f:4e:dc:6a:72:0a:44:5d:ae:a2:7c: 0f:ac:75:6a:c0:cb:28:79:59:9b:c6:1b:a1:06:f3:80:0c:81: e8:e7:a4:53:61:f5:df:57:fa:1c:3b:ba:cc:3a:5f:72:99:af: d1:0e:ec:27 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEtI4cW8xBilvh2yHeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhlMTY0NmItZTFiMy00MmU3LTg1OTEtM2E1N2ZkNDM2 MzY5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YjBkZTJiNDUtOTVkOC00OTgzLWE5NTMtZTZhZjMwMDRkNGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtacWn8FN7m7vQJTCQ1sv0Qk5KhyjBeuAuYQ+ 5zgKXpAhrpMXKF8hcrWEh4vsJ++O9fXTiFfAE+sxQKafyIOvg/Cc2QL3GC7RuI/w Ac1tY2DwfW82qHPgvQx0DFzK/ZIMsed5lP2kVfGI6i3TVhcNWVxjOD3l68iAbsvS 3hiispPOIL0OHd76PtcWz0ODCpaoq67u9gnpkcSfO9YX+jI13eS2lRZXCPJFE994 5Z4WQdlC5gfKNtDmxxZbjldPaCasbUJDRHECJCqIabcDitU10kDBCRAnzZjrmOVT 8FrJIVSDwG+VE1QGLzho6Sm0Ysc7s4vdJf4HOZwUElxk53EL8wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFNJBD1i5DXncivFeuSLhmY54KxYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUx NjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3ZmQ0MzYzNjkvMWRmM2FlOTItMDRhYy0z NzEzLWIwZWYtNjllZjE4YjhlMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODhlMTY0NmItZTFiMy00MmU3LTg1 OTEtM2E1N2ZkNDM2MzY5Lzg4ZTE2NDZiLWUxYjMtNDJlNy04NTkxLTNhNTdmZDQz NjM2OS5jcmwwHwYDVR0jBBgwFoAUukMjcrv3l+XytBPr7L8gMlwthZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUxNjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3 ZmQ0MzYzNjkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwMAzd0wCwMD ANifAwQF2J/AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADNi13qBnOHhaxtFi+f5ofJhmE4XJhGh17woKHPR B0HpjaepaB9LkBLwkDpIHlcldvSamyH6diJUhAm289N1gv4AQnxlGtZBUIbtN/l7 UpzcRV034TCiDM4+g8IKCHYSxeNTBdpINWxeGpFLOYKQiz2XUwWCAnwDyxgfoM3N 6npbm6jrc9t2VVt66ESm2bEls3N/jcAqxyY0cvtP8GYsbenalMSkUVDmYnZ1EBc1 QbZg3vKfVWsO/iPIUdXX4jER9YmX73fqi/ggcTFNd2UvTtxqcgpEXa6ifA+sdWrA yyh5WZvGG6EG84AMgejnpFNh9d9X+hw7usw6X3KZr9EO7Cc= -----END CERTIFICATE-----Generated at Tue Oct 21 03:05:45 2025 by rpki-client