$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/ad65a7e7-f321-3c97-be83-13340c14ee3a.roa File: ad65a7e7-f321-3c97-be83-13340c14ee3a.roa (raw, json) Hash identifier: kFfKi/PvrO57S+9hNiLSCk+lcNF0ZcHM0YeXbe+sg4Q= Subject key identifier: 1A:A5:27:FF:6C:4E:16:57:90:86:13:0B:2A:8D:F2:CC:2D:C2:5F:86 Certificate issuer: /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b Certificate serial: 010D0C9F4328584B5141BBE28A20F1573DF7E1C0 Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/ad65a7e7-f321-3c97-be83-13340c14ee3a.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 216.205.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:bb:e2:8a:20:f1:57:3d:f7:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=432ee549-2e95-499a-986d-b90d9ec10e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d6:a6:6a:48:70:24:98:4a:3c:e0:39:73:a0: cd:56:88:14:ec:55:3c:2b:f3:75:90:68:28:64:0b: e3:d6:5c:7d:5e:f5:d2:a7:44:c2:0f:e1:ae:5f:7e: d2:3c:7d:90:30:69:d0:95:a4:9f:82:bf:99:da:0e: 53:e9:77:13:95:ba:15:02:aa:05:5f:06:a0:75:05: 51:8a:81:c4:dd:a6:22:f0:5e:db:af:14:8c:ff:88: 06:bc:6c:ec:5a:c6:7f:fb:4d:f4:eb:c9:bd:8f:86: 2d:e9:fd:ea:14:8b:6b:5b:bb:da:6a:a8:1f:b7:d4: fb:79:1e:88:15:12:87:2e:4c:c9:54:37:a8:cf:ee: 41:f9:a8:26:20:62:65:0a:aa:27:b8:93:24:f6:0e: c0:56:f1:85:04:40:49:56:4f:4e:2f:10:fe:0d:0e: 2e:cc:03:f2:a7:ed:95:15:f1:2f:7a:c4:3f:72:f2: 80:35:b3:14:f5:bd:8c:7a:1e:14:66:c4:08:9b:57: d9:e2:39:47:36:3b:df:37:5a:ab:31:b0:e8:1e:e6: 2c:c8:63:1f:8b:37:5a:c9:7d:ba:2e:2f:5b:8e:76: 09:6e:f6:13:2b:0a:d9:ab:a5:95:93:41:56:e2:18: 5b:38:c1:7c:5d:c0:b8:64:ce:aa:2c:36:8a:8b:12: c3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A5:27:FF:6C:4E:16:57:90:86:13:0B:2A:8D:F2:CC:2D:C2:5F:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/ad65a7e7-f321-3c97-be83-13340c14ee3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl X509v3 Authority Key Identifier: keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer sbgp-ipAddrBlock: critical IPv4: 216.205.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:53:d5:2f:1b:4f:b7:c2:d9:71:cb:0b:33:66:e6:1e:fc:06: 6b:a5:81:5e:25:b8:b8:a2:c3:8f:8e:a0:d3:ea:d3:8e:6f:05: 35:b7:8e:86:ff:3d:37:f7:6a:a8:68:75:fb:58:58:69:d3:5d: cb:32:9d:5d:fc:7c:aa:63:00:56:dd:0b:49:90:49:04:c4:05: 77:c1:c9:ae:8a:01:c3:80:53:e1:01:26:e7:29:c1:f8:f3:3f: 35:51:e8:ab:d0:a2:48:f0:51:3a:d5:75:44:09:b2:5f:a2:b1: de:06:bf:4c:cd:0f:e9:cc:a8:32:b7:0f:f6:64:6d:57:99:73: bb:2c:71:f9:07:e0:b5:e7:2f:fd:68:dc:b6:70:df:84:1b:78: 9c:c8:e7:c5:3e:2d:c1:fc:9e:45:96:63:7a:50:8b:a8:26:cf: 99:a2:82:eb:3d:92:42:51:30:82:65:8a:92:8f:ff:30:2b:dc: 19:b6:48:f4:83:f8:dc:54:0c:ca:53:83:5f:b0:6f:b4:7d:b7: ca:7c:cf:a2:79:0e:5d:19:68:88:44:96:38:2b:f8:ef:0e:9a: 1e:94:10:20:af:e3:d5:d5:df:b4:53:e0:2b:bc:d6:a2:f1:8c: 5f:4d:42:d4:b5:f6:a2:24:ed:05:9e:97:53:52:1c:f4:bb:9a: 00:bc:da:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQbviiiDxVz334cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNiNjk0OGQtM2VlMS00MTUzLTljNDAtMWNkNzQ2NWJl YTJiMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NDMyZWU1NDktMmU5NS00OTlhLTk4NmQtYjkwZDllYzEwZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNamakhwJJhKPOA5c6DNVogU7FU8K/N1kGgo ZAvj1lx9XvXSp0TCD+GuX37SPH2QMGnQlaSfgr+Z2g5T6XcTlboVAqoFXwagdQVR ioHE3aYi8F7brxSM/4gGvGzsWsZ/+03068m9j4Yt6f3qFItrW7vaaqgft9T7eR6I FRKHLkzJVDeoz+5B+agmIGJlCqonuJMk9g7AVvGFBEBJVk9OLxD+DQ4uzAPyp+2V FfEvesQ/cvKANbMU9b2Meh4UZsQIm1fZ4jlHNjvfN1qrMbDoHuYsyGMfizdayX26 Li9bjnYJbvYTKwrZq6WVk0FW4hhbOMF8XcC4ZM6qLDaKixLDKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqlJ/9sThZXkIYTCyqN8swtwl+GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2 OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3NDY1YmVhMmIvYWQ2NWE3ZTctZjMyMS0z Yzk3LWJlODMtMTMzNDBjMTRlZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTNiNjk0OGQtM2VlMS00MTUzLTlj NDAtMWNkNzQ2NWJlYTJiL2EzYjY5NDhkLTNlZTEtNDE1My05YzQwLTFjZDc0NjVi ZWEyYi5jcmwwHwYDVR0jBBgwFoAUkI1uPag85edr1T1okg9nW6bWPkowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3 NDY1YmVhMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2M01MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9T1S8bT7fC2XHLCzNm5h78BmulgV4luLiiw4+OoNPq045vBTW3job/ PTf3aqhodftYWGnTXcsynV38fKpjAFbdC0mQSQTEBXfBya6KAcOAU+EBJucpwfjz PzVR6KvQokjwUTrVdUQJsl+isd4Gv0zND+nMqDK3D/ZkbVeZc7sscfkH4LXnL/1o 3LZw34QbeJzI58U+LcH8nkWWY3pQi6gmz5migus9kkJRMIJlipKP/zAr3Bm2SPSD +NxUDMpTg1+wb7R9t8p8z6J5Dl0ZaIhEljgr+O8Omh6UECCv49XV37RT4Cu81qLx jF9NQtS19qIk7QWel1NSHPS7mgC82vg= -----END CERTIFICATE-----Generated at Mon Oct 20 15:50:23 2025 by rpki-client