$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/5878e216-f837-38e3-b277-8cb9c1df55e6.roa File: 5878e216-f837-38e3-b277-8cb9c1df55e6.roa (raw, json) Hash identifier: tV9gLjr4IKBpYoNJPvky8YHzcO0exdPVEJaH5/OK0Nw= Subject key identifier: 3F:20:EE:54:E2:AD:D8:E4:27:6E:9E:1B:5A:E7:02:46:04:C2:F8:C6 Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584ADBB06EBCE063609AD9712100 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/5878e216-f837-38e3-b277-8cb9c1df55e6.roa Signing time: Thu 14 Aug 2025 22:18:17 +0000 ROA not before: Thu 14 Aug 2025 22:18:17 +0000 ROA not after: Wed 12 Nov 2025 23:18:17 +0000 asID: 30387 IP address blocks: 165.112.0.0/20 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:db:b0:6e:bc:e0:63:60:9a:d9:71:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Aug 14 22:18:17 2025 GMT Not After : Nov 12 23:18:17 2025 GMT Subject: CN=20713f9e-ed1f-4a3c-92b6-5058e467f95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:32:d2:b0:4a:d1:1e:ea:c7:69:e3:a2:66:7b: 56:41:2e:e6:61:89:14:6d:38:89:95:6a:35:e8:0e: b0:79:a3:0c:7e:a2:36:5c:2a:e9:d4:b0:6d:9f:ee: 45:b7:c4:eb:09:56:ba:7c:5f:d8:a5:a9:2d:0b:b2: 58:ec:53:65:ea:a3:8e:3d:ad:53:44:f9:d6:10:2f: 96:c3:28:01:0f:45:6a:69:a1:d2:c2:bc:bf:16:b4: 6a:c1:a2:2f:2e:79:d7:4c:9a:c6:31:d8:d5:d4:93: e7:52:9b:3d:28:14:55:e7:22:3a:b9:c3:ca:67:fc: f6:c6:b7:88:92:f5:5d:67:98:87:6e:0a:69:d2:6e: fa:93:bd:b0:1a:4c:d4:65:d5:9d:29:98:96:94:1a: f4:e2:1c:4c:e5:7d:e6:b9:f0:b5:60:ed:08:56:17: 61:30:e8:db:5b:12:a1:05:64:c7:e2:39:2c:c2:48: 44:bc:2b:dd:64:25:d7:93:6b:d7:27:2f:f5:e3:be: 80:ec:45:17:b3:38:12:8b:8f:dc:ab:be:05:fc:79: dd:cb:f9:e1:ac:d7:50:d9:ec:3b:bb:44:ea:76:d9: 63:bd:a6:da:a8:fa:62:8e:e8:e6:15:ce:91:0a:47: 92:40:b7:11:35:fa:e4:37:bb:93:ac:2a:0f:f2:e2: 49:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:20:EE:54:E2:AD:D8:E4:27:6E:9E:1B:5A:E7:02:46:04:C2:F8:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/5878e216-f837-38e3-b277-8cb9c1df55e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 165.112.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:98:3b:e2:0d:6a:76:ad:7f:10:6e:7e:50:47:f3:f9:b3:64: 41:78:2b:38:81:40:cf:19:54:b5:78:67:7c:cd:1a:ae:28:bc: 03:4d:e0:a7:71:1b:4f:b5:98:4d:69:5a:c6:03:c0:77:9f:d8: 6c:9f:1d:af:f8:e2:57:b1:a2:93:1d:6a:3e:75:25:4d:f6:0e: d6:6f:67:26:90:04:2a:bf:ec:ef:e5:fd:af:91:72:d9:20:cf: ef:03:36:73:6d:60:40:a0:2e:19:41:4e:98:ba:d9:73:ab:18: 2e:38:ab:28:41:6e:5c:c1:18:cd:e5:bf:38:a0:81:ad:c7:c0: eb:70:1e:86:b5:0b:29:f2:3e:0b:83:95:a2:bc:43:ad:33:6f: 15:0d:47:3c:4a:bc:15:a9:84:33:66:8d:85:30:3f:6b:79:4a: d6:7f:bd:55:2b:a7:4c:bd:ff:e1:84:0f:47:66:d8:b8:ba:a3: 66:bb:f7:71:3d:95:08:7c:cd:31:01:4f:c7:73:56:a4:1b:5f: 00:a3:c6:7b:b2:3e:a0:5b:bd:69:89:7f:48:d1:81:f1:35:80: 8c:d8:44:8d:3c:dd:ff:13:c0:fe:2e:25:75:ad:8e:e8:6a:b8: de:9e:a2:d3:58:2f:d8:5f:79:26:4c:ae:34:99:b5:07:98:81: a8:97:62:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErbsG684GNgmtlxIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI1MDgxNDIyMTgxN1oXDTI1MTExMjIzMTgxN1owLzEtMCsGA1UEAxMk MjA3MTNmOWUtZWQxZi00YTNjLTkyYjYtNTA1OGU0NjdmOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjLSsErRHurHaeOiZntWQS7mYYkUbTiJlWo1 6A6weaMMfqI2XCrp1LBtn+5Ft8TrCVa6fF/YpaktC7JY7FNl6qOOPa1TRPnWEC+W wygBD0VqaaHSwry/FrRqwaIvLnnXTJrGMdjV1JPnUps9KBRV5yI6ucPKZ/z2xreI kvVdZ5iHbgpp0m76k72wGkzUZdWdKZiWlBr04hxM5X3mufC1YO0IVhdhMOjbWxKh BWTH4jkswkhEvCvdZCXXk2vXJy/1476A7EUXszgSi4/cq74F/Hndy/nhrNdQ2ew7 u0TqdtljvabaqPpijujmFc6RCkeSQLcRNfrkN7uTrCoP8uJJqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8g7lTirdjkJ26eG1rnAkYEwvjGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvNTg3OGUyMTYtZjgzNy0z OGUzLWIyNzctOGNiOWMxZGY1NWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpXAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmYO+INanatfxBuflBH8/mzZEF4KziBQM8ZVLV4Z3zNGq4ovANN4Kdx G0+1mE1pWsYDwHef2GyfHa/44lexopMdaj51JU32DtZvZyaQBCq/7O/l/a+Rctkg z+8DNnNtYECgLhlBTpi62XOrGC44qyhBblzBGM3lvzigga3HwOtwHoa1CynyPguD laK8Q60zbxUNRzxKvBWphDNmjYUwP2t5StZ/vVUrp0y9/+GED0dm2Li6o2a793E9 lQh8zTEBT8dzVqQbXwCjxnuyPqBbvWmJf0jRgfE1gIzYRI083f8TwP4uJXWtjuhq uN6eotNYL9hfeSZMrjSZtQeYgaiXYtg= -----END CERTIFICATE-----Generated at Sun Aug 24 05:43:17 2025 by rpki-client