$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaacd4a8-4daf-3b20-bacf-6eba324ab86a.roa File: aaacd4a8-4daf-3b20-bacf-6eba324ab86a.roa (raw, json) Hash identifier: 2nFrXBtjpZT5qMaQbrLOaUzI9fgeH3rIpWaODLaMrpY= Subject key identifier: 5A:39:F9:C2:5A:11:3F:9E:02:6D:64:C6:68:54:8E:C5:A8:16:F5:F5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AEF8BC78B71507C0760BB0540 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaacd4a8-4daf-3b20-bacf-6eba324ab86a.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 199527 IP address blocks: 216.132.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:c7:8b:71:50:7c:07:60:bb:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=1581fa4c-6746-4478-a889-b6bce38642fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8e:eb:73:05:d0:a7:7b:f8:59:82:04:4e:27: 9c:ea:30:d8:96:e1:26:c9:6c:6e:8a:8d:13:17:96: fc:5b:25:fd:7d:cd:7d:3a:17:80:5d:d5:12:b1:c5: e1:13:a9:79:09:a7:86:3b:9e:4c:e7:fa:05:01:9a: f6:9d:13:9a:79:36:f1:74:94:99:fc:7b:67:96:ab: 41:a3:ac:54:62:10:2a:37:99:16:17:26:0b:a1:87: c4:0c:34:51:a7:d7:c4:1a:6d:dc:41:18:d2:31:e8: b0:77:cb:57:51:0b:11:e7:8e:13:8f:01:f4:e0:35: 5d:b0:90:35:75:24:18:ff:35:bb:4c:e1:88:0c:af: 78:bb:c8:02:f8:8e:64:c3:f2:a5:4c:7c:af:4b:fb: be:6d:f0:a6:fd:69:79:7b:03:11:24:39:b8:2b:f9: 7b:ef:e5:35:81:35:d8:f2:38:f3:f1:35:52:f4:5a: db:1a:c5:a0:43:d7:42:15:24:54:da:a7:f7:42:ef: 71:80:42:4e:c5:1b:3b:4e:56:e8:74:d9:3f:7c:26: 82:c6:14:f8:69:d9:3a:7c:48:81:35:92:08:e4:f3: 19:f7:af:d9:b1:b0:f6:5b:ab:01:6d:08:0f:95:4e: 18:ce:c5:33:6d:39:17:89:32:ad:07:43:00:e8:97: 07:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:39:F9:C2:5A:11:3F:9E:02:6D:64:C6:68:54:8E:C5:A8:16:F5:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaacd4a8-4daf-3b20-bacf-6eba324ab86a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:c9:a9:1e:38:93:7e:3e:7c:39:8f:0b:37:b3:1b:11:9e:3a: 1a:6f:87:6a:7a:f1:1b:78:1e:46:2a:c6:05:53:42:cd:37:8c: 9e:61:81:16:cd:2e:cd:07:bb:ab:47:19:a8:63:8a:d8:8b:83: d7:6b:f8:0b:ef:ef:88:26:6e:e5:cd:55:95:50:7a:23:fb:86: d0:60:38:d9:36:47:aa:4e:9a:a3:d7:7a:eb:2c:75:f5:d6:7b: 8d:7f:6c:20:88:a3:47:9c:75:33:4a:9d:e2:74:29:91:eb:b8: 8a:85:bd:64:1e:be:c9:01:05:81:9f:61:7b:e2:bf:8b:fe:90: a6:0a:ab:a4:ef:a0:20:75:4f:4a:d1:71:3e:23:12:e2:c3:51: 26:93:a8:c4:7e:85:47:de:c8:ca:1f:52:55:e3:89:55:31:e4: 8e:4c:22:cf:a3:c3:74:07:26:87:00:3f:f7:bd:a5:66:69:ba: a4:2b:59:b9:27:3d:b6:99:de:d5:77:0a:57:af:83:9e:6b:66: 5a:c8:ef:f8:09:20:5a:4b:1e:2e:48:ea:da:74:2d:5e:35:64: 55:48:ae:f4:39:a2:18:14:5f:63:3a:fa:24:a6:95:7c:47:c3: 16:0c:c1:2b:46:db:d4:51:6c:28:e6:3e:55:a5:7a:31:f8:71: bb:94:ef:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvi8eLcVB8B2C7BUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk MTU4MWZhNGMtNjc0Ni00NDc4LWE4ODktYjZiY2UzODY0MmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp47rcwXQp3v4WYIETiec6jDYluEmyWxuio0T F5b8WyX9fc19OheAXdUSscXhE6l5CaeGO55M5/oFAZr2nROaeTbxdJSZ/HtnlqtB o6xUYhAqN5kWFyYLoYfEDDRRp9fEGm3cQRjSMeiwd8tXUQsR544TjwH04DVdsJA1 dSQY/zW7TOGIDK94u8gC+I5kw/KlTHyvS/u+bfCm/Wl5ewMRJDm4K/l77+U1gTXY 8jjz8TVS9FrbGsWgQ9dCFSRU2qf3Qu9xgEJOxRs7TlbodNk/fCaCxhT4adk6fEiB NZII5PMZ96/ZsbD2W6sBbQgPlU4YzsUzbTkXiTKtB0MA6JcHwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFo5+cJaET+eAm1kxmhUjsWoFvX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWFhY2Q0YTgtNGRhZi0z YjIwLWJhY2YtNmViYTMyNGFiODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2IQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALrJqR44k34+fDmPCzezGxGeOhpvh2p68Rt4HkYqxgVTQs03jJ5hgRbN Ls0Hu6tHGahjitiLg9dr+Avv74gmbuXNVZVQeiP7htBgONk2R6pOmqPXeussdfXW e41/bCCIo0ecdTNKneJ0KZHruIqFvWQevskBBYGfYXviv4v+kKYKq6TvoCB1T0rR cT4jEuLDUSaTqMR+hUfeyMofUlXjiVUx5I5MIs+jw3QHJocAP/e9pWZpuqQrWbkn PbaZ3tV3Clevg55rZlrI7/gJIFpLHi5I6tp0LV41ZFVIrvQ5ohgUX2M6+iSmlXxH wxYMwStG29RRbCjmPlWlejH4cbuU7wQ= -----END CERTIFICATE-----Generated at Sat Aug 23 19:28:25 2025 by rpki-client