$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d5cee402-50c4-3d14-975c-4baf66ffd253.roa File: d5cee402-50c4-3d14-975c-4baf66ffd253.roa (raw, json) Hash identifier: nvIcxV8dHn6UMuGC51m3ONpu4ZKfFDWd6di4a68BJ7Y= Subject key identifier: 8C:CA:1F:39:C3:6E:28:B4:05:B1:9A:AF:05:D7:2E:97:9A:1B:6F:41 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AEF8BC7741CEB80265C0A8926 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d5cee402-50c4-3d14-975c-4baf66ffd253.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 199527 IP address blocks: 216.132.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:c7:74:1c:eb:80:26:5c:0a:89:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=8621d987-6f40-4ee2-86ec-b810164aba6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2d:35:05:f4:9d:d9:b9:53:8f:ac:08:25:c6: 8c:3f:8e:86:a2:dd:64:ed:aa:d8:c9:d2:7b:0c:84: 98:29:0c:df:6d:d0:0d:ca:00:3c:37:24:a5:b6:3e: eb:c2:b8:3f:49:8e:3d:59:78:a5:c3:95:86:c4:e9: ca:2a:be:82:6b:ff:55:09:24:33:8c:6f:15:2e:81: 51:c6:42:2e:fd:e5:ec:10:7c:1b:2f:a3:3e:bd:2d: 19:72:78:36:8f:03:3c:2b:de:b3:4a:f0:ab:92:d5: 13:f1:f4:a9:a0:48:ad:1e:66:a9:fe:a7:7d:5e:df: dd:ed:54:bd:d3:4f:ed:2d:91:99:fc:6a:c9:f9:63: 82:1a:78:28:39:ba:8e:30:3c:59:1c:68:70:82:e5: f3:cd:bc:7f:fa:6a:b4:c4:8f:a9:77:a8:eb:cf:ea: fc:87:1a:d7:45:44:a3:6c:83:78:a3:d2:41:70:2c: 95:93:92:a7:7c:37:d7:1b:48:96:6d:40:a3:75:c8: 20:c7:83:cb:4e:50:ac:2d:a1:a5:c6:3a:5c:5f:4d: b9:e7:4f:9a:1e:20:a6:b5:c3:29:ae:6f:9b:bf:7c: 42:d4:64:7e:cd:0a:8b:27:0b:0f:cc:47:26:fe:02: 2c:12:ac:d5:26:08:1c:f0:0a:c2:f0:17:8e:bf:c9: 31:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CA:1F:39:C3:6E:28:B4:05:B1:9A:AF:05:D7:2E:97:9A:1B:6F:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d5cee402-50c4-3d14-975c-4baf66ffd253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:42:10:1c:c3:03:f8:6e:b7:4f:fe:d1:13:49:db:37:16:b0: 9e:97:ba:db:f8:00:35:d8:8b:ac:47:31:b5:64:3d:4e:c8:5f: 8b:10:d1:cd:85:ae:35:8e:a0:ca:d7:ac:ce:67:c5:45:63:94: 90:31:1b:f7:fe:1c:7b:04:95:d1:58:71:cc:fe:b3:8c:75:88: 53:f4:98:45:1f:ab:9f:ee:39:cc:a8:d6:4f:f8:62:56:79:5e: 02:5a:b5:42:63:cb:17:80:eb:b6:72:1e:77:ea:62:a6:1e:29: f2:ca:15:a8:1b:88:49:cd:3c:56:99:e6:42:99:4b:62:29:e8: fd:04:2f:02:f0:0b:20:26:1a:d0:0b:31:0f:be:9a:80:77:8e: e2:9b:4a:6a:12:4e:eb:d5:0e:bf:53:8b:f3:34:8e:bf:53:92: 84:71:cc:6f:54:48:0e:00:bc:68:9a:93:d2:a6:55:03:79:27: b9:ea:2f:ce:91:25:3d:5d:1b:8e:83:07:f9:ca:3f:bc:7f:8e: 9d:fc:69:bb:e9:27:ea:d3:05:65:9b:f2:cc:d8:16:98:cc:d2: 64:ee:a3:41:16:bd:48:ae:64:19:9c:c7:c6:c5:a4:d3:a8:d4: e7:72:cd:f7:e1:b8:38:8f:f5:f7:2d:82:4a:b5:fd:13:11:a2: d6:30:22:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvi8d0HOuAJlwKiSYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk ODYyMWQ5ODctNmY0MC00ZWUyLTg2ZWMtYjgxMDE2NGFiYTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji01BfSd2blTj6wIJcaMP46Got1k7arYydJ7 DISYKQzfbdANygA8NySltj7rwrg/SY49WXilw5WGxOnKKr6Ca/9VCSQzjG8VLoFR xkIu/eXsEHwbL6M+vS0Zcng2jwM8K96zSvCrktUT8fSpoEitHmap/qd9Xt/d7VS9 00/tLZGZ/GrJ+WOCGngoObqOMDxZHGhwguXzzbx/+mq0xI+pd6jrz+r8hxrXRUSj bIN4o9JBcCyVk5KnfDfXG0iWbUCjdcggx4PLTlCsLaGlxjpcX02550+aHiCmtcMp rm+bv3xC1GR+zQqLJwsPzEcm/gIsEqzVJggc8ArC8BeOv8kxmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzKHznDbii0BbGarwXXLpeaG29BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDVjZWU0MDItNTBjNC0z ZDE0LTk3NWMtNGJhZjY2ZmZkMjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ISwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFCEBzDA/hut0/+0RNJ2zcWsJ6Xutv4ADXYi6xHMbVkPU7IX4sQ0c2F rjWOoMrXrM5nxUVjlJAxG/f+HHsEldFYccz+s4x1iFP0mEUfq5/uOcyo1k/4YlZ5 XgJatUJjyxeA67ZyHnfqYqYeKfLKFagbiEnNPFaZ5kKZS2Ip6P0ELwLwCyAmGtAL MQ++moB3juKbSmoSTuvVDr9Ti/M0jr9TkoRxzG9USA4AvGiak9KmVQN5J7nqL86R JT1dG46DB/nKP7x/jp38abvpJ+rTBWWb8szYFpjM0mTuo0EWvUiuZBmcx8bFpNOo 1OdyzffhuDiP9fctgkq1/RMRotYwIqI= -----END CERTIFICATE-----Generated at Sat Aug 23 17:21:48 2025 by rpki-client