$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/850e8d96-3713-3330-a09f-44ed58d840bf.roa File: 850e8d96-3713-3330-a09f-44ed58d840bf.roa (raw, json) Hash identifier: MpnqdatJPKC32yVOHnfLrVrdmfdTZ9QlYvTPHatnfcs= Subject key identifier: 85:D9:22:EC:4B:4B:8F:21:05:B6:DB:7F:0A:38:BC:A1:6A:CF:56:4A Certificate issuer: /CN=a4e67936-c857-487d-93df-2dff7fa79988 Certificate serial: 010D0C9F4328584ADD6685DE5119AE3F00983E80 Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/850e8d96-3713-3330-a09f-44ed58d840bf.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 19940 IP address blocks: 216.16.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:85:de:51:19:ae:3f:00:98:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=b61a53ff-7f25-4556-b879-d3df871dad6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c6:81:42:86:61:b8:98:c7:c6:f1:d0:d1:78: fe:99:45:be:28:c6:e0:c8:ff:9f:bb:6a:7e:9c:88: 66:6f:b9:46:22:a4:a6:09:35:48:eb:a5:06:67:9f: b1:2f:7a:39:1d:f8:a2:39:b9:23:06:e9:ec:9d:f8: f1:ce:4c:2e:ed:5a:1a:5a:f3:0e:83:d0:cc:6d:a2: 6a:34:29:13:6a:c9:ce:52:43:82:8d:be:a0:fb:42: fa:96:db:8c:14:d0:24:ca:9c:95:d6:59:21:10:c3: 1a:55:b5:6c:a9:32:7b:df:c4:f3:9f:c5:46:36:40: e5:43:40:a2:f4:f3:5c:18:06:42:cb:4f:15:9b:7d: 71:7e:e5:8a:ce:0b:bc:ae:ec:b9:55:61:73:2c:a2: b1:46:14:72:20:1d:7b:6d:82:f9:93:e3:ba:6c:ed: da:9e:64:43:44:4a:aa:97:22:55:b1:38:9e:18:76: 92:24:db:39:88:ba:3a:c8:c7:15:7c:6e:1a:c8:0c: 15:50:e8:de:13:3e:ab:75:00:60:7a:d2:f6:b5:f5: 11:94:5f:88:a4:9a:2d:95:53:45:2c:f2:0a:12:cf: ab:a3:62:fd:84:76:99:06:6c:b6:1b:29:06:0a:96: 57:6f:9c:6e:9f:c8:74:de:d9:3e:b2:a9:4a:ca:12: 71:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D9:22:EC:4B:4B:8F:21:05:B6:DB:7F:0A:38:BC:A1:6A:CF:56:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/850e8d96-3713-3330-a09f-44ed58d840bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl X509v3 Authority Key Identifier: keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer sbgp-ipAddrBlock: critical IPv4: 216.16.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:7c:43:7d:86:28:ea:53:9e:1b:97:8a:88:d2:99:b5:91:5e: 5e:f1:26:4a:18:61:6c:c7:40:6d:3a:6a:57:76:96:ee:df:66: 63:c1:69:a5:6c:c3:33:ef:b7:c2:cd:9d:09:e9:1c:86:b9:6b: 21:f0:46:0c:2d:11:4f:d0:87:76:1c:08:91:91:e5:45:b2:d2: f9:39:b8:e6:04:a8:60:08:bc:67:07:a5:f8:66:60:48:2c:81: 38:d7:05:f3:66:a1:50:ac:7e:5d:96:a2:bf:2b:17:ec:b2:e7: fe:df:69:d9:99:43:d2:d5:79:56:3a:2d:29:75:ba:40:ed:ac: 4f:66:e2:62:da:25:b3:fe:50:e0:28:9d:75:0c:36:ac:64:8a: f3:5f:5d:72:86:d9:3c:b5:0d:a4:66:1d:85:7d:af:3d:31:70: c2:1c:5c:f6:ab:d5:42:06:7a:9b:e8:bd:9f:a5:99:67:d0:4f: b2:21:d9:6a:4e:e6:22:b6:64:ab:fc:67:6b:67:a2:eb:9c:a9: 61:81:c3:79:c3:91:10:16:ae:49:eb:15:51:e5:1f:05:0a:4d: 03:e1:33:37:ab:d2:66:99:89:69:da:e5:5f:69:52:ca:6b:10: a0:cb:a5:2b:19:08:e2:da:60:22:08:fc:8a:32:b7:63:cc:92: 48:67:12:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZoXeURmuPwCYPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5 OTg4MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk YjYxYTUzZmYtN2YyNS00NTU2LWI4NzktZDNkZjg3MWRhZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsaBQoZhuJjHxvHQ0Xj+mUW+KMbgyP+fu2p+ nIhmb7lGIqSmCTVI66UGZ5+xL3o5HfiiObkjBunsnfjxzkwu7VoaWvMOg9DMbaJq NCkTasnOUkOCjb6g+0L6ltuMFNAkypyV1lkhEMMaVbVsqTJ738Tzn8VGNkDlQ0Ci 9PNcGAZCy08Vm31xfuWKzgu8ruy5VWFzLKKxRhRyIB17bYL5k+O6bO3anmRDREqq lyJVsTieGHaSJNs5iLo6yMcVfG4ayAwVUOjeEz6rdQBgetL2tfURlF+IpJotlVNF LPIKEs+ro2L9hHaZBmy2GykGCpZXb5xun8h03tk+sqlKyhJxgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXZIuxLS48hBbbbfwo4vKFqz1ZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2 NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvODUwZThkOTYtMzcxMy0z MzMwLWEwOWYtNDRlZDU4ZDg0MGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3 OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm N2ZhNzk5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR8Q32GKOpTnhuXiojSmbWRXl7xJkoYYWzHQG06ald2lu7fZmPBaaVs wzPvt8LNnQnpHIa5ayHwRgwtEU/Qh3YcCJGR5UWy0vk5uOYEqGAIvGcHpfhmYEgs gTjXBfNmoVCsfl2Wor8rF+yy5/7fadmZQ9LVeVY6LSl1ukDtrE9m4mLaJbP+UOAo nXUMNqxkivNfXXKG2Ty1DaRmHYV9rz0xcMIcXPar1UIGepvovZ+lmWfQT7Ih2WpO 5iK2ZKv8Z2tnouucqWGBw3nDkRAWrknrFVHlHwUKTQPhMzer0maZiWna5V9pUspr EKDLpSsZCOLaYCII/Ioyt2PMkkhnErA= -----END CERTIFICATE-----Generated at Sat Aug 23 21:03:36 2025 by rpki-client