$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/2f47224b-3181-3456-acd2-84215941a959.roa File: 2f47224b-3181-3456-acd2-84215941a959.roa (raw, json) Hash identifier: kLfvh+ZBe6Y/RMR5mJ5WF2Ezrc9qVcSKhNwFYHlU950= Subject key identifier: 6A:6E:A0:E9:E3:54:AB:D5:F1:C1:41:51:4D:8A:08:4F:F8:3D:89:13 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584AF0F1422373A2471356030B80 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/2f47224b-3181-3456-acd2-84215941a959.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 30428 IP address blocks: 216.97.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:42:23:73:a2:47:13:56:03:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=e7d18cd3-d186-41db-b33f-3d60900f29e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3a:37:7e:9f:99:c4:64:2a:f7:3b:75:5c:37: 62:6d:f1:b4:d3:e5:7b:66:eb:f7:2f:a9:57:87:c9: c3:8b:d1:76:02:ca:31:da:17:62:be:19:2e:33:6c: 0f:ab:a6:8c:3a:a9:a6:e6:b6:48:ce:07:84:69:67: 77:0a:ec:04:c2:ca:55:11:69:86:c9:4d:ba:f8:30: 1d:31:e7:f5:7e:d4:f1:bf:13:d2:e3:69:c5:3e:e9: ac:99:e6:9e:4c:e9:cc:89:59:2d:d4:10:f6:38:0c: 82:b9:f3:f9:35:27:cf:72:03:be:68:34:b9:ac:2d: b2:3a:a3:7a:54:62:ab:60:0d:5f:e3:d4:06:c4:07: e3:1b:9c:e0:3d:0f:8e:6d:5e:b4:78:65:5a:a0:be: d3:e8:23:00:67:ea:9e:11:ef:a5:15:7c:ba:63:62: 11:9a:aa:bc:e1:50:c0:25:36:5d:47:bf:99:52:76: 12:9b:d0:06:05:19:f0:82:62:96:9e:e8:70:13:62: 8e:bc:48:7e:7b:37:9e:fa:87:5f:a6:87:66:5d:79: de:cc:1d:ff:4b:13:53:4d:ac:a0:9b:ab:65:85:aa: 52:dd:8b:01:c0:ac:14:5a:8a:81:41:24:14:10:1c: 3d:4a:f1:32:4b:b6:30:bc:f6:a3:1d:4a:9d:af:b7: 81:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6E:A0:E9:E3:54:AB:D5:F1:C1:41:51:4D:8A:08:4F:F8:3D:89:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/2f47224b-3181-3456-acd2-84215941a959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 216.97.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:7f:c9:2e:80:c3:03:0a:ce:a0:ff:14:c3:f0:7d:22:62:c9: d8:51:69:ec:44:0b:e4:a0:c4:fd:f1:7a:9e:8d:b0:5c:5f:fe: d1:2e:ab:68:3b:25:4f:67:ea:ed:b0:72:32:c4:98:ae:37:04: 9f:0a:08:db:aa:40:58:b1:69:54:56:fe:59:81:3f:41:6e:61: 96:89:05:5c:38:fd:bd:49:10:9c:db:26:ab:6a:e4:53:1f:30: 1f:74:9b:15:17:ab:31:9d:fa:e1:8c:c8:cf:44:df:95:81:3c: c4:ba:21:34:72:7d:42:5b:2f:4a:56:c4:07:2f:b5:8c:f1:64: b5:f6:26:df:b9:4d:9a:82:8a:fa:d2:b2:c3:9d:ab:1f:c4:be: ed:b0:90:a8:fa:34:3c:5b:a4:2b:e0:f5:f9:ce:c6:1f:b4:28: 90:09:5d:bb:21:af:ac:5d:6e:b6:25:4e:b6:5d:4a:21:00:78: 81:2c:8f:a9:c5:83:16:ae:ad:7b:20:1c:d9:1c:f8:00:a7:cf: 76:d9:17:0f:81:50:80:ae:91:91:29:d7:7e:b6:84:2e:18:e8: d4:0a:9d:0e:87:26:2d:b3:03:c2:72:50:96:f1:5a:12:9c:d3: c3:6e:0e:57:5a:28:b0:20:a5:86:2e:dd:40:7d:c1:88:65:87: 0e:5e:98:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UIjc6JHE1YDC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZTdkMThjZDMtZDE4Ni00MWRiLWIzM2YtM2Q2MDkwMGYyOWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zo3fp+ZxGQq9zt1XDdibfG00+V7Zuv3L6lX h8nDi9F2Asox2hdivhkuM2wPq6aMOqmm5rZIzgeEaWd3CuwEwspVEWmGyU26+DAd Mef1ftTxvxPS42nFPumsmeaeTOnMiVkt1BD2OAyCufP5NSfPcgO+aDS5rC2yOqN6 VGKrYA1f49QGxAfjG5zgPQ+ObV60eGVaoL7T6CMAZ+qeEe+lFXy6Y2IRmqq84VDA JTZdR7+ZUnYSm9AGBRnwgmKWnuhwE2KOvEh+ezee+odfpodmXXnezB3/SxNTTayg m6tlhapS3YsBwKwUWoqBQSQUEBw9SvEyS7YwvPajHUqdr7eBZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpuoOnjVKvV8cFBUU2KCE/4PYkTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvMmY0NzIyNGItMzE4MS0z NDU2LWFjZDItODQyMTU5NDFhOTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABl/yS6AwwMKzqD/FMPwfSJiydhRaexEC+SgxP3xep6NsFxf/tEuq2g7 JU9n6u2wcjLEmK43BJ8KCNuqQFixaVRW/lmBP0FuYZaJBVw4/b1JEJzbJqtq5FMf MB90mxUXqzGd+uGMyM9E35WBPMS6ITRyfUJbL0pWxAcvtYzxZLX2Jt+5TZqCivrS ssOdqx/Evu2wkKj6NDxbpCvg9fnOxh+0KJAJXbshr6xdbrYlTrZdSiEAeIEsj6nF gxaurXsgHNkc+ACnz3bZFw+BUICukZEp1362hC4Y6NQKnQ6HJi2zA8JyUJbxWhKc 08NuDldaKLAgpYYu3UB9wYhlhw5emNQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:02:37 2025 by rpki-client