$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/de8b7be4-f4dd-3fbf-98c7-c45cc0621e2e.roa File: de8b7be4-f4dd-3fbf-98c7-c45cc0621e2e.roa (raw, json) Hash identifier: L3T21/VujLYGNE5SYg44HG1ZhZPP0Vab28g824P4StQ= Subject key identifier: 12:41:59:91:6B:37:56:81:F9:CF:DB:26:55:DA:D1:2D:55:DF:D4:0F Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584B1806E18C878884C4FA77B080 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/de8b7be4-f4dd-3fbf-98c7-c45cc0621e2e.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 7270 IP address blocks: 216.97.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e1:8c:87:88:84:c4:fa:77:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=1f82a1ac-cb3c-4606-85a0-be37819568af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7a:48:27:05:c8:0c:d4:d9:cb:9b:9c:68:7f: 76:ca:40:4b:7d:a4:d1:0a:48:3f:35:a7:e3:fa:ab: 60:80:3f:47:13:c9:46:de:f9:e4:0d:90:34:79:aa: 55:86:a8:80:17:a0:5a:12:0d:51:0e:6e:90:c5:95: b9:a2:13:e3:9a:dd:7a:7d:78:3b:46:e0:c1:ca:b1: d7:19:c1:5d:cf:22:77:2b:15:b2:52:d5:70:66:55: 4b:62:07:ab:b6:0c:f7:55:0c:30:b0:a6:57:60:6a: 09:7a:e7:96:86:cf:87:2f:fc:56:7e:b7:f1:b2:09: f0:50:be:b8:6c:6f:52:85:3a:71:f3:a2:74:1b:0b: a4:32:d6:05:af:f8:e6:3c:57:c8:f6:b3:60:71:f2: b9:20:0e:3d:30:01:b5:ee:0b:21:24:28:7d:36:c3: 40:70:1d:bf:39:17:3d:7d:e4:4d:d9:aa:d1:49:5e: de:76:1e:b7:0a:da:fe:1f:06:32:24:6f:80:3b:88: 78:74:35:46:d0:43:df:9b:76:5c:24:9b:3b:93:13: fb:fa:77:36:47:07:5a:b8:ab:0d:02:48:26:9a:6b: 04:c4:04:bd:78:46:1f:00:b8:de:b8:e9:ae:ab:a0: 55:f3:ae:0a:ef:8c:a3:3c:b1:f9:79:95:ca:d5:1c: 8e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:41:59:91:6B:37:56:81:F9:CF:DB:26:55:DA:D1:2D:55:DF:D4:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/de8b7be4-f4dd-3fbf-98c7-c45cc0621e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 216.97.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:21:d3:07:0c:ef:af:11:39:e8:8b:09:ba:27:9f:95:c0:23: 90:68:64:b4:f6:c0:16:62:18:6f:3e:22:8a:b5:67:de:93:5e: 77:86:5e:8c:94:e0:70:e7:4a:c7:80:7a:fe:18:2a:41:8c:da: 32:62:30:9b:30:d4:f1:ab:62:73:e2:20:73:52:11:f0:4e:75: 38:65:40:12:c2:14:53:56:2b:12:e3:2a:64:eb:57:68:7c:92: 82:4e:66:3f:47:dd:d9:f1:44:72:cc:a4:f9:da:77:a0:2b:f7: d9:ea:28:13:62:81:9f:62:ec:b5:2e:f0:08:5d:09:7b:a3:32: 67:97:09:6a:95:6f:80:85:ca:89:d1:8f:05:32:52:e7:ce:80: 09:dd:56:87:f5:80:14:ed:1f:e6:c4:0b:9a:d2:b1:0c:c6:6e: a5:e0:fc:b1:41:1d:aa:32:79:4b:df:3d:0e:ec:1d:14:57:d6: cf:7e:cb:57:2d:a5:f7:e6:18:7d:18:a6:1b:1b:74:2c:d3:97: fa:f9:c3:76:7c:9d:2b:00:88:cf:01:c8:26:97:ff:b2:ed:f3: e2:a3:3d:e9:d5:7f:2d:0d:14:47:3a:b6:ae:7a:1a:68:6e:2e: 61:3a:f5:8a:7e:fa:02:21:cb:7b:f2:f4:57:bc:94:c0:a3:f5: ca:fc:7e:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuGMh4iExPp3sIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MWY4MmExYWMtY2IzYy00NjA2LTg1YTAtYmUzNzgxOTU2OGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHpIJwXIDNTZy5ucaH92ykBLfaTRCkg/Nafj +qtggD9HE8lG3vnkDZA0eapVhqiAF6BaEg1RDm6QxZW5ohPjmt16fXg7RuDByrHX GcFdzyJ3KxWyUtVwZlVLYgertgz3VQwwsKZXYGoJeueWhs+HL/xWfrfxsgnwUL64 bG9ShTpx86J0GwukMtYFr/jmPFfI9rNgcfK5IA49MAG17gshJCh9NsNAcB2/ORc9 feRN2arRSV7edh63Ctr+HwYyJG+AO4h4dDVG0EPfm3ZcJJs7kxP7+nc2RwdauKsN AkgmmmsExAS9eEYfALjeuOmuq6BV864K74yjPLH5eZXK1RyOyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJBWZFrN1aB+c/bJlXa0S1V39QPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvZGU4YjdiZTQtZjRkZC0z ZmJmLTk4YzctYzQ1Y2MwNjIxZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQh0wcM768ROeiLCbonn5XAI5BoZLT2wBZiGG8+Ioq1Z96TXneGXoyU 4HDnSseAev4YKkGM2jJiMJsw1PGrYnPiIHNSEfBOdThlQBLCFFNWKxLjKmTrV2h8 koJOZj9H3dnxRHLMpPnad6Ar99nqKBNigZ9i7LUu8AhdCXujMmeXCWqVb4CFyonR jwUyUufOgAndVof1gBTtH+bEC5rSsQzGbqXg/LFBHaoyeUvfPQ7sHRRX1s9+y1ct pffmGH0YphsbdCzTl/r5w3Z8nSsAiM8ByCaX/7Lt8+KjPenVfy0NFEc6tq56Gmhu LmE69Yp++gIhy3vy9Fe8lMCj9cr8fqM= -----END CERTIFICATE-----Generated at Mon Oct 20 15:49:58 2025 by rpki-client