$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/41901fb9-e852-38fe-9a4b-13a788c646db.roa File: 41901fb9-e852-38fe-9a4b-13a788c646db.roa (raw, json) Hash identifier: uBkTY1QJyKOb9tvgMcXQ5nnvMjduGi+XNG9K7ycnPuk= Subject key identifier: 1E:BE:C0:60:5A:1A:48:EA:67:B8:DB:35:02:DA:66:F8:50:DE:2B:2F Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584AECC1321C2E9C85D4D07FAEA0 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/41901fb9-e852-38fe-9a4b-13a788c646db.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 216.245.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:32:1c:2e:9c:85:d4:d0:7f:ae:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e5376e09-0ad8-41e5-afd2-f9b8420a2a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:87:81:cc:15:c6:4c:95:eb:fb:d0:fe:4a: 8b:b5:1f:08:91:60:22:68:8b:67:c0:6b:93:45:c0: 02:5e:86:f8:08:cb:75:13:ef:da:c4:83:17:a7:db: e1:35:27:f6:04:9e:37:4e:16:f0:3d:7c:d6:30:b6: 18:cd:e3:e6:e2:df:19:63:22:3a:16:0d:1c:9a:39: 72:72:0f:a6:85:20:fa:02:4a:63:a7:1c:e1:f1:0b: cb:1a:9a:cd:dd:6a:b7:e2:1c:a2:37:1c:76:c3:51: 5b:51:99:31:13:98:24:89:c4:85:08:4a:c0:df:e1: c1:98:0c:dd:e8:ee:eb:11:90:19:cb:af:6a:3b:68: 8d:23:7e:53:53:8d:99:78:14:04:de:e5:5d:60:0f: e7:8b:0f:fc:f5:76:5e:eb:aa:cb:38:e1:a6:3c:40: 1f:81:01:75:d9:20:dc:4f:b0:db:60:2f:f3:00:e7: ba:94:bf:d0:4a:d1:7b:1e:14:0e:e3:e4:f6:9b:12: 09:0c:69:f8:85:59:03:83:5c:cf:59:b3:a9:9c:4d: a5:20:c1:ce:92:32:b2:ef:f5:63:00:ae:5b:2c:a4: 0b:b3:da:f5:00:ed:cc:cd:e2:85:65:85:c7:ad:51: 5c:ff:7f:f7:0b:a4:ba:31:cc:0b:16:51:83:0d:4a: 31:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BE:C0:60:5A:1A:48:EA:67:B8:DB:35:02:DA:66:F8:50:DE:2B:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/41901fb9-e852-38fe-9a4b-13a788c646db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 216.245.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:38:15:2b:77:c2:14:7c:64:62:ae:09:2c:00:aa:a4:14:e6: 26:70:fd:b0:5b:c0:d4:08:7b:e5:9b:2c:00:eb:50:b9:81:2a: 69:10:44:12:2c:13:8d:a3:eb:a8:80:9c:89:13:9c:ef:6d:7a: fb:c1:be:7c:ef:78:6d:b4:6f:b1:36:9c:fc:55:15:64:7e:26: 15:5d:81:f7:9b:61:79:2e:e3:54:5e:5e:e0:51:90:19:bf:cb: dc:a4:33:30:9e:2a:4f:f0:92:8f:61:33:2b:40:03:34:7a:06: 8f:24:26:fd:32:4c:d3:75:48:e6:ef:e2:95:28:5c:ed:b3:b1: 9f:cb:4a:8f:7b:f6:d8:f0:08:06:df:93:13:39:96:22:0f:3a: 53:cb:fb:f9:61:11:97:8e:a2:f7:1d:eb:64:1b:c8:5a:36:8b: ee:6e:9b:f9:56:59:3d:d9:fd:a9:96:42:be:bb:75:62:ad:72: db:5e:24:15:a8:93:2e:20:47:43:e5:b4:df:cc:89:20:f8:b7: 24:0b:7a:0b:87:30:35:23:fd:0b:9a:e8:f3:fe:e7:43:25:73: 7f:0c:e4:34:dc:24:6a:13:95:32:2a:ee:36:ed:45:7e:39:ac: 2e:41:a1:43:91:77:94:9e:4e:3c:f8:b9:3a:94:03:c2:2f:9c: 53:a5:c4:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTIcLpyF1NB/rqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTUzNzZlMDktMGFkOC00MWU1LWFmZDItZjliODQyMGEyYTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5KHgcwVxkyV6/vQ/kqLtR8IkWAiaItnwGuT RcACXob4CMt1E+/axIMXp9vhNSf2BJ43ThbwPXzWMLYYzePm4t8ZYyI6Fg0cmjly cg+mhSD6Akpjpxzh8QvLGprN3Wq34hyiNxx2w1FbUZkxE5gkicSFCErA3+HBmAzd 6O7rEZAZy69qO2iNI35TU42ZeBQE3uVdYA/niw/89XZe66rLOOGmPEAfgQF12SDc T7DbYC/zAOe6lL/QStF7HhQO4+T2mxIJDGn4hVkDg1zPWbOpnE2lIMHOkjKy7/Vj AK5bLKQLs9r1AO3MzeKFZYXHrVFc/3/3C6S6McwLFlGDDUox3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6+wGBaGkjqZ7jbNQLaZvhQ3isvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvNDE5MDFmYjktZTg1Mi0z OGZlLTlhNGItMTNhNzg4YzY0NmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PW1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEs4FSt3whR8ZGKuCSwAqqQU5iZw/bBbwNQIe+WbLADrULmBKmkQRBIs E42j66iAnIkTnO9tevvBvnzveG20b7E2nPxVFWR+JhVdgfebYXku41ReXuBRkBm/ y9ykMzCeKk/wko9hMytAAzR6Bo8kJv0yTNN1SObv4pUoXO2zsZ/LSo979tjwCAbf kxM5liIPOlPL+/lhEZeOovcd62QbyFo2i+5um/lWWT3Z/amWQr67dWKtctteJBWo ky4gR0PltN/MiSD4tyQLeguHMDUj/Qua6PP+50Mlc38M5DTcJGoTlTIq7jbtRX45 rC5BoUORd5SeTjz4uTqUA8IvnFOlxDk= -----END CERTIFICATE-----Generated at Sat Aug 23 08:14:22 2025 by rpki-client