$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/d76d2f5f-1cda-36ed-b196-7d48c2e3b3fa.roa File: d76d2f5f-1cda-36ed-b196-7d48c2e3b3fa.roa (raw, json) Hash identifier: tZpSEw1t84D/GphTaEwyNQcGIjeg8GEi+4k+RmOex6Q= Subject key identifier: 5B:6A:26:1E:CE:93:97:79:68:29:16:A0:FA:89:FE:E7:7B:80:6C:67 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584B79BCBF3F7BA9FF9841C25A00 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/d76d2f5f-1cda-36ed-b196-7d48c2e3b3fa.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 5645 IP address blocks: 216.154.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:bf:3f:7b:a9:ff:98:41:c2:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=18769f6f-98fa-44ee-8ef3-1a80ea307d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fe:47:fe:1d:25:75:aa:e7:dd:03:70:ad:e0: fa:3a:0f:e7:cc:e7:0b:a3:45:69:de:fc:96:5f:83: ac:78:59:3d:db:c5:ac:06:f4:c9:b2:9f:bb:bc:02: aa:b9:94:fc:ce:d0:61:89:16:8f:3c:aa:e4:ac:c9: b0:6a:63:b0:87:48:2d:4a:20:12:d8:57:b8:37:f3: cb:f2:d1:4b:65:75:4b:3b:d2:11:be:12:9e:02:ea: 86:6d:0b:6e:e3:58:0e:6b:fd:9d:18:af:ae:63:5d: 0e:4c:25:9a:e9:cd:84:48:bd:c3:45:93:40:af:93: 02:16:f0:44:aa:a4:00:44:5b:88:0b:ce:42:92:2a: aa:f8:23:fa:57:10:52:eb:d8:87:f1:57:2d:89:4a: 35:5b:3c:7a:01:b3:1b:f9:0f:03:01:55:f9:b5:22: 69:b5:1a:79:de:13:c7:04:88:7a:54:5b:43:2a:65: 56:b2:97:98:bf:1d:f5:5d:99:37:16:de:24:5e:85: 8d:08:32:d2:d2:17:f8:1f:16:d9:8b:e9:2b:f3:73: 9b:70:fb:fc:9e:4d:a4:7c:5e:b6:99:c3:29:c6:b8: f1:5d:ca:a5:fb:d9:81:6e:1f:9a:ef:86:9f:d8:da: d9:7f:d0:de:ac:3f:8d:24:cd:b7:70:4a:07:ab:72: ef:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6A:26:1E:CE:93:97:79:68:29:16:A0:FA:89:FE:E7:7B:80:6C:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/d76d2f5f-1cda-36ed-b196-7d48c2e3b3fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 216.154.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:67:e6:2f:13:e6:8b:be:a7:71:b0:57:8c:aa:e9:30:77:44: 18:f1:1c:03:da:28:2a:12:b6:76:68:a2:cc:18:85:54:ca:79: 3e:88:7a:8a:a3:92:77:ad:89:42:d2:23:b9:8e:ab:67:e9:75: 6e:2c:18:04:f6:d1:ca:78:bd:84:fb:7d:e1:47:6e:fe:b2:a3: bf:6a:dc:d2:14:64:9f:d0:5a:d0:ce:f0:02:de:3e:66:ae:53: 60:70:77:15:f9:71:d5:49:98:0d:c8:ee:31:b8:e7:19:b9:fa: 7c:5a:89:fb:eb:04:7b:5a:48:88:ae:af:e6:d2:45:61:68:12: a5:01:ea:10:90:61:d3:d4:80:60:99:0f:93:82:7b:7f:44:8e: 09:80:b5:27:26:8c:85:52:3b:4a:c8:9b:f6:4f:43:ec:23:fe: e7:56:6d:d8:09:62:8d:7e:8c:b7:34:a6:60:39:64:b5:35:d1: 2e:d3:ea:73:46:30:94:26:89:90:f5:76:5a:c6:eb:99:e8:44: 6f:e2:25:74:21:94:ac:9c:c9:7e:6c:b9:21:bc:91:98:b0:28: e6:de:ee:aa:62:8f:69:b9:00:31:17:f9:fe:13:6f:50:c0:3c: 39:ec:63:39:a9:93:fc:b3:54:ab:cd:73:32:72:36:8d:93:a7: 3b:cf:fc:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vL8/e6n/mEHCWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MTg3NjlmNmYtOThmYS00NGVlLThlZjMtMWE4MGVhMzA3ZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP5H/h0ldarn3QNwreD6Og/nzOcLo0Vp3vyW X4OseFk928WsBvTJsp+7vAKquZT8ztBhiRaPPKrkrMmwamOwh0gtSiAS2Fe4N/PL 8tFLZXVLO9IRvhKeAuqGbQtu41gOa/2dGK+uY10OTCWa6c2ESL3DRZNAr5MCFvBE qqQARFuIC85Ckiqq+CP6VxBS69iH8VctiUo1Wzx6AbMb+Q8DAVX5tSJptRp53hPH BIh6VFtDKmVWspeYvx31XZk3Ft4kXoWNCDLS0hf4HxbZi+kr83ObcPv8nk2kfF62 mcMpxrjxXcql+9mBbh+a74af2NrZf9DerD+NJM23cEoHq3LvMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtqJh7Ok5d5aCkWoPqJ/ud7gGxnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvZDc2ZDJmNWYtMWNkYS0z NmVkLWIxOTYtN2Q0OGMyZTNiM2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2JoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRn5i8T5ou+p3GwV4yq6TB3RBjxHAPaKCoStnZooswYhVTKeT6Ieoqj knetiULSI7mOq2fpdW4sGAT20cp4vYT7feFHbv6yo79q3NIUZJ/QWtDO8ALePmau U2BwdxX5cdVJmA3I7jG45xm5+nxaifvrBHtaSIiur+bSRWFoEqUB6hCQYdPUgGCZ D5OCe39EjgmAtScmjIVSO0rIm/ZPQ+wj/udWbdgJYo1+jLc0pmA5ZLU10S7T6nNG MJQmiZD1dlrG65noRG/iJXQhlKycyX5suSG8kZiwKObe7qpij2m5ADEX+f4Tb1DA PDnsYzmpk/yzVKvNczJyNo2TpzvP/JM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:48 2025 by rpki-client