$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/02116e6d-8286-3367-ab7d-9693bb8dac50.roa File: 02116e6d-8286-3367-ab7d-9693bb8dac50.roa (raw, json) Hash identifier: v0zRPojQXIum/iGYkvmBIuM19LfurutWVidU/DiQJRs= Subject key identifier: 39:C3:06:DF:53:AC:4E:2D:CB:1D:9D:E9:95:2D:61:92:0C:8E:2C:86 Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Certificate serial: 010D0C9F4328584B4A471981E154847057FCBB60 Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/02116e6d-8286-3367-ab7d-9693bb8dac50.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 59 IP address blocks: 128.104.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:19:81:e1:54:84:70:57:fc:bb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=7afbfe82-dc8e-4196-89ac-ac39459faf58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:59:12:4e:cd:55:51:d1:6d:c2:14:b7:ea: a1:1d:27:d9:b7:a5:a7:0d:71:63:29:3a:d4:af:3e: ba:52:d1:2d:c1:8e:f8:cb:59:f0:96:b2:41:19:f7: bd:2b:08:be:fc:4a:6f:30:f3:b7:3e:2d:82:8d:06: ce:e7:ec:ac:95:c4:53:4f:2f:1c:6e:92:54:52:ba: 9a:1d:c6:5c:7d:64:ce:ee:89:dd:82:17:2b:09:50: e2:27:cb:27:cf:99:49:82:76:d6:e1:c5:4f:23:55: 24:35:25:ae:2e:24:7e:22:fe:82:1f:33:d3:41:b6: b3:a0:1d:06:0c:48:28:25:d2:20:7e:6c:a5:a6:8f: 64:13:48:ac:45:dc:c2:4f:cc:f5:69:77:9a:59:50: bb:f4:e0:78:70:1d:5c:f8:be:72:9f:cc:0b:fe:a4: 35:4b:02:dc:d6:fa:5e:21:f5:64:18:0c:d2:b6:7c: 11:6b:8e:0e:eb:a5:dc:23:81:ee:fa:39:04:06:a8: 2c:0c:84:63:12:60:9f:9f:48:dd:b8:48:b6:8e:26: ac:5b:61:e4:de:4c:60:0d:dc:a0:80:e3:d6:15:c3: 77:17:8d:ba:8c:bb:ff:ae:f8:52:76:d7:62:fb:41: fa:8c:84:84:cb:bd:d8:a3:3c:6e:31:d9:07:a1:da: 9b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C3:06:DF:53:AC:4E:2D:CB:1D:9D:E9:95:2D:61:92:0C:8E:2C:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/02116e6d-8286-3367-ab7d-9693bb8dac50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl X509v3 Authority Key Identifier: keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer sbgp-ipAddrBlock: critical IPv4: 128.104.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:60:3a:67:c9:18:c0:30:38:c6:76:7a:bf:39:83:84:c3:f1: 90:53:da:1b:31:51:14:77:21:fa:70:ec:db:67:56:d0:41:5c: b4:f7:6f:d8:60:ce:5a:6d:0a:bf:b0:43:f3:1e:e0:b8:eb:97: 39:fe:23:6f:56:78:af:60:8b:f2:63:61:db:f2:05:bb:ef:5d: 0a:49:bd:90:42:59:70:73:d0:de:fa:bc:8f:8c:4c:47:fe:64: 1e:f7:8b:e2:da:18:a3:6b:a9:b3:21:0d:1c:94:a8:70:b3:53: 15:a9:a4:e6:ff:52:c1:d0:02:9a:39:f8:86:87:8d:ae:98:36: e0:a4:9a:e8:0b:30:e1:1e:19:33:17:97:1d:a6:f3:d2:f6:99: bc:99:df:2b:f1:a9:a6:f4:cd:b7:fc:88:b3:06:0d:b8:5f:88: 23:56:b4:bd:06:d6:94:a8:4d:ce:ee:ab:aa:3b:51:21:d3:9f: a7:43:30:fd:c7:20:9b:9d:59:40:15:24:5e:7b:4b:1c:d2:6d: 8f:0e:15:3f:66:e9:ff:c8:ce:66:49:14:1f:52:a8:86:c9:69: aa:c4:0c:cf:6d:17:28:58:5d:b0:a3:3e:f2:21:60:d5:e4:6e: 41:7e:0d:d3:2d:8f:b2:8d:ae:ed:e2:bf:43:b8:27:b0:5d:dd: 27:1f:52:f9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtKRxmB4VSEcFf8u2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE4OTk2MzItYWVmNi00YTNiLWI4MDctZWRjMWNhNDMw M2I2MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk N2FmYmZlODItZGM4ZS00MTk2LTg5YWMtYWMzOTQ1OWZhZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHFZEk7NVVHRbcIUt+qhHSfZt6WnDXFjKTrU rz66UtEtwY74y1nwlrJBGfe9Kwi+/EpvMPO3Pi2CjQbO5+yslcRTTy8cbpJUUrqa HcZcfWTO7ondghcrCVDiJ8snz5lJgnbW4cVPI1UkNSWuLiR+Iv6CHzPTQbazoB0G DEgoJdIgfmylpo9kE0isRdzCT8z1aXeaWVC79OB4cB1c+L5yn8wL/qQ1SwLc1vpe IfVkGAzStnwRa44O66XcI4Hu+jkEBqgsDIRjEmCfn0jduEi2jiasW2Hk3kxgDdyg gOPWFcN3F426jLv/rvhSdtdi+0H6jISEy73YozxuMdkHodqbwQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDnDBt9TrE4tyx2d6ZUtYZIMjiyGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5 OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMxY2E0MzAzYjYvMDIxMTZlNmQtODI4Ni0z MzY3LWFiN2QtOTY5M2JiOGRhYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWE4OTk2MzItYWVmNi00YTNiLWI4 MDctZWRjMWNhNDMwM2I2L2FhODk5NjMyLWFlZjYtNGEzYi1iODA3LWVkYzFjYTQz MDNiNi5jcmwwHwYDVR0jBBgwFoAUo8AqY6J4VLbQ5FBNiWjuunsNV40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMx Y2E0MzAzYjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgGgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHWA6Z8kYwDA4xnZ6vzmDhMPxkFPaGzFRFHch+nDs22dW0EFctPdv2GDO Wm0Kv7BD8x7guOuXOf4jb1Z4r2CL8mNh2/IFu+9dCkm9kEJZcHPQ3vq8j4xMR/5k HveL4toYo2upsyENHJSocLNTFamk5v9SwdACmjn4hoeNrpg24KSa6Asw4R4ZMxeX Habz0vaZvJnfK/GppvTNt/yIswYNuF+II1a0vQbWlKhNzu6rqjtRIdOfp0Mw/ccg m51ZQBUkXntLHNJtjw4VP2bp/8jOZkkUH1KohslpqsQMz20XKFhdsKM+8iFg1eRu QX4N0y2Pso2u7eK/Q7gnsF3dJx9S+Q== -----END CERTIFICATE-----Generated at Fri Oct 10 03:53:07 2025 by rpki-client