$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d3d8afbd-2ac9-3c4d-8849-a6744709a78b.roa File: d3d8afbd-2ac9-3c4d-8849-a6744709a78b.roa (raw, json) Hash identifier: 3qZl3VNruaHtCD0L1o5SwhqtQSe8fDajGIwAp9WFrgg= Subject key identifier: 90:4D:BA:01:90:63:8F:F2:68:91:7F:1E:98:FC:70:62:E3:E6:3A:08 Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F4328584A84118ADAE4EF05F250817C00 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d3d8afbd-2ac9-3c4d-8849-a6744709a78b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 36492 IP address blocks: 216.252.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:8a:da:e4:ef:05:f2:50:81:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=2d9ff6d7-c79f-4299-aefb-10178e373ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:15:ca:0b:ec:2e:67:04:1a:b5:00:71:4e:50: d0:ee:91:0b:d7:12:48:d6:4c:d2:a8:d1:d3:5f:b0: a2:e2:90:ec:0f:7c:70:19:11:75:f8:66:be:41:b8: f9:77:28:f3:4d:cb:f5:26:70:fa:65:9d:b1:ea:da: f5:8d:5f:64:80:53:af:a7:98:04:b0:06:68:66:5c: fc:c4:62:31:c7:34:eb:cc:c6:d7:3f:88:2e:d1:d7: 0b:7d:a4:a7:7f:98:20:f6:69:98:d5:17:a1:93:dd: 86:b2:12:65:29:92:80:68:9d:44:ad:d6:15:0e:7c: cd:c7:68:d0:72:82:08:7d:52:03:b8:98:dc:ab:73: 39:14:6a:14:10:36:bd:0a:f7:66:89:af:89:42:9a: e7:eb:66:5a:20:c8:88:20:f0:39:c3:8d:86:b5:ec: f6:ff:80:1d:b3:bb:08:f0:2d:35:fd:7d:e7:f6:f0: 36:3e:4c:be:5d:41:7a:16:43:68:40:29:32:d1:cb: 01:05:bf:df:a9:a9:fb:53:b4:ec:1b:fd:0c:10:ea: a7:d1:21:a4:bb:85:bb:13:52:9f:67:e2:75:81:ee: 3c:e1:5e:f4:e9:a8:99:0a:c2:51:c6:e3:7e:d1:02: 7d:d4:24:fc:8d:65:7d:39:6a:ff:6c:0d:e2:87:f2: 18:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4D:BA:01:90:63:8F:F2:68:91:7F:1E:98:FC:70:62:E3:E6:3A:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d3d8afbd-2ac9-3c4d-8849-a6744709a78b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 216.252.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:4b:db:06:7a:6a:d4:60:ac:9c:4f:2e:e2:e3:ee:af:94:4e: 51:b5:94:66:d1:71:87:75:50:53:37:c2:cb:15:0b:5a:a1:44: c4:be:d9:ad:71:0f:2d:77:31:94:50:10:32:65:9a:cb:b7:64: 38:4e:cd:98:56:37:ad:dd:99:22:81:9a:67:0e:27:66:86:48: 0d:e3:87:9d:6c:82:56:7c:96:13:ef:b2:b0:5f:92:56:9a:f8: 31:87:79:4f:25:15:e3:51:14:f0:a1:33:5f:6e:ca:43:67:00: 26:3c:8e:85:81:17:04:94:3a:f2:eb:26:01:c8:fe:98:73:83: 06:dc:1c:2d:99:35:1f:37:93:36:c5:cb:1e:2e:77:d8:10:cf: 76:46:7d:5c:a4:15:ff:89:a1:aa:07:96:c6:12:26:9b:02:45: ca:44:cd:b8:df:87:0a:0b:0a:48:81:f8:59:f7:d2:47:c5:c4: 32:8f:a5:ce:5c:a9:ca:d6:7e:db:df:e3:b6:06:ff:a9:e3:6f: 85:e2:54:eb:27:f7:43:92:35:59:12:70:bf:c8:4d:bb:fd:fc: 76:e2:8d:82:4d:ad:e5:4a:8d:52:b9:fa:ca:d0:c7:04:d5:f2: 70:b1:6e:7f:b6:d4:26:a8:10:00:4e:a4:6f:60:8b:ae:7d:2d: 97:89:b4:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYra5O8F8lCBfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MmQ5ZmY2ZDctYzc5Zi00Mjk5LWFlZmItMTAxNzhlMzczZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBXKC+wuZwQatQBxTlDQ7pEL1xJI1kzSqNHT X7Ci4pDsD3xwGRF1+Ga+Qbj5dyjzTcv1JnD6ZZ2x6tr1jV9kgFOvp5gEsAZoZlz8 xGIxxzTrzMbXP4gu0dcLfaSnf5gg9mmY1Rehk92GshJlKZKAaJ1ErdYVDnzNx2jQ coIIfVIDuJjcq3M5FGoUEDa9Cvdmia+JQprn62ZaIMiIIPA5w42Gtez2/4Ads7sI 8C01/X3n9vA2Pky+XUF6FkNoQCky0csBBb/fqan7U7TsG/0MEOqn0SGku4W7E1Kf Z+J1ge484V706aiZCsJRxuN+0QJ91CT8jWV9OWr/bA3ih/IYEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBNugGQY4/yaJF/Hpj8cGLj5joIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvZDNkOGFmYmQtMmFjOS0z YzRkLTg4NDktYTY3NDQ3MDlhNzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFL2wZ6atRgrJxPLuLj7q+UTlG1lGbRcYd1UFM3wssVC1qhRMS+2a1x Dy13MZRQEDJlmsu3ZDhOzZhWN63dmSKBmmcOJ2aGSA3jh51sglZ8lhPvsrBfklaa +DGHeU8lFeNRFPChM19uykNnACY8joWBFwSUOvLrJgHI/phzgwbcHC2ZNR83kzbF yx4ud9gQz3ZGfVykFf+JoaoHlsYSJpsCRcpEzbjfhwoLCkiB+Fn30kfFxDKPpc5c qcrWftvf47YG/6njb4XiVOsn90OSNVkScL/ITbv9/HbijYJNreVKjVK5+srQxwTV 8nCxbn+21CaoEABOpG9gi659LZeJtI0= -----END CERTIFICATE-----Generated at Sat Jul 26 07:22:34 2025 by rpki-client