$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/fae6d88c-9360-39b7-b231-1c61e8d380d8.roa File: fae6d88c-9360-39b7-b231-1c61e8d380d8.roa (raw, json) Hash identifier: KDijx3FSs7rQlmFcwW7u1EkcqE9JYmrlXgHQeT00EDU= Subject key identifier: FC:36:F8:86:DA:AD:28:31:F1:CA:F4:0D:E9:54:F2:60:02:EF:2D:7D Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76D0AD5F5871DF26790840 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/fae6d88c-9360-39b7-b231-1c61e8d380d8.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 53708 IP address blocks: 216.243.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d0:ad:5f:58:71:df:26:79:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=7603e797-181c-4e65-8471-edcf3b499b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:49:58:b7:95:96:7d:8a:1e:9e:65:43:1c:2f: 4f:cd:42:74:bb:c7:27:60:01:bc:98:ad:d7:53:03: ab:11:a1:d0:4d:cf:e8:b5:3f:34:7d:a5:16:f4:42: d6:ca:e1:36:a3:72:ad:bd:04:3f:33:e3:da:90:ee: b0:40:28:4c:de:21:75:08:86:d0:e8:ec:36:09:4f: a7:65:df:c5:7a:d6:d5:dc:c8:4e:e5:1e:94:74:84: ce:dd:28:15:d4:d7:2d:56:a6:4b:33:42:50:0f:f0: cb:0a:5a:cf:fb:a3:13:27:c2:c5:4e:a5:d5:45:05: 22:57:6a:04:a9:86:ec:8a:44:94:62:b5:bd:44:9b: 80:a2:42:4c:bb:76:21:e7:45:4d:73:81:b2:4b:f8: ef:ea:2d:e7:fc:88:b0:39:21:2b:19:8d:4c:3b:3f: c5:44:62:b7:8b:97:8b:a4:3f:ab:64:e7:11:8a:25: 85:41:e1:75:3e:52:69:8d:09:ed:bc:17:54:f9:9c: 29:a2:1a:b6:2d:d9:72:3a:6c:2a:9c:97:17:8e:8a: d8:d6:73:3a:b4:08:6c:bd:cd:0b:b6:1a:87:00:bc: 80:a7:ce:6d:c8:71:af:30:c8:1a:de:00:b8:e1:46: bd:47:2e:33:ec:26:39:f7:1b:9c:25:f0:34:91:d3: 6b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:36:F8:86:DA:AD:28:31:F1:CA:F4:0D:E9:54:F2:60:02:EF:2D:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/fae6d88c-9360-39b7-b231-1c61e8d380d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 216.243.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:90:4a:05:1d:a0:77:a8:ea:83:85:85:4d:ee:4e:6b:44:0e: f9:ec:41:be:99:0a:f1:d6:22:e5:cf:32:07:6b:8c:09:10:81: e4:5b:14:61:88:45:91:4b:a3:64:58:9a:ba:74:37:79:b7:81: 48:16:65:07:ac:64:db:0c:2f:20:aa:2d:ab:51:70:74:81:27: 2a:0b:76:4e:0b:c6:ef:d4:05:6d:7d:e0:16:3c:8e:9a:e1:02: 9b:7a:8f:c8:94:cc:d8:3f:ce:1c:fe:62:00:f5:9e:b6:92:9f: e1:3b:5e:48:8b:1d:e5:ba:46:25:6a:86:56:59:ee:51:2d:51: 4e:09:12:3b:e0:3d:cb:14:6c:75:9e:cc:71:7c:ba:c8:91:2a: 98:92:64:48:cf:1a:92:aa:a4:63:24:cc:e5:42:1b:88:a8:64: 15:ba:3f:a5:de:1f:9f:7c:ab:16:50:46:f0:80:78:1e:ef:f2: 33:ac:97:39:81:82:14:b7:77:2a:1d:94:a9:85:36:45:32:a0: 02:71:f0:0a:af:67:8e:0a:45:93:f9:85:ad:0f:04:00:d8:5b: 5f:dc:d7:f8:56:12:57:7b:27:2f:99:58:10:07:91:b4:5f:f5: b0:f9:7c:ae:58:3d:cc:98:e2:7b:3c:8c:3c:ff:f9:50:96:d8: a0:8a:20:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdtCtX1hx3yZ5CEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NzYwM2U3OTctMTgxYy00ZTY1LTg0NzEtZWRjZjNiNDk5YjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0lYt5WWfYoenmVDHC9PzUJ0u8cnYAG8mK3X UwOrEaHQTc/otT80faUW9ELWyuE2o3KtvQQ/M+PakO6wQChM3iF1CIbQ6Ow2CU+n Zd/FetbV3MhO5R6UdITO3SgV1NctVqZLM0JQD/DLClrP+6MTJ8LFTqXVRQUiV2oE qYbsikSUYrW9RJuAokJMu3Yh50VNc4GyS/jv6i3n/IiwOSErGY1MOz/FRGK3i5eL pD+rZOcRiiWFQeF1PlJpjQntvBdU+Zwpohq2LdlyOmwqnJcXjorY1nM6tAhsvc0L thqHALyAp85tyHGvMMga3gC44Ua9Ry4z7CY59xucJfA0kdNrtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPw2+IbarSgx8cr0DelU8mAC7y19MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZmFlNmQ4OGMtOTM2MC0z OWI3LWIyMzEtMWM2MWU4ZDM4MGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PMNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaQSgUdoHeo6oOFhU3uTmtEDvnsQb6ZCvHWIuXPMgdrjAkQgeRbFGGI RZFLo2RYmrp0N3m3gUgWZQesZNsMLyCqLatRcHSBJyoLdk4Lxu/UBW194BY8jprh Apt6j8iUzNg/zhz+YgD1nraSn+E7XkiLHeW6RiVqhlZZ7lEtUU4JEjvgPcsUbHWe zHF8usiRKpiSZEjPGpKqpGMkzOVCG4ioZBW6P6XeH598qxZQRvCAeB7v8jOslzmB ghS3dyodlKmFNkUyoAJx8AqvZ44KRZP5ha0PBADYW1/c1/hWEld7Jy+ZWBAHkbRf 9bD5fK5YPcyY4ns8jDz/+VCW2KCKILQ= -----END CERTIFICATE-----Generated at Fri Oct 10 23:29:05 2025 by rpki-client