$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7d8ceba9-1594-3c62-a612-2c79c11cd18e.roa File: 7d8ceba9-1594-3c62-a612-2c79c11cd18e.roa (raw, json) Hash identifier: u6lE93GEWihIJCX00Jzmc7nyADZuz8H9XJolaw4HAE0= Subject key identifier: F3:FF:52:A9:20:CB:A8:1E:77:E5:48:4F:6A:07:48:35:3E:B5:1D:81 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C9D3B4A378EF8474FFF80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7d8ceba9-1594-3c62-a612-2c79c11cd18e.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 216.21.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:9d:3b:4a:37:8e:f8:47:4f:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=7d971c24-56ac-47dc-b5ae-a1d3583f250c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ae:fb:36:d4:51:55:e3:9a:b7:ca:ad:6c:02: 63:76:c6:9b:44:47:fe:12:7d:1a:58:9d:07:bf:32: ae:77:95:2b:5e:3e:21:cf:d3:2d:6c:82:62:89:ed: e1:2c:3e:cb:61:b6:64:43:5b:cb:b3:5b:65:00:c0: cd:ee:59:8b:d1:72:c6:6e:c1:60:aa:a8:f7:3b:95: b8:d8:2e:c2:35:be:06:5d:10:f4:bd:e2:be:3c:2f: 8f:57:f5:2d:16:d2:77:d4:5b:20:88:97:f8:55:bc: d4:e8:91:8e:d7:1b:ad:af:64:ed:df:28:0e:1d:fd: bc:4b:26:65:36:8e:0b:1e:99:59:65:d6:a1:92:79: c9:64:64:8a:c4:b8:fa:15:14:89:7a:e0:df:03:b8: f8:1e:aa:de:b2:f6:b9:80:52:4a:c1:f2:6e:84:37: 80:9f:cb:40:28:b9:43:e3:d9:0f:d3:19:bd:1d:47: 4e:96:b7:51:31:b5:51:5f:b3:db:35:44:1c:39:94: 2c:a9:90:5d:b5:0c:48:03:19:c9:d3:4a:c9:e8:e8: 79:f3:01:a7:3a:26:91:06:5a:83:63:72:96:48:8d: 6a:b8:e9:5a:dd:5c:2a:d9:f9:ac:0c:86:45:e9:1b: aa:59:53:f6:08:56:50:ff:3d:6f:f8:b4:99:98:8a: 60:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FF:52:A9:20:CB:A8:1E:77:E5:48:4F:6A:07:48:35:3E:B5:1D:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7d8ceba9-1594-3c62-a612-2c79c11cd18e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 216.21.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:84:87:33:06:62:52:29:bf:2e:17:0c:6f:77:6a:65:9a:e3: 15:08:7d:db:ec:92:d5:15:2c:a8:6b:70:64:93:26:4d:3c:c8: bf:b5:16:99:55:45:09:75:27:30:dd:d9:03:4a:3f:f7:f2:18: 2a:0a:37:85:d3:26:89:b7:7d:25:e0:07:94:e9:dd:cc:c3:f9: b1:13:e7:4b:ef:46:1b:f5:68:e9:02:13:7c:0b:de:db:a7:c0: e9:68:08:1f:c3:32:75:57:2e:c5:9d:c4:ab:1e:24:79:04:34: 35:f9:6d:a9:3f:da:22:03:87:23:0d:df:83:ad:7f:a8:ef:be: b4:0f:36:f2:21:6b:6f:53:29:fa:17:b6:1e:38:d4:48:8b:25: b0:ab:39:51:c3:f5:fb:65:70:67:e4:53:7d:1c:d1:94:af:2b: 01:f8:94:f6:eb:b0:7f:0c:69:72:53:d2:b1:d8:0f:49:cb:b1: 4f:3d:57:3e:d8:14:b9:1f:7c:43:82:76:c9:1f:1a:29:0c:a0: e4:68:5f:9c:77:5f:fb:a2:b7:68:49:49:e0:f3:15:f3:16:00: 01:86:fd:77:96:4a:ea:6d:52:b7:e1:c5:42:fc:dc:41:a8:b3: ba:1f:2e:24:43:c2:f5:83:c5:e6:6d:3b:d1:0c:41:ac:16:00: ca:00:28:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTJ07SjeO+EdP/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk N2Q5NzFjMjQtNTZhYy00N2RjLWI1YWUtYTFkMzU4M2YyNTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK77NtRRVeOat8qtbAJjdsabREf+En0aWJ0H vzKud5UrXj4hz9MtbIJiie3hLD7LYbZkQ1vLs1tlAMDN7lmL0XLGbsFgqqj3O5W4 2C7CNb4GXRD0veK+PC+PV/UtFtJ31FsgiJf4VbzU6JGO1xutr2Tt3ygOHf28SyZl No4LHplZZdahknnJZGSKxLj6FRSJeuDfA7j4Hqresva5gFJKwfJuhDeAn8tAKLlD 49kP0xm9HUdOlrdRMbVRX7PbNUQcOZQsqZBdtQxIAxnJ00rJ6Oh58wGnOiaRBlqD Y3KWSI1quOla3Vwq2fmsDIZF6RuqWVP2CFZQ/z1v+LSZmIpgcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPP/Uqkgy6ged+VIT2oHSDU+tR2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvN2Q4Y2ViYTktMTU5NC0z YzYyLWE2MTItMmM3OWMxMWNkMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSEhzMGYlIpvy4XDG93amWa4xUIfdvsktUVLKhrcGSTJk08yL+1FplV RQl1JzDd2QNKP/fyGCoKN4XTJom3fSXgB5Tp3czD+bET50vvRhv1aOkCE3wL3tun wOloCB/DMnVXLsWdxKseJHkENDX5bak/2iIDhyMN34Otf6jvvrQPNvIha29TKfoX th441EiLJbCrOVHD9ftlcGfkU30c0ZSvKwH4lPbrsH8MaXJT0rHYD0nLsU89Vz7Y FLkffEOCdskfGikMoORoX5x3X/uit2hJSeDzFfMWAAGG/XeWSuptUrfhxUL83EGo s7ofLiRDwvWDxeZtO9EMQawWAMoAKHo= -----END CERTIFICATE-----Generated at Wed Oct 8 21:15:10 2025 by rpki-client