$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/f3a1ca03-2bbd-36fe-b0ce-7e9ff6101e86.roa File: f3a1ca03-2bbd-36fe-b0ce-7e9ff6101e86.roa (raw, json) Hash identifier: t4d33k/ViVCgpecARDtqiXf79CD1HXLalRSpLB+h2Jw= Subject key identifier: 8A:35:BD:EE:60:6F:89:61:56:E9:0C:2A:65:E7:03:91:FB:2C:5A:B6 Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F4328584B38219C7915963D7135A2EC78 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/f3a1ca03-2bbd-36fe-b0ce-7e9ff6101e86.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 203 IP address blocks: 216.168.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:9c:79:15:96:3d:71:35:a2:ec:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=669c686f-7b32-45d6-8605-33d1294fe288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:89:10:10:1d:70:fc:55:b5:f7:8c:37:98:59: b8:b1:eb:a9:18:77:69:81:f3:c7:f9:80:df:f3:b2: 56:6d:30:20:02:b7:7e:bd:87:c0:eb:32:fc:ab:1c: 01:d1:41:40:a3:cc:89:ec:1a:95:7e:0d:18:12:37: 46:0b:d5:a9:71:43:f2:e5:88:83:d9:5d:00:3b:9a: cc:3b:c1:1a:32:01:38:b4:04:ba:e1:5e:56:a5:d6: 0d:1a:6a:d6:c7:ea:ae:25:6f:a3:fd:ef:e4:44:72: 78:26:3f:2f:e8:22:95:3f:94:d3:1b:bb:9b:f5:fa: b5:76:81:e6:05:b5:32:0d:73:16:7d:f0:e4:6a:0f: 95:d8:d9:f1:c3:1d:8a:d3:7a:fb:e7:ee:d0:da:80: 9a:9d:24:fa:8d:8a:a4:59:dc:8a:5b:5f:bd:71:9c: 2e:f7:94:a5:25:68:ea:46:ab:e4:4b:53:21:e8:a2: c6:ea:32:ad:1d:28:a8:09:f1:84:38:d2:c9:f4:7e: a7:33:e0:09:2c:2e:0e:d4:f7:8b:78:5f:ab:2c:15: 27:c5:89:fb:45:cf:d1:13:07:32:9d:bb:01:98:fc: 61:9d:d2:9c:b1:f2:5a:e6:24:88:f9:01:01:04:09: 76:ec:51:6b:07:38:9d:ae:21:91:69:02:83:f4:d1: d1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:35:BD:EE:60:6F:89:61:56:E9:0C:2A:65:E7:03:91:FB:2C:5A:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/f3a1ca03-2bbd-36fe-b0ce-7e9ff6101e86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 216.168.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:ad:e6:d0:b4:d0:ed:86:6f:85:7d:95:e6:83:d4:e8:00:61: 61:c3:4e:6c:98:a1:a1:0d:d1:87:51:ce:ca:a3:d3:4c:f4:b2: 3c:b0:4d:34:0b:12:e6:f7:aa:e4:36:c4:88:7f:09:70:8d:1a: ee:74:73:5b:1c:ab:d4:5d:43:7e:95:47:df:48:21:85:1b:40: 75:2f:a1:fc:9c:60:b3:24:82:6e:ee:c7:18:db:ce:a5:04:56: 50:94:2e:f4:a8:15:a9:0d:ef:12:53:64:a6:33:83:53:91:25: 2e:e1:e9:cb:87:f1:50:d7:7f:33:65:d7:4a:64:67:46:6d:89: aa:48:af:bb:d6:95:2c:79:53:66:fa:93:63:2f:6a:f6:19:ca: 05:e5:41:aa:96:0d:35:04:f1:1b:14:3d:e7:cb:32:49:9b:51: c0:a1:6e:af:0f:80:c6:c6:a0:60:c5:2c:88:52:66:42:da:6a: 87:d3:7d:84:b3:df:84:da:56:76:e9:e0:23:7b:f2:9e:39:7e: 92:f2:ba:6f:4e:d0:b8:78:69:a0:2a:50:48:f2:2e:ee:a3:a8: a6:f9:32:14:86:c5:6e:13:9f:1a:f2:b3:e5:86:26:a3:c4:37: fa:c1:6b:32:9e:71:a5:81:f4:72:15:cb:04:09:b6:7f:79:98: c6:c1:ed:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZx5FZY9cTWi7HgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk NjY5YzY4NmYtN2IzMi00NWQ2LTg2MDUtMzNkMTI5NGZlMjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIkQEB1w/FW194w3mFm4seupGHdpgfPH+YDf 87JWbTAgArd+vYfA6zL8qxwB0UFAo8yJ7BqVfg0YEjdGC9WpcUPy5YiD2V0AO5rM O8EaMgE4tAS64V5WpdYNGmrWx+quJW+j/e/kRHJ4Jj8v6CKVP5TTG7ub9fq1doHm BbUyDXMWffDkag+V2Nnxwx2K03r75+7Q2oCanST6jYqkWdyKW1+9cZwu95SlJWjq RqvkS1Mh6KLG6jKtHSioCfGEONLJ9H6nM+AJLC4O1PeLeF+rLBUnxYn7Rc/REwcy nbsBmPxhndKcsfJa5iSI+QEBBAl27FFrBzidriGRaQKD9NHRqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo1ve5gb4lhVukMKmXnA5H7LFq2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvZjNhMWNhMDMtMmJiZC0z NmZlLWIwY2UtN2U5ZmY2MTAxZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2t5tC00O2Gb4V9leaD1OgAYWHDTmyYoaEN0YdRzsqj00z0sjywTTQL Eub3quQ2xIh/CXCNGu50c1scq9RdQ36VR99IIYUbQHUvofycYLMkgm7uxxjbzqUE VlCULvSoFakN7xJTZKYzg1ORJS7h6cuH8VDXfzNl10pkZ0ZtiapIr7vWlSx5U2b6 k2MvavYZygXlQaqWDTUE8RsUPefLMkmbUcChbq8PgMbGoGDFLIhSZkLaaofTfYSz 34TaVnbp4CN78p45fpLyum9O0Lh4aaAqUEjyLu6jqKb5MhSGxW4Tnxrys+WGJqPE N/rBazKecaWB9HIVywQJtn95mMbB7bg= -----END CERTIFICATE-----Generated at Wed Sep 17 09:05:55 2025 by rpki-client