$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/f3485625-9688-304a-b7ce-39a5f6982850.roa File: f3485625-9688-304a-b7ce-39a5f6982850.roa (raw, json) Hash identifier: GBKGTXfKwuOFvgg0/52WarQ+jlNpkwGVTX9mSMdcGfA= Subject key identifier: 59:7A:A4:14:D2:34:A7:AD:99:EF:94:15:BB:30:3F:16:17:0F:9E:25 Certificate issuer: /CN=1dc67402-ba21-48d8-9973-37169338b194 Certificate serial: 010D0C9F4328584AD50660BBE1E5078D28636A80 Authority key identifier: CF:E1:95:6F:E0:AD:DE:15:72:C2:1F:CF:03:85:B9:BB:87:08:1D:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/f3485625-9688-304a-b7ce-39a5f6982850.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 396982 IP address blocks: 216.114.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/1dc67402-ba21-48d8-9973-37169338b194.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/1dc67402-ba21-48d8-9973-37169338b194.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:60:bb:e1:e5:07:8d:28:63:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dc67402-ba21-48d8-9973-37169338b194 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=17ebbeba-4c74-4a74-aaee-cc40b411c863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:82:3e:a3:21:ca:43:9b:99:32:96:d0:9b:02: 67:02:d5:07:86:77:d7:72:d1:1e:47:60:d0:45:f6: e0:05:00:30:26:0c:46:d1:31:98:2d:69:ad:2f:71: 17:3a:5d:3b:6e:5a:02:90:74:2a:b4:82:67:40:b4: dc:f1:a6:ed:df:d9:bb:15:b9:2a:1e:13:fc:7c:6f: 9e:48:37:5a:19:d1:c1:ea:93:b9:f1:4c:03:3f:33: 75:9e:f4:14:1b:c0:45:11:16:7e:fc:4e:88:33:35: 28:9b:d3:cd:f6:45:0f:6f:c4:de:52:f6:d5:67:f8: ad:ec:17:2b:50:9e:b3:be:38:cb:7d:b1:19:ad:dd: ce:5e:d4:a0:a6:06:9a:6c:9a:4a:56:e0:ef:14:02: 0e:1a:fc:88:e0:9c:04:cf:0b:75:12:8b:c3:e6:14: 68:0e:3c:38:31:21:66:38:85:53:38:65:9b:01:5c: ba:c5:96:5b:75:09:7d:53:21:aa:17:76:48:f7:06: 59:b7:a8:e1:f2:03:af:d9:ef:f9:5f:55:a2:ac:7a: fc:34:fa:53:65:be:56:0b:79:88:06:a8:f2:0a:d4: bb:6f:a4:3e:7d:4c:7e:b8:a5:3e:df:5a:ae:6e:9c: 4f:d8:ed:19:84:05:8f:8c:64:e5:fc:f5:2f:29:58: 8c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7A:A4:14:D2:34:A7:AD:99:EF:94:15:BB:30:3F:16:17:0F:9E:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/f3485625-9688-304a-b7ce-39a5f6982850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/1dc67402-ba21-48d8-9973-37169338b194.crl X509v3 Authority Key Identifier: keyid:CF:E1:95:6F:E0:AD:DE:15:72:C2:1F:CF:03:85:B9:BB:87:08:1D:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194.cer sbgp-ipAddrBlock: critical IPv4: 216.114.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:ce:72:1f:35:b4:a9:9f:7a:17:09:4c:d8:a7:6b:10:de:56: 89:00:25:a1:55:f8:32:17:91:09:a2:29:92:7f:84:7a:17:5e: 65:01:c8:ac:7b:3c:9d:b9:ba:55:42:78:8d:f9:c8:bb:12:9d: f8:7e:6c:7a:d2:24:bb:7b:68:ef:d5:c5:8f:aa:e1:09:50:58: 70:5b:a8:cf:4c:8e:fc:ec:13:9e:82:04:c0:9d:e9:29:da:97: d0:51:31:ec:e0:5d:03:4a:73:e1:fe:84:ce:c2:0e:aa:94:bf: cb:2c:82:8f:b3:2b:27:39:15:a6:ef:a6:7d:af:ae:09:c8:86: 1c:56:c0:f0:27:47:35:df:1e:5a:cd:f2:e1:30:75:ba:13:40: 07:40:58:bc:18:0f:8b:d2:70:37:97:e0:45:88:eb:eb:fc:dd: e4:0c:f5:e6:36:8e:d1:14:87:4e:97:9c:1d:12:10:97:0a:28: 53:5b:fa:62:ec:fb:e0:2a:0b:92:c4:e6:9d:75:69:d5:98:64: 6c:5e:74:b6:9c:b4:94:bb:7e:95:0f:03:f6:76:32:4b:83:6a: e1:15:74:1f:4f:2b:48:ce:61:a9:2d:94:a9:b3:f6:d1:d3:f9: 9e:55:dd:ea:e3:b9:c6:4e:d9:c6:af:bd:d8:2f:c1:79:9e:18: 79:4d:ef:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmC74eUHjShjaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRjNjc0MDItYmEyMS00OGQ4LTk5NzMtMzcxNjkzMzhi MTk0MB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk MTdlYmJlYmEtNGM3NC00YTc0LWFhZWUtY2M0MGI0MTFjODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYI+oyHKQ5uZMpbQmwJnAtUHhnfXctEeR2DQ RfbgBQAwJgxG0TGYLWmtL3EXOl07bloCkHQqtIJnQLTc8abt39m7FbkqHhP8fG+e SDdaGdHB6pO58UwDPzN1nvQUG8BFERZ+/E6IMzUom9PN9kUPb8TeUvbVZ/it7Bcr UJ6zvjjLfbEZrd3OXtSgpgaabJpKVuDvFAIOGvyI4JwEzwt1EovD5hRoDjw4MSFm OIVTOGWbAVy6xZZbdQl9UyGqF3ZI9wZZt6jh8gOv2e/5X1WirHr8NPpTZb5WC3mI BqjyCtS7b6Q+fUx+uKU+31qubpxP2O0ZhAWPjGTl/PUvKViMrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFl6pBTSNKetme+UFbswPxYXD54lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZGM2 NzQwMi1iYTIxLTQ4ZDgtOTk3My0zNzE2OTMzOGIxOTQvZjM0ODU2MjUtOTY4OC0z MDRhLWI3Y2UtMzlhNWY2OTgyODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWRjNjc0MDItYmEyMS00OGQ4LTk5 NzMtMzcxNjkzMzhiMTk0LzFkYzY3NDAyLWJhMjEtNDhkOC05OTczLTM3MTY5MzM4 YjE5NC5jcmwwHwYDVR0jBBgwFoAUz+GVb+Ct3hVywh/PA4W5u4cIHcEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZGM2NzQwMi1iYTIxLTQ4ZDgtOTk3My0zNzE2 OTMzOGIxOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HJMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbOch81tKmfehcJTNinaxDeVokAJaFV+DIXkQmiKZJ/hHoXXmUByKx7 PJ25ulVCeI35yLsSnfh+bHrSJLt7aO/VxY+q4QlQWHBbqM9MjvzsE56CBMCd6Sna l9BRMezgXQNKc+H+hM7CDqqUv8ssgo+zKyc5Fabvpn2vrgnIhhxWwPAnRzXfHlrN 8uEwdboTQAdAWLwYD4vScDeX4EWI6+v83eQM9eY2jtEUh06XnB0SEJcKKFNb+mLs ++AqC5LE5p11adWYZGxedLactJS7fpUPA/Z2MkuDauEVdB9PK0jOYaktlKmz9tHT +Z5V3erjucZO2cavvdgvwXmeGHlN77o= -----END CERTIFICATE-----Generated at Wed Aug 20 08:48:08 2025 by rpki-client