$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/35a50b61-1260-30d1-b52a-b4b9b574110d.roa File: 35a50b61-1260-30d1-b52a-b4b9b574110d.roa (raw, json) Hash identifier: Q2F8SZfLhtgXmh7koEVjBNWVFtqMXNgW0+MbMFvQgAA= Subject key identifier: 1F:15:94:93:5C:46:EF:69:78:7D:68:15:E2:D8:BB:E5:FC:C6:14:78 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B0746BC167BDF779C115A2680 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/35a50b61-1260-30d1-b52a-b4b9b574110d.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 16696 IP address blocks: 216.181.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:bc:16:7b:df:77:9c:11:5a:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=6ebe3da2-8ae7-4e0c-bb70-cd53a9b1437d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2e:23:39:2a:e6:c6:71:3a:9e:31:89:cb:3d: 12:73:d7:aa:aa:15:42:57:25:df:3f:a9:10:93:2d: e9:3c:50:b2:72:56:46:65:1b:a6:d8:86:ef:1e:07: a4:28:7f:f5:55:09:a7:a3:38:78:c5:5f:2a:d7:31: 9e:1d:dc:6d:a4:f8:ea:7a:99:14:0a:04:7f:5e:83: 31:7a:21:b9:36:8f:12:e7:74:37:22:2b:92:46:40: da:b7:f0:43:ce:92:3e:6c:61:4b:ca:fd:2f:8a:42: 04:6f:33:22:74:c6:ed:a6:b0:12:96:8a:80:21:2e: b9:d8:37:46:d2:53:3f:aa:4a:32:ba:4e:c0:59:2d: f3:82:57:d5:23:13:a3:cb:c7:68:db:71:c0:39:45: 7b:ab:85:47:1d:25:55:02:da:29:f5:3e:65:cb:b0: 7b:7d:00:82:bd:5f:5a:db:ad:51:01:01:a7:ea:14: 40:13:63:c2:84:14:52:1d:35:94:95:95:57:18:f1: fb:a5:cd:91:83:c4:45:a4:93:8a:20:44:3d:5d:e6: 2d:aa:df:7f:17:ed:fb:4b:eb:4b:b8:8b:eb:13:02: 63:1c:74:d2:4e:3f:ca:94:44:aa:ff:1c:54:10:38: 7e:f4:1f:aa:97:43:39:70:ff:0c:38:58:3c:8e:1a: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:15:94:93:5C:46:EF:69:78:7D:68:15:E2:D8:BB:E5:FC:C6:14:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/35a50b61-1260-30d1-b52a-b4b9b574110d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 216.181.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:cf:e4:fa:a0:32:43:a2:77:4e:09:04:78:49:e2:17:45:90: 43:2a:98:67:50:bc:3b:a1:14:e4:7e:17:2e:0b:83:62:50:99: cc:53:49:6a:04:0c:e1:8d:a4:51:25:8f:3f:fe:98:98:0d:53: c0:da:76:4a:ec:90:19:bb:b8:f8:e5:55:cd:33:db:60:db:7f: db:4c:d1:59:a1:9d:8d:e2:82:5d:9c:07:44:1b:37:28:d1:e4: 83:4e:5a:a6:8c:a0:53:0a:cf:ed:87:ab:d4:2d:e0:43:77:16: bb:50:ca:64:a9:8c:0d:af:c0:df:e2:26:ba:96:e7:40:92:0f: 8c:43:cb:cd:85:d6:71:61:5b:93:64:70:8c:dd:53:07:a8:6d: f6:9f:e3:b0:b2:07:1e:72:10:a9:2d:35:e0:d2:45:e0:53:90: 69:7b:dd:d5:d4:2f:d2:5d:c1:40:c7:24:24:c6:d1:b0:63:ff: 22:db:50:12:f2:7a:f4:cc:2e:04:a1:cd:17:d4:cb:b2:da:f5: bc:b6:b1:49:b1:0e:6b:28:4c:60:c4:1f:f2:33:d1:da:0f:dc: dd:d8:71:b0:06:10:bd:d1:cc:e5:27:01:e8:41:ba:7c:64:e4: 04:24:5a:15:5e:0f:13:11:fe:6c:31:94:5a:c0:36:a7:44:77: a6:e0:ad:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrwWe993nBFaJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk NmViZTNkYTItOGFlNy00ZTBjLWJiNzAtY2Q1M2E5YjE0MzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi4jOSrmxnE6njGJyz0Sc9eqqhVCVyXfP6kQ ky3pPFCyclZGZRum2IbvHgekKH/1VQmnozh4xV8q1zGeHdxtpPjqepkUCgR/XoMx eiG5No8S53Q3IiuSRkDat/BDzpI+bGFLyv0vikIEbzMidMbtprASloqAIS652DdG 0lM/qkoyuk7AWS3zglfVIxOjy8do23HAOUV7q4VHHSVVAtop9T5ly7B7fQCCvV9a 261RAQGn6hRAE2PChBRSHTWUlZVXGPH7pc2Rg8RFpJOKIEQ9XeYtqt9/F+37S+tL uIvrEwJjHHTSTj/KlESq/xxUEDh+9B+ql0M5cP8MOFg8jhohQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8VlJNcRu9peH1oFeLYu+X8xhR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMzVhNTBiNjEtMTI2MC0z MGQxLWI1MmEtYjRiOWI1NzQxMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LV9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXP5PqgMkOid04JBHhJ4hdFkEMqmGdQvDuhFOR+Fy4Lg2JQmcxTSWoE DOGNpFEljz/+mJgNU8DadkrskBm7uPjlVc0z22Dbf9tM0VmhnY3igl2cB0QbNyjR 5INOWqaMoFMKz+2Hq9Qt4EN3FrtQymSpjA2vwN/iJrqW50CSD4xDy82F1nFhW5Nk cIzdUweobfaf47CyBx5yEKktNeDSReBTkGl73dXUL9JdwUDHJCTG0bBj/yLbUBLy evTMLgShzRfUy7La9by2sUmxDmsoTGDEH/Iz0doP3N3YcbAGEL3RzOUnAehBunxk 5AQkWhVeDxMR/mwxlFrANqdEd6bgrao= -----END CERTIFICATE-----Generated at Wed Sep 17 20:22:15 2025 by rpki-client