$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/3ae642c4-4ff0-3395-9f07-b193f23fe810.roa File: 3ae642c4-4ff0-3395-9f07-b193f23fe810.roa (raw, json) Hash identifier: nwU2IcvtLccso0ed4/QJ9TtrIrVZtBJgsgO+au/s030= Subject key identifier: FB:03:BB:5E:57:1A:1C:8F:3F:08:4F:69:FF:6B:D2:57:58:22:BD:29 Certificate issuer: /CN=64ec5258-02d3-4bd3-af76-7496ec09cb15 Certificate serial: 010D0C9F4328584B0746D4D9C508118BFAA0FF60 Authority key identifier: 3F:26:E1:4E:E0:54:4B:F6:C3:E0:F2:14:45:44:EA:0B:24:FB:D5:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/3ae642c4-4ff0-3395-9f07-b193f23fe810.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 1097 IP address blocks: 216.146.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:d4:d9:c5:08:11:8b:fa:a0:ff:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64ec5258-02d3-4bd3-af76-7496ec09cb15 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=89ff517b-4758-4706-8ecb-997f3878031b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b7:ab:10:0d:04:92:f9:1d:31:7b:9a:ed:f9: a7:cd:79:08:18:13:21:b0:d9:29:ea:6a:24:63:c5: 0e:67:00:92:bb:c4:f7:d4:64:93:a9:4d:3b:24:a2: d9:f7:0f:16:03:04:9e:31:f4:ba:85:53:12:8f:3f: aa:18:7e:4a:77:de:40:5f:e4:68:34:e8:cf:bb:c3: 26:29:5a:89:b6:19:e0:94:8f:9b:0c:f3:5e:3a:fe: 2c:43:33:c8:58:88:9d:8c:56:24:dc:de:23:bc:dd: 2d:cd:bf:7a:bf:02:3a:3b:9c:50:02:e8:4b:ac:86: e3:5e:41:67:5c:eb:7e:e2:15:f2:21:c0:32:bd:04: 44:7d:3f:57:37:b5:23:c1:84:c1:bd:f6:9f:5c:12: 01:a6:f0:07:24:56:59:d6:c7:27:7d:3f:87:e9:14: c8:d9:f3:1d:60:75:a5:26:84:a0:b1:bc:4c:2e:ec: 91:2a:8a:79:82:c6:79:55:00:9f:1b:13:70:23:66: 60:fc:b1:d4:d3:76:9b:81:ae:1c:1b:84:fb:23:af: c8:8c:b3:59:39:78:1f:21:db:be:41:f1:d6:ed:20: b5:e8:2d:60:9e:5e:74:5d:6d:43:ff:e6:d7:6c:b6: ba:31:3c:71:69:f6:36:77:dc:0f:5d:99:af:fa:e9: 06:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:03:BB:5E:57:1A:1C:8F:3F:08:4F:69:FF:6B:D2:57:58:22:BD:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/3ae642c4-4ff0-3395-9f07-b193f23fe810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.crl X509v3 Authority Key Identifier: keyid:3F:26:E1:4E:E0:54:4B:F6:C3:E0:F2:14:45:44:EA:0B:24:FB:D5:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer sbgp-ipAddrBlock: critical IPv4: 216.146.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:9d:13:75:7a:bd:27:ef:65:ca:13:fc:33:c2:ab:8b:46:f1: 4f:fb:d7:ee:fa:1b:b7:54:05:9a:ad:3f:b0:2d:56:43:83:4e: 38:b6:9d:8a:91:80:ed:dc:7f:c3:95:ed:33:59:5d:4d:1d:e8: be:92:14:0f:77:b7:aa:7b:be:7b:c3:c8:78:db:05:97:cc:81: 0b:43:72:34:1e:ea:3b:ba:44:a9:cf:41:42:f1:2d:f0:1e:aa: 94:a8:a8:60:dd:f1:eb:40:9a:f2:a7:a9:42:7e:3a:56:f8:11: 4e:c1:78:07:2d:63:9e:fd:39:ae:97:7c:67:18:99:ba:88:18: b1:b4:b0:fe:91:99:b0:35:b9:8f:38:31:2d:10:e4:7f:0b:11: fb:18:cd:55:37:5d:c0:e3:69:16:5d:20:30:09:94:00:ae:9c: 8a:f2:ed:51:2f:95:a4:dc:be:64:59:29:ab:12:d7:81:ea:1f: b1:c0:9a:87:b9:73:26:05:3b:22:23:f3:30:44:1c:e9:2e:d8: 9e:d8:11:70:d1:69:ae:f8:dc:fe:6e:f7:4e:0a:92:11:99:51: fa:46:f0:3a:07:de:74:ba:97:59:4b:c0:ec:13:e5:45:b7:44: b2:ec:10:6f:ab:64:7b:19:35:ee:6e:8e:a9:b7:7d:6f:2f:a9: 11:17:b3:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRtTZxQgRi/qg/2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRlYzUyNTgtMDJkMy00YmQzLWFmNzYtNzQ5NmVjMDlj YjE1MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk ODlmZjUxN2ItNDc1OC00NzA2LThlY2ItOTk3ZjM4NzgwMzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rerEA0EkvkdMXua7fmnzXkIGBMhsNkp6mok Y8UOZwCSu8T31GSTqU07JKLZ9w8WAwSeMfS6hVMSjz+qGH5Kd95AX+RoNOjPu8Mm KVqJthnglI+bDPNeOv4sQzPIWIidjFYk3N4jvN0tzb96vwI6O5xQAuhLrIbjXkFn XOt+4hXyIcAyvQREfT9XN7UjwYTBvfafXBIBpvAHJFZZ1scnfT+H6RTI2fMdYHWl JoSgsbxMLuyRKop5gsZ5VQCfGxNwI2Zg/LHU03abga4cG4T7I6/IjLNZOXgfIdu+ QfHW7SC16C1gnl50XW1D/+bXbLa6MTxxafY2d9wPXZmv+ukGsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsDu15XGhyPPwhPaf9r0ldYIr0pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGVj NTI1OC0wMmQzLTRiZDMtYWY3Ni03NDk2ZWMwOWNiMTUvM2FlNjQyYzQtNGZmMC0z Mzk1LTlmMDctYjE5M2YyM2ZlODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRlYzUyNTgtMDJkMy00YmQzLWFm NzYtNzQ5NmVjMDljYjE1LzY0ZWM1MjU4LTAyZDMtNGJkMy1hZjc2LTc0OTZlYzA5 Y2IxNS5jcmwwHwYDVR0jBBgwFoAUPybhTuBUS/bD4PIURUTqCyT71ScwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGVjNTI1OC0wMmQzLTRiZDMtYWY3Ni03NDk2 ZWMwOWNiMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JISMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2dE3V6vSfvZcoT/DPCq4tG8U/71+76G7dUBZqtP7AtVkODTji2nYqR gO3cf8OV7TNZXU0d6L6SFA93t6p7vnvDyHjbBZfMgQtDcjQe6ju6RKnPQULxLfAe qpSoqGDd8etAmvKnqUJ+Olb4EU7BeActY579Oa6XfGcYmbqIGLG0sP6RmbA1uY84 MS0Q5H8LEfsYzVU3XcDjaRZdIDAJlACunIry7VEvlaTcvmRZKasS14HqH7HAmoe5 cyYFOyIj8zBEHOku2J7YEXDRaa743P5u904KkhGZUfpG8DoH3nS6l1lLwOwT5UW3 RLLsEG+rZHsZNe5ujqm3fW8vqREXswo= -----END CERTIFICATE-----Generated at Sun Sep 14 12:56:14 2025 by rpki-client