$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/8d813e67-3495-37a5-b5ea-6531a041ee5c.roa File: 8d813e67-3495-37a5-b5ea-6531a041ee5c.roa (raw, json) Hash identifier: ldeFtC+27gXaz0OQXCreGziE6zY1r5F4catJLKm51nA= Subject key identifier: FE:FB:8A:EA:77:AC:50:75:BC:DF:24:FE:9F:A1:FA:18:9F:42:63:2E Certificate issuer: /CN=64ec5258-02d3-4bd3-af76-7496ec09cb15 Certificate serial: 010D0C9F4328584B0746D4C649C78A2E52DBF680 Authority key identifier: 3F:26:E1:4E:E0:54:4B:F6:C3:E0:F2:14:45:44:EA:0B:24:FB:D5:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/8d813e67-3495-37a5-b5ea-6531a041ee5c.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 1097 IP address blocks: 216.146.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:d4:c6:49:c7:8a:2e:52:db:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64ec5258-02d3-4bd3-af76-7496ec09cb15 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=6145b8b2-8aa6-458c-b0be-1f8e60ab08df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e7:16:1e:13:56:62:4d:61:a0:b6:97:b9:ef: 6c:1b:c8:30:e1:d1:79:56:a0:2e:20:a3:cb:63:91: 46:dd:dd:5a:d6:fa:b1:7c:43:d7:35:1d:56:84:4e: d7:9b:06:5d:31:15:c9:f8:7c:d0:bb:33:c2:9f:ee: 38:a8:ee:f5:06:34:85:29:9c:cc:4e:04:66:ef:1c: 13:c7:3c:4b:fe:44:e6:ed:75:7f:bd:17:50:16:b4: 39:d1:83:63:6b:2f:8b:f1:10:0b:bb:f0:18:ce:c1: 55:1b:4c:ed:cf:ea:01:79:3a:7e:0a:0e:9a:af:5a: 42:db:69:09:47:bd:17:6e:34:68:0f:55:87:12:ac: 1e:dd:6c:09:49:81:58:e6:e8:d6:66:7b:de:f2:27: 43:ef:36:d9:99:a9:a3:57:a9:44:b0:cd:1a:b4:e5: 23:97:5d:ab:46:80:aa:f3:2f:48:14:9e:67:84:d6: e6:90:54:b2:8c:ac:e6:66:dc:1a:74:d4:90:ca:74: eb:cd:88:42:81:3f:8e:c0:49:25:60:88:37:50:b5: 67:63:84:4e:2d:0d:cd:26:d8:e9:16:54:ed:51:ed: 0b:84:04:e6:50:26:5b:f9:54:73:23:1a:89:da:3e: 9d:5c:c4:9a:4e:6e:79:c0:40:92:fe:b9:77:86:cd: 20:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FB:8A:EA:77:AC:50:75:BC:DF:24:FE:9F:A1:FA:18:9F:42:63:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/8d813e67-3495-37a5-b5ea-6531a041ee5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.crl X509v3 Authority Key Identifier: keyid:3F:26:E1:4E:E0:54:4B:F6:C3:E0:F2:14:45:44:EA:0B:24:FB:D5:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer sbgp-ipAddrBlock: critical IPv4: 216.146.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:e6:49:ff:75:c9:34:0e:59:7e:38:ae:eb:7c:36:e2:15:58: b2:86:c6:9f:ff:68:bf:e4:d7:c9:0c:75:5f:be:ec:17:e7:d8: 2f:a6:87:4f:6f:e2:f9:6b:bf:9b:38:f5:28:81:12:c5:c1:d4: a2:d9:de:b8:d5:c5:5a:b2:58:83:04:d8:b2:07:e0:b9:7f:e9: ca:3d:88:93:3f:a7:55:69:e9:92:cc:13:2e:4f:f2:f0:a8:2f: b7:2f:dd:42:3c:c9:be:ae:60:46:83:b4:88:ab:c9:b1:32:74: c5:4e:88:4f:09:d1:d4:1a:cb:1b:ba:01:23:6f:83:65:67:ef: 8e:dd:0c:a3:b3:07:10:39:0e:55:1a:7b:46:31:53:7d:c1:4d: 92:5d:5f:ea:d9:87:a3:75:da:0a:43:ac:84:77:89:3e:25:91: 3e:4f:86:25:e0:ec:9d:0b:d4:28:72:52:a1:9a:1c:da:27:3d: 71:c7:8d:33:67:68:1e:b3:e1:fc:e6:e5:2d:64:c6:ca:89:a3: 9e:5f:71:cb:28:29:4e:64:f5:e6:fd:99:89:d0:9e:68:02:a0: a6:a0:1b:47:1d:8a:71:40:f1:67:ec:67:c0:aa:e0:46:25:0c: 8d:12:b6:7c:2d:fc:f9:83:54:05:26:bc:62:67:97:74:68:cf: 87:9c:8c:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRtTGSceKLlLb9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRlYzUyNTgtMDJkMy00YmQzLWFmNzYtNzQ5NmVjMDlj YjE1MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk NjE0NWI4YjItOGFhNi00NThjLWIwYmUtMWY4ZTYwYWIwOGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OcWHhNWYk1hoLaXue9sG8gw4dF5VqAuIKPL Y5FG3d1a1vqxfEPXNR1WhE7XmwZdMRXJ+HzQuzPCn+44qO71BjSFKZzMTgRm7xwT xzxL/kTm7XV/vRdQFrQ50YNjay+L8RALu/AYzsFVG0ztz+oBeTp+Cg6ar1pC22kJ R70XbjRoD1WHEqwe3WwJSYFY5ujWZnve8idD7zbZmamjV6lEsM0atOUjl12rRoCq 8y9IFJ5nhNbmkFSyjKzmZtwadNSQynTrzYhCgT+OwEklYIg3ULVnY4ROLQ3NJtjp FlTtUe0LhATmUCZb+VRzIxqJ2j6dXMSaTm55wECS/rl3hs0gXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP77iup3rFB1vN8k/p+h+hifQmMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGVj NTI1OC0wMmQzLTRiZDMtYWY3Ni03NDk2ZWMwOWNiMTUvOGQ4MTNlNjctMzQ5NS0z N2E1LWI1ZWEtNjUzMWEwNDFlZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRlYzUyNTgtMDJkMy00YmQzLWFm NzYtNzQ5NmVjMDljYjE1LzY0ZWM1MjU4LTAyZDMtNGJkMy1hZjc2LTc0OTZlYzA5 Y2IxNS5jcmwwHwYDVR0jBBgwFoAUPybhTuBUS/bD4PIURUTqCyT71ScwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGVjNTI1OC0wMmQzLTRiZDMtYWY3Ni03NDk2 ZWMwOWNiMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JIRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfmSf91yTQOWX44rut8NuIVWLKGxp//aL/k18kMdV++7Bfn2C+mh09v 4vlrv5s49SiBEsXB1KLZ3rjVxVqyWIME2LIH4Ll/6co9iJM/p1Vp6ZLMEy5P8vCo L7cv3UI8yb6uYEaDtIirybEydMVOiE8J0dQayxu6ASNvg2Vn747dDKOzBxA5DlUa e0YxU33BTZJdX+rZh6N12gpDrIR3iT4lkT5PhiXg7J0L1ChyUqGaHNonPXHHjTNn aB6z4fzm5S1kxsqJo55fccsoKU5k9eb9mYnQnmgCoKagG0cdinFA8WfsZ8Cq4EYl DI0Stnwt/PmDVAUmvGJnl3Roz4ecjIU= -----END CERTIFICATE-----Generated at Sun Sep 14 12:57:49 2025 by rpki-client