$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/970cc3ea-4ee8-30e0-a7a1-19daff3218a1.roa File: 970cc3ea-4ee8-30e0-a7a1-19daff3218a1.roa (raw, json) Hash identifier: ecUGwLDh8dbcKfc8qs6ag18yKjJyVqIz64xGwRkMlAU= Subject key identifier: AA:E5:39:DC:F0:CC:6E:06:E4:BB:41:E7:16:89:F4:62:31:52:39:53 Certificate issuer: /CN=85154141-f81d-4a16-94db-ba21a7f28a12 Certificate serial: 010D0C9F4328584B196C124299DA9012C5D14900 Authority key identifier: 48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/970cc3ea-4ee8-30e0-a7a1-19daff3218a1.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 6079 IP address blocks: 216.38.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:12:42:99:da:90:12:c5:d1:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85154141-f81d-4a16-94db-ba21a7f28a12 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=e543d757-837d-4292-b483-593751028d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e5:d2:dd:30:8b:fb:f2:83:e0:f8:85:48:fc: d6:92:eb:c3:91:d5:a2:da:08:62:b5:d1:6a:19:46: fd:5b:4c:cb:e6:e0:07:bc:9f:be:99:e5:75:32:07: 21:64:59:a9:46:11:62:9d:14:c9:cb:63:53:96:b6: 62:62:fc:30:28:48:57:9a:4f:d5:a3:24:c6:29:c5: d6:ce:dd:dd:92:e3:f4:b4:b5:07:c7:fb:2c:50:38: 32:80:82:35:56:fa:f6:31:4e:77:3a:fa:1b:22:41: af:1a:80:97:c6:37:b7:e8:87:bf:8b:d2:42:25:02: b1:e3:9b:ab:9e:b1:70:0a:40:9b:55:5f:a0:a6:d6: 4a:bf:36:81:72:1d:dd:1c:0a:70:32:34:e2:cb:01: 35:e6:75:5c:65:ee:0e:47:c6:f3:7f:2a:1c:9e:a0: 1b:dd:77:79:85:17:ad:ae:cb:f0:86:b9:9c:b8:6b: aa:b4:2d:cf:04:12:20:74:fa:1e:d6:6c:83:64:6d: bd:1c:0b:e6:ec:50:ee:86:8a:cb:c5:4a:83:2f:d2: cf:29:f0:d8:6e:13:34:e3:37:8c:8c:26:3a:1c:d5: 6c:c6:5e:9b:0e:63:24:ca:ce:28:54:71:d1:aa:4f: 7c:e8:61:77:d1:b4:bc:f6:31:c0:31:95:ac:0a:6c: 93:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E5:39:DC:F0:CC:6E:06:E4:BB:41:E7:16:89:F4:62:31:52:39:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/970cc3ea-4ee8-30e0-a7a1-19daff3218a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.crl X509v3 Authority Key Identifier: keyid:48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer sbgp-ipAddrBlock: critical IPv4: 216.38.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d3:dc:08:60:58:f6:b6:9a:ff:7a:82:74:57:da:f3:5f:1a: 40:f1:ca:95:1e:81:92:db:49:8e:7d:38:7f:e5:a2:f0:fa:aa: 1b:56:f9:6b:f0:89:2c:91:0d:de:f3:7c:97:ad:27:ed:f7:31: 91:76:45:7b:cb:dd:1d:ac:e1:5a:8e:93:5d:f8:de:4c:01:9f: 99:ca:0b:67:51:9f:ab:c0:9d:4b:b1:1a:2a:65:80:bb:99:e5: 3b:0b:c7:dc:c6:e6:19:99:9b:89:ba:56:fc:b3:c2:bd:b4:2a: d2:76:cc:80:9e:95:2c:23:d6:9e:62:66:3f:0c:e8:1b:c7:60: 2b:42:ae:c4:72:9a:3a:34:26:01:41:41:0d:d5:99:84:6a:0c: 6e:e5:a1:14:ae:11:09:db:42:b3:03:87:4c:d0:96:b1:a4:23: 98:f7:bb:8c:0d:a8:e1:3a:04:5d:53:35:d6:1f:fc:43:37:e1: 72:f7:83:b9:a4:27:5e:a2:50:a8:1e:fb:6f:13:cb:4e:ba:b3: e3:8f:1a:51:36:ea:da:da:01:8f:f9:c1:28:dc:8d:36:13:f5: cb:30:7d:60:67:6d:6a:a2:5d:7d:36:96:97:11:e1:f4:c1:73: c5:6e:42:b9:82:56:d5:94:b2:0f:fa:d6:31:af:c1:cc:fb:cc: a0:db:38:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbBJCmdqQEsXRSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxNTQxNDEtZjgxZC00YTE2LTk0ZGItYmEyMWE3ZjI4 YTEyMB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZTU0M2Q3NTctODM3ZC00MjkyLWI0ODMtNTkzNzUxMDI4ZDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOXS3TCL+/KD4PiFSPzWkuvDkdWi2ghitdFq GUb9W0zL5uAHvJ++meV1MgchZFmpRhFinRTJy2NTlrZiYvwwKEhXmk/VoyTGKcXW zt3dkuP0tLUHx/ssUDgygII1Vvr2MU53OvobIkGvGoCXxje36Ie/i9JCJQKx45ur nrFwCkCbVV+gptZKvzaBch3dHApwMjTiywE15nVcZe4OR8bzfyocnqAb3Xd5hRet rsvwhrmcuGuqtC3PBBIgdPoe1myDZG29HAvm7FDuhorLxUqDL9LPKfDYbhM04zeM jCY6HNVsxl6bDmMkys4oVHHRqk986GF30bS89jHAMZWsCmyTowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrlOdzwzG4G5LtB5xaJ9GIxUjlTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NTE1 NDE0MS1mODFkLTRhMTYtOTRkYi1iYTIxYTdmMjhhMTIvOTcwY2MzZWEtNGVlOC0z MGUwLWE3YTEtMTlkYWZmMzIxOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODUxNTQxNDEtZjgxZC00YTE2LTk0 ZGItYmEyMWE3ZjI4YTEyLzg1MTU0MTQxLWY4MWQtNGExNi05NGRiLWJhMjFhN2Yy OGExMi5jcmwwHwYDVR0jBBgwFoAUSJaQm6A/PV+UOEHu+QZOSWRDO+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NTE1NDE0MS1mODFkLTRhMTYtOTRkYi1iYTIx YTdmMjhhMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2CbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnT3AhgWPa2mv96gnRX2vNfGkDxypUegZLbSY59OH/lovD6qhtW+Wvw iSyRDd7zfJetJ+33MZF2RXvL3R2s4VqOk1343kwBn5nKC2dRn6vAnUuxGiplgLuZ 5TsLx9zG5hmZm4m6Vvyzwr20KtJ2zICelSwj1p5iZj8M6BvHYCtCrsRymjo0JgFB QQ3VmYRqDG7loRSuEQnbQrMDh0zQlrGkI5j3u4wNqOE6BF1TNdYf/EM34XL3g7mk J16iUKge+28Ty066s+OPGlE26traAY/5wSjcjTYT9cswfWBnbWqiXX02lpcR4fTB c8VuQrmCVtWUsg/61jGvwcz7zKDbOC0= -----END CERTIFICATE-----Generated at Sun Sep 7 14:38:08 2025 by rpki-client