$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/2ffa1deb-a3f7-3c06-943f-a6e4982f853c.roa File: 2ffa1deb-a3f7-3c06-943f-a6e4982f853c.roa (raw, json) Hash identifier: TtTtoONV7e9XsJL6rwGQ40fXWQ1y/hQUi5nzmwYfKgk= Subject key identifier: A1:56:77:22:B8:F7:64:EF:6D:11:1A:95:F3:02:4F:8B:6C:72:62:83 Certificate issuer: /CN=ee195698-fb60-40ef-a454-85fcbf3381b9 Certificate serial: 010D0C9F4328584B110BFD3683EE02D24C160300 Authority key identifier: 3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/2ffa1deb-a3f7-3c06-943f-a6e4982f853c.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 198949 IP address blocks: 137.216.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0b:fd:36:83:ee:02:d2:4c:16:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee195698-fb60-40ef-a454-85fcbf3381b9 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=ff9b83d3-8daa-4cb2-9eaa-1ab1882de9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3e:a0:38:cb:8f:90:1b:44:d6:45:8b:cc:a2: 77:8b:2d:7c:2e:b9:79:93:81:bb:8a:c2:cf:d4:55: 62:2b:bf:3e:13:23:10:f6:ce:d1:14:cf:3b:f4:c7: a0:2c:91:97:48:d9:ab:9d:14:20:bd:32:42:70:38: c8:b6:27:9c:61:02:03:83:7b:aa:3d:48:97:5f:40: 76:c8:07:67:02:b0:59:c9:53:5a:b3:4b:9a:78:a4: 42:06:6c:2b:96:a5:5f:d1:5e:b7:de:d7:e6:99:78: 33:08:97:3a:c8:de:91:38:39:53:61:4a:a8:f9:3c: 9c:ad:24:70:da:ed:90:b7:88:db:e9:d3:af:33:7c: e0:55:31:d5:50:9a:91:14:13:84:b7:16:45:76:2a: d8:a3:dd:52:53:50:0a:c7:f6:ac:a1:93:d9:49:bf: a5:d6:e3:0d:7c:63:f3:e5:da:1f:68:bb:71:9b:dd: 28:a1:28:ab:b0:49:31:c7:eb:1d:1d:89:6c:26:83: 81:3f:ae:44:c0:32:68:d3:5f:8f:5f:ff:16:bb:7e: 9c:b6:a2:fd:b3:7f:fd:61:01:38:e0:cb:68:73:47: 75:39:08:c6:50:32:98:27:0b:64:d6:f7:60:8f:fa: 05:69:86:e9:cd:0d:14:4d:49:cf:26:5f:96:72:27: 10:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:56:77:22:B8:F7:64:EF:6D:11:1A:95:F3:02:4F:8B:6C:72:62:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/2ffa1deb-a3f7-3c06-943f-a6e4982f853c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.crl X509v3 Authority Key Identifier: keyid:3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer sbgp-ipAddrBlock: critical IPv4: 137.216.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:38:13:38:ba:0e:1b:e6:51:50:4c:5c:14:d4:55:5b:d6:11: 11:dd:89:fd:24:fd:47:90:12:f5:c3:2d:36:d8:75:ac:0b:04: 40:1a:18:29:40:91:d6:94:db:54:33:54:e4:bb:01:a7:ab:6f: 2b:88:ad:69:f5:60:31:00:36:70:b2:af:68:f8:6e:bd:c1:44: 34:8f:29:fc:50:32:a2:15:f8:6c:f6:0b:ec:eb:e3:d4:d2:1a: 44:f0:f4:c7:99:ac:af:df:f3:55:7b:7d:b4:22:13:09:1f:95: 9f:21:29:05:6e:92:9a:5c:fa:1d:08:43:77:bb:9d:1e:61:d1: a0:3e:ac:23:61:0b:06:ad:e6:54:49:d3:a9:92:2d:3e:e9:9c: 00:98:31:2f:99:bd:2d:35:24:a3:3b:ff:bb:77:67:8b:0a:16: f9:1d:95:c9:0b:ce:b8:e3:3b:ec:82:2e:0c:fb:a5:86:7e:9c: 40:8f:6b:10:09:f3:98:6b:44:cc:eb:98:8a:2c:7c:35:2e:b7: 03:0d:9d:84:ce:84:eb:de:c2:73:0e:ef:2a:60:86:c5:71:b8: c7:af:3d:07:cb:ec:c5:3b:a9:9a:a2:b4:ab:3b:a7:bd:05:fe: c1:5b:03:10:09:96:01:19:70:49:d7:f9:96:c9:bc:cb:a4:24: 1f:ec:35:ef -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsRC/02g+4C0kwWAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWUxOTU2OTgtZmI2MC00MGVmLWE0NTQtODVmY2JmMzM4 MWI5MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmY5YjgzZDMtOGRhYS00Y2IyLTllYWEtMWFiMTg4MmRlOWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz6gOMuPkBtE1kWLzKJ3iy18Lrl5k4G7isLP 1FViK78+EyMQ9s7RFM879MegLJGXSNmrnRQgvTJCcDjItiecYQIDg3uqPUiXX0B2 yAdnArBZyVNas0uaeKRCBmwrlqVf0V633tfmmXgzCJc6yN6RODlTYUqo+TycrSRw 2u2Qt4jb6dOvM3zgVTHVUJqRFBOEtxZFdirYo91SU1AKx/asoZPZSb+l1uMNfGPz 5dofaLtxm90ooSirsEkxx+sdHYlsJoOBP65EwDJo01+PX/8Wu36ctqL9s3/9YQE4 4Mtoc0d1OQjGUDKYJwtk1vdgj/oFaYbpzQ0UTUnPJl+WcicQ5QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKFWdyK492TvbREalfMCT4tscmKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZTE5 NTY5OC1mYjYwLTQwZWYtYTQ1NC04NWZjYmYzMzgxYjkvMmZmYTFkZWItYTNmNy0z YzA2LTk0M2YtYTZlNDk4MmY4NTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWUxOTU2OTgtZmI2MC00MGVmLWE0 NTQtODVmY2JmMzM4MWI5L2VlMTk1Njk4LWZiNjAtNDBlZi1hNDU0LTg1ZmNiZjMz ODFiOS5jcmwwHwYDVR0jBBgwFoAUPRcl8dsCqK/Mc9Thv4Fa9vmMCBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZTE5NTY5OC1mYjYwLTQwZWYtYTQ1NC04NWZj YmYzMzgxYjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAidgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACzgTOLoOG+ZRUExcFNRVW9YREd2J/ST9R5AS9cMtNth1rAsEQBoYKUCR 1pTbVDNU5LsBp6tvK4itafVgMQA2cLKvaPhuvcFENI8p/FAyohX4bPYL7Ovj1NIa RPD0x5msr9/zVXt9tCITCR+VnyEpBW6Smlz6HQhDd7udHmHRoD6sI2ELBq3mVEnT qZItPumcAJgxL5m9LTUkozv/u3dniwoW+R2VyQvOuOM77IIuDPulhn6cQI9rEAnz mGtEzOuYiix8NS63Aw2dhM6E697Ccw7vKmCGxXG4x689B8vsxTupmqK0qzunvQX+ wVsDEAmWARlwSdf5lsm8y6QkH+w17w== -----END CERTIFICATE-----Generated at Fri Oct 17 11:28:55 2025 by rpki-client