$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/b1b637d3-1237-3b23-aec5-e6f0f8b16d4b.roa File: b1b637d3-1237-3b23-aec5-e6f0f8b16d4b.roa (raw, json) Hash identifier: 0WdpmCIVR8n4T88qcqsZbGmde/qWOoZ1bDaHcXtfHnU= Subject key identifier: A1:1C:6B:DE:58:0F:86:40:BB:35:EF:DF:F6:A0:D9:B4:6C:BB:99:37 Certificate issuer: /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Certificate serial: 010D0C9F4328584AD23BA91E024160C12FE26500 Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/b1b637d3-1237-3b23-aec5-e6f0f8b16d4b.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 216.169.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:a9:1e:02:41:60:c1:2f:e2:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=8ba8d987-5eb4-4649-9369-06606892e058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f8:c0:49:9f:fe:ab:0e:26:6a:58:93:2c:9a: b9:53:be:4d:f3:12:5e:2b:8d:89:cb:5d:f0:f1:15: 6b:73:b1:8e:0d:45:a7:6d:c7:9a:2b:fc:d8:04:aa: 1b:d3:41:d0:90:0c:c6:32:a5:d1:e3:30:a8:90:0d: bd:7c:17:ac:21:18:66:c4:f5:cc:64:a5:36:b7:fb: 00:02:c5:fe:d0:4e:21:fc:c8:07:b7:54:84:f3:06: f8:cb:fd:e8:16:59:bb:f7:3d:69:95:e3:c6:05:d6: 97:ea:4d:f7:ab:18:23:f5:05:7d:93:3e:74:ff:14: c7:9b:8c:cb:33:0b:97:b2:fb:61:fc:a1:50:b0:f2: 99:a9:82:db:6a:c0:1f:f0:34:78:18:7e:c2:65:0c: dd:ba:83:54:c6:95:ce:71:39:51:12:6d:00:56:3d: e8:52:30:14:e5:14:7e:c9:01:4c:bc:aa:c6:1d:61: 15:db:b3:cb:23:d1:b4:15:51:f1:ab:95:31:e3:4a: 94:f9:ac:8e:18:05:b9:36:fd:1b:e2:a8:c5:53:83: fc:c9:ee:cf:60:58:08:19:f5:75:94:7c:5a:ca:be: 11:8c:83:e3:f2:cd:d3:a9:a4:7e:51:7c:54:2c:61: f1:6a:ea:b9:96:de:d3:7b:01:3c:a0:78:d3:0e:d1: 8b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1C:6B:DE:58:0F:86:40:BB:35:EF:DF:F6:A0:D9:B4:6C:BB:99:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/b1b637d3-1237-3b23-aec5-e6f0f8b16d4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl X509v3 Authority Key Identifier: keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer sbgp-ipAddrBlock: critical IPv4: 216.169.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:de:3a:90:8b:79:0a:58:bc:66:c5:67:b9:4c:3f:3d:41:c2: 63:0c:2a:0e:30:8f:20:6a:4e:37:31:77:49:d1:9b:c6:ce:b6: b2:fd:2d:fb:6f:62:62:fe:e1:30:15:80:5a:0b:b6:51:67:ab: 6c:1b:8d:21:9e:7b:a4:55:55:30:65:7e:48:69:f1:a5:f6:ff: 03:de:f7:3e:4a:af:3d:32:d8:f8:d4:b4:e5:16:9a:c1:ab:1d: b5:e4:05:c2:db:fd:40:4d:a8:30:8e:af:4f:d4:39:03:55:fd: 27:d1:e5:aa:8d:94:38:d9:4d:40:a2:02:98:44:8f:be:e7:a6: ff:2b:1f:fd:f8:37:a9:9c:31:c9:04:4f:0b:a2:3e:6e:3d:7b: 82:67:cf:25:d0:bb:bb:56:d1:66:f4:79:de:40:33:e7:6a:1b: 60:70:f9:5f:93:90:5b:4f:c5:e1:70:05:97:9d:65:5d:00:79: f7:2c:99:64:d6:a7:cf:88:3e:20:fd:48:99:43:5d:b7:76:94: 03:ef:1a:b4:81:53:b9:08:8a:0e:dc:82:30:c0:61:26:80:a6: 55:17:6d:03:6f:e7:bf:cc:44:ee:71:89:68:87:7a:33:56:1b: 96:7d:26:77:85:c6:25:de:97:83:33:49:9b:12:51:81:bf:ff: b0:8f:16:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO6keAkFgwS/iZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjEzYzI5OGUtMzE3OS00ZjM1LTllN2QtODg2ZWUzZjli ZTBiMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk OGJhOGQ5ODctNWViNC00NjQ5LTkzNjktMDY2MDY4OTJlMDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/jASZ/+qw4maliTLJq5U75N8xJeK42Jy13w 8RVrc7GODUWnbceaK/zYBKob00HQkAzGMqXR4zCokA29fBesIRhmxPXMZKU2t/sA AsX+0E4h/MgHt1SE8wb4y/3oFlm79z1plePGBdaX6k33qxgj9QV9kz50/xTHm4zL MwuXsvth/KFQsPKZqYLbasAf8DR4GH7CZQzduoNUxpXOcTlREm0AVj3oUjAU5RR+ yQFMvKrGHWEV27PLI9G0FVHxq5Ux40qU+ayOGAW5Nv0b4qjFU4P8ye7PYFgIGfV1 lHxayr4RjIPj8s3TqaR+UXxULGHxauq5lt7TewE8oHjTDtGLGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEca95YD4ZAuzXv3/ag2bRsu5k3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNj Mjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZlZTNmOWJlMGIvYjFiNjM3ZDMtMTIzNy0z YjIzLWFlYzUtZTZmMGY4YjE2ZDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjEzYzI5OGUtMzE3OS00ZjM1LTll N2QtODg2ZWUzZjliZTBiL2YxM2MyOThlLTMxNzktNGYzNS05ZTdkLTg4NmVlM2Y5 YmUwYi5jcmwwHwYDVR0jBBgwFoAUVlbPxbTjRRY3+Rn6Z5c9Lkgn50IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNjMjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZl ZTNmOWJlMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KmRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTeOpCLeQpYvGbFZ7lMPz1BwmMMKg4wjyBqTjcxd0nRm8bOtrL9Lftv YmL+4TAVgFoLtlFnq2wbjSGee6RVVTBlfkhp8aX2/wPe9z5Krz0y2PjUtOUWmsGr HbXkBcLb/UBNqDCOr0/UOQNV/SfR5aqNlDjZTUCiAphEj77npv8rH/34N6mcMckE TwuiPm49e4JnzyXQu7tW0Wb0ed5AM+dqG2Bw+V+TkFtPxeFwBZedZV0AefcsmWTW p8+IPiD9SJlDXbd2lAPvGrSBU7kIig7cgjDAYSaAplUXbQNv57/MRO5xiWiHejNW G5Z9JneFxiXel4MzSZsSUYG//7CPFgU= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:58 2025 by rpki-client