$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c3e18ddf-50c8-3c2b-961b-6ce9f03a95d8.roa File: c3e18ddf-50c8-3c2b-961b-6ce9f03a95d8.roa (raw, json) Hash identifier: dplfEIi0X6L+pUzMz3j3hdBRbQC6kgYfM7s+pxuResM= Subject key identifier: 4F:76:73:E7:57:FA:60:EB:12:63:61:C3:B7:30:7E:13:B2:08:50:CA Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F4328584ADD66835EA3D093D1B4F3D700 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c3e18ddf-50c8-3c2b-961b-6ce9f03a95d8.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 11650 IP address blocks: 216.71.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:83:5e:a3:d0:93:d1:b4:f3:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=65136f2b-b22b-403d-9c38-f328d4fd3a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:73:8c:58:89:69:c5:63:50:fc:68:2a:e0: 07:93:3a:0d:ad:6c:9a:38:cd:99:e6:49:20:36:99: 35:fe:f4:8e:aa:85:ab:ac:b0:22:c4:2f:7c:74:47: 31:c9:8a:46:39:ad:31:29:28:e8:0b:3b:fd:67:50: d6:65:e7:03:3b:56:78:2f:c3:d0:b7:4a:2a:ec:f4: 66:72:7f:f6:20:4a:bd:b6:8c:d5:a1:8e:ab:64:44: 19:0b:22:3e:7a:02:07:e1:1a:4c:f7:2b:e2:5b:17: 68:a4:ca:fe:91:a3:cf:2f:9b:f4:4d:8d:2e:db:6c: 62:01:a9:fe:01:32:f7:b2:60:01:80:2d:ed:b4:7d: ad:44:b3:78:48:e5:a1:98:7f:db:97:3d:09:49:a8: 59:c6:16:3f:62:67:1f:4b:2c:df:21:cb:ac:ef:da: 19:12:95:9f:56:f8:82:77:7f:5a:f7:98:4c:be:b6: 98:b9:43:4e:18:a0:e7:54:8c:b5:a1:53:3c:03:29: fd:56:d2:42:00:1b:b2:87:b1:11:97:3f:11:34:9c: 8d:17:c8:a7:b6:ec:27:15:dc:73:14:b0:63:7e:36: 0f:aa:52:a9:29:ec:b8:d9:27:05:b7:49:58:1a:e3: 93:a5:fd:a6:a4:8f:d3:e5:b2:73:ae:7c:14:f7:94: d8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:76:73:E7:57:FA:60:EB:12:63:61:C3:B7:30:7E:13:B2:08:50:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c3e18ddf-50c8-3c2b-961b-6ce9f03a95d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 216.71.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:0a:6f:df:63:92:b0:ff:7f:71:7d:2f:d9:16:f9:97:81:41: 39:c5:a4:cc:09:be:6e:a1:df:15:bb:5c:a5:88:a3:e4:4f:99: 77:50:b1:06:de:ae:e5:88:8a:b2:8c:c6:6e:e9:aa:fb:62:ee: 4d:f4:79:f6:f2:13:01:ea:77:ff:86:04:0f:e5:e3:18:96:59: 03:be:5c:24:f4:fe:26:7a:2c:45:85:73:af:cc:eb:c5:56:32: 6a:e1:d4:e7:37:e1:23:9f:bb:e6:01:e2:14:da:9a:78:34:2e: 06:22:a6:36:00:4f:1b:76:f1:68:89:5b:9d:a9:e8:7c:74:95: ad:56:96:9f:c9:d6:64:8c:1c:4d:78:8b:8b:97:ef:6b:8f:6f: 86:dd:b6:90:9b:c5:9f:61:27:c1:da:c9:a3:36:48:12:e7:51: de:82:f3:cb:75:93:1b:c2:13:72:db:d7:e7:5c:60:28:7e:1e: ed:de:18:83:1f:a6:7b:f7:6a:d7:00:04:d7:eb:a7:52:de:a2: 2f:f0:ce:cc:79:4f:06:99:ff:cc:0b:86:70:3d:f5:2f:be:92: a6:d3:6f:2a:3a:27:69:71:9e:fe:36:24:05:da:e7:ea:0a:71: f0:97:93:01:a8:e4:a9:f0:9f:f2:02:6b:f3:b4:01:8b:9d:18: 3b:15:70:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZoNeo9CT0bTz1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NjUxMzZmMmItYjIyYi00MDNkLTljMzgtZjMyOGQ0ZmQzYTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD1zjFiJacVjUPxoKuAHkzoNrWyaOM2Z5kkg Npk1/vSOqoWrrLAixC98dEcxyYpGOa0xKSjoCzv9Z1DWZecDO1Z4L8PQt0oq7PRm cn/2IEq9tozVoY6rZEQZCyI+egIH4RpM9yviWxdopMr+kaPPL5v0TY0u22xiAan+ ATL3smABgC3ttH2tRLN4SOWhmH/blz0JSahZxhY/YmcfSyzfIcus79oZEpWfVviC d39a95hMvraYuUNOGKDnVIy1oVM8Ayn9VtJCABuyh7ERlz8RNJyNF8intuwnFdxz FLBjfjYPqlKpKey42ScFt0lYGuOTpf2mpI/T5bJzrnwU95TYHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE92c+dX+mDrEmNhw7cwfhOyCFDKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvYzNlMThkZGYtNTBjOC0z YzJiLTk2MWItNmNlOWYwM2E5NWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2EdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkKb99jkrD/f3F9L9kW+ZeBQTnFpMwJvm6h3xW7XKWIo+RPmXdQsQbe ruWIirKMxm7pqvti7k30efbyEwHqd/+GBA/l4xiWWQO+XCT0/iZ6LEWFc6/M68VW Mmrh1Oc34SOfu+YB4hTamng0LgYipjYATxt28WiJW52p6Hx0la1Wlp/J1mSMHE14 i4uX72uPb4bdtpCbxZ9hJ8HayaM2SBLnUd6C88t1kxvCE3Lb1+dcYCh+Hu3eGIMf pnv3atcABNfrp1Leoi/wzsx5TwaZ/8wLhnA99S++kqbTbyo6J2lxnv42JAXa5+oK cfCXkwGo5Knwn/ICa/O0AYudGDsVcGA= -----END CERTIFICATE-----Generated at Wed Aug 20 23:03:50 2025 by rpki-client