$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/ce3f69ae-40c8-33ef-99a2-765e017a8bad.roa File: ce3f69ae-40c8-33ef-99a2-765e017a8bad.roa (raw, json) Hash identifier: u83amRbfQTteJStkW+gIZrl0aAqQ2JoigVG0cL39Tlw= Subject key identifier: 4F:6F:CF:25:BB:F8:F9:2D:BF:10:1C:5C:FA:0A:F8:87:D5:85:44:06 Certificate issuer: /CN=fff22b91-ff6b-40b0-b626-033566818ca6 Certificate serial: 010D0C9F4328584AFC1C084DAE2530578D728800 Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/ce3f69ae-40c8-33ef-99a2-765e017a8bad.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 16823 IP address blocks: 216.59.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:08:4d:ae:25:30:57:8d:72:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=3ed54f15-1464-4909-9094-6a4434749347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4e:35:26:23:f9:48:05:89:1f:49:64:b1:c9: 9c:52:66:e2:06:17:63:06:01:d2:62:c1:82:35:36: 04:2e:3d:8d:68:52:af:b5:e3:a7:8f:a1:8c:ac:48: 4a:cc:2e:e0:4f:b1:d5:4d:45:65:94:8e:42:9e:10: 14:76:93:2f:bb:73:1f:ca:a3:f5:75:f5:26:29:e1: 5d:3a:05:7a:9f:d5:53:24:25:80:ee:2e:d1:c3:d7: 13:3b:43:b1:f5:81:d2:99:4a:68:ba:49:16:65:26: f9:24:cf:a4:34:32:29:f1:7b:63:92:04:65:40:96: ee:19:fe:05:be:f3:89:17:0c:11:b7:30:3f:1c:b1: b2:64:32:b3:01:87:97:a8:3c:4c:6d:0e:84:40:56: e0:2f:3a:39:cd:ff:f6:88:1f:7d:e2:fc:e5:6a:1f: e5:3d:ff:aa:e1:14:48:96:36:7d:a0:c4:4d:e8:d3: 92:10:f0:90:b1:23:7f:b5:7d:e0:1b:8e:43:7a:8d: 9d:6a:e6:12:70:db:20:bd:11:02:c4:fd:e4:86:bb: 58:f9:0d:cc:b5:02:5f:cf:a1:29:3f:3f:a9:06:67: b4:a0:f3:56:c7:1c:6f:de:17:f3:ff:4f:12:80:1b: 54:c3:3e:27:c1:e6:cb:23:e1:37:4b:30:b3:bb:49: fb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6F:CF:25:BB:F8:F9:2D:BF:10:1C:5C:FA:0A:F8:87:D5:85:44:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/ce3f69ae-40c8-33ef-99a2-765e017a8bad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl X509v3 Authority Key Identifier: keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer sbgp-ipAddrBlock: critical IPv4: 216.59.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:69:cf:6e:84:d5:18:33:16:b8:ef:47:d8:05:cb:ea:d7:17: 35:cb:ae:65:03:fe:89:5e:ac:bb:2a:ea:94:42:1f:ee:f0:37: 76:8c:ee:63:c6:f4:e7:e5:7f:cf:d1:72:da:a1:b6:2c:15:f1: 9e:09:88:47:eb:31:f8:36:13:2b:69:24:9b:ac:0d:e4:91:cf: 88:2d:1c:a0:36:d2:88:16:c0:f6:aa:ef:ff:94:9e:6b:d8:ea: b0:fe:1c:ab:1a:89:9b:88:3a:fa:3d:b2:6b:57:3f:fb:24:c3: 4a:91:7e:29:85:10:12:52:e5:14:aa:7f:58:ae:46:5e:7d:6b: 1e:70:dc:b5:3c:f7:cf:2a:96:cb:41:ec:62:2c:70:d1:7a:32: 49:4c:f6:18:79:4b:16:73:0e:e7:65:bf:bd:27:68:1e:48:04: 27:9c:f0:fb:e0:07:c5:cb:a8:29:76:9c:27:10:f2:0b:47:25: cb:21:62:fe:48:eb:0f:2f:0a:83:73:40:f8:26:e5:90:98:fc: f9:c9:2b:29:01:55:2d:fa:38:8c:6b:41:1c:ee:db:89:33:5d: 67:2b:20:20:8c:10:16:20:07:eb:cc:9d:97:2f:cc:f9:b2:92: 22:00:79:ef:d5:80:54:5a:3b:ea:5e:60:87:9f:16:3f:8e:96: a0:43:25:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAhNriUwV41yiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZmMjJiOTEtZmY2Yi00MGIwLWI2MjYtMDMzNTY2ODE4 Y2E2MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk M2VkNTRmMTUtMTQ2NC00OTA5LTkwOTQtNmE0NDM0NzQ5MzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0k41JiP5SAWJH0lkscmcUmbiBhdjBgHSYsGC NTYELj2NaFKvteOnj6GMrEhKzC7gT7HVTUVllI5CnhAUdpMvu3MfyqP1dfUmKeFd OgV6n9VTJCWA7i7Rw9cTO0Ox9YHSmUpoukkWZSb5JM+kNDIp8XtjkgRlQJbuGf4F vvOJFwwRtzA/HLGyZDKzAYeXqDxMbQ6EQFbgLzo5zf/2iB994vzlah/lPf+q4RRI ljZ9oMRN6NOSEPCQsSN/tX3gG45Deo2dauYScNsgvRECxP3khrtY+Q3MtQJfz6Ep Pz+pBme0oPNWxxxv3hfz/08SgBtUwz4nwebLI+E3SzCzu0n7NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9vzyW7+PktvxAcXPoK+IfVhUQGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYy MmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1NjY4MThjYTYvY2UzZjY5YWUtNDBjOC0z M2VmLTk5YTItNzY1ZTAxN2E4YmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZmMjJiOTEtZmY2Yi00MGIwLWI2 MjYtMDMzNTY2ODE4Y2E2L2ZmZjIyYjkxLWZmNmItNDBiMC1iNjI2LTAzMzU2Njgx OGNhNi5jcmwwHwYDVR0jBBgwFoAUs2wgdxWP2FoP8heKC0ORLS4Spx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYyMmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1 NjY4MThjYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2DuQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBpz26E1RgzFrjvR9gFy+rXFzXLrmUD/olerLsq6pRCH+7wN3aM7mPG 9Oflf8/RctqhtiwV8Z4JiEfrMfg2EytpJJusDeSRz4gtHKA20ogWwPaq7/+UnmvY 6rD+HKsaiZuIOvo9smtXP/skw0qRfimFEBJS5RSqf1iuRl59ax5w3LU8988qlstB 7GIscNF6MklM9hh5SxZzDudlv70naB5IBCec8PvgB8XLqCl2nCcQ8gtHJcshYv5I 6w8vCoNzQPgm5ZCY/PnJKykBVS36OIxrQRzu24kzXWcrICCMEBYgB+vMnZcvzPmy kiIAee/VgFRaO+peYIefFj+OlqBDJRE= -----END CERTIFICATE-----Generated at Fri Oct 17 23:39:39 2025 by rpki-client