$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5e0f9f66-ff2e-34e7-a568-e277748b2558.roa File: 5e0f9f66-ff2e-34e7-a568-e277748b2558.roa (raw, json) Hash identifier: UfbQd+Rp/Rem0R3Q6/CfUJKN8/nUH7TXQeyaAJjT/TA= Subject key identifier: 01:F8:43:0D:07:99:A5:74:03:97:7C:C3:C3:67:5C:30:18:BB:D1:29 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584AF52125BD5E816925F51D8B90 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5e0f9f66-ff2e-34e7-a568-e277748b2558.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 198949 IP address blocks: 216.99.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:25:bd:5e:81:69:25:f5:1d:8b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=ca4046a4-d300-4875-a2dc-49ea68a1ce06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:ea:1c:91:79:3c:6d:b7:d8:b2:2f:6a:94: ec:5e:de:d5:23:84:07:de:98:98:47:b3:b3:7e:28: 50:d7:09:4f:74:d9:fc:e7:11:eb:27:bb:87:82:21: 0f:85:83:49:42:c7:f7:ad:3d:89:6c:0c:aa:72:ea: a6:b9:3c:48:21:20:72:03:30:51:b2:2d:65:60:eb: aa:91:d6:76:52:cf:1d:ec:01:bb:62:7c:0c:42:d2: a6:2d:98:cc:50:4b:da:53:47:69:ff:b5:4b:48:e5: f7:dc:17:57:bd:59:9e:ab:4e:d3:32:85:2c:53:64: 28:17:5a:7a:dd:b4:87:85:bb:71:64:46:ae:03:46: 8f:e6:f9:cb:9d:1c:61:a1:48:f6:bc:db:43:58:4a: 06:71:af:52:ad:64:3b:35:8f:c7:7a:7e:2b:2b:00: b7:d9:f4:2e:ca:e4:a1:d3:8b:da:0a:91:48:41:cd: bf:8b:80:3a:a4:7d:5c:49:e9:4a:74:a4:3e:bc:b6: 29:13:1c:32:d5:71:eb:d5:50:04:9d:45:04:02:c1: 9c:a4:c1:66:65:b6:ea:74:ef:29:8d:48:26:99:89: 76:43:7e:67:d1:10:b8:e4:56:d1:7d:bd:d9:06:20: 09:d7:27:20:1f:ca:7e:2f:f5:b4:7b:9b:ce:27:d8: 0c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F8:43:0D:07:99:A5:74:03:97:7C:C3:C3:67:5C:30:18:BB:D1:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5e0f9f66-ff2e-34e7-a568-e277748b2558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 216.99.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b9:1c:82:e7:22:13:00:7a:4b:be:42:75:6c:ad:42:36:2e: f1:52:62:55:d1:fb:81:81:21:9f:aa:ac:4b:5b:aa:4e:1a:34: 2f:fb:07:67:9d:34:f1:21:a2:71:ea:33:b3:f6:a9:a5:59:98: 44:98:1f:dd:98:ba:f5:11:37:39:61:7f:f6:78:9d:bd:3a:ff: 78:65:1d:52:ca:8d:e8:ad:c8:86:34:f5:02:5a:68:8e:ae:f1: ca:94:09:92:72:8a:5e:ec:81:ba:25:06:ba:da:93:4f:24:69: df:ca:03:06:b4:be:06:0a:53:8b:84:ef:be:a0:e0:a7:27:a8: 46:08:20:5d:75:9a:57:85:94:d3:50:b5:4f:63:9f:90:b4:ca: c2:35:62:52:1c:fb:59:d1:9b:2f:3b:fc:85:ad:5c:20:0d:83: 0f:45:05:12:e1:a1:d9:4f:fd:42:c9:c6:eb:eb:d6:a6:eb:e1: 3d:ee:48:d5:db:16:b8:c1:ef:bc:5d:3b:f5:0e:38:00:33:c7: e0:bd:99:92:e6:0c:35:40:a9:ff:2e:65:30:9a:f8:d3:b6:c2: 60:64:51:a0:ed:2b:57:e5:30:c4:ff:cc:68:34:2f:0e:3e:c9: 47:1a:a4:05:ec:81:ca:aa:6a:3a:ce:38:1c:ee:8d:26:bb:ce: f7:b4:40:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ISW9XoFpJfUdi5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2E0MDQ2YTQtZDMwMC00ODc1LWEyZGMtNDllYTY4YTFjZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0LqHJF5PG232LIvapTsXt7VI4QH3piYR7Oz fihQ1wlPdNn85xHrJ7uHgiEPhYNJQsf3rT2JbAyqcuqmuTxIISByAzBRsi1lYOuq kdZ2Us8d7AG7YnwMQtKmLZjMUEvaU0dp/7VLSOX33BdXvVmeq07TMoUsU2QoF1p6 3bSHhbtxZEauA0aP5vnLnRxhoUj2vNtDWEoGca9SrWQ7NY/Hen4rKwC32fQuyuSh 04vaCpFIQc2/i4A6pH1cSelKdKQ+vLYpExwy1XHr1VAEnUUEAsGcpMFmZbbqdO8p jUgmmYl2Q35n0RC45FbRfb3ZBiAJ1ycgH8p+L/W0e5vOJ9gM5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAH4Qw0HmaV0A5d8w8NnXDAYu9EpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvNWUwZjlmNjYtZmYyZS0z NGU3LWE1NjgtZTI3Nzc0OGIyNTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIi5HILnIhMAeku+QnVsrUI2LvFSYlXR+4GBIZ+qrEtbqk4aNC/7B2ed NPEhonHqM7P2qaVZmESYH92YuvURNzlhf/Z4nb06/3hlHVLKjeityIY09QJaaI6u 8cqUCZJyil7sgbolBrrak08kad/KAwa0vgYKU4uE776g4KcnqEYIIF11mleFlNNQ tU9jn5C0ysI1YlIc+1nRmy87/IWtXCANgw9FBRLhodlP/ULJxuvr1qbr4T3uSNXb FrjB77xdO/UOOAAzx+C9mZLmDDVAqf8uZTCa+NO2wmBkUaDtK1flMMT/zGg0Lw4+ yUcapAXsgcqqajrOOBzujSa7zve0QF8= -----END CERTIFICATE-----Generated at Sun Oct 19 22:08:08 2025 by rpki-client