$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d68c9a1e-9f0f-3509-9f25-fc4773fd1a1b.roa File: d68c9a1e-9f0f-3509-9f25-fc4773fd1a1b.roa (raw, json) Hash identifier: vkD59NrkoeiLJlWvfaTjS00xWlV3kyYDHl3uat7IfO0= Subject key identifier: F0:9C:9F:8B:FD:11:2A:B4:4B:AD:D8:AE:0B:94:0F:03:83:CF:FE:88 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584B0E414DFE9E36F8003B12F6E0 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d68c9a1e-9f0f-3509-9f25-fc4773fd1a1b.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 400031 IP address blocks: 216.10.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:4d:fe:9e:36:f8:00:3b:12:f6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=88d42014-76e0-45ac-abc4-681e1705b06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9f:97:6c:d3:33:90:dd:ff:24:61:b5:a9:18: 1f:4a:bf:fc:d7:f3:c1:a6:e8:47:2b:14:88:ba:ed: 0e:76:ab:8e:c2:6b:69:32:13:c9:78:72:47:b7:ad: 10:c8:28:af:1b:b9:aa:e0:76:1a:eb:95:5e:55:09: 31:e2:2c:cc:4b:b4:55:16:70:80:e2:e5:14:7c:7d: 4b:6b:5a:b0:eb:52:0b:ae:33:80:67:88:96:8b:1f: 8d:22:a7:86:69:f3:90:1e:dc:04:ea:ea:83:44:c4: 7c:1b:a8:9e:18:76:71:40:5a:05:6d:3c:09:e1:90: c5:bd:b7:94:7e:f3:13:e6:04:72:c8:b0:64:fc:5b: 8d:cf:a0:14:e2:62:74:f9:7d:dc:3b:4c:63:ad:e4: 05:0d:d2:2c:a4:31:a5:44:68:b5:00:98:26:e5:a8: 13:78:22:d3:e7:36:7f:b6:bd:fd:7d:f0:85:a1:14: 63:9e:2d:c4:a8:70:95:96:2d:cc:6d:79:02:63:2d: c4:0d:33:f4:92:62:48:95:6b:59:27:b7:29:47:4f: b2:9a:70:c4:dd:cb:e0:8d:e1:2d:dd:b2:6f:5f:06: 08:8f:fb:0e:08:cf:47:13:22:f3:14:1d:41:6c:5f: 0b:ef:95:28:e7:8a:33:4d:94:71:06:0d:20:13:c8: b5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9C:9F:8B:FD:11:2A:B4:4B:AD:D8:AE:0B:94:0F:03:83:CF:FE:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d68c9a1e-9f0f-3509-9f25-fc4773fd1a1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 216.10.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:47:41:e9:90:b2:43:07:10:c3:7d:6f:00:6a:1a:94:f6:08: 1b:7f:eb:99:71:ae:52:5d:e6:48:d6:ff:8a:d3:5b:89:42:32: 94:85:98:85:ce:78:96:56:36:45:f2:e9:d6:82:26:c1:0b:68: 2c:6c:ac:20:4f:c0:d8:a0:bd:e6:e1:8f:57:dd:a8:a2:2b:26: ff:54:47:83:37:9f:b3:c9:7f:fa:6e:0e:20:d9:34:ce:85:d9: af:28:3e:90:fb:b5:a0:cb:da:99:3c:14:76:67:7a:c2:ed:1b: e5:77:8b:f0:54:91:c9:42:08:3f:d0:51:9c:29:f1:50:cd:3a: d1:4d:c8:73:e4:17:bf:4c:ac:59:5f:6d:30:74:6e:9b:6e:01: cb:c3:ac:15:1e:b8:61:23:b4:2c:2f:3a:69:88:3a:2d:b8:58: 2f:d4:43:7f:2f:1e:a8:02:7c:6c:e8:c9:f2:49:4c:79:67:5e: 5f:2f:ee:67:30:3d:3e:f1:95:b2:11:b1:ba:ab:c3:89:04:8e: 7e:08:31:68:5d:ab:58:b7:cf:7b:0a:02:a4:2f:ba:d9:30:55: cf:78:53:25:56:3f:45:ac:34:2a:ae:04:95:de:f2:43:2b:c5: 85:68:66:d9:dc:b2:f6:2d:f1:da:0a:06:6d:33:f2:f2:a8:a5: ba:90:4c:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQU3+njb4ADsS9uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk ODhkNDIwMTQtNzZlMC00NWFjLWFiYzQtNjgxZTE3MDViMDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ+XbNMzkN3/JGG1qRgfSr/81/PBpuhHKxSI uu0OdquOwmtpMhPJeHJHt60QyCivG7mq4HYa65VeVQkx4izMS7RVFnCA4uUUfH1L a1qw61ILrjOAZ4iWix+NIqeGafOQHtwE6uqDRMR8G6ieGHZxQFoFbTwJ4ZDFvbeU fvMT5gRyyLBk/FuNz6AU4mJ0+X3cO0xjreQFDdIspDGlRGi1AJgm5agTeCLT5zZ/ tr39ffCFoRRjni3EqHCVli3MbXkCYy3EDTP0kmJIlWtZJ7cpR0+ymnDE3cvgjeEt 3bJvXwYIj/sOCM9HEyLzFB1BbF8L75Uo54ozTZRxBg0gE8i16wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCcn4v9ESq0S63YrguUDwODz/6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZDY4YzlhMWUtOWYwZi0z NTA5LTlmMjUtZmM0NzczZmQxYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2AoLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNHQemQskMHEMN9bwBqGpT2CBt/65lxrlJd5kjW/4rTW4lCMpSFmIXO eJZWNkXy6daCJsELaCxsrCBPwNigvebhj1fdqKIrJv9UR4M3n7PJf/puDiDZNM6F 2a8oPpD7taDL2pk8FHZnesLtG+V3i/BUkclCCD/QUZwp8VDNOtFNyHPkF79MrFlf bTB0bptuAcvDrBUeuGEjtCwvOmmIOi24WC/UQ38vHqgCfGzoyfJJTHlnXl8v7mcw PT7xlbIRsbqrw4kEjn4IMWhdq1i3z3sKAqQvutkwVc94UyVWP0WsNCquBJXe8kMr xYVoZtncsvYt8doKBm0z8vKopbqQTBc= -----END CERTIFICATE-----Generated at Thu Sep 18 10:37:37 2025 by rpki-client