$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ce1a12c4-15ec-3aa3-a527-a7a5b5cb55b1.roa File: ce1a12c4-15ec-3aa3-a527-a7a5b5cb55b1.roa (raw, json) Hash identifier: Y4i8pdI/v0Go4oCZ/1W8F3ZYQV+SOt46fRfAYYPmuYo= Subject key identifier: CA:4D:E5:2E:09:29:57:08:B4:9D:32:19:F9:A8:B9:D4:5F:4A:E0:1B Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76C0123FCFAA8049F98900 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ce1a12c4-15ec-3aa3-a527-a7a5b5cb55b1.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 216.129.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c0:12:3f:cf:aa:80:49:f9:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=a02a7675-c122-4906-9b68-06733e14b80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:71:07:4a:a7:c3:d9:f3:cd:23:e4:a0:95: 91:e1:fa:e5:cc:64:c3:fc:1d:21:b8:86:3b:5f:6c: d3:ec:32:c9:64:76:21:2e:15:de:be:b5:2d:9d:56: 86:e5:f9:60:2d:85:36:5b:18:1a:47:57:a0:d6:0d: b5:18:09:d5:2a:2b:af:a6:26:77:5b:2f:77:e3:13: 0d:ba:ae:5c:13:81:64:79:e9:e9:15:34:2f:c2:85: 19:3c:46:e3:f4:46:bb:84:3b:28:9b:fc:cb:87:e7: 4e:ef:c1:a4:e7:62:07:04:ff:9a:6f:a1:e3:a6:69: a0:be:49:b6:c4:9f:c3:74:2f:ea:6f:74:64:0c:6e: cb:62:fa:55:9c:c4:5c:ac:13:96:92:95:77:f6:a4: 1b:ca:a6:bd:b6:c2:cb:d9:7c:f8:8b:f1:86:8f:69: dc:f1:1a:5a:15:89:bf:84:5f:6e:29:47:44:53:31: bc:0a:fa:70:98:b8:67:2f:6b:6b:fb:db:64:4a:4b: c3:19:86:a0:ab:e7:94:83:6d:a8:14:f8:9f:1e:ae: a4:b6:15:95:b1:f6:8e:7c:15:66:49:f1:05:d3:0b: 22:9c:f1:51:88:93:5d:d7:26:51:46:29:54:c4:4c: 27:2b:93:05:ef:77:66:72:f0:3e:f8:b6:80:36:d1: 8b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4D:E5:2E:09:29:57:08:B4:9D:32:19:F9:A8:B9:D4:5F:4A:E0:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ce1a12c4-15ec-3aa3-a527-a7a5b5cb55b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 216.129.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:55:91:af:b7:2f:e0:d9:a7:21:98:cf:58:17:e7:c7:69:d6: af:e4:a7:65:ec:be:95:b6:be:d6:2a:52:16:51:3f:88:ce:06: 9b:f5:52:ef:a4:e8:8a:8b:7b:d7:98:42:ed:0d:33:87:19:23: 92:7a:aa:6c:ca:18:50:49:bf:ae:d6:b4:a8:f0:aa:ba:f2:5f: 82:68:c7:1b:6a:52:e3:25:df:0a:7c:bb:c9:8e:ac:c5:97:8f: c9:a4:cd:3b:2b:c1:fe:d5:c3:46:d7:45:80:62:29:7c:68:5a: 78:f4:8a:65:08:d7:a5:94:c4:0a:61:6f:cf:d0:b9:c1:c9:df: ae:d6:b2:ff:1a:75:f5:77:79:2e:80:96:cf:9e:9a:8a:5a:46: 9f:e8:72:f6:5b:47:91:b8:f3:67:da:f5:bd:41:c6:49:6a:f8: 26:58:87:20:b0:f1:4c:b2:de:1c:4a:49:90:23:b7:40:76:db: 18:c1:73:43:75:21:67:58:48:93:c7:a7:ce:8b:38:0e:a6:6d: 50:c9:95:15:c5:17:ea:9b:a0:db:81:73:4d:dd:20:1b:bc:4c: 56:04:ef:d0:91:10:0e:e0:30:93:2b:cf:22:bb:8b:57:2f:9e: 23:59:21:35:0c:6e:bd:c6:c1:c9:d6:41:7a:6d:88:49:d3:ba: 85:df:be:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsASP8+qgEn5iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YTAyYTc2NzUtYzEyMi00OTA2LTliNjgtMDY3MzNlMTRiODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudVxB0qnw9nzzSPkoJWR4frlzGTD/B0huIY7 X2zT7DLJZHYhLhXevrUtnVaG5flgLYU2WxgaR1eg1g21GAnVKiuvpiZ3Wy934xMN uq5cE4FkeenpFTQvwoUZPEbj9Ea7hDsom/zLh+dO78Gk52IHBP+ab6Hjpmmgvkm2 xJ/DdC/qb3RkDG7LYvpVnMRcrBOWkpV39qQbyqa9tsLL2Xz4i/GGj2nc8RpaFYm/ hF9uKUdEUzG8CvpwmLhnL2tr+9tkSkvDGYagq+eUg22oFPifHq6kthWVsfaOfBVm SfEF0wsinPFRiJNd1yZRRilUxEwnK5MF73dmcvA++LaANtGLRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpN5S4JKVcItJ0yGfmoudRfSuAbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvY2UxYTEyYzQtMTVlYy0z YWEzLWE1MjctYTdhNWI1Y2I1NWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2IFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtVka+3L+DZpyGYz1gX58dp1q/kp2XsvpW2vtYqUhZRP4jOBpv1Uu+k 6IqLe9eYQu0NM4cZI5J6qmzKGFBJv67WtKjwqrryX4JoxxtqUuMl3wp8u8mOrMWX j8mkzTsrwf7Vw0bXRYBiKXxoWnj0imUI16WUxAphb8/QucHJ367Wsv8adfV3eS6A ls+emopaRp/ocvZbR5G482fa9b1Bxklq+CZYhyCw8Uyy3hxKSZAjt0B22xjBc0N1 IWdYSJPHp86LOA6mbVDJlRXFF+qboNuBc03dIBu8TFYE79CREA7gMJMrzyK7i1cv niNZITUMbr3GwcnWQXptiEnTuoXfvjA= -----END CERTIFICATE-----Generated at Sat Sep 6 23:51:03 2025 by rpki-client