$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa File: deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa (raw, json) Hash identifier: OqHHRvLRx6Vo0nZmcFdPzGByDli17ZfEMOXA/Bl3kZc= Subject key identifier: 32:08:1A:21:63:2A:50:B4:32:97:05:16:3F:68:D9:AA:52:89:CB:84 Certificate issuer: /CN=fd691680-2c46-4e86-8545-3e0e0c0e305a Certificate serial: 010D0C9F4328584A7E7B5AFBAF746AE160AC5692 Authority key identifier: A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 23028 IP address blocks: 216.31.33.0/24 maxlen: 24 216.31.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:5a:fb:af:74:6a:e1:60:ac:56:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd691680-2c46-4e86-8545-3e0e0c0e305a Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=41fb43ad-87f0-4585-a71a-0bb573d28008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e8:dc:d8:bc:0a:ce:ad:cf:d9:35:69:00:47: 1d:2c:6e:f7:46:fd:98:f3:5b:ea:50:d7:07:26:ac: e2:9f:15:63:af:a9:5e:97:ad:43:aa:83:66:11:b6: 0c:f4:fd:16:f5:f9:15:78:18:3f:cd:2c:0c:40:33: 2e:8b:e0:c8:c8:ec:04:06:3d:ef:e0:33:2f:d8:5d: 77:1c:8e:f4:3e:77:28:31:c3:b2:6a:b1:76:77:57: 91:08:54:ea:de:d2:c4:ac:5c:e8:4c:6d:e1:0c:e6: 5e:25:b6:8e:75:99:69:7d:00:e8:b3:a7:56:76:d3: 2c:5f:f9:dc:94:7a:77:eb:d6:b6:62:0a:42:22:ef: 37:17:33:4c:ab:1d:8c:5a:a6:46:c5:1d:f5:59:41: 32:a9:65:4a:59:17:6f:fd:ee:30:30:8c:fe:0d:af: 58:54:b0:53:9f:ec:df:b6:5e:a8:ff:75:37:a1:d0: 62:29:a9:f0:19:80:7b:1e:a8:ed:46:52:42:94:e5: 86:eb:41:9b:e2:81:aa:0e:0c:a0:b8:a3:03:7e:53: a1:bc:55:8e:36:a6:02:68:bc:66:e1:34:20:20:9e: 63:eb:de:14:1d:d5:75:dc:26:0b:12:d1:d4:01:16: 97:f2:b9:53:c8:25:b2:70:22:78:b4:2a:d9:23:89: e9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:08:1A:21:63:2A:50:B4:32:97:05:16:3F:68:D9:AA:52:89:CB:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl X509v3 Authority Key Identifier: keyid:A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer sbgp-ipAddrBlock: critical IPv4: 216.31.33.0-216.31.35.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d3:68:3d:f3:30:15:77:c4:52:f0:7c:0b:fc:34:d0:23:0c: 3b:ed:40:a3:55:36:52:29:0b:ce:c9:85:8c:35:6a:15:1a:29: e9:cd:e1:bb:c0:be:c5:5c:5e:66:2c:98:2e:c9:15:c3:84:e0: ff:0f:cb:32:b5:15:2a:98:a4:bd:d6:58:61:1f:20:90:c5:0a: 4b:f5:61:ab:26:b1:82:12:b9:bc:d1:ae:52:b5:a9:40:f4:30: a5:0f:9d:ae:1f:8f:4d:60:5c:69:da:a7:b6:e9:e4:8f:af:26: 56:10:91:5e:7f:dd:1d:85:3a:e5:38:7d:23:1c:05:2d:4a:36: dd:97:c1:3f:71:dd:b2:5b:ae:55:05:62:66:49:b9:60:80:60: 49:7b:73:b9:d3:b7:43:8b:51:9a:c1:9b:4a:3b:29:01:6a:45: 35:65:68:d9:80:dd:09:90:91:64:71:42:07:08:f0:e6:41:3f: 76:4b:c2:2b:36:7f:2c:fc:25:e7:82:6e:d3:14:04:d6:8c:8b: 51:8a:03:c9:0e:76:46:ba:ee:e5:d8:8a:11:a8:d6:90:e9:93: 81:9e:76:03:1c:64:b1:d9:60:b7:80:cd:43:b7:a1:b8:f2:05: e8:58:80:bf:f0:6c:ad:e3:60:43:86:29:91:b8:03:06:e6:95: 5d:f2:b8:f6 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEp+e1r7r3Rq4WCsVpIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1NDUtM2UwZTBjMGUz MDVhMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NDFmYjQzYWQtODdmMC00NTg1LWE3MWEtMGJiNTczZDI4MDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+jc2LwKzq3P2TVpAEcdLG73Rv2Y81vqUNcH JqzinxVjr6lel61DqoNmEbYM9P0W9fkVeBg/zSwMQDMui+DIyOwEBj3v4DMv2F13 HI70PncoMcOyarF2d1eRCFTq3tLErFzoTG3hDOZeJbaOdZlpfQDos6dWdtMsX/nc lHp369a2YgpCIu83FzNMqx2MWqZGxR31WUEyqWVKWRdv/e4wMIz+Da9YVLBTn+zf tl6o/3U3odBiKanwGYB7HqjtRlJClOWG60Gb4oGqDgyguKMDflOhvFWONqYCaLxm 4TQgIJ5j694UHdV13CYLEtHUARaX8rlTyCWycCJ4tCrZI4npQQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFDIIGiFjKlC0MpcFFj9o2apSicuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5 MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBlMGMwZTMwNWEvZGViNmZiOTQtNmU1My0z YzY0LTkyYjMtMGI0NDU3MWExY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1 NDUtM2UwZTBjMGUzMDVhL2ZkNjkxNjgwLTJjNDYtNGU4Ni04NTQ1LTNlMGUwYzBl MzA1YS5jcmwwHwYDVR0jBBgwFoAUpOLLMkryoIf+v49CQPitkF4srMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBl MGMwZTMwNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADYHyED BALYHyAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAAtNoPfMwFXfEUvB8C/w00CMMO+1Ao1U2UikLzsmFjDVq FRop6c3hu8C+xVxeZiyYLskVw4Tg/w/LMrUVKpikvdZYYR8gkMUKS/VhqyaxghK5 vNGuUrWpQPQwpQ+drh+PTWBcadqntunkj68mVhCRXn/dHYU65Th9IxwFLUo23ZfB P3HdsluuVQViZkm5YIBgSXtzudO3Q4tRmsGbSjspAWpFNWVo2YDdCZCRZHFCBwjw 5kE/dkvCKzZ/LPwl54Ju0xQE1oyLUYoDyQ52Rrru5diKEajWkOmTgZ52Axxksdlg t4DNQ7ehuPIF6FiAv/BsreNgQ4YpkbgDBuaVXfK49g== -----END CERTIFICATE-----Generated at Fri Aug 1 18:13:04 2025 by rpki-client