$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7846f0f1-1ea0-3629-a2a8-5e7af6ddaaa5.roa File: 7846f0f1-1ea0-3629-a2a8-5e7af6ddaaa5.roa (raw, json) Hash identifier: oif8P1wU+LM7ekcWgF6F6Ew8b2Ery5MGW2+3FnpONgE= Subject key identifier: 53:F0:4E:07:B1:EB:87:8D:AB:7E:12:53:B8:35:C8:BD:A4:01:10:8C Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F4328584AC711223569B80E183D9DAE70 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7846f0f1-1ea0-3629-a2a8-5e7af6ddaaa5.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 22709 IP address blocks: 216.237.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:22:35:69:b8:0e:18:3d:9d:ae:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=f5903849-8050-4749-a569-d81c3b17f6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:eb:1b:dd:c1:46:d3:40:58:55:ac:ba:d0:6b: 6f:e9:21:9d:06:d2:15:a0:71:01:5c:f8:08:60:a9: 78:a5:bd:47:d5:fb:d9:a0:9e:cc:be:51:b7:e2:55: e0:88:d3:8a:a2:09:24:75:1d:77:41:81:b1:2e:ca: 5c:9c:09:09:05:b7:9a:79:3f:b9:0d:2d:38:f3:96: a2:82:6a:e1:31:bc:91:0d:19:1d:b6:3b:85:2a:05: e4:e0:23:3b:78:a7:74:7f:ac:03:e5:ce:b9:65:07: 21:83:2e:d4:0f:27:45:9a:2a:8c:54:82:b1:85:1d: a1:c0:f8:6f:30:76:3d:51:87:03:56:5d:10:55:07: c2:74:4b:43:e3:23:1a:26:61:58:ca:f3:52:dc:a1: 92:4c:d0:d4:cc:f1:d7:3d:02:7c:94:00:35:77:93: 99:75:e1:a5:b1:90:42:c3:cb:05:15:7d:81:98:6a: e3:c8:6a:d8:fc:aa:68:fe:f5:f7:e5:78:48:36:c0: 75:bb:e5:39:3a:dd:91:78:49:1c:f5:45:aa:eb:64: e6:e6:37:18:c1:c4:ae:c7:50:b1:47:f0:d2:57:bc: ba:fa:bd:f4:f1:b2:ba:bc:4c:32:f7:dc:92:1a:b5: af:ca:0e:9b:a6:8d:67:c3:36:0e:fa:98:bf:f9:1d: 70:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F0:4E:07:B1:EB:87:8D:AB:7E:12:53:B8:35:C8:BD:A4:01:10:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7846f0f1-1ea0-3629-a2a8-5e7af6ddaaa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: 216.237.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:cc:af:b7:ba:0e:ba:d8:d9:71:50:9b:af:7d:6f:d0:2e:e5: a9:86:9a:eb:b1:43:ce:bc:06:8b:de:f6:f6:a7:b7:49:6c:a5: e7:ef:fa:8f:c5:25:e8:c9:e2:8a:1d:f6:fa:f2:25:0d:ef:05: c1:32:df:1e:d5:18:65:0e:40:ce:14:57:7b:c5:8b:67:8d:09: 90:85:fa:98:5b:e6:b2:1c:79:2b:ee:ae:d3:3c:bb:71:8d:8b: 48:3c:1e:a0:f7:17:10:3d:e6:4c:af:c3:19:d2:7b:9f:ae:3f: 55:22:1d:c9:be:5b:46:fb:e2:37:62:c5:c6:b6:07:fa:e3:ef: 97:fb:f7:d6:9d:71:aa:a5:c6:4c:6d:fb:8c:b0:7b:59:be:c0: c2:b2:1a:f0:bd:53:d0:11:e6:57:4a:0b:de:95:4a:1f:e8:4f: e1:84:ff:c5:c2:5a:3e:02:e5:19:8c:bf:6c:8c:28:27:2b:60: 63:32:08:81:54:8f:b9:8d:ea:66:1c:bd:ba:3d:ea:e0:60:bf: 07:de:4b:9e:96:4a:25:5b:59:24:5b:f7:c7:08:95:a0:dd:d3: f6:7a:e3:48:51:62:6b:96:2c:69:0c:31:c2:3a:d1:7a:d3:fb: 9f:cb:34:c9:8e:b0:be:15:c5:59:ff:0e:52:24:98:5f:d0:36: 41:b2:41:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHESI1abgOGD2drnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk ZjU5MDM4NDktODA1MC00NzQ5LWE1NjktZDgxYzNiMTdmNmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjesb3cFG00BYVay60Gtv6SGdBtIVoHEBXPgI YKl4pb1H1fvZoJ7MvlG34lXgiNOKogkkdR13QYGxLspcnAkJBbeaeT+5DS0485ai gmrhMbyRDRkdtjuFKgXk4CM7eKd0f6wD5c65ZQchgy7UDydFmiqMVIKxhR2hwPhv MHY9UYcDVl0QVQfCdEtD4yMaJmFYyvNS3KGSTNDUzPHXPQJ8lAA1d5OZdeGlsZBC w8sFFX2BmGrjyGrY/Kpo/vX35XhINsB1u+U5Ot2ReEkc9UWq62Tm5jcYwcSux1Cx R/DSV7y6+r308bK6vEwy99ySGrWvyg6bpo1nwzYO+pi/+R1wFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPwTgex64eNq34SU7g1yL2kARCMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvNzg0NmYwZjEtMWVhMC0z NjI5LWEyYTgtNWU3YWY2ZGRhYWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2O3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjMr7e6DrrY2XFQm699b9Au5amGmuuxQ868Bove9vant0lspefv+o/F JejJ4ood9vryJQ3vBcEy3x7VGGUOQM4UV3vFi2eNCZCF+phb5rIceSvurtM8u3GN i0g8HqD3FxA95kyvwxnSe5+uP1UiHcm+W0b74jdixca2B/rj75f799adcaqlxkxt +4ywe1m+wMKyGvC9U9AR5ldKC96VSh/oT+GE/8XCWj4C5RmMv2yMKCcrYGMyCIFU j7mN6mYcvbo96uBgvwfeS56WSiVbWSRb98cIlaDd0/Z640hRYmuWLGkMMcI60XrT +5/LNMmOsL4VxVn/DlIkmF/QNkGyQWc= -----END CERTIFICATE-----Generated at Thu Aug 21 03:51:47 2025 by rpki-client