$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7e0cbff7-7487-3e7f-946d-d1e74349fc36.roa File: 7e0cbff7-7487-3e7f-946d-d1e74349fc36.roa (raw, json) Hash identifier: +bP2YXcKWbYY0r1ZDt33xgj4+tx9KVI2StPnghVg7/I= Subject key identifier: 4D:2E:63:60:9F:C8:8A:99:83:16:EB:40:9E:E7:42:AD:5D:CA:43:4B Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F4328584AC71121E5B9EB907091B895F0 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7e0cbff7-7487-3e7f-946d-d1e74349fc36.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 22709 IP address blocks: 216.237.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:21:e5:b9:eb:90:70:91:b8:95:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=2116971e-4cc9-4997-a2ed-5a6091e568d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2f:67:da:a9:28:f5:7c:cb:87:f1:72:31:dd: e6:4a:b5:03:5f:03:4d:ee:55:78:4c:f4:58:0e:da: 6c:0b:22:e4:c4:b5:ad:0f:dd:93:2b:93:2b:8b:ff: e1:eb:b8:49:ad:f0:a5:b7:8b:e3:06:df:81:c3:f0: 7d:1b:ba:4a:2f:c3:62:ce:5d:6d:6e:fd:6b:63:57: 46:eb:a6:55:21:28:e1:15:8d:cd:65:06:79:d5:39: 6e:d1:70:48:4d:bc:da:77:c3:07:2e:96:e4:88:1e: f7:86:af:ef:8e:71:18:db:60:f5:93:42:5e:90:55: d3:37:38:24:9d:fc:4d:8a:7c:cd:7a:6a:fe:05:0e: 55:62:8d:ff:f9:43:14:74:4b:63:f8:94:2b:f9:36: e0:b3:9d:64:39:e4:51:18:97:1c:14:b1:5f:71:17: 68:6c:3d:82:95:32:9e:7e:0b:86:4a:98:8b:54:e7: 20:57:61:03:90:53:7e:e5:c4:b9:46:2c:70:87:da: 4c:4a:08:9c:5c:59:b2:20:0c:c8:dc:1d:3e:f2:5d: 0a:64:46:51:35:85:72:ae:23:54:e9:e1:6d:17:b1: 2e:b4:86:c7:7c:85:be:3f:7c:d4:b3:cb:81:10:33: dc:94:74:4c:3a:5c:f6:a7:70:ec:4a:23:c0:e8:fd: 9e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2E:63:60:9F:C8:8A:99:83:16:EB:40:9E:E7:42:AD:5D:CA:43:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7e0cbff7-7487-3e7f-946d-d1e74349fc36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: 216.237.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:74:30:32:d7:c1:0d:e7:9b:84:b3:1b:19:19:1d:09:84:db: 36:20:d0:45:e0:b2:53:b1:9b:04:01:e5:29:9e:57:01:8d:98: 8e:00:c6:f3:e9:a3:d0:5f:5b:3d:29:5b:cf:1f:7b:d0:31:34: 72:c3:84:e1:85:a7:95:1b:f3:fe:36:72:d4:b8:f0:d8:73:02: 38:70:9c:45:77:6c:a2:b5:03:0a:79:3d:e2:1b:97:ca:dc:b1: 26:3c:1e:59:d0:3f:68:ba:d8:58:b8:c5:df:4d:3a:40:16:9b: 01:49:b5:e2:2c:8e:4e:fe:ac:e0:b4:63:1e:64:85:a1:15:41: f4:56:b7:65:e6:0d:50:02:da:9d:b2:bd:eb:27:81:0d:e7:fb: 4d:a5:aa:dd:68:89:6c:d5:b7:cc:0d:94:78:6c:65:c4:fd:cb: 86:fa:af:00:97:5f:0a:e3:01:be:61:ff:73:0e:0a:60:f7:43: 24:9b:05:df:50:9d:f7:c2:c5:31:61:93:77:f6:e9:6b:87:49: a1:91:a9:36:50:51:c4:69:7f:72:56:95:c2:03:84:6c:a5:4f: 19:85:75:31:89:af:ad:b8:41:ec:f7:c1:2a:d1:73:c5:29:6e: 81:1e:49:f0:19:32:9b:bd:ab:a6:5f:f8:74:3f:55:41:75:7b: f5:eb:4c:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHESHlueuQcJG4lfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MjExNjk3MWUtNGNjOS00OTk3LWEyZWQtNWE2MDkxZTU2OGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy9n2qko9XzLh/FyMd3mSrUDXwNN7lV4TPRY DtpsCyLkxLWtD92TK5Mri//h67hJrfClt4vjBt+Bw/B9G7pKL8Nizl1tbv1rY1dG 66ZVISjhFY3NZQZ51Tlu0XBITbzad8MHLpbkiB73hq/vjnEY22D1k0JekFXTNzgk nfxNinzNemr+BQ5VYo3/+UMUdEtj+JQr+Tbgs51kOeRRGJccFLFfcRdobD2ClTKe fguGSpiLVOcgV2EDkFN+5cS5Rixwh9pMSgicXFmyIAzI3B0+8l0KZEZRNYVyriNU 6eFtF7EutIbHfIW+P3zUs8uBEDPclHRMOlz2p3DsSiPA6P2etQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0uY2CfyIqZgxbrQJ7nQq1dykNLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvN2UwY2JmZjctNzQ4Ny0z ZTdmLTk0NmQtZDFlNzQzNDlmYzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2O3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl0MDLXwQ3nm4SzGxkZHQmE2zYg0EXgslOxmwQB5SmeVwGNmI4AxvPp o9BfWz0pW88fe9AxNHLDhOGFp5Ub8/42ctS48NhzAjhwnEV3bKK1Awp5PeIbl8rc sSY8HlnQP2i62Fi4xd9NOkAWmwFJteIsjk7+rOC0Yx5khaEVQfRWt2XmDVAC2p2y vesngQ3n+02lqt1oiWzVt8wNlHhsZcT9y4b6rwCXXwrjAb5h/3MOCmD3QySbBd9Q nffCxTFhk3f26WuHSaGRqTZQUcRpf3JWlcIDhGylTxmFdTGJr624Qez3wSrRc8Up boEeSfAZMpu9q6Zf+HQ/VUF1e/XrTLw= -----END CERTIFICATE-----Generated at Thu Aug 21 03:53:59 2025 by rpki-client