$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a5c3fa05-b8e0-3a4e-b03a-d6cd1fd983c5.roa File: a5c3fa05-b8e0-3a4e-b03a-d6cd1fd983c5.roa (raw, json) Hash identifier: 3rUbb7dN1PTBaN5+rl15mB8BxPRx1Dj945xKZKdrj3A= Subject key identifier: 5A:15:B8:94:45:27:A3:55:26:D5:3D:5B:C6:3B:71:63:1B:50:3E:AC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AFBAC8F0CBD9D050F732A6740 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a5c3fa05-b8e0-3a4e-b03a-d6cd1fd983c5.roa Signing time: Tue 26 Aug 2025 09:16:21 +0000 ROA not before: Tue 26 Aug 2025 09:16:21 +0000 ROA not after: Mon 24 Nov 2025 10:16:21 +0000 asID: 9304 IP address blocks: 216.132.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fb:ac:8f:0c:bd:9d:05:0f:73:2a:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 26 09:16:21 2025 GMT Not After : Nov 24 10:16:21 2025 GMT Subject: CN=9b9a4b2f-70eb-4ab3-b055-402defd939af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d2:b8:f0:ff:16:c6:ce:52:9d:bc:7d:4b:ff: b0:7d:c9:5d:05:2a:90:8a:11:e2:d1:fe:8d:60:31: e3:ce:7e:f7:e0:ee:dd:fe:0f:bf:70:38:21:80:4e: 5c:31:e9:22:20:fa:4a:7c:17:2c:e5:ce:9b:d0:a1: 37:86:7b:92:4a:93:1c:fd:c2:4b:ec:57:14:2a:85: fe:04:e0:59:fd:36:46:39:8b:ed:5d:0b:7e:1b:ef: 78:6c:70:e6:7a:d4:ed:7c:28:eb:73:5b:b7:b7:4c: e8:42:d1:6d:4f:2d:c4:87:e0:e8:d1:de:e5:1b:4a: f8:9b:8a:51:d6:b5:b6:df:61:ce:c4:4e:f7:c5:06: b5:06:2e:1a:de:03:aa:ff:e8:7e:86:ea:52:95:86: 8c:d4:f0:52:16:12:ad:03:4b:64:f2:9f:fd:d0:32: 65:8e:06:90:d7:45:0f:fd:bc:af:2a:ba:de:ff:aa: 3e:6e:5e:4d:53:af:64:ba:8c:20:d3:b5:8d:77:8e: 74:13:48:36:75:df:ce:a8:19:7b:f1:2e:ef:b7:5e: fd:80:42:b0:db:1d:f5:4f:f4:5b:65:20:1d:21:4a: cb:7b:bb:e1:7f:ca:18:be:25:30:8f:e1:1b:27:59: 64:83:37:75:2d:91:6d:b3:8d:8e:21:c9:c4:13:1e: a4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:15:B8:94:45:27:A3:55:26:D5:3D:5B:C6:3B:71:63:1B:50:3E:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a5c3fa05-b8e0-3a4e-b03a-d6cd1fd983c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:8e:bd:37:29:23:d1:0a:a4:f1:6e:e7:df:b1:c1:1f:4d:28: e3:51:2b:7c:e6:12:d5:cf:78:c4:c0:41:b0:ee:fb:4f:aa:9e: ff:50:18:ec:62:4c:64:47:c6:10:9a:c6:cb:17:24:6a:cc:dd: 53:5e:d0:b0:6e:05:18:5a:0a:10:67:d7:a4:5d:73:56:e9:3f: f3:0b:cb:2d:5b:f1:f6:bb:62:8a:c8:29:e9:13:ab:3d:67:8d: 67:cc:3f:81:99:f4:44:17:96:0f:0e:6b:7d:9f:09:c8:32:fc: 31:0c:18:df:5a:97:dd:6e:1d:80:8f:c0:d6:aa:4b:19:58:5a: 55:c5:59:ea:f6:2e:46:bc:19:20:5f:fc:a1:fa:31:a7:a1:2c: 0d:52:e1:ec:fd:38:db:7b:ee:e6:b9:38:85:b3:80:5f:bc:9a: 2e:1b:c8:45:7b:c6:70:5c:02:f5:34:71:d9:21:72:0b:9a:85: bf:c1:e3:f7:f7:eb:a1:d2:26:c9:09:4b:9e:35:e6:2d:ce:57: 1e:13:81:df:ed:89:77:99:b1:08:7e:99:43:1b:46:5a:ae:4a: bf:b7:2a:c4:9c:99:25:a0:e7:83:a7:62:9f:62:c5:8b:74:bc: 11:f5:5a:14:2d:03:8a:b5:c1:c7:3f:2a:12:bb:1e:77:fa:97: 3b:10:75:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr7rI8MvZ0FD3MqZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgyNjA5MTYyMVoXDTI1MTEyNDEwMTYyMVowLzEtMCsGA1UEAxMk OWI5YTRiMmYtNzBlYi00YWIzLWIwNTUtNDAyZGVmZDkzOWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtK48P8Wxs5Snbx9S/+wfcldBSqQihHi0f6N YDHjzn734O7d/g+/cDghgE5cMekiIPpKfBcs5c6b0KE3hnuSSpMc/cJL7FcUKoX+ BOBZ/TZGOYvtXQt+G+94bHDmetTtfCjrc1u3t0zoQtFtTy3Eh+Do0d7lG0r4m4pR 1rW232HOxE73xQa1Bi4a3gOq/+h+hupSlYaM1PBSFhKtA0tk8p/90DJljgaQ10UP /byvKrre/6o+bl5NU69kuowg07WNd450E0g2dd/OqBl78S7vt179gEKw2x31T/Rb ZSAdIUrLe7vhf8oYviUwj+EbJ1lkgzd1LZFts42OIcnEEx6kdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoVuJRFJ6NVJtU9W8Y7cWMbUD6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTVjM2ZhMDUtYjhlMC0z YTRlLWIwM2EtZDZjZDFmZDk4M2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2IRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyOvTcpI9EKpPFu59+xwR9NKONRK3zmEtXPeMTAQbDu+0+qnv9QGOxi TGRHxhCaxssXJGrM3VNe0LBuBRhaChBn16Rdc1bpP/MLyy1b8fa7YorIKekTqz1n jWfMP4GZ9EQXlg8Oa32fCcgy/DEMGN9al91uHYCPwNaqSxlYWlXFWer2Lka8GSBf /KH6MaehLA1S4ez9ONt77ua5OIWzgF+8mi4byEV7xnBcAvU0cdkhcguahb/B4/f3 66HSJskJS5415i3OVx4Tgd/tiXeZsQh+mUMbRlquSr+3KsScmSWg54OnYp9ixYt0 vBH1WhQtA4q1wcc/KhK7Hnf6lzsQdeY= -----END CERTIFICATE-----Generated at Tue Aug 26 18:27:53 2025 by rpki-client