$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b1ad71c3-bde3-3c4b-8db1-750d02d92b84.roa File: b1ad71c3-bde3-3c4b-8db1-750d02d92b84.roa (raw, json) Hash identifier: vNCG+8Q7VIiowYEcIug9W2dw4ZzNNa9cP4HCqb4MBhM= Subject key identifier: 9D:9C:C4:10:97:AA:06:13:16:5C:1A:D8:65:29:18:8D:67:21:29:3B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AFEACF914E1A6FEE15B176580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b1ad71c3-bde3-3c4b-8db1-750d02d92b84.roa Signing time: Wed 27 Aug 2025 11:04:36 +0000 ROA not before: Wed 27 Aug 2025 11:04:36 +0000 ROA not after: Tue 25 Nov 2025 12:04:36 +0000 asID: 140813 IP address blocks: 216.132.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:ac:f9:14:e1:a6:fe:e1:5b:17:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 27 11:04:36 2025 GMT Not After : Nov 25 12:04:36 2025 GMT Subject: CN=4f6b7429-26a1-4b06-8447-6e8a15b3d8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b0:65:99:9f:1c:f8:87:07:89:2c:09:00:61: 20:27:f7:72:3f:0c:59:77:11:bf:19:8c:e1:31:e4: c9:65:cd:99:8d:76:11:c9:44:63:a1:44:77:4d:fb: d6:15:7b:26:d5:c7:3b:08:d1:7d:60:96:86:2c:7c: fc:15:21:a2:63:ae:06:af:cc:94:17:91:76:d4:f8: 0a:84:77:9d:6b:fe:c5:0e:e6:f4:5c:c9:a1:ad:de: 3b:f9:96:59:0b:ad:35:05:7a:25:32:72:6b:8b:a2: 8c:5d:cd:e1:f8:9f:66:8c:48:e1:77:e1:67:8d:3f: 33:d2:1c:38:f5:ba:be:9e:13:eb:fe:03:9e:e2:4e: d0:ba:28:36:38:ff:4e:c0:c0:75:cb:69:1e:94:ef: 2a:b1:c6:7c:ea:d8:32:cd:85:bc:8a:a1:90:b6:79: e8:00:35:43:b6:f2:95:5a:cd:eb:68:3a:c5:42:da: 8f:1a:84:15:26:3c:ba:53:23:ee:cf:82:2e:cc:dd: ea:5d:31:f6:94:29:da:96:2b:e3:87:c2:9c:3a:a0: 07:3d:37:c5:91:95:74:dc:c7:cf:68:b0:df:3b:2c: f9:26:f6:b7:f5:a8:e0:a9:45:97:e1:eb:f6:76:ee: 66:cb:16:28:05:c9:ea:45:51:29:92:b0:4c:d8:d4: 2c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9C:C4:10:97:AA:06:13:16:5C:1A:D8:65:29:18:8D:67:21:29:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b1ad71c3-bde3-3c4b-8db1-750d02d92b84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d3:46:32:75:6c:d5:a5:63:41:81:81:cf:d6:a5:8b:20:e9: 08:3d:42:f0:7e:cc:34:82:f5:b6:45:dc:6c:55:4b:d8:f9:30: c8:55:a7:e4:d4:b9:46:10:78:4c:00:c2:95:62:79:04:6c:7b: dd:02:41:9a:87:fa:cd:a5:ab:e9:4c:28:ef:4e:e9:94:46:d9: a2:cc:e7:c8:7e:79:63:d1:17:67:66:62:d9:a1:4e:fc:90:08: 63:a8:33:88:fe:77:74:29:df:c5:ff:01:38:3e:54:ca:0c:11: 42:50:83:51:0f:2f:b1:be:e9:61:7c:52:a3:13:b3:3d:fb:00: dc:a9:df:ae:45:48:7c:1e:c7:91:15:92:23:6b:61:ce:fe:d6: 84:a2:b3:31:17:9c:59:53:7b:a1:5b:6e:77:26:3d:b2:a2:61: c5:37:77:79:98:33:37:b3:89:f9:62:cc:9a:4b:85:99:f9:40: ff:31:72:a9:16:f4:4f:ae:6f:f2:4c:09:80:e5:ef:4f:8d:e7: 24:b3:04:3f:8e:a8:1f:31:95:94:b6:8e:6d:d1:8d:6c:cc:6f: df:b3:9a:16:fa:2f:7e:af:22:18:4e:ef:a7:1e:ab:60:48:25: 61:fe:18:14:00:1f:fb:b1:36:8b:9e:da:16:b7:6c:32:be:e2: 85:52:d0:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+rPkU4ab+4VsXZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgyNzExMDQzNloXDTI1MTEyNTEyMDQzNlowLzEtMCsGA1UEAxMk NGY2Yjc0MjktMjZhMS00YjA2LTg0NDctNmU4YTE1YjNkOGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrBlmZ8c+IcHiSwJAGEgJ/dyPwxZdxG/GYzh MeTJZc2ZjXYRyURjoUR3TfvWFXsm1cc7CNF9YJaGLHz8FSGiY64Gr8yUF5F21PgK hHeda/7FDub0XMmhrd47+ZZZC601BXolMnJri6KMXc3h+J9mjEjhd+FnjT8z0hw4 9bq+nhPr/gOe4k7Quig2OP9OwMB1y2kelO8qscZ86tgyzYW8iqGQtnnoADVDtvKV Ws3raDrFQtqPGoQVJjy6UyPuz4IuzN3qXTH2lCnalivjh8KcOqAHPTfFkZV03MfP aLDfOyz5Jva39ajgqUWX4ev2du5myxYoBcnqRVEpkrBM2NQs7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2cxBCXqgYTFlwa2GUpGI1nISk7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjFhZDcxYzMtYmRlMy0z YzRiLThkYjEtNzUwZDAyZDkyYjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2IRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHTRjJ1bNWlY0GBgc/WpYsg6Qg9QvB+zDSC9bZF3GxVS9j5MMhVp+TU uUYQeEwAwpVieQRse90CQZqH+s2lq+lMKO9O6ZRG2aLM58h+eWPRF2dmYtmhTvyQ CGOoM4j+d3Qp38X/ATg+VMoMEUJQg1EPL7G+6WF8UqMTsz37ANyp365FSHwex5EV kiNrYc7+1oSiszEXnFlTe6FbbncmPbKiYcU3d3mYMzeziflizJpLhZn5QP8xcqkW 9E+ub/JMCYDl70+N5ySzBD+OqB8xlZS2jm3RjWzMb9+zmhb6L36vIhhO76ceq2BI JWH+GBQAH/uxNoue2ha3bDK+4oVS0NM= -----END CERTIFICATE-----Generated at Mon Sep 8 19:40:46 2025 by rpki-client