$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa File: cc943514-3509-33b3-b2dc-359af22b1dea.roa (raw, json) Hash identifier: bkz2HQ2qXRiU/N424If4d/diATjJdv+wXlbhyB7z3j4= Subject key identifier: C8:17:01:D9:EA:C1:8F:1F:A7:74:1E:56:C6:FC:28:1F:40:8E:7A:14 Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F4328584B38219C64872F482D3F305580 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 202 IP address blocks: 216.168.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:9c:64:87:2f:48:2d:3f:30:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=203d63ca-82e4-4572-888b-a307ff66d10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d7:d1:71:a1:be:9a:57:c4:4a:bd:a8:a2:87: f0:93:46:a4:4e:ee:2a:4b:ce:55:f6:d2:65:e9:71: 6f:9c:d0:b5:8e:de:46:36:f5:a3:c5:42:30:05:6b: 42:ca:06:19:0b:6d:d4:4d:a7:2f:2d:ec:13:59:48: 5b:5b:e7:25:18:e5:1d:d9:ca:a9:cb:68:22:8e:f3: 8c:28:e7:51:c1:4c:d9:b4:0c:1a:ca:74:08:76:5b: 79:2d:77:9b:da:11:b0:6c:29:eb:f0:07:f7:f8:33: 0f:5a:54:27:b4:20:69:67:f9:a9:a9:6e:e4:50:38: 02:c7:fe:cf:5d:93:ac:10:65:b9:93:c0:e7:18:36: 42:40:62:97:f1:84:dd:c3:13:09:41:b6:2b:c2:2c: a4:9d:b8:c1:d3:5b:30:b3:5a:0a:7f:a3:25:02:80: 52:bb:79:96:99:55:0e:a4:c6:9c:18:c8:66:9d:d4: 92:fa:05:27:18:bc:79:66:22:ff:89:c8:1e:12:84: b6:71:e6:9e:fc:f5:18:b9:a0:09:5b:55:03:ea:9d: b3:83:41:f0:c3:eb:88:31:a9:a2:b9:c2:c3:06:5b: 1c:76:a8:c8:57:b8:cd:3a:d5:10:59:69:c0:62:30: 25:7b:58:3a:57:cc:7b:e7:c0:4f:5d:dd:59:f7:1d: 36:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:17:01:D9:EA:C1:8F:1F:A7:74:1E:56:C6:FC:28:1F:40:8E:7A:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 216.168.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ab:5c:f3:a7:66:f0:54:2b:f4:55:cd:15:c2:f2:a2:ec:33: 71:07:a3:2b:89:0c:05:6a:53:39:00:50:9f:1d:83:09:7b:4e: 95:29:2b:94:6e:fe:32:98:cc:cd:0d:4e:c1:24:f7:5d:f4:92: 37:0a:7a:86:ff:90:34:67:89:7a:96:7b:07:50:de:dd:4e:cf: e9:18:85:0b:f0:5f:54:f2:65:87:93:95:55:1e:7c:0b:fe:48: 2a:f6:39:82:9b:6b:ea:8b:1f:46:ca:fd:87:bd:b0:f1:a9:42: df:07:9e:0e:80:23:c6:78:cb:d8:39:93:87:e4:0a:8b:de:40: 95:a2:64:9b:f2:56:ec:a9:12:06:65:f4:cf:f9:48:63:a8:04: d6:73:21:79:7a:5d:64:4b:ec:be:37:3d:eb:49:72:56:4b:15: fc:c5:48:86:ed:ff:e6:09:83:38:4a:e4:ab:85:84:b6:0c:02: b4:14:ff:7c:43:f8:2a:26:8d:40:96:37:b3:2a:29:18:d7:ea: cc:f0:af:68:5a:d4:db:34:80:65:11:56:34:2e:38:be:46:65: 66:4e:2a:9d:d2:1e:ac:d5:77:2a:e1:c5:95:33:bd:f2:35:2b: 2d:61:1c:4c:6f:6b:08:23:93:56:e9:b3:c1:60:88:dc:09:35: c6:a4:04:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZxkhy9ILT8wVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk MjAzZDYzY2EtODJlNC00NTcyLTg4OGItYTMwN2ZmNjZkMTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdfRcaG+mlfESr2ooofwk0akTu4qS85V9tJl 6XFvnNC1jt5GNvWjxUIwBWtCygYZC23UTacvLewTWUhbW+clGOUd2cqpy2gijvOM KOdRwUzZtAwaynQIdlt5LXeb2hGwbCnr8Af3+DMPWlQntCBpZ/mpqW7kUDgCx/7P XZOsEGW5k8DnGDZCQGKX8YTdwxMJQbYrwiyknbjB01sws1oKf6MlAoBSu3mWmVUO pMacGMhmndSS+gUnGLx5ZiL/icgeEoS2ceae/PUYuaAJW1UD6p2zg0Hww+uIMami ucLDBlscdqjIV7jNOtUQWWnAYjAle1g6V8x758BPXd1Z9x022wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgXAdnqwY8fp3QeVsb8KB9AjnoUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvY2M5NDM1MTQtMzUwOS0z M2IzLWIyZGMtMzU5YWYyMmIxZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2rXPOnZvBUK/RVzRXC8qLsM3EHoyuJDAVqUzkAUJ8dgwl7TpUpK5Ru /jKYzM0NTsEk9130kjcKeob/kDRniXqWewdQ3t1Oz+kYhQvwX1TyZYeTlVUefAv+ SCr2OYKba+qLH0bK/Ye9sPGpQt8Hng6AI8Z4y9g5k4fkCoveQJWiZJvyVuypEgZl 9M/5SGOoBNZzIXl6XWRL7L43PetJclZLFfzFSIbt/+YJgzhK5KuFhLYMArQU/3xD +ComjUCWN7MqKRjX6szwr2ha1Ns0gGURVjQuOL5GZWZOKp3SHqzVdyrhxZUzvfI1 Ky1hHExvawgjk1bps8FgiNwJNcakBFo= -----END CERTIFICATE-----Generated at Sun Nov 2 09:36:34 2025 by rpki-client