$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d1df3652-eca5-3f80-8dab-2352e63c476b.roa File: d1df3652-eca5-3f80-8dab-2352e63c476b.roa (raw, json) Hash identifier: KweKDQRJ1LfGlV0MELXH9vugXgHkyhICm3DEy2wvJgM= Subject key identifier: BF:BB:F6:92:BE:3F:9C:5B:BB:89:69:D4:3D:84:7A:6B:DD:F3:BC:49 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584AB650F0018BB42B557858E4C0 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d1df3652-eca5-3f80-8dab-2352e63c476b.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 16509 IP address blocks: 216.157.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f0:01:8b:b4:2b:55:78:58:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=d2c45a20-7335-4bd2-9cd3-d35a6eceddb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:56:60:72:03:b8:86:78:bb:b4:21:38:bf:d0: ea:48:d9:6b:58:05:bf:35:a5:c3:01:6a:0c:09:96: 6a:81:04:00:5a:08:88:e0:70:45:5f:17:ff:6c:65: c6:47:e3:fc:99:4a:62:05:1e:7a:fb:cc:4f:73:3b: f6:9d:d8:b9:29:54:16:0c:00:cc:9a:bc:5a:3d:a4: 83:7f:32:16:5c:2b:a8:a9:2c:ed:d2:81:25:57:68: de:a8:ee:49:5c:24:d4:24:a8:81:17:68:89:a0:23: 25:03:a6:63:71:59:49:d5:a0:5c:a9:1a:69:80:67: 29:7f:d2:60:9b:fe:12:5b:ba:1f:03:99:48:b6:01: 4c:d3:f6:d2:56:6d:83:05:62:2a:0a:07:ad:32:67: c2:e4:c1:e9:ed:a7:87:f0:34:03:03:7a:9a:c0:0c: ae:05:64:02:f9:77:db:cb:a5:b5:f9:81:1d:55:fd: 2c:a8:79:34:85:b0:24:1c:88:76:72:e0:47:ae:ff: 79:e4:ac:69:01:50:ff:38:a8:09:5b:54:e1:28:dd: aa:da:56:b7:f6:8b:8f:06:fc:9f:5c:3d:5f:5b:0c: 75:a4:75:d3:c5:c4:2f:be:58:a3:92:22:02:b1:f9: 6f:28:d7:85:b8:9d:ac:cc:49:64:9e:a2:29:c4:13: 35:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BB:F6:92:BE:3F:9C:5B:BB:89:69:D4:3D:84:7A:6B:DD:F3:BC:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/d1df3652-eca5-3f80-8dab-2352e63c476b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.157.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:36:7f:0c:9a:d2:59:c0:79:7e:a1:c5:ed:b9:c6:f7:89:d8: 83:3e:99:1b:5c:6b:14:a8:18:54:0f:5c:34:e5:40:58:d4:c9: 1a:f9:dc:e3:c1:15:c3:6e:30:e7:73:ab:f8:42:6f:3e:35:0e: a2:73:78:7a:95:e2:2b:ef:bd:5a:2e:da:8a:02:46:98:dc:ac: d4:72:bf:5c:81:77:16:5c:a6:29:09:da:e9:2c:d9:25:a8:31: cb:3a:a7:47:0c:c8:96:bf:85:2e:91:1e:a6:d6:21:e2:38:62: 6c:9a:82:c2:7a:e9:90:72:0d:87:b2:44:df:77:ba:7f:8e:dc: 17:90:fc:2d:5c:f6:95:ad:0f:fa:b0:5c:40:ef:4b:1c:d0:c9: 7f:28:0b:ef:b2:ea:af:3e:b7:9a:d2:49:d7:03:cf:b0:b5:2e: 68:20:60:ea:df:28:22:97:c8:11:44:e4:63:a3:2d:75:a7:9d: c8:39:de:c0:ad:62:c5:05:6d:04:75:57:7b:0d:a5:dc:71:f1: ac:ef:34:d7:42:a8:da:ab:a2:a4:24:5d:c2:ca:95:0a:12:9b: 9f:0f:ed:09:97:d2:5b:09:81:da:a3:95:52:5f:a1:92:d1:ef: f2:a7:e1:89:7a:6c:01:a2:29:0a:63:30:8d:cd:0d:7b:0a:f0: 30:19:1e:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPABi7QrVXhY5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZDJjNDVhMjAtNzMzNS00YmQyLTljZDMtZDM1YTZlY2VkZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFZgcgO4hni7tCE4v9DqSNlrWAW/NaXDAWoM CZZqgQQAWgiI4HBFXxf/bGXGR+P8mUpiBR56+8xPczv2ndi5KVQWDADMmrxaPaSD fzIWXCuoqSzt0oElV2jeqO5JXCTUJKiBF2iJoCMlA6ZjcVlJ1aBcqRppgGcpf9Jg m/4SW7ofA5lItgFM0/bSVm2DBWIqCgetMmfC5MHp7aeH8DQDA3qawAyuBWQC+Xfb y6W1+YEdVf0sqHk0hbAkHIh2cuBHrv955KxpAVD/OKgJW1ThKN2q2la39ouPBvyf XD1fWwx1pHXTxcQvvlijkiICsflvKNeFuJ2szElknqIpxBM1HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+79pK+P5xbu4lp1D2Eemvd87xJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZDFkZjM2NTItZWNhNS0z ZjgwLThkYWItMjM1MmU2M2M0NzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAk2fwya0lnAeX6hxe25xveJ2IM+mRtcaxSoGFQPXDTlQFjUyRr53OPB FcNuMOdzq/hCbz41DqJzeHqV4ivvvVou2ooCRpjcrNRyv1yBdxZcpikJ2uks2SWo Mcs6p0cMyJa/hS6RHqbWIeI4YmyagsJ66ZByDYeyRN93un+O3BeQ/C1c9pWtD/qw XEDvSxzQyX8oC++y6q8+t5rSSdcDz7C1LmggYOrfKCKXyBFE5GOjLXWnncg53sCt YsUFbQR1V3sNpdxx8azvNNdCqNqroqQkXcLKlQoSm58P7QmX0lsJgdqjlVJfoZLR 7/Kn4Yl6bAGiKQpjMI3NDXsK8DAZHhg= -----END CERTIFICATE-----Generated at Wed Aug 6 10:21:18 2025 by rpki-client